Storage Northolt Privacy Policy
This Privacy Policy explains how Storage Northolt collects, uses, stores and protects the personal data of its customers and prospective customers in the surrounding area. It applies to all individuals who enquire about, use, or have used Storage Northolt services, whether in person, by phone, or online. Storage Northolt is committed to processing personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
Data Controller
Storage Northolt acts as the data controller for the personal data described in this Privacy Policy. This means that Storage Northolt determines the purposes and means of processing your personal information in connection with the operation of its storage services.
Personal Data We Collect
Storage Northolt collects and processes different types of personal data depending on your relationship with us. This may include:
Identification and contact details: name, postal address, billing address, contact address, date of birth, and other information required to verify your identity.
Contact details: email address and correspondence details, including information you provide in written communications with us.
Account and contract information: customer account numbers, contract start and end dates, unit numbers, access permissions, payment history, and records of services you have purchased or enquired about.
Payment information: limited payment details necessary to process transactions, such as partial card information or details required for bank transfers. Full card details are handled only by approved payment processors and are not stored by Storage Northolt.
Security and access information: CCTV footage from our premises, records of entry and exit, access code usage, and incident logs to help maintain site security.
Communication records: records of calls, queries, complaints and feedback, and notes from conversations relating to your use of our services.
Website and technical information: data such as IP address, device identifiers and basic analytics information where you visit our website, to help us understand usage and improve our services. Any such data is processed in accordance with applicable cookie and privacy requirements.
How We Collect Your Data
We collect personal data directly from you when you:
Make an enquiry in person, over the phone or via our website.
Enter into a storage or related services contract with us.
Make a payment or update your payment details.
Visit our premises, including areas monitored by CCTV.
Communicate with us, provide feedback, or respond to surveys.
We may also receive personal data from third parties where necessary, such as payment processors, identification verification providers or law enforcement agencies where legally permitted.
Lawful Bases for Processing
Storage Northolt processes your personal data only where a lawful basis applies under the UK GDPR. The main lawful bases we rely on are:
Contract: To take steps at your request before entering into a contract, and to perform our contract with you, for example to set up your account, manage your storage unit, process payments, and provide customer support.
Legal obligation: To comply with legal and regulatory requirements, including tax, accounting, fraud prevention, crime prevention, and health and safety obligations.
Legitimate interests: To pursue our legitimate business interests, provided your interests and fundamental rights do not override these. This includes securing our premises, managing our business operations, responding to enquiries, improving our services, and maintaining accurate records.
Consent: Where required, we may rely on your explicit consent, for example for certain forms of direct marketing or optional analytics. You may withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
How We Use Your Personal Data
Storage Northolt uses your personal data for the following purposes:
To manage customer enquiries and provide information about our services.
To set up, administer and manage customer accounts and storage contracts.
To process payments, handle billing, and manage fees, refunds and arrears.
To communicate with you about your account, including essential updates and notices.
To ensure the security and safety of our premises through access control and CCTV monitoring.
To manage and improve our services, premises and customer experience.
To comply with legal, regulatory and law enforcement requests where we are required to do so.
To handle complaints, disputes and the enforcement of contractual terms.
Data Sharing and Processors
We may share your personal data with carefully selected third parties where necessary for the purposes set out in this Privacy Policy and in accordance with data protection law. These third parties act as processors or, in some cases, as separate controllers.
Examples of processors we may use include:
Payment processing providers who handle card and electronic payments securely.
IT and cloud service providers who host and support our systems, databases, and communication tools.
Security and CCTV system providers who maintain and service our security infrastructure.
Professional advisers, such as accountants or legal advisers, where necessary to protect our legal and business interests.
We require all processors to provide appropriate safeguards for your personal data, to process it only in accordance with our instructions, and to maintain confidentiality and security.
We may also share your personal data with law enforcement agencies, regulatory authorities, courts or other third parties where required by law or where necessary to protect our rights, property or the safety of individuals.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area by our processors, we ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses or equivalent measures, as required by applicable data protection laws.
Data Retention
Storage Northolt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting or reporting requirements.
In general:
Customer account and contract records are kept for the duration of your relationship with us and for a reasonable period afterwards to handle queries, disputes and legal obligations.
Financial and transaction records are typically retained for the periods required by tax and accounting laws.
CCTV footage is retained for a limited period necessary for security, investigation and incident resolution purposes, unless longer retention is required in connection with a specific incident or legal claim.
After the relevant retention period has expired, personal data is securely deleted, anonymised or archived in a way that means it can no longer be associated with an identifiable individual.
Your Data Protection Rights
Under the UK GDPR, individuals whose personal data is processed by Storage Northolt have a number of rights, subject to certain conditions and exemptions:
Right of access: You can request confirmation that we process your personal data and obtain a copy of that data, together with certain information about how it is processed.
Right to rectification: You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: You can request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis applies.
Right to restriction: You can ask us to restrict the processing of your personal data in certain situations, such as where you contest its accuracy or object to its processing.
Right to data portability: In specific circumstances, you can request that we provide your personal data to you or transmit it to another controller in a structured, commonly used and machine-readable format.
Right to object: You can object to processing based on our legitimate interests, including profiling, and we will stop processing your data unless we demonstrate compelling legitimate grounds or the processing is for legal claims.
Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time.
Security of Your Data
Storage Northolt takes appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction or damage. These measures include secure systems, restricted access, staff training and regular review of our security practices.
Applicability of This Policy
This Privacy Policy applies to all Storage Northolt customers and prospective customers in the area who interact with our services, premises or staff. By using our services, contacting us or visiting our site, you acknowledge that you have read and understood this Privacy Policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal data.
