Storage Palmers Green Privacy Policy
This Privacy Policy explains how Storage Palmers Green collects, uses, shares, and protects personal data relating to our customers and prospective customers in the Palmers Green area. It is intended to meet the requirements of the UK General Data Protection Regulation and related data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Palmers Green customers, including individuals, sole traders, and representatives of businesses or organisations who enquire about, use, or have used our storage and related services in the Palmers Green area. It covers personal data collected in person at our premises, by telephone, through online enquiries and bookings, by post, and through any other communication channels we use.
Who is the data controller
For the purposes of data protection law, Storage Palmers Green is the data controller for the personal data described in this Privacy Policy. As data controller, we decide how and why your personal data is processed and are responsible for ensuring that such processing complies with applicable data protection legislation.
Personal data we collect
We collect and process different categories of personal data depending on your relationship with us and the services you use. The types of personal data we may collect include:
Identification data such as full name, title, date of birth and proof of identity documents where required for security or legal purposes.
Contact details such as residential or business address, correspondence address, and any other address you provide to us.
Account and service data such as storage unit number, access permissions, vehicle registration details for site access, booking history, contract details, and records of your interactions with us.
Payment and billing data such as billing address, payment method details, and records of payments made and amounts owed. We may use third party payment processors to handle card transactions, and do not hold full card details longer than necessary for payment processing and security checks.
Communication data such as records of enquiries, complaints, feedback, call notes, and other communications between you and Storage Palmers Green.
Security and access data such as CCTV footage recorded on our premises, access control records, and incident logs where relevant for safety and security purposes.
Technical and usage data such as information about how you interact with our website or online services, including basic device and browser information and pages accessed, where this is collected through essential cookies or similar technologies.
How we collect personal data
We collect personal data from you directly when you make an enquiry, request a quote, visit our facilities, sign a contract, make a payment, or contact us by telephone, in writing, or online. We may also collect data from third parties, where lawful, such as credit reference agencies, payment service providers, or public sources if required to verify identity, perform background checks, or comply with legal obligations.
Lawful bases for processing
We only process your personal data where we have a lawful basis under data protection law. Depending on the context, the lawful bases we rely on include:
Contract. We process personal data when it is necessary to enter into a storage or related services contract with you or your organisation, to provide our services, manage your account, arrange payment, and perform our contractual obligations.
Legal obligation. We process personal data where this is necessary to comply with our legal and regulatory obligations, such as identity checks, record keeping, tax and accounting requirements, and responding to lawful requests from public authorities.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include ensuring the security and safety of our premises, preventing and investigating fraud or theft, managing and improving our services, and maintaining accurate business records.
Consent. In limited circumstances, we may rely on your consent, for example for certain optional communications or marketing activities. Where we rely on consent, you can withdraw it at any time by contacting us, and withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
Purposes for which we use personal data
We use your personal data for the following purposes:
To respond to enquiries, provide quotes, and communicate with you about potential or existing services.
To set up and administer your storage contract, manage bookings, allocate units, and control access to our facilities.
To take and process payments, manage billing and invoices, and recover any unpaid sums.
To maintain the security and safety of our premises, staff, customers, and stored goods, including through CCTV monitoring and access control systems.
To handle your requests, complaints, or disputes and keep records of our interactions for quality and training purposes.
To meet legal and regulatory requirements, including record keeping, tax, prevention and detection of crime, and responding to lawful requests.
To manage our business operations, maintain accurate records, and improve our services.
Data sharing and processors
We do not sell your personal data. We may share your personal data with third parties only where this is lawful and necessary. These third parties may include:
Service providers acting as data processors who provide services on our behalf, such as payment processors, IT service providers, secure data storage providers, document destruction services, and security or CCTV system providers.
Professional advisers such as accountants, auditors, or legal professionals where needed for advice, compliance, or dispute resolution.
Public authorities, law enforcement agencies, courts, or regulators where we are legally required to share data or where sharing is necessary to protect our rights, property, or the safety of others.
Any third party involved in a business reorganisation, merger, or transfer of assets, in which case personal data may be transferred as part of the transaction, subject to appropriate safeguards.
Where we engage data processors, they act only on our documented instructions, are bound by confidentiality obligations, and must implement appropriate technical and organisational measures to protect your data.
International transfers
Our core services are provided within the United Kingdom. If we ever need to transfer personal data outside the United Kingdom or European Economic Area, we will ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, to protect your personal data in line with applicable data protection laws.
Data retention periods
We keep personal data only for as long as is necessary for the purposes described in this Privacy Policy or as required by law. The exact retention period depends on the type of data and the purpose of processing. In general:
Customer account and contract data are kept for the duration of your relationship with us and then for a period after your contract ends, to comply with legal, tax, and accounting obligations and to resolve potential disputes.
Payment and billing records are typically kept for a number of years after the end of the tax year in which the transaction occurred, as required by tax and accounting regulations.
CCTV footage and access logs are retained for a limited period sufficient to ensure security and investigate incidents, unless a longer retention is required in connection with a specific investigation or legal claim.
Enquiry and communication records are retained for a period that allows us to manage follow up, handle queries, and maintain business records, unless you become a customer, in which case they may be linked to your customer file.
When personal data is no longer required, we will securely delete or anonymise it in line with our data retention policies.
How we protect your personal data
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include physical security at our premises, access controls, staff training, secure storage solutions, and regular review of our procedures and systems. While no system is completely secure, we take reasonable steps to safeguard your data in accordance with legal requirements and industry practice.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access. You can request confirmation as to whether we process your personal data and obtain a copy of that data, along with information about how it is used.
Right to rectification. You can request that inaccurate or incomplete personal data about you be corrected or updated.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
Right to restriction. You can ask us to restrict the processing of your personal data in certain situations, such as while we verify its accuracy or consider an objection you have raised.
Right to object. You can object to processing based on our legitimate interests where you believe your rights and freedoms outweigh those interests. We will stop processing unless we have compelling legitimate grounds or need to continue for legal reasons.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request a copy of certain personal data in a machine readable format and, where technically feasible, ask us to transmit it to another controller.
Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of any processing carried out before withdrawal.
Exercising your rights and complaints
If you wish to exercise any of your data protection rights or have questions about how we handle personal data, you can contact us using our usual contact channels. We may need to verify your identity before responding to your request. We aim to respond within the time limits set by data protection law.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how we handle your personal data. We would encourage you to contact us first so that we can try to resolve any concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
