Privacy Policy - Eastfinchley Storage

Eastfinchley Storage is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information relating to our customers in the East Finchley area. It applies to all Eastfinchley Storage customers in the area, including prospective customers, current customers, and former customers who have used our storage services.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It explains the types of data we collect, the lawful bases on which we process that data, how long we retain it, the categories of processors we may use, and the rights available to you.

1. Information We Collect

We collect only the personal data that is necessary to provide our storage services, manage our relationship with you, and meet our legal obligations. The information we may collect includes:

Identity details: name, title, and date of birth where required for verification.
Contact details: postal address, email address, and telephone number.
Account and service details: storage unit number, rental dates, payment status, access records, and service preferences.
Payment information: billing details, transaction history, and limited payment-related data necessary to process fees.
Verification information: documents or details needed to confirm identity, prevent fraud, or comply with legal requirements.
Communications: messages, calls, complaints, feedback, and records of correspondence with us.
Security information: CCTV footage, entry logs, alarm records, and other access control data.
Technical information: if you use any digital systems linked to our services, we may collect device and usage information such as IP address or system logs.

We do not seek to collect special category data unless it is strictly necessary and you have provided it voluntarily or the law requires us to process it. If such information is ever collected, it will be handled with additional safeguards.

2. How We Use Your Data

We use your personal data for the following purposes:

to set up and manage your storage agreement;
to verify your identity and prevent fraud;
to process payments and manage billing;
to communicate with you about your account, access, or service changes;
to maintain security and protect our premises, staff, customers, and stored goods;
to handle complaints, disputes, and customer support requests;
to comply with legal, tax, accounting, and regulatory requirements;
to enforce our terms and conditions where necessary;
to improve our services and operations;
to establish, exercise, or defend legal claims.

We will not use your data for purposes that are incompatible with the reasons it was collected unless we have a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the activity, Eastfinchley Storage relies on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform our storage agreement with you. This includes managing your account, providing access to your unit, processing payments, and communicating service-related information.

Legal Obligation

We may process personal data when needed to comply with legal duties, including accounting, tax, anti-fraud, recordkeeping, and responding to lawful requests from public authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include security monitoring, preventing misuse of our facilities, handling disputes, and improving service quality. We always consider the impact on your privacy before relying on this basis.

Consent

Where required by law, we will ask for your consent before processing certain data. If we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing Your Information

We may share personal data with trusted third parties who help us operate our business. These third parties act as processors or, in some cases, independent controllers. We only share data when necessary and under appropriate safeguards.

Categories of recipients may include:

Payment service providers who process card or bank transactions;
IT and cloud service providers that host systems, databases, or secure backups;
Security providers that support surveillance, access control, or alarm monitoring;
Professional advisers such as accountants, auditors, insurers, or legal advisers;
Debt recovery or enforcement services where required to recover outstanding balances or protect our rights;
Public authorities where disclosure is required by law or is necessary for legal proceedings.

We require our processors to handle personal data securely, use it only for instructed purposes, and comply with data protection law. We do not sell your personal information.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, including to satisfy legal, accounting, insurance, or reporting requirements. Retention periods vary depending on the type of data and the nature of our relationship with you.

Customer and contract records: kept for the duration of the agreement and for a reasonable period afterward to manage queries or disputes.
Financial records: generally retained for the period required by tax and accounting law.
Security records: such as CCTV and access logs, usually retained for a shorter period unless needed for investigation or legal proceedings.
Complaints and correspondence: retained as long as needed to resolve the issue and maintain a record of handling.

When personal data is no longer required, we securely delete, destroy, or anonymise it.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, staff confidentiality obligations, secure storage, encryption, monitoring, and regular review of our security practices.

While no system can be completely secure, we work to ensure that personal data is protected to a standard appropriate to the risks involved.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions or exemptions in some circumstances.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you can request deletion of your data where there is no lawful reason to continue processing it.
Right to restriction: you can ask us to limit how we use your data in certain situations.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: where applicable, you can request certain data in a structured, commonly used format.
Right to withdraw consent: if processing is based on consent, you may withdraw it at any time.

If you believe your data protection rights have been breached, you also have the right to lodge a complaint with the UK Information Commissioner's Office or the relevant supervisory authority in your jurisdiction.

8. Automated Decision-Making

Eastfinchley Storage does not usually make decisions about you based solely on automated processing that produce legal or similarly significant effects. If this position changes, we will inform you and provide details about the logic involved, the significance of the processing, and your rights.

9. International Transfers

If any personal data is transferred outside the UK, we will take steps to ensure it is protected to an adequate standard. This may include using approved contractual safeguards or transferring data only to countries recognised as providing adequate protection.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any revised version will apply from the date it is published or otherwise communicated to you. We encourage you to review this policy periodically so that you remain informed about how we protect your personal data.

11. Summary of Our Commitment

At Eastfinchley Storage, we respect your privacy and process personal information responsibly, lawfully, and transparently. We collect only what we need, use it for clear and legitimate purposes, keep it no longer than necessary, and put safeguards in place to protect it. Our aim is to provide secure storage services while maintaining your trust and protecting your rights.