Storage Holland Park Privacy Policy
This Privacy Policy explains how Storage Holland Park collects, uses, stores, and protects personal data relating to customers and prospective customers using our storage services in the Holland Park area. It also sets out your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Holland Park customers in our service area, including individuals and business clients.
Who We Are And Scope Of This Policy
Storage Holland Park is a storage service provider offering units and related services to customers in the Holland Park area. We act as the data controller for the personal data we collect and process about you for the purposes described in this Privacy Policy. This policy applies whenever you interact with us in connection with our storage services, including when you contact us, request a quote, enter into a storage agreement, access our facilities, or use any related services.
Types Of Personal Data We Collect
We may collect and process the following categories of personal data about you, depending on how you use our services:
Identification and contact details, such as your name, postal address, billing address, and any other information needed to identify or communicate with you.
Account and contract details, such as storage unit number, contract dates, agreed services, pricing, payment status, correspondence relating to your account, and records of any changes to your agreement.
Payment and billing details, such as payment method, billing history, invoices, and records of payments made. We do not retain full payment card details where payments are processed by a secure payment provider.
Verification data, such as copies or details of identity documents or proof of address where required to comply with legal obligations, fraud prevention, or security measures.
Facility access and security data, such as access logs, entry and exit timestamps, and where applicable, security camera footage covering entrances, common areas and access points.
Communication data, such as enquiries, complaints, feedback, and any other communication you send to us by post or other channels.
Marketing preferences, such as whether you have agreed to receive marketing communications from us and your communication channel preferences.
How And Why We Use Your Personal Data
We process your personal data only when we have a lawful basis under data protection law. The ways we use your data and their legal bases include:
To provide storage services and manage your contract. We use your data to set up and administer your account, allocate and manage storage units, process payments, manage access, and handle service-related communications. The lawful basis is performance of a contract or steps taken at your request prior to entering into a contract.
To communicate with you about your account. We send service messages, reminders, notices of changes to terms or pricing, and important information about your storage unit or facility access. The lawful basis is performance of a contract and our legitimate interests in providing an effective service.
To comply with legal and regulatory obligations. We may process and retain certain data to meet tax, accounting, security, and other statutory requirements, to respond to legitimate requests from law enforcement, or to comply with court orders. The lawful basis is compliance with a legal obligation.
To ensure security and prevent misuse. We may use access data, identity checks, and security systems to protect our premises, staff, customers, and stored goods, prevent fraud and criminal activity, and enforce our terms. The lawful basis is our legitimate interests in maintaining security and preventing unlawful activity.
To manage business operations. We may process data for record keeping, internal reporting, service improvement, and planning purposes. The lawful basis is our legitimate interests in operating and improving our business.
To send marketing communications. With your consent, we may send you information about our services, offers, or updates that we believe may be of interest to you. You can withdraw your consent at any time. Where permitted, we may also rely on our legitimate interests to send limited service-related information that may be considered marketing.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting or reporting requirements. The retention periods may vary depending on the type of data and our obligations, but in general:
Customer account and contract data is typically retained for a period after your contract ends, to handle any queries, disputes, or legal claims, and to comply with tax and accounting rules.
Payment and billing records are kept for the period required by relevant financial and tax laws.
Security and access records, including access logs and any relevant security footage, are kept only for a limited period, unless required for the investigation of an incident, suspected fraud, or legal claim.
Marketing preference data is retained for as long as we continue to send you marketing communications and for a short period afterward to ensure your preferences are respected.
When data is no longer required, we will either securely delete it, anonymise it, or, where appropriate, archive it in a secure form with restricted access.
Data Processors And Third Parties
We may share personal data with carefully selected third parties who act as our data processors, meaning they process data on our behalf and only in accordance with our instructions. These processors may include:
Payment service providers who process card or electronic payments on our behalf.
IT and cloud service providers who host our systems, store data, or provide software tools we use to manage our services.
Security and access control providers who support the operation of access systems or security infrastructure.
Professional advisers such as accountants or legal advisers who require access to certain data in the course of providing their services to us.
All processors are bound by contractual obligations to keep your data confidential and secure and to use it only for the agreed purposes. We may also share data with third parties where required by law, in connection with legal proceedings, or where necessary to protect our rights, property, or the safety of our customers and staff.
International Data Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place before personal data is transferred. These safeguards may include the use of standard contractual clauses or other mechanisms approved by data protection authorities to ensure that your data remains protected.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, these include:
The right of access. You can request a copy of the personal data we hold about you and information about how we process it.
The right to rectification. You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
The right to erasure. In certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or you withdraw consent and there is no other legal basis for processing.
The right to restrict processing. You can ask us to restrict the use of your data in certain situations, such as while we are reviewing the accuracy of data or our grounds for processing.
The right to data portability. In certain cases, you can request that we provide your personal data in a structured, commonly used format so that you can reuse it or transmit it to another controller.
The right to object. You can object to the processing of your data where we rely on legitimate interests, including for direct marketing. We will stop processing unless we have compelling legitimate grounds to continue or the processing is needed for legal claims.
The right to withdraw consent. Where we process your data based on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
How To Exercise Your Rights
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the usual customer contact methods set out in your agreement or on our customer communications. When you make a request, we may need to verify your identity before responding. We aim to respond to all valid requests within the timeframes required by law.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal requirements. Any changes will take effect when the updated policy is made available to customers. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
