Storage Harrow on the Hill Privacy Policy
This Privacy Policy explains how Storage Harrow on the Hill collects, uses, stores, and protects your personal data. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Storage Harrow on the Hill customers in the local area, including enquiries, current customers, and former customers.
Who We Are
Storage Harrow on the Hill is a storage service provider offering storage units and related services to customers in and around the Harrow on the Hill area. For the purposes of data protection law, Storage Harrow on the Hill is the data controller of the personal data it collects and uses about you in connection with its services.
Personal Data We Collect
We may collect and process the following categories of personal data when you interact with us, make an enquiry, or use our storage services:
Identity information such as full name, title, date of birth, and identification document details.
Contact information such as residential address, billing address, and correspondence address.
Communication details such as email content, letters, and notes from telephone conversations and in-person enquiries.
Account and contract data such as storage unit number, contract start and end dates, payment history, and details of services you have chosen.
Payment and transaction information such as payment method details and records of payments made and amounts due.
Security and access information such as access control log information, entry and exit records, vehicle registration numbers used to access the facility, and, where in operation, CCTV footage of entry points, communal areas, and external areas of the site.
Technical usage information when you visit our website or use any online services we provide, such as IP address, browser type, device identifiers, and information on how you interact with our online content.
How We Collect Your Data
We collect personal data directly from you when you contact us by phone, in person, or through online forms, when you sign a contract, or when you make a payment. We may also collect data from third parties, such as payment processors who confirm whether your payment has been completed, or from references you provide if required for certain services.
Lawful Bases for Processing
We only process your personal data where we have a lawful basis under data protection law. The main lawful bases we rely on are:
Contract: We process your personal data to take steps at your request before entering into a contract and to perform our contract with you, including setting up your account, providing access to storage units, managing your bookings, handling payments, and communicating with you about your storage services.
Legal obligation: We process certain information to comply with our legal and regulatory obligations, such as maintaining appropriate records for tax and accounting purposes, responding to requests from law enforcement, and complying with health and safety requirements.
Legitimate interests: We process personal data where it is in our legitimate interests and these are not overridden by your rights. These interests may include managing and improving our services and facilities, ensuring the security and safety of our premises, preventing fraud and misuse, recovering debts, and conducting basic analysis of how our services are used.
Consent: In limited circumstances, we may rely on your consent, for example where we send you certain types of marketing communications that require consent. Where we rely on consent, you may withdraw it at any time, and this will not affect the lawfulness of processing before consent was withdrawn.
How We Use Your Personal Data
We use your personal data for the following purposes:
To manage enquiries and provide information about our storage services.
To create and administer your customer account and storage contract.
To process payments, issue invoices, handle billing queries, and manage arrears and debt recovery.
To provide and manage access to the storage facility, including operation of access control systems and maintaining site security.
To maintain safety and security at our premises through monitoring, incident reporting, and, where in operation, CCTV recording.
To communicate with you about your contract, including changes to terms, notices relating to your unit, or information about operational issues affecting the site.
To comply with legal, regulatory, and law enforcement requirements and to respond to court orders or lawful requests for information.
To maintain business records, perform internal administration, and manage our relationship with you.
To conduct basic service analysis and planning so that we can improve our facilities, services, and customer experience.
Data Sharing and Processors
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors only process your personal data according to our instructions and are required to keep it secure. These may include:
Payment processing providers who help us process card or bank payments and manage recurring payments.
IT, hosting, and software service providers who support our customer management systems, email systems, and data storage.
Security and access control providers who support the operation and maintenance of access control systems and, where in operation, CCTV systems.
Professional advisers such as accountants or legal advisers where necessary for our legitimate interests and legal obligations.
We may also share your personal data with third parties that act as independent controllers, such as law enforcement authorities, regulators, courts, or debt recovery agencies where this is necessary to comply with legal obligations or to protect our rights, property, or the safety of our staff and customers.
International Transfers
Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data is protected in accordance with data protection laws. This may include relying on adequacy regulations for the destination country or using standard contractual clauses and other appropriate safeguards.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting, and reporting obligations.
Customer account and contract data is normally kept for a period after your contract ends to enable us to respond to queries, handle disputes, and comply with legal obligations. Financial and transactional records are kept for the period required under tax and accounting laws. Security-related information such as access logs and CCTV footage is kept for shorter periods, unless it is required for the investigation of an incident or for legal proceedings, in which case it may be retained for longer as necessary.
When personal data is no longer needed, we will securely delete or anonymise it.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. These measures may include access controls, secure storage systems, encryption where appropriate, staff training, and regular review of our security procedures.
Your Data Protection Rights
Under data protection law, you have several rights in relation to your personal data, subject to certain limitations and exemptions. These include:
Right of access: You have the right to request a copy of the personal data we hold about you and information about how we use it.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data about you.
Right to erasure: You may request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purpose for which it was collected and we have no other lawful basis to retain it.
Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while we check the accuracy of information or assess an objection you have raised.
Right to data portability: In some cases, you can request that we provide your personal data in a structured, commonly used, and machine readable format or that we transmit it to another controller where this is technically feasible.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will then stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests or where processing is necessary for legal claims.
Right to withdraw consent: Where we rely on your consent to process your personal data, you can withdraw this consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew consent.
Complaints and Supervisory Authority
If you have any concerns about how we handle your personal data, you can raise your concerns with us so that we can try to resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner's Office, which is the supervisory authority for data protection in the United Kingdom.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we handle personal data. Any changes will take effect when the updated Privacy Policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data as a Storage Harrow on the Hill customer in the local area.
