Storage West Hampstead Privacy Policy
This Privacy Policy explains how Storage West Hampstead collects, uses, stores and shares personal data relating to individuals who use our storage facilities and services in the West Hampstead area. It applies to all Storage West Hampstead customers and prospective customers in the area, as well as individuals who contact us with enquiries or visit our premises.
We are committed to protecting your privacy and handling your personal data in a transparent and lawful way in accordance with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018.
Who this privacy policy applies to
This Privacy Policy applies to all Storage West Hampstead customers, including individuals and business customers using our storage units or related services in the West Hampstead area. It also applies to individuals who:
make enquiries about our services, including by phone or in person
visit our premises or car parks
act as an authorised contact or emergency contact for a customer
act as a guarantor or signatory on behalf of a business customer
Personal data we collect
We may collect and process the following categories of personal data, depending on how you interact with us and which services you use:
Identity and contact details, such as name, postal address, billing address, contact address, and identification numbers shown on documents you provide.
Communication details, such as email address and any other communication channel you choose to use, and records of our communications with you.
Contract and account data, such as storage unit number, contract start and end dates, payment history, access permissions, and correspondence relating to your account.
Payment and billing information, such as partial payment card details processed through our payment service providers, bank account details for bank transfers, and invoicing records. We do not store full payment card details when payment is taken through a secure payment processor.
Security and access information, such as CCTV images of you on our premises, access control logs, vehicle registration numbers if captured on entry or exit, and records of visits to your unit where applicable.
How we collect your personal data
We collect personal data directly from you when you:
request a quote or information about our services
enter into a storage or service agreement with us
update your details or interact with us about your account
visit our premises where CCTV and access systems operate
make a payment or query a bill
We may also receive personal data about you from:
third party payment service providers who confirm payment status
business customers who nominate you as an authorised contact
public authorities or law enforcement agencies if they provide us with information for legal reasons
Lawful bases for processing your data
We will only process your personal data where we have a lawful basis to do so under data protection law. The lawful bases we rely on include:
Contract: To take steps at your request before entering into a contract and to perform our contract with you. This includes managing your storage agreement, processing payments, providing access to your unit, and handling queries and complaints.
Legal obligation: To comply with legal and regulatory requirements, including tax, accounting, health and safety, and obligations to law enforcement or regulatory bodies.
Legitimate interests: To pursue our legitimate business interests in a way that does not override your rights and freedoms. This includes maintaining site security and safety, operating CCTV, preventing and detecting crime and fraud, managing and improving our services, and maintaining business records.
Consent: In limited situations where we rely on your consent, such as where you specifically agree to receive certain types of optional communications. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We may use your personal data for the following purposes:
To set up and manage your customer account and storage agreement.
To verify your identity and eligibility for our services where this is necessary.
To process payments, issue invoices, and manage any arrears or disputes.
To provide customer service and respond to enquiries or complaints.
To operate and monitor security measures, including CCTV and access control at our facilities.
To manage the safety and security of our premises, customers, staff, and stored items.
To maintain accurate business and financial records.
To contact you with important information about your contract, including changes to terms, service availability, or urgent notices relating to site access and security.
Data sharing and processors
We may share your personal data with trusted third parties who act as data processors on our behalf. These may include:
IT and cloud service providers that host our systems and data
payment processing providers that handle card and electronic payments
professional advisers such as accountants or legal advisers where necessary
When we use processors, we ensure there is a written contract in place that requires them to protect your data, only process it on our instructions, and comply with data protection law.
We may also share your data with other third parties where we are legally required to do so, or where it is necessary to protect our rights, property, or the safety of our customers and staff. This may include law enforcement agencies, courts, or regulatory bodies.
International transfers
Where any of our service providers or systems are located outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include adequacy regulations for the destination country or standard contractual clauses approved for international data transfers.
Data retention
We keep personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy and to meet our legal and regulatory obligations.
In general:
Customer account and contract records are kept for the duration of your agreement and for a period thereafter as required for tax, accounting, and legal purposes.
Payment records are retained for the period required by financial and tax regulations.
CCTV images and access logs are retained for a limited period that is sufficient for security and investigation purposes, unless a longer retention is required for an ongoing incident or legal case.
Enquiry records are retained for a reasonable period in order to respond to you and to manage our business records.
When data is no longer required, we will securely delete or anonymise it.
Your data protection rights
Under data protection law, you have the following rights in relation to your personal data, subject to certain conditions and exemptions:
Right of access: You have the right to request confirmation of whether we hold personal data about you and to request a copy of that data.
Right to rectification: You have the right to ask us to correct personal data you believe is inaccurate or incomplete.
Right to erasure: You have the right to request that we delete your personal data where there is no good reason for us to continue processing it, for example when it is no longer needed or you have withdrawn consent where consent was the basis for processing.
Right to restriction: You have the right to ask us to restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you believe is inaccurate.
Right to data portability: You have the right, in certain circumstances, to request that we transfer your personal data to you or to another organisation in a structured, commonly used, machine readable format.
Right to object: You have the right to object to processing based on our legitimate interests, including certain types of profiling, on grounds relating to your particular situation.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you are unhappy with how we have handled your personal data. We encourage you to contact us first so that we can try to resolve your concerns directly.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include restricting access to personal data to staff and service providers who need it for their work, training our staff on data protection responsibilities, and using reasonable security safeguards on our systems.
Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any updated version will apply to all Storage West Hampstead customers and will be made available at our premises or through our usual communication channels.
We recommend reviewing this Privacy Policy periodically so that you remain informed about how we protect your personal data.
