Storage Finsbury Privacy Policy
This Privacy Policy explains how Storage Finsbury collects, uses, stores and shares personal data when you use our storage services. It applies to all Storage Finsbury customers and prospective customers in our service area, as well as anyone who contacts or interacts with us in connection with our services.
We are committed to handling your personal data in compliance with the General Data Protection Regulation and applicable data protection laws. This Privacy Policy describes your rights and how you can exercise them.
Data Controller
Storage Finsbury is the organisation responsible for determining how and why your personal data is processed. When this Privacy Policy refers to we, us or our, it refers to Storage Finsbury as the data controller in respect of your personal data.
Types of Personal Data We Collect
We collect and process different categories of personal data depending on your relationship with us and how you use our services. The main categories of personal data we may collect include:
Identification and contact details, such as name, postal address, billing address, previous address, and any other address relevant for contact or verification purposes.
Contact information, such as email address, and any additional contact details you provide to us when making an enquiry, booking a unit or managing your account.
Account and contract information, such as customer number, contract details, storage unit number, move in and move out dates, payment terms, and communications relating to your account.
Payment and transaction data, such as payment method, partial payment card information as required for processing through our payment providers, payment history, invoices, credits, refunds and details of any outstanding balances.
Identity verification data, such as date of birth, copy or details of identification documents where necessary to verify your identity and meet legal and security requirements.
Security and access data, such as CCTV images in and around our facilities, access control records including keypad entries and time logs, and records of any incidents or security events.
Communication data, such as enquiries, complaints and feedback you submit to us, call notes and written correspondence relating to your storage or potential storage with us.
Technical and usage data, such as information about how you interact with our website or online customer portals, including basic log data and device information, to the extent permitted by applicable law.
How We Collect Your Data
We collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, make payments, visit our facilities, use our website or contact us by any communication channel.
We may receive personal data about you from third parties, such as payment processors, screening or verification services, or service providers working on our behalf, where this is necessary to provide our services or meet legal obligations.
Lawful Basis for Processing
We process your personal data on one or more of the following lawful bases under the General Data Protection Regulation:
Performance of a contract: We need to process your data to provide our storage services, manage your account, handle payments, and fulfil our contractual obligations to you.
Compliance with legal obligations: We may process your data to comply with applicable laws and regulations, including tax, accounting, anti money laundering and security obligations, as well as to respond to lawful requests from authorities.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests, and where these interests are not overridden by your rights and interests. Examples include ensuring the security of our facilities, preventing fraud, recovering debts, improving our services and maintaining accurate business records.
Consent: In limited circumstances we may rely on your consent, for example for certain forms of direct marketing or for specific optional services. Where we rely on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Purposes for Which We Use Personal Data
We use the personal data we collect for the following purposes:
To provide and administer storage services, including setting up your account, preparing and managing your contract, allocating units, and facilitating move in and move out.
To process payments, issue invoices, administer refunds and credits, address billing queries and manage any arrears.
To maintain the safety and security of our facilities, staff and customers, including through access controls, monitoring of access logs and operation of CCTV systems.
To manage our relationship with you, including handling queries, complaints and service issues, and sending administrative information relating to your storage.
To comply with legal and regulatory obligations, including maintaining accurate records for tax, accounting and reporting purposes, and cooperating with law enforcement and regulatory authorities where required.
To protect our rights, property and interests, including the enforcement of contracts, collection of unpaid charges and the resolution of disputes.
To improve our services and operations, including analysis of how our facilities and services are used, service quality monitoring and staff training.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, we keep customer account and contract information for a period after the end of the storage relationship, to deal with any queries, disputes or claims and to comply with our legal obligations. Payment and transaction records are kept in line with mandatory retention periods under tax and accounting laws.
CCTV recordings and access control records are retained for a limited period necessary to ensure the security of our premises and to investigate incidents, unless a longer retention period is required in connection with a specific investigation, dispute or legal process.
When personal data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures and applicable law.
Data Processors and Other Recipients
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are engaged under written contracts requiring them to process personal data only in accordance with our instructions, to maintain appropriate security measures and to comply with data protection laws.
Our processors may include providers of data storage and hosting services, customer management systems, payment processing services, access control and security systems, document management, and professional advisors who assist us with our business operations.
We may also share your personal data with other third parties where necessary, such as law enforcement bodies, regulatory authorities, courts, insurers, debt collection agencies and professional advisors, where this is required by law or necessary to protect our rights or the rights of others.
Where personal data is transferred outside the United Kingdom or European Economic Area, we will take appropriate steps to ensure that adequate safeguards are in place to protect your data, in line with data protection laws.
Security of Your Personal Data
We implement technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, secure storage, staff training and regular review of our security procedures.
While we strive to protect your personal data, no system is completely secure. We therefore cannot guarantee absolute security but we do take reasonable and proportionate steps to mitigate risks and respond to potential issues.
Your Data Protection Rights
Under the General Data Protection Regulation and applicable data protection laws, you have a number of rights in relation to your personal data. These rights apply to all Storage Finsbury customers in our service area, subject to certain limitations and exemptions under the law.
Right of access: You have the right to request confirmation of whether we process your personal data and to receive a copy of the personal data we hold about you, along with certain information about how we use it.
Right to rectification: You have the right to request correction of inaccurate personal data and completion of incomplete data relating to you.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you have withdrawn consent and we have no other legal basis for processing.
Right to restriction of processing: You may request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of data or assess an objection you have raised.
Right to data portability: In certain cases, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine readable format and to request that it be transmitted to another organisation where technically feasible.
Right to object: You have the right to object to our processing of your personal data in certain circumstances, in particular where we rely on legitimate interests as our lawful basis. We will stop processing your data unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
Rights relating to consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Exercising Your Rights and Complaints
You can exercise your data protection rights by contacting us using your usual communication channels with Storage Finsbury. We may need to verify your identity before responding to your request to protect your privacy and security.
If you are not satisfied with how we handle your personal data or respond to your requests, you also have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so that we can seek to resolve any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. Any changes will take effect when the updated policy is made available. We recommend that you review this Privacy Policy periodically so that you remain informed about how we process your personal data.
