Storage Friern Barnet Privacy Policy
This Privacy Policy explains how Storage Friern Barnet collects, uses, stores and protects personal data relating to customers and prospective customers in the Friern Barnet area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all Storage Friern Barnet customers, including individuals and businesses, who rent or enquire about renting storage units or related services in the Friern Barnet area, whether the interaction takes place in person, by telephone, in writing or online.
Who we are and scope of this policy
Storage Friern Barnet acts as the data controller for the personal data described in this Privacy Policy. As data controller we decide how and why your personal data is used and are responsible for ensuring that such use is lawful and fair.
This Privacy Policy covers personal data we collect from you directly, from your use of our services and premises, and from certain third parties where relevant to the provision of our storage services.
Types of personal data we collect
We may collect and process the following categories of personal data about you:
Identification data such as full name, date of birth, proof of identity details and proof of address details.
Contact details such as home address, billing address, and preferred correspondence address.
Account and contract information such as storage unit number, contract start and end dates, payment history, and communication records relating to your contract.
Payment and billing information such as payment method details, partial card details where required for transaction processing, and billing records. We do not store full card numbers where this is managed by a secure payment processor.
Usage and access information such as access control records, unit entry and exit times, vehicle registration numbers used to access the site, and visitor logs where required for security and safety.
Security and monitoring information such as CCTV images captured in and around our premises. CCTV is used to protect customers, staff, property and the security of stored items.
Communication information such as enquiries, complaints, feedback, and any correspondence you send to us or that we send to you in relation to our services.
How we collect your personal data
We may collect your personal data in the following ways:
Directly from you when you make an enquiry, request a quotation, sign a contract, access our site, make a payment, or contact us for any reason.
Automatically when you use our premises, for example through access control systems and CCTV monitoring.
From third parties such as payment processors, identity verification providers, or business partners where this is needed for contract performance or legal compliance.
Lawful basis for processing your data
We rely on a number of lawful bases under data protection law to process your personal data:
Contract. We process your personal data where this is necessary to enter into or perform a storage contract with you, including handling enquiries, setting up your account, managing access to your unit, and handling payments and renewals.
Legal obligation. We process certain data to comply with legal and regulatory obligations, including record keeping, accounting rules, tax requirements, and obligations related to crime prevention and law enforcement requests.
Legitimate interests. We process data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This includes maintaining security of our premises, preventing fraud and misuse, protecting our property and the property of customers, improving our services, and managing business operations.
Consent. In limited cases we may rely on your consent, for example where we wish to send you certain types of marketing communications. Where we rely on consent you can withdraw it at any time.
How we use your personal data
We may use your personal data for the following purposes:
To provide and manage storage contracts, including processing bookings, confirming identity, granting and controlling access to units, handling enquiries, and providing customer service.
To take payment, issue invoices, manage direct debits or card payments, and handle payment queries and disputes.
To maintain the safety and security of customers, staff, and property, including by operating access control systems, visitor logs and CCTV monitoring.
To manage our relationship with you, including sending necessary service communications such as contract updates, access changes, payment reminders, and important notices relating to your unit.
To manage our business operations, including planning, auditing, quality control, training, reporting and analysis, provided these activities use data in line with data protection law.
To comply with legal obligations and to respond to lawful requests from law enforcement or regulatory bodies where required.
To send you service related information and, where permitted, information about services that are similar to those you already use, with the ability to opt out of such messages at any time.
Data retention and storage
We keep personal data only for as long as is necessary for the purposes for which it was collected, to meet legal or regulatory requirements, or to resolve disputes.
In general, we retain customer account and contract information for a period required by law after the end of your contract, in order to comply with tax, accounting and regulatory obligations and to deal with any potential disputes or queries. CCTV footage and access control records are typically kept for a shorter period, unless they are required for the investigation of an incident, legal claim or law enforcement request.
When personal data is no longer needed it is securely deleted or anonymised so that you can no longer be identified from it.
Data processors and sharing of personal data
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process personal data in accordance with our instructions, for specified purposes, and are required to provide appropriate technical and organisational measures to protect your data.
Such processors may include payment processing providers who handle card transactions and direct debits, providers of access control and security systems, providers of CCTV maintenance and secure data storage, and professional service providers such as accountants or IT support companies where access to data is necessary for their services.
We may also share data where required by law or regulation, for example with law enforcement authorities or regulatory bodies, and with our professional advisers such as auditors or legal advisers, where this is necessary to protect our legal rights or respond to claims.
We do not sell your personal data to third parties. We do not transfer your personal data outside the United Kingdom unless appropriate safeguards are in place in line with data protection law.
Your data protection rights
Under data protection law you have a number of rights in relation to your personal data. These rights apply to all Storage Friern Barnet customers in the Friern Barnet area, although they may be subject to certain legal limitations or exemptions.
Right of access. You have the right to request confirmation that we process your personal data and to request a copy of that data, along with certain information about how it is used.
Right to rectification. You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances you have the right to request that we delete your personal data, for example where the data is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction. You may request that we restrict the processing of your personal data in certain situations, for example while we consider a request to rectify data or an objection to processing.
Right to object. You have the right to object to processing that is based on our legitimate interests or on public interest grounds, and the right to object at any time to processing for direct marketing purposes.
Right to data portability. In some cases you have the right to receive the personal data you provided to us in a structured, commonly used and machine readable format and to request that we transfer it to another organisation where technically feasible.
Right to withdraw consent. Where we rely on your consent to process your personal data you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing prior to withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns directly.
Security of your personal data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse or alteration. Measures may include access controls, secure storage, encryption in transit where appropriate, staff training and regular review of our security practices.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, our services or our internal practices. Any updated version will apply to all Storage Friern Barnet customers in the Friern Barnet area from the date it is made available. We encourage you to review this Privacy Policy periodically so that you remain informed about how we use and protect your personal data.
