Self Storage Enfield Privacy Policy
This Privacy Policy explains how Self Storage Enfield collects, uses, stores, and protects your personal data when you use our self storage services. It applies to all Self Storage Enfield customers in the Enfield area, including prospective customers, active customers, and former customers.
We are committed to handling your personal data fairly, lawfully, and transparently in accordance with the UK General Data Protection Regulation and the Data Protection Act.
Who this Privacy Policy applies to
This Privacy Policy applies to individuals and businesses who use, have used, or have expressed an interest in using Self Storage Enfield services in the Enfield area. It also covers individuals whose personal data we may process in connection with those services, such as account holders, authorised users, guarantors, emergency contacts, and payers.
Types of personal data we collect
We collect and process different types of personal data depending on how you interact with us. This may include:
Identity and contact information: name, title, postal address, billing address, contact address, date of birth, identification numbers or reference numbers, and other similar data that allows us to identify and communicate with you.
Communication information: records of communications with us, including enquiries, complaints, and feedback made in person or by other means.
Contract and account information: storage unit details, contract start and end dates, access permissions, payment history, and other records relating to your account and our services.
Payment information: payment method details as required to take or process payments, including records of transactions and invoices. We do not store full card details if payments are processed through a secure payment processor.
Security and access information: data generated when you access our premises or units, which may include access logs, timestamps, vehicle registration numbers where recorded, and closed circuit television images captured on or near our facilities.
Technical and usage data: limited information about how you interact with any online service we provide, such as basic device details and usage information, where applicable.
How we collect your personal data
We collect personal data in several ways, including:
Directly from you when you contact us, request a quote, make a booking, sign a storage agreement, make a payment, or communicate with us.
Indirectly from third parties, such as payment processors and service providers who support our operations.
Automatically when you visit our premises, for example through security systems such as access control systems and closed circuit television.
Lawful bases for processing your data
We process your personal data only where we have a lawful basis to do so. Depending on the circumstances, this may include:
Contract: processing that is necessary to enter into or perform a contract with you, such as setting up your storage unit, managing your account, communicating with you about your booking, and handling payments.
Legal obligation: processing that is necessary for us to comply with legal and regulatory requirements, including record keeping, tax obligations, fraud prevention, security and health and safety obligations.
Legitimate interests: processing that is necessary for our legitimate business interests, provided these are not overridden by your rights and interests. This may include securing our premises and units, improving our services, managing business operations, and protecting our property and staff.
Consent: in limited circumstances where we rely on your consent, such as for certain types of marketing. Where we rely on consent, you can withdraw it at any time.
How we use your personal data
We may use your personal data for the following purposes:
To provide and manage self storage services, including setting up and managing your storage unit, processing bookings, and communicating with you about your account.
To process payments, issue invoices and receipts, and maintain accurate financial records.
To manage access to our premises and units, maintain safety and security, and protect our property, staff, and customers.
To respond to enquiries, provide customer support, handle complaints, and resolve disputes.
To meet legal and regulatory obligations, including fraud prevention, crime prevention, and cooperation with law enforcement or regulatory authorities when required by law.
To improve our services, premises security, and customer experience, including through internal analysis and staff training.
Data retention and storage
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. This will depend on the type of data and the nature of our relationship with you.
Generally, we retain account and contract information for a period after your agreement with us ends to allow us to respond to queries, meet legal obligations, and handle any disputes. Financial records may be kept for longer periods as required by tax and accounting rules. Security recordings and access logs are retained for shorter periods unless they are required for the investigation of an incident or legal matter.
When personal data is no longer required, we will securely delete, anonymise, or destroy it.
Use of data processors and third parties
We may share your personal data with trusted third parties who act as our data processors and provide services that support our operations. These may include payment processors, IT and system support providers, security service providers, accountancy or professional advisers, and document storage or destruction services.
Where we use processors, they will only process your personal data on our instructions, under a written contract, and with appropriate security measures in place. They are not allowed to use your personal data for their own purposes.
We may also share personal data with other third parties where required by law, for example with law enforcement or regulatory authorities, or where necessary to protect our rights, property, or safety, or those of our customers or others.
International transfers
We aim to store and process your personal data within the United Kingdom or other locations where data protection laws provide an adequate level of protection. If we transfer personal data to a country that does not offer the same level of data protection, we will take appropriate safeguards to protect your data in line with data protection law.
How we protect your data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures may include controlled access to premises, security and monitoring systems, restricted access to customer records, secure payment processing, staff training, and regular review of our security procedures.
Your data protection rights
You have a number of rights in relation to your personal data, subject to certain conditions and exemptions under data protection law. These include:
Right of access: you can request confirmation that we process your personal data and obtain a copy of that data, along with certain information about how it is used.
Right to rectification: you can ask us to correct or complete personal data that is inaccurate or incomplete.
Right to erasure: in some circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where consent has been withdrawn and there is no other lawful basis.
Right to restrict processing: you can ask us to restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.
Right to object: you can object to processing based on our legitimate interests, including certain types of profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests and rights, or we need to continue for legal reasons.
Right to data portability: for data you have provided to us and which we process by automated means on the basis of consent or contract, you can ask to receive that data in a structured, commonly used format and have it transmitted to another controller where technically feasible.
Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing before consent was withdrawn.
Exercising your rights and complaints
If you wish to exercise any of your rights or have questions about how we handle your personal data, you can contact us using the usual communication channels you use when dealing with Self Storage Enfield.
If you are not satisfied with our response or believe that your data protection rights have been breached, you have the right to lodge a complaint with the relevant supervisory authority in the United Kingdom.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any significant changes will be communicated in an appropriate way. The most current version of this Privacy Policy will always apply to the processing of your personal data by Self Storage Enfield.
