Storage Highbury Privacy Policy
This Privacy Policy explains how Storage Highbury collects, uses, stores and protects personal data about customers and prospective customers in our service area. It also explains the legal bases we rely on under the UK General Data Protection Regulation and applicable data protection laws, how long we keep data, with whom we may share it, and the rights you have in relation to your personal data.
This Privacy Policy applies to all Storage Highbury customers and prospective customers in our area, including individuals who make enquiries, enter into storage agreements, visit our premises, or use our services in any way.
Who we are and scope of this policy
Storage Highbury is a self-storage provider operating in the local area. In relation to the personal data we collect and use, we act as a data controller. This means we decide how and why your personal data is processed and are responsible for ensuring that such processing complies with data protection laws.
By using our services, visiting our premises, or contacting us, you acknowledge that you have read and understood this Privacy Policy. We may update this policy from time to time and will apply any changes from the date they are published.
Personal data we collect
We only collect personal data that is relevant and necessary for the purposes explained in this Privacy Policy. The types of personal data we may collect include:
Identification and contact details: name, postal address, billing address, contact address, and other basic details necessary to identify you and manage your account.
Communication data: information you provide when you contact us in person or by other means, such as enquiries, complaints, feedback, and any correspondence relating to your account or use of our services.
Contract and account data: details of storage units you rent, contract start and end dates, payment records, invoices, deposit information, and records of any changes to your agreement.
Payment-related data: information necessary to process payments and maintain financial records, such as payment method details and transaction histories. We do not store full payment card details where this is handled securely by a payment processor.
Security and access data: information related to your access to the site, such as entry and exit times, access codes, and, where in use, CCTV footage recorded for security and safety purposes.
Technical data: limited technical information that may be collected when you visit our website, such as device type and basic usage data, to help keep our website secure and functioning correctly.
How we use personal data and lawful bases
We process your personal data only where we have a lawful basis to do so. The main purposes and legal bases are:
To provide storage services and manage our relationship with you. We use your identification, contact, and contract data to set up your account, enter into a contract with you, administer your booking, manage access to your unit, and handle renewals or terminations. The lawful basis is performance of a contract and taking steps at your request prior to entering into a contract.
To manage payments and financial records. We process payment-related data and transaction histories to take payments, issue invoices, manage deposits, and maintain legally required financial records. The lawful bases are performance of a contract and compliance with legal obligations.
To respond to enquiries and provide customer support. When you contact us with questions or requests, we process your communication data to respond and keep a record of the interaction. The lawful bases are performance of a contract, taking steps at your request, and our legitimate interests in providing customer service.
To ensure security and protect property. We may use access data and CCTV footage, where installed, to monitor and protect our premises, staff, customers, and stored items, and to prevent and investigate incidents or crime. The lawful basis is our legitimate interests in ensuring the security and integrity of our operations and property, and, where applicable, compliance with legal obligations.
To operate and improve our business. We may use aggregated or de-identified information derived from your data to analyse service performance, handle internal reporting, and plan improvements. The lawful basis is our legitimate interests in operating and developing our business in an efficient and secure manner.
To comply with laws and enforce our rights. We may process your data to comply with legal requirements, respond to requests from authorities, handle legal claims, or enforce our contractual rights. The lawful basis is compliance with legal obligations and our legitimate interests in protecting our legal rights.
Data retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, accounting, or reporting requirements.
Customer and contract records are generally retained for the duration of your agreement and for a reasonable period afterwards to handle any queries, disputes, or legal issues. Financial records, such as invoices and payment histories, are retained for the period required by law for tax and accounting purposes.
CCTV footage, where in use, is usually kept for a limited retention period, after which it is securely deleted, unless it is required to investigate an incident, support legal proceedings, or respond to requests from law enforcement.
When data is no longer needed for its original purpose and there is no legal or regulatory requirement to retain it, we will delete it or anonymise it so that it can no longer be linked to you.
Data processors and sharing of personal data
We may share your personal data with third parties who act as data processors on our behalf. These processors are engaged under written contracts, must follow our instructions, and are required to implement appropriate security measures.
Examples of such processors include providers of payment processing services, accounting or billing systems, IT and cloud storage services, security and CCTV system providers where used, and professional advisers who support our business operations.
We may also share personal data with third parties acting as independent data controllers where necessary, such as insurers, legal advisers, law enforcement bodies, courts, or regulatory authorities, when required to comply with legal obligations or to protect our rights and the safety of our customers and staff.
We do not sell your personal data. If we were to be involved in a business transfer, such as a sale or reorganisation, customer data may be disclosed to parties involved, but only to the extent necessary and subject to appropriate safeguards.
International transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where data may be stored or accessed from outside these territories, we will ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include recognised adequacy decisions or standard contractual clauses approved by relevant authorities.
How we protect your data
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, secure storage systems, staff training, and regular review of our processes and security arrangements.
While we take care to protect your data, no system can be completely secure. You also have a role in keeping your information safe by keeping access codes and account details confidential and notifying us promptly of any suspected misuse.
Your data protection rights
Under data protection law, you have several rights in relation to your personal data. These rights may be subject to certain conditions and legal limitations, but we will always consider and respond to any request you make.
Right of access: You can request confirmation that we process your personal data and obtain a copy of the data we hold about you, along with certain information about how it is used.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data. We encourage you to keep your contact and account details up to date.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we are not required to keep it for legal reasons.
Right to restriction: You can ask us to restrict the processing of your data in certain cases, such as if you contest its accuracy or object to our use of it.
Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that we transfer it to another controller where technically feasible.
Right to object: You can object to processing that is based on our legitimate interests, including, where relevant, any direct marketing. We will stop processing your data for these purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or where processing is necessary for legal claims.
Rights in relation to automated decision-making: Storage Highbury does not rely on decisions based solely on automated processing that produce legal or similarly significant effects for individuals.
Exercising your rights and complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the usual contact routes published on our official materials or at our premises.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed. We would, however, welcome the opportunity to address your concerns directly before you contact a supervisory authority.
This Privacy Policy is intended to provide clear information about how Storage Highbury handles personal data. We may update it periodically to reflect changes in our services, legal requirements, or best practice. The version in force is the one published most recently.
