Privacy Policy - Harringay Storage

Harringay Storage is committed to protecting the privacy and personal data of all customers in the area. This Privacy Policy explains how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Harringay Storage customers in area, including individuals, households, and business users who use our storage services, make enquiries, or otherwise interact with us.

1. Who this policy applies to

This policy applies to all Harringay Storage customers in area, whether you are:

a current customer using a storage unit or related service;
a prospective customer making an enquiry or requesting a quote;
a former customer whose records we retain for legal or operational reasons;
an authorised contact, visitor, or representative connected to a storage account.

By using our services, you acknowledge that we may process personal data in the ways described below.

2. Data we collect

We collect only the personal data that is necessary for providing our services, managing our relationship with you, maintaining security, and meeting legal obligations. The types of information we may collect include:

Identity information such as your name, date of birth, and identification details where required for verification.
Contact information such as postal address, email address, and telephone number.
Account and service information such as your storage unit reference, booking details, access records, payment history, and service preferences.
Financial information such as billing details, payment method information, and transaction records.
Security and access information such as entry logs, CCTV images where applicable, and records of access permissions.
Correspondence such as emails, messages, complaint details, and notes of telephone or in-person interactions.
Technical information if you interact with our digital systems, such as device or usage data needed for security, fraud prevention, or service improvement.

We do not seek to collect unnecessary information. We only process special category data, such as health-related information, where it is clearly required and permitted by law, for example to make reasonable adjustments or respond to specific access needs.

3. How we use your data

We use personal data for the following purposes:

to set up and manage your storage account;
to verify your identity and prevent unauthorised access;
to communicate with you about bookings, payments, access, renewals, and service updates;
to process payments and keep accurate financial records;
to maintain site safety and security, including monitoring access where appropriate;
to handle complaints, disputes, and customer support requests;
to comply with legal and regulatory obligations;
to detect and prevent fraud, misuse, or unlawful activity;
to improve our operations, systems, and customer experience.

We will not use your personal data for purposes that are incompatible with those described in this policy without informing you and, where necessary, obtaining a valid lawful basis.

4. Lawful basis for processing

We only process personal data where we have a lawful basis under the UK GDPR. Depending on the circumstances, our lawful bases include:

Contract – processing is necessary to enter into or perform a contract with you, such as providing storage services, managing payments, and handling account administration.
Legal obligation – processing is necessary to comply with applicable laws, including tax, accounting, security, and record-keeping obligations.
Legitimate interests – processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include security monitoring, fraud prevention, service improvement, and protecting our property and customers.
Consent – where we rely on your consent, such as for certain optional communications or specific processing activities, you may withdraw that consent at any time.

Where we process special category data, we will only do so where an additional lawful condition is met, such as explicit consent or another condition permitted by law.

5. Retention of personal data

We keep personal data only for as long as necessary for the purpose for which it was collected, including to satisfy legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the reason for processing. In general:

customer account and contract records are retained for the duration of the relationship and for a reasonable period afterwards;
payment and invoicing records are retained in line with tax and accounting requirements;
access logs and security records are retained for a limited period unless needed for an investigation or legal claim;
correspondence and complaint records are retained long enough to manage the matter and demonstrate proper handling;
data held for legal claims or regulatory matters may be kept for longer where necessary.

When personal data is no longer required, we will delete it securely, anonymise it, or otherwise ensure that it cannot reasonably be linked to you.

6. Processors and sharing of data

We may share personal data with trusted third-party processors who help us provide our services. These processors act on our instructions and are required to protect your data. Examples may include:

Payment processors who handle card payments and payment verification;
IT and cloud service providers who support data storage, email, and system maintenance;
Security providers who assist with access control, CCTV systems, or monitoring;
Professional advisers such as accountants, legal advisers, or insurers;
Debt recovery or collection services where required for unpaid balances and only in accordance with the law;
Public authorities where disclosure is required by law or necessary to protect our rights, customers, or property.

We require processors to implement appropriate technical and organisational measures to safeguard personal data. We do not sell personal data.

7. Data security

We take the security of personal data seriously and use reasonable measures to protect it from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include restricted access controls, secure storage, staff training, encryption where appropriate, and regular review of our security practices.

However, no system is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will act in line with applicable legal requirements.

8. Your rights

Under data protection law, you have several rights in relation to your personal data. Subject to legal conditions and exemptions, these rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request limited use of your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where technically feasible.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

You may also have the right to challenge decisions made solely by automated means, although we do not intend to make such decisions without appropriate human oversight.

To exercise your rights, you may make a request using the contact details provided through our normal customer service channels. We may need to verify your identity before responding.

9. Complaints and supervisory authority

If you have concerns about how we handle your personal data, we encourage you to raise the issue with us first so we can investigate and respond. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or another relevant supervisory authority if you believe your data protection rights have been infringed.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services, or our processing practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically.

Summary of our approach

At Harringay Storage, we aim to process personal data fairly, lawfully, and transparently. We collect only what we need, use it for clearly defined purposes, retain it only as long as necessary, and share it only with carefully selected processors or where required by law. This policy applies to all Harringay Storage customers in area and is designed to support your rights and protect your privacy.

By using our services, you acknowledge this Privacy Policy and the way we handle personal data in line with applicable law.