Privacy Policy - Camdentown Storage

This Privacy Policy explains how Camdentown Storage collects, uses, shares, stores, and protects personal data. It applies to all Camdentown Storage customers in area, including prospective customers, current customers, and former customers who use our storage, rental, delivery, administration, or related services.

1. Our commitment to privacy

Camdentown Storage is committed to handling personal data in a lawful, fair, and transparent manner. We respect the privacy rights of our customers and other individuals whose data we process. This policy is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, together with any other applicable privacy laws.

Personal data means any information that identifies, relates to, or could reasonably be linked to an individual. This may include names, addresses, identification details, payment records, security records, communication records, and service usage information.

2. Data we collect

We only collect personal data that is relevant and necessary for operating our storage services, managing customer accounts, maintaining security, and meeting legal obligations. The types of data we may collect include:

Identity data such as your name, date of birth, and identification details used to confirm who you are.
Contact data such as your address, email address, and telephone number.
Account and contract data such as booking details, rental terms, account references, invoices, and service history.
Payment data such as billing information, payment status, and transaction records. We do not keep more payment data than is necessary for administration and compliance.
Security data such as access logs, key or code usage, CCTV images where used, incident reports, and records relating to building safety and loss prevention.
Communication data such as emails, messages, call notes, complaints, and other correspondence.
Technical data such as device, browser, or system data where this is collected through online systems used to manage services.

We may also collect data from third parties where necessary, such as payment providers, credit reference sources, insurers, contractors, or public bodies. We do not intentionally collect special category data unless it is required for a specific lawful purpose, for example if it is provided in the context of a legal claim or to support accessibility needs.

3. How we use personal data

Camdentown Storage uses personal data for the following purposes:

to set up and manage storage agreements;
to verify identity and prevent fraud;
to process payments, refunds, and account administration;
to provide access to storage facilities and maintain site security;
to communicate about bookings, services, changes, and service issues;
to handle complaints, disputes, insurance matters, and legal claims;
to comply with health, safety, tax, accounting, and other legal obligations;
to improve our services, systems, and customer experience;
to protect the rights, property, and safety of Camdentown Storage, customers, staff, and visitors.

We only use personal data in ways that are compatible with the reasons it was collected, unless we have a lawful basis to do otherwise.

4. Lawful basis for processing

Under data protection law, Camdentown Storage must have a lawful basis for each use of personal data. Depending on the situation, we may rely on one or more of the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes creating accounts, providing storage space, administering payments, and delivering contracted services.

Legal obligation

We process personal data where necessary to comply with legal requirements, such as tax rules, accounting obligations, safety obligations, and lawful requests from authorities.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights do not override those interests. This may include maintaining security, preventing fraud, managing operations, protecting property, and improving services. Where we rely on legitimate interests, we consider the potential impact on you and apply safeguards where appropriate.

Consent

In limited cases, we may rely on your consent, for example for certain optional communications or uses not covered by another lawful basis. Where consent is used, you may withdraw it at any time.

Vital interests

In rare circumstances, we may process personal data where it is necessary to protect someone’s vital interests, such as in an emergency affecting health or safety.

5. Sharing personal data and processors

We may share personal data with trusted third parties where necessary and lawful. These third parties act either as independent controllers or as processors acting on our instructions.

Processors we may use include:

IT and cloud service providers that host or support our systems;
payment processors that handle card or electronic payments;
accounting and invoicing service providers;
security service providers, including alarm, access control, or CCTV support;
contractors and maintenance providers working on our premises;
customer communication and document management providers;
professional advisers such as auditors, insurers, legal advisers, or consultants.

When we use a processor, we ensure that appropriate data processing terms are in place. These terms require the processor to keep personal data secure, use it only for our instructions, and assist us in protecting your rights.

We may also disclose personal data if required by law, by a court order, or where necessary to defend our legal rights, investigate wrongdoing, or protect the safety and security of people and property.

6. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, and for any longer period required by law or for legitimate business reasons such as record-keeping, dispute resolution, or legal defence.

Retention periods may vary depending on the type of data and the purpose of processing. In general:

customer account and contract records are retained for the life of the relationship and for a reasonable period afterwards;
financial and tax records are retained for the period required by accounting and tax law;
security records, including access and incident logs, are kept only as long as needed for security management and investigation;
correspondence and complaints are retained for as long as needed to resolve matters and maintain records;
where data is no longer required, it is securely deleted, anonymised, or archived in line with our retention practices.

We regularly review retained data to ensure it is not kept longer than necessary.

7. Data security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, staff training, secure storage, encryption where suitable, system monitoring, and restricted use of data on a need-to-know basis.

Although we work to protect personal data, no system can be guaranteed completely secure. If a personal data breach occurs, we will assess the situation and, where required by law, notify the relevant authority and affected individuals.

8. International transfers

Where a processor or service provider stores or accesses personal data outside the UK, we ensure that suitable safeguards are in place. This may include approved contractual protections and additional security measures, so personal data remains protected to a standard required by law.

9. Your rights

Under data protection law, you have a number of rights in relation to your personal data. These rights are subject to legal conditions and exceptions, but we will respond to requests in accordance with the law.

Right of access - you may request a copy of the personal data we hold about you.
Right to rectification - you may ask us to correct inaccurate or incomplete data.
Right to erasure - you may ask us to delete data in certain circumstances.
Right to restrict processing - you may ask us to limit how we use your data in certain situations.
Right to object - you may object to processing based on legitimate interests or direct marketing.
Right to data portability - you may request certain data in a reusable format where the law allows it.
Right to withdraw consent - where we rely on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We may also retain information where necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

10. Children’s data

Camdentown Storage services are not intended for children as primary users. We do not knowingly collect personal data from children except where it is necessary in connection with a lawful service arrangement, safety matter, or legal obligation.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review the policy periodically.

12. Summary of our approach

Camdentown Storage processes personal data carefully, lawfully, and only for clear business and legal purposes. We collect only the information needed to provide and secure our services, we apply suitable safeguards when using processors, and we retain data only as long as necessary. Customers in area can exercise their rights under data protection law and expect their personal data to be treated with respect and diligence.