Storage Enfield Privacy Policy
This Privacy Policy explains how Storage Enfield collects, uses, stores and protects personal data relating to customers and prospective customers in the Storage Enfield area. It also explains the legal bases we rely on under the UK General Data Protection Regulation and the Data Protection Act 2018, how long we keep your data, with whom it may be shared, and the rights you have in relation to your personal data.
This Privacy Policy applies to all Storage Enfield customers and anyone who makes an enquiry, request or booking for storage or related services within the Storage Enfield area, whether online, by post, or in person.
Data Controller
For the purposes of data protection law, Storage Enfield is the data controller in respect of the personal data it processes about you. This means we decide how and why your personal data is used and are responsible for ensuring it is handled in compliance with applicable data protection legislation.
Personal Data We Collect
Storage Enfield may collect and process the following categories of personal data, depending on your interactions with us:
Identification and contact information, such as your name, postal address, billing address, contact address, and any other address you supply to us.
Contact details, such as your email address and any other electronic contact details you provide to us, and your communication preferences.
Account and contract information, such as customer account numbers, contract details, storage unit number, move-in and move-out dates, payment history, and records of your interactions with us.
Payment and billing information, such as payment method details, billing records, invoices and transaction history. We do not store full card details where payment is processed through a secure payment provider.
Identity verification data, such as copies of identity documents or other information you provide to confirm your identity or address for security or anti-fraud purposes.
Usage and interaction data, such as records of email or written correspondence, telephone queries, and information provided when you complete forms, request quotes or submit feedback.
Security and access information, such as CCTV footage recorded in and around our premises, access logs, and records of entry to and exit from our facilities where relevant for security, safety, and fraud prevention.
How We Collect Your Personal Data
We collect personal data directly from you when you contact us, request a quote, make a booking, sign a contract, visit our facilities, or otherwise communicate with us. We may also receive personal data about you from third parties acting on your behalf, such as authorised representatives, or from payment service providers for the purposes of processing payments and preventing fraud.
Lawful Bases for Processing
Storage Enfield will only process your personal data where we have a lawful basis under data protection law. The main lawful bases we rely upon are:
Contractual necessity: We process your personal data where it is necessary to enter into, or perform, a contract with you. This includes processing required to manage your booking, provide storage services, process payments, and communicate with you about your contract.
Legitimate interests: We process personal data where it is necessary for our legitimate interests, provided these are not overridden by your rights and freedoms. Our legitimate interests include managing and improving our business operations, maintaining security and safety at our premises, preventing fraud, handling enquiries and complaints, and keeping appropriate business records.
Legal obligation: We process your personal data where we are required to comply with legal or regulatory obligations, such as tax and accounting requirements, or obligations relating to law enforcement, court orders or regulatory requests.
Consent: In limited cases, we may rely on your consent, for example for certain direct marketing communications where required by law. Where we rely on consent, you have the right to withdraw your consent at any time.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide storage and related services, including setting up and managing your account, allocating storage units, and administering your contract.
To process payments, issue invoices, handle refunds where applicable, and maintain accurate financial and transactional records.
To communicate with you, including responding to enquiries, sending service updates, and providing information relating to your contract or our services.
To manage security and safety on our premises, including the use of CCTV and access logs to prevent and investigate unauthorised access, theft, or damage.
To improve our services and customer experience, including monitoring usage patterns, analysing feedback, and training staff.
To comply with legal, regulatory and accounting obligations, and to cooperate with law enforcement and regulatory authorities where required.
To send you information about Storage Enfield services that may be of interest to you, in line with your communication preferences and applicable marketing rules.
Data Retention
Storage Enfield will keep your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. The specific retention period will depend on the nature of the data and our legal and operational requirements.
Customer account and contract information is typically retained for a period after the end of your contract to enable us to respond to queries, deal with potential disputes, and comply with tax and accounting obligations.
Payment and billing records are kept in line with applicable financial and tax legislation.
CCTV footage and access logs are retained for a shorter period, unless required to be retained longer for security investigations, legal proceedings, or law enforcement purposes.
At the end of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be used to identify you.
Data Processors and Third Parties
Storage Enfield may use carefully selected third-party service providers to process personal data on our behalf. These providers act as data processors and are only permitted to process personal data in accordance with our instructions and for the purposes described in this Privacy Policy.
Typical categories of data processors include payment service providers, IT and cloud service providers, customer relationship management and billing platforms, security and CCTV system providers, and professional advisers such as accountants or auditors when they require limited access to data for their services.
Where personal data is shared with third-party processors, we ensure that appropriate contractual and technical safeguards are in place to protect your data and to ensure compliance with data protection law.
We may also share your personal data where required by law, for example with law enforcement agencies, courts, or regulatory authorities, or in connection with legal claims or proceedings.
International Transfers
If we transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your data, such as adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms, in accordance with data protection requirements.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to the personal data that Storage Enfield holds about you. These rights apply to all Storage Enfield customers and individuals whose data we process in the Storage Enfield area, subject to certain legal limitations and exemptions.
Right of access: You have the right to request confirmation that we process your personal data and to access a copy of that data, together with information about how we use it.
Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure: You may request that we delete your personal data in certain circumstances, for example where the data is no longer needed for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction of processing: You may request that we restrict our processing of your personal data in certain circumstances, for instance while we verify the accuracy of data or consider an objection you have raised.
Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests, including in relation to direct marketing. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is required for legal claims.
Right to data portability: Where we process your personal data based on your consent or on a contract, and by automated means, you may have the right to receive that data in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible.
Right to withdraw consent: Where our processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing prior to withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights, or if you have questions about how Storage Enfield handles your personal data, you can contact us using the usual contact channels we provide for customers.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed. We would, however, appreciate the opportunity to address your concerns directly before you approach the authority, and we encourage you to contact us in the first instance.
Changes to This Privacy Policy
Storage Enfield may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updated version will apply to all Storage Enfield customers and prospective customers in the Storage Enfield area from the date it is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.
