Storage Northumberland Heath Privacy Policy
This Privacy Policy explains how Storage Northumberland Heath collects, uses, stores, and protects personal data relating to customers in the Northumberland Heath area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all customers, prospective customers, and any individual whose personal data is processed in connection with storage services in the Northumberland Heath area.
Who this Privacy Policy applies to
This Privacy Policy applies to all Storage Northumberland Heath customers, including individuals and business customers, whose storage units or services are located in the Northumberland Heath area. It also applies to individuals who make enquiries or visit our premises, such as guarantors, emergency contacts, authorised unit users, visitors, and any person captured on our CCTV systems.
Personal data we collect
Storage Northumberland Heath collects and processes different types of personal data depending on the services used and the nature of the relationship with us. The categories of personal data we may collect include:
Identification and contact details, such as full name, postal address, billing address, date of birth, and identity documentation details where required for security or verification purposes.
Contact information, such as email address and other communication details you choose to provide, so that we can manage your booking, send invoices, provide service updates, and respond to enquiries.
Contract and account details, such as unit numbers, rental start and end dates, payment history, service usage, and records of correspondence with us.
Payment and billing information, such as limited payment card or bank details processed securely by our payment service providers, along with records of invoices, receipts, and credits.
Security and access data, such as access logs, gate or door entry records, and CCTV footage in and around our premises where installed for safety and security purposes.
Technical and usage information, where relevant, such as basic device and connection information and records of your interactions with our website or online booking tools.
Any other information you choose to provide to us in the course of an enquiry, complaint, or other communication.
How we collect personal data
We collect personal data directly from you when you request a quote, make a booking, sign a storage agreement, contact us by any communication channel, or visit our premises. We may also receive data about you from third parties where this is necessary to provide our services, verify identity, or comply with legal requirements. These third parties may include payment providers, credit reference agencies, or law enforcement bodies where lawfully permitted.
Lawful bases for processing your data
Storage Northumberland Heath processes personal data only where a lawful basis under the UK GDPR applies. Depending on the context, we may rely on the following lawful bases:
Contract: We process personal data where it is necessary to enter into, administer, or perform a contract for storage services, including processing bookings, taking payments, managing your account, and communicating with you about your contract.
Legal obligation: We process personal data where necessary to meet legal and regulatory duties, such as complying with tax, accounting, anti-fraud, and law enforcement obligations, and maintaining appropriate business records.
Legitimate interests: We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This includes securing our premises, preventing crime and fraud, managing customer relationships, improving our services, handling complaints, and ensuring the safe operation of our business.
Consent: In limited situations, we may rely on your consent, for example for certain types of marketing where this is required by law. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
How we use your personal data
We use the personal data we collect for the following purposes:
To provide, manage, and administer storage services, including quoting, booking, account management, and payment processing.
To verify identity and eligibility for services where necessary for security or contractual reasons.
To maintain safety and security at our premises, including through access controls, visitor records, and CCTV where used.
To communicate with you about your contract, unit access, billing, service updates, changes to terms, and customer support.
To manage our business operations, including accounting, auditing, incident reporting, risk management, and service improvement.
To handle enquiries, requests, feedback, and complaints.
To comply with legal obligations and to respond to legitimate requests from public authorities, regulators, or law enforcement where we are legally required or permitted to do so.
Data retention and storage
Storage Northumberland Heath keeps personal data only for as long as necessary for the purposes for which it was collected, or as required by law. The specific retention period will depend on the type of data and our legal, accounting, and operational requirements.
Typically, we will retain core customer account and contract records for a number of years after the end of your relationship with us, to meet legal and tax obligations and to handle any potential disputes. CCTV footage and access records will normally be retained for a shorter period, unless a longer retention is required in connection with an incident, investigation, or legal claim.
When personal data is no longer needed, it will be securely deleted, anonymised, or otherwise disposed of in a manner that ensures appropriate protection and confidentiality.
Data processors and third parties
We may use carefully selected third party service providers to process personal data on our behalf. These data processors help us with essential business functions such as payment processing, accounting support, IT and hosting services, customer management tools, and security systems including CCTV infrastructure where installed.
Where we engage a data processor, we ensure that a written data processing agreement is in place which requires the processor to handle personal data securely and only in accordance with our written instructions and applicable data protection law. Processors are not permitted to use your personal data for their own purposes.
In some situations, we may also share data with other third parties as independent controllers, for example with professional advisers such as accountants or legal advisers, with insurers, or with public authorities and law enforcement agencies where we are legally required or permitted to do so.
We do not sell your personal data to third parties.
International transfers
Where we or our service providers transfer personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect that data in line with data protection law. This may include using adequacy regulations, standard contractual clauses, or other legally recognised mechanisms. Further information on such safeguards can be made available on request, where applicable.
Your data protection rights
Individuals whose personal data we process in connection with Storage Northumberland Heath have a number of rights under data protection law. Subject to certain conditions and exemptions, you may have the right to:
Access: Request confirmation as to whether we process your personal data and obtain a copy of that data.
Rectification: Ask us to correct or complete inaccurate or incomplete personal data.
Erasure: Request that we delete your personal data where there is no longer a lawful basis for us to keep it.
Restriction: Ask us to restrict the processing of your personal data in certain circumstances, for example while we are considering a request for rectification.
Objection: Object to processing based on our legitimate interests, including certain types of profiling, on grounds relating to your particular situation.
Data portability: Receive certain personal data in a structured, commonly used, and machine readable format and have it transmitted to another controller where technically feasible.
Withdraw consent: Where processing is based on consent, withdraw that consent at any time.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can address any concerns directly.
Security of your personal data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include controls over access to premises and systems, secure handling of payment information by trusted providers, staff awareness of data protection responsibilities, and regular review of our security arrangements.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, operational needs, or legal requirements. Any updated version will apply from the date it is published and will supersede previous versions. You are encouraged to review this policy periodically to stay informed about how we process personal data relating to Storage Northumberland Heath customers.
