Storage Homerton Privacy Policy
This Privacy Policy explains how Storage Homerton collects, uses, stores and protects personal data relating to customers in the Storage Homerton service area. It also explains the lawful basis for our processing under the UK General Data Protection Regulation and related data protection laws, how long we keep information, the role of our data processors, and the rights you have in relation to your personal data.
This Privacy Policy applies to all Storage Homerton customers and prospective customers in our operating area, including individuals and businesses who enquire about, use or have used our storage and related services.
Data Controller
For the purposes of data protection law, Storage Homerton is the data controller in relation to the personal data described in this Privacy Policy. This means we determine how and why your personal data is processed in connection with our services.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. The information we collect may include:
Identification and contact details: name, postal address, billing address, contact address, date of birth, and other details you provide to identify yourself.
Contact details: email address, mobile number, landline number and preferred contact method where provided.
Account and contract information: customer account numbers, storage unit details, contract start and end dates, chosen services, payment status and correspondence relating to your account.
Payment and billing information: details necessary to process payments and manage invoices, such as payment method, partial card details where required for verification, and transaction history. We do not store full payment card details where a secure third party payment processor is used.
Communications information: records of emails, letters, forms, and other communications you send to us or that we send to you, including queries, complaints and feedback.
Technical and usage data: information about how you use our services and interact with our website or online tools, including access dates and times, IP address, device type and basic analytics data where collected.
Security and access data: where applicable, access codes, unit numbers, logs of entry to the site or storage units, and any incident reports concerning safety, security or damage.
Marketing preferences: your choices about receiving marketing information from us and records of your consent where required.
How We Collect Personal Data
We collect personal data in several ways, including:
Directly from you when you make an enquiry, request a quote, create a booking, sign a storage agreement, use our services, make a payment or contact us by phone, email or in person.
Automatically when you visit our website or use our online services, where certain technical data is collected for security, analytics and service improvement.
From third parties where necessary for our services, such as payment providers, referencing agencies where used, or other service partners who support our operations.
Lawful Basis for Processing
We process personal data only where we have a lawful basis under data protection law. Depending on the situation, this may include:
Contract: processing data to enter into and perform our contract with you, including taking steps at your request before entering a contract. This covers activities such as providing quotes, setting up and managing your storage agreement, processing payments, and providing customer service.
Legal obligation: processing data to comply with legal and regulatory requirements, including tax, accounting, fraud prevention, crime prevention and responding to lawful requests from authorities.
Legitimate interests: processing data for our legitimate business interests where these are not overridden by your rights and interests. This includes managing and improving our services, maintaining security, preventing misuse of our facilities, handling queries and complaints, and basic direct marketing to existing customers in line with the law.
Consent: processing data where you have given clear consent for a specific purpose, for example to receive certain types of marketing communications. You can withdraw your consent at any time.
How We Use Personal Data
We use the personal data we collect for the following purposes:
To provide, administer and manage storage and related services, including opening and maintaining your customer account, handling bookings, and managing on-site access and security.
To communicate with you about your enquiries, bookings, payments, contract renewals, changes to services, and to respond to your questions or complaints.
To process payments, issue invoices, manage refunds where applicable, and maintain accurate financial and transactional records.
To maintain the security and integrity of our premises, units and systems, including monitoring access and managing incidents or disputes.
To comply with legal obligations and to cooperate with law enforcement or regulatory authorities where required by law.
To improve our services, operations and customer experience, including through analysis of aggregated usage data and feedback.
To send you information about similar services that we believe may be of interest to you, where permitted by law and subject to your right to opt out at any time.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy, including:
Service providers who act as data processors on our behalf, such as payment processors, IT and software providers, hosting providers, document storage providers, and professional advisers. These processors are only permitted to process personal data in accordance with our instructions and must protect it appropriately.
Professional advisers including legal, accounting or insurance providers where necessary to obtain advice, manage claims, or protect our legal rights.
Law enforcement agencies, regulatory bodies and courts where we are required or permitted to do so by law, or where disclosure is necessary to protect our rights, property or safety, or that of our customers or others.
We do not sell your personal data to third parties.
International Transfers
Where we use service providers or systems that are located outside the United Kingdom, we take steps to ensure that appropriate safeguards are in place to protect your personal data, in line with data protection law. This may include using standard contractual clauses or equivalent mechanisms approved by relevant authorities.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting or reporting requirements.
In general, we keep customer account and contract records for a period required by law after your relationship with us ends, to deal with any queries, disputes or legal obligations. Payment and transaction records are kept for the period required for tax and financial reporting.
Where data is no longer needed, we will securely delete, anonymise or dispose of it in a way that protects your privacy.
Your Data Protection Rights
Subject to certain conditions and exemptions under data protection law, you have the following rights in relation to your personal data:
Right of access: to obtain confirmation of whether we process your personal data and to request a copy of the data we hold about you, together with information about how we use it.
Right to rectification: to ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to erasure: to request that we delete your personal data where there is no longer a lawful basis for us to continue processing it, subject to legal and contractual obligations.
Right to restriction: to request that we temporarily restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or our reasons for processing it.
Right to data portability: to request that we provide certain personal data to you or to another organisation in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and carried out by automated means.
Right to object: to object to processing based on our legitimate interests, including profiling, and to object at any time to the use of your personal data for direct marketing.
Rights relating to automated decision-making: where we carry out automated decision-making that has legal or similarly significant effects, you may have the right to request human review and to challenge the decision.
You can exercise your rights by contacting us using the contact details we provide on our main customer information materials. We may need to verify your identity before responding to your request.
Security of Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures are reviewed and updated from time to time to reflect developments in security practices and legal requirements.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal requirements. Any significant changes will be communicated in an appropriate way and the updated policy will apply from the date it is published.
By continuing to use Storage Homerton services after changes have been made, you acknowledge that you have read and understood the updated Privacy Policy.
