Storage Canonbury Privacy Policy
This Privacy Policy explains how Storage Canonbury collects, uses, stores and protects personal data relating to our customers and prospective customers in our service area. It also explains the lawful bases we rely on, the periods for which we retain personal data, the third parties that may process data on our behalf, and the rights you have under the UK General Data Protection Regulation and related data protection laws.
This Privacy Policy applies to all Storage Canonbury customers and anyone who makes an enquiry, visits our premises, or otherwise interacts with us in relation to storage services in our area.
Who we are and scope of this policy
Storage Canonbury is the controller of the personal data described in this Privacy Policy. Being the controller means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
This policy applies when you use our storage services, request a quote, sign a storage agreement, visit our premises, make a payment, or communicate with us by any means in connection with our services.
Personal data we collect
We collect and process different categories of personal data depending on your relationship with us. The types of data we may collect include:
Identity and contact data: name, postal address, billing address, service address, email address, and any other contact details you choose to provide to us.
Contract and account data: information relating to your storage unit or service, contract start and end dates, access permissions, unique customer or unit identifiers, and communications relating to your account.
Payment and transaction data: records of payments made for our services, such as payment amounts, dates, and methods. We do not store full payment card details, but may process limited information needed to verify and allocate payments.
Usage and access data: information about how you use our services and premises, including access logs for security and administration purposes where applicable.
Communications data: information you provide when you contact us, including emails, letters, forms, and notes of telephone or in-person conversations relevant to your enquiry or account.
Technical data: when you visit any of our online services, we may collect limited technical information such as device type and general usage data. This is used to ensure the proper functioning and security of our online systems.
Security and CCTV data: if we operate CCTV at our premises, we may collect video images for safety, security, and crime prevention purposes. Where used, signage will indicate that CCTV is in operation.
How we collect your personal data
We may collect personal data in several ways, including:
Directly from you when you make an enquiry, request a quote, sign up for a storage unit, make a payment, or contact us by phone, in writing, or in person.
From your use of our premises and services, for example access records or security systems where these are in place.
From publicly available sources and third parties where necessary to verify identity, prevent fraud, or comply with legal obligations, subject to applicable laws.
Lawful bases for processing your data
Storage Canonbury will only process your personal data where we have a lawful basis to do so. Depending on the context, we may rely on the following lawful bases:
Performance of a contract: to take steps at your request before entering into a contract, and to perform the storage contract we have with you. This includes managing your account, arranging access to your unit, handling payments and charges, and communicating with you about your service.
Compliance with legal obligations: to comply with obligations under applicable law, such as tax, accounting, health and safety, and regulations relating to crime prevention and security. This may include keeping certain records and cooperating with lawful requests from authorities.
Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, and those interests are not overridden by your rights and freedoms. These interests may include managing and improving our services, maintaining security at our premises, preventing fraud, recovering debts, handling queries and complaints, and ensuring business continuity.
Consent: in limited cases, we may rely on your consent, for example for optional communications that are not necessary for providing your storage service. Where we rely on consent, you can withdraw it at any time, although this will not affect the lawfulness of processing carried out before consent was withdrawn.
How we use your personal data
We may use your personal data for the following purposes:
To provide storage services, including setting up your account, managing access, operating your storage agreement, and arranging any related services you request.
To process payments, issue invoices, manage billing queries, and maintain appropriate financial records.
To communicate with you about your account, including service updates, contract renewals, and any changes to our terms or policies.
To manage security and safety at our premises, including monitoring access and operating CCTV where applicable.
To respond to enquiries, requests, feedback, and complaints.
To comply with legal requirements, exercise or defend legal claims, and cooperate with regulatory or law enforcement authorities where lawfully required.
To analyse service usage and improve the operation and quality of our services, always within the bounds of data protection law.
Data sharing and processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary for the purposes set out in this policy and where we have a lawful basis to do so.
Service providers and processors: We may engage third-party companies to act as processors and provide services on our behalf, such as payment processing, account administration tools, document storage, IT hosting, security or CCTV system management, and professional advisers such as accountants or legal advisers. These providers are only permitted to process your personal data in accordance with our instructions and are required to protect your data.
Authorities and regulators: We may disclose personal data where required to comply with legal obligations, court orders, or lawful requests from regulatory or law enforcement authorities.
Business transfers: In the event of a reorganisation, merger, or transfer of our business, we may need to share relevant customer data with parties involved, under appropriate confidentiality arrangements and in accordance with data protection law.
International transfers
Where we use processors or service providers located outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, such as using countries that have been deemed to provide an adequate level of protection or implementing approved standard contractual clauses, in line with applicable data protection requirements.
Data retention and storage
We keep personal data only for as long as necessary for the purposes for which it was collected, including for the purposes of satisfying legal, accounting, or reporting requirements.
In general, we retain data relating to your contract and account for the duration of your relationship with us and for a period after it ends to enable us to answer queries, manage any disputes, and comply with legal obligations. Financial and transaction records may be retained for periods required by tax and accounting laws. Security and CCTV data, where used, is kept for a shorter period and will normally be overwritten automatically unless required for the investigation of a specific incident.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be associated with you.
Your data protection rights
Under data protection laws, you have several rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access: the right to obtain confirmation of whether we process your personal data and to request a copy of that data.
Right to rectification: the right to request correction of inaccurate or incomplete personal data.
Right to erasure: the right to request that we delete your personal data where there is no good reason for us to continue processing it, subject to legal and contractual limitations.
Right to restriction: the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or our reasons for processing it.
Right to data portability: the right, in certain situations, to receive personal data you have provided to us in a structured, commonly used and machine readable format, and to request that we transmit it to another controller where technically feasible.
Right to object: the right to object to processing based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds or need the data for legal claims.
Rights relating to consent: where we rely on consent, you have the right to withdraw that consent at any time.
How to exercise your rights and complaints
If you wish to exercise any of your rights or have questions about how we handle your personal data, you can contact us using the contact details available on our official communications or at our premises. We may need to verify your identity before responding to a request. We aim to respond to requests within the time limits set by data protection law.
You also have the right to lodge a complaint with the relevant data protection authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve any concerns directly.
Security of your personal data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures are designed to provide a level of security appropriate to the risks presented by the processing and the nature of the data. While we strive to protect your personal data, no system can be completely secure, and you should take care to keep your own information and access credentials safe.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any changes will take effect when the updated policy is made available. We recommend that you review this Privacy Policy periodically to stay informed about how Storage Canonbury protects your personal data.
