Self Storage Hampstead Privacy Policy
This Privacy Policy explains how Self Storage Hampstead collects, uses, stores and protects personal data about individuals who use our self storage services in the Hampstead area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws.
By using our services, visiting our premises, or contacting us, you acknowledge that you have read and understood this Privacy Policy. This policy applies to all Self Storage Hampstead customers and prospective customers located in our service area, as well as visitors to our premises.
Who we are and scope of this policy
Self Storage Hampstead is a provider of self storage units and related services. For the purposes of data protection law, we are the data controller in relation to the personal data we collect and use about you in connection with our services in the Hampstead area.
This Privacy Policy covers personal data processed in connection with enquiries, bookings, contracts, access to our storage facilities, payments, and customer support.
What personal data we collect
We collect and process different types of personal data depending on your relationship with us and how you interact with our services. The main categories of data we may collect are:
Identification and contact details, such as your full name, postal address, billing address, and other contact details you choose to provide; account and contract information, such as unit numbers, contract start and end dates, terms agreed, and correspondence relating to your account; payment and billing information, such as payment history and partial card or bank details processed through our payment providers in a secure manner; communication records, such as enquiries, complaints, and any written or verbal communications with our team; facility access and security data, such as access logs, key or fob numbers, and CCTV images recorded on or around our premises where required for security and safety; website usage data, such as technical information about your visits to our website and basic usage statistics where we use cookies or similar technologies.
We do not routinely collect special categories of personal data such as health, biometric, or criminal records, and we ask that you do not store such data in our facilities or provide it to us unless strictly necessary.
How we collect your data
We collect personal data in a number of ways. You may provide data directly when you contact us to request a quote, arrange a viewing, or make a booking; complete a rental agreement or other contract documentation; make a payment for your storage unit or associated services; communicate with us by post, phone, or in person; visit our premises, where CCTV operates for security and safety; and interact with our website, including completing online forms or making online enquiries.
We may also receive limited personal data from third parties, such as payment processors, credit checking agencies where applicable, or online advertising and booking platforms, to help us manage your booking and verify certain information.
Lawful basis for processing your data
We only process your personal data where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are:
Contract, where the processing is necessary to enter into or perform a storage agreement or other contract with you, including managing your booking, administering your account, and providing customer service.
Legal obligation, where we are required to process your data to comply with legal or regulatory requirements, such as record keeping, tax, accounting, or law enforcement requests where applicable.
Legitimate interests, where the processing is necessary for our legitimate business interests or those of a third party, and those interests are not overridden by your rights. This may include ensuring the security and safety of our premises and customers, including via CCTV; improving our services, handling enquiries and complaints, preventing fraud and misuse of our facilities, and maintaining accurate records.
Consent, where we rely on your explicit consent for specific activities, such as certain types of marketing communications where required by law. You can withdraw your consent at any time.
How we use your personal data
We use the personal data we collect for the following purposes, to the extent permitted by law:
To provide and manage self storage services, including processing enquiries, reservations, and rental agreements; to administer your account, including issuing invoices, processing payments, managing access, and dealing with any questions or issues; to maintain the safety and security of our premises, staff, and customers through access controls and CCTV monitoring; to communicate with you about your account, bookings, service changes, and important information relating to the use of our facilities; to manage debt collection and handle disputes, including the recovery of overdue payments in accordance with contractual terms; to comply with legal, tax, and regulatory obligations, including record keeping and cooperating with competent authorities; and to monitor and improve our services, including website performance, customer satisfaction, and operational efficiency.
Data sharing and processors
We may share your personal data with carefully selected third parties that act as data processors on our behalf. These service providers are only permitted to use your data in accordance with our instructions and applicable data protection law and must implement appropriate security measures.
Such processors may include payment processing and banking providers to handle card or bank payments securely; IT, hosting, and software providers that support our booking systems, databases, and email or communication platforms; and security and maintenance providers that help operate and maintain our CCTV systems, access control systems, and premises.
We may also share limited data with other third parties where necessary and lawful, such as professional advisers, auditors, legal representatives, and law enforcement or regulatory authorities where required by law or to protect our rights, property, and customers.
We do not sell your personal data to third parties for their own marketing purposes.
International data transfers
If any of our processors or service providers transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent measures required by data protection law.
Data retention and storage
We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
In general, we retain customer account and contract information for a period after your storage agreement ends to resolve any outstanding matters and comply with legal retention obligations. CCTV footage is stored for a limited period, typically only as long as needed for security and incident investigation, unless a longer retention period is required in connection with an ongoing matter. Payment records and financial information are retained in line with legal and tax requirements.
When personal data is no longer needed, we take steps to securely delete or anonymise it.
How we protect your data
We use appropriate technical and organisational measures to protect the personal data we hold against unauthorised access, loss, alteration, or disclosure. These measures include access controls, secure storage, staff training, and ongoing review of our security practices. While we take reasonable steps to protect your information, no system can be guaranteed to be completely secure.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these may include the right to access your personal data and obtain a copy of the information we hold about you; the right to request correction of inaccurate or incomplete personal data; the right to request erasure of your personal data where there is no good reason for us to continue processing it; the right to restrict our processing of your personal data in certain circumstances; the right to object to processing based on our legitimate interests, including profiling related to those interests; the right to data portability, allowing you to request that certain personal data is transferred to you or another controller in a structured, commonly used and machine readable format; and the right to withdraw consent where we rely on your consent for specific processing activities.
We will respond to genuine requests to exercise these rights in accordance with applicable law and within the required time limits. In some cases we may ask you to provide proof of identity to help us confirm your identity before responding.
Marketing communications
We may use your contact details to send you information about our services that we believe may be of interest to you, where permitted by law. Where consent is required, we will only send you such communications if you have opted in. You can opt out of marketing communications at any time by following the unsubscribe instructions in the communication or by contacting us using your preferred method.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Any changes will take effect when the updated policy is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
Contact and complaints
If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise your rights, you can contact us using your usual communication channels as a Self Storage Hampstead customer.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your rights have been infringed. We would, however, appreciate the chance to address your concerns directly before you contact an authority, so we encourage you to contact us in the first instance.
