Storage Hatton Privacy Policy
This Privacy Policy explains how Storage Hatton collects, uses, stores and protects personal data relating to its customers and prospective customers in our local service area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Hatton customers and individuals who enquire about or use our storage services within our operating area.
Who We Are and Scope of This Policy
Storage Hatton is a provider of self-storage and related services. In relation to the personal data described in this Privacy Policy, Storage Hatton is the data controller. This means we decide how and why your personal data is processed. This Privacy Policy applies to all personal data we collect about customers, former customers, individuals who make enquiries, visitors to our premises and users of our services in our service area.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. This may include:
Identification and contact details, such as name, postal address, billing address, contact address, and identifiers relating to your identity for verification purposes.
Account and contract information, such as customer reference numbers, contract dates, unit numbers, access permissions, billing history, payment status and communications relating to your account.
Payment and transaction data, such as payment method, payment records, invoices, refunds and information required for accounting and tax purposes. Card or bank details are processed securely by our chosen payment processors and not stored by us in full where this is not necessary.
Communications data, such as enquiries, complaints, feedback, correspondence by post or electronic means, and records of telephone or in-person interactions relevant to your contract or our services.
Security and access data, such as access logs to our premises or storage units, vehicle details used for access control where applicable, CCTV footage in and around our facilities, and incident records relating to safety and security.
Marketing preferences, such as whether you wish to receive service updates, offers or news from us, and your communication channel preferences.
Technical and usage information, where applicable, such as basic information about how you use our online services, including pages visited, date and time of access, and general device information processed through standard website or system logs.
How We Collect Your Data
We may collect personal data directly from you when you make an enquiry, enter into a storage agreement, visit our facilities, communicate with us, or complete forms. We may also receive data from third parties such as payment processors, identity verification providers, or other service partners where necessary to fulfil your contract or protect our legitimate interests. In some cases, data is collected automatically via our building access systems, CCTV, or website usage logs.
Lawful Basis for Processing
We only process your personal data where we have a lawful basis under data protection law. Depending on the context, we rely on one or more of the following lawful bases:
Contract. We process personal data where it is necessary to enter into, perform or manage a contract with you, such as setting up and managing your storage unit, taking payment, providing customer service, or handling contract changes and termination.
Legal obligation. We process personal data to comply with legal and regulatory requirements, such as tax, accounting, record-keeping, law enforcement requests, or health and safety regulations.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests, and where your interests and fundamental rights do not override those interests. This includes ensuring site security and safety, preventing and detecting fraud or misuse, managing operational efficiency, and improving our services.
Consent. Where required by law, we rely on your consent, for example for certain marketing communications or optional cookies. You can withdraw your consent at any time, although this will not affect processing carried out before consent was withdrawn.
How We Use Your Personal Data
We use personal data for the following main purposes:
To provide, administer and manage storage services and related products you request, including setting up your contract, managing access, and handling payments.
To communicate with you about your account, including sending service messages, notices, renewal reminders, and information relating to your contract or any changes to our terms and policies.
To maintain the safety and security of our premises, customers and staff, including through access control systems, CCTV monitoring, incident management, and enforcement of site rules.
To manage our business operations, including accounting, auditing, reporting, service planning, and internal administration.
To comply with legal obligations and respond to valid requests from regulators, law enforcement and authorised public authorities.
To send you information about services that may be relevant to you, where this is permitted by law and in line with your communication preferences.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting any legal, accounting, or reporting requirements. In general, we apply the following principles:
Customer account and contract data is kept for the duration of your contract and for a reasonable period afterwards, to manage queries, disputes, and our legal obligations.
Financial and transaction records are retained for the period required by tax and accounting laws.
CCTV footage and access logs are retained for a limited period based on security and operational needs, unless a longer retention period is required in connection with an incident, investigation, or legal claim.
Marketing preference data is stored for as long as you remain subscribed or until you withdraw your consent or object to such processing.
When personal data is no longer needed, we will either securely delete it or irreversibly anonymise it so that it can no longer be associated with you.
Data Processors and Sharing
We may share personal data with trusted third-party processors who provide services on our behalf. These may include:
Payment service providers who process payments and manage refunds.
IT and system support providers who maintain our operating systems, storage management tools, and security infrastructure.
Security service providers who assist with CCTV systems, access control or alarm monitoring.
Professional advisers such as accountants or legal advisers, where necessary for compliance or to protect our legal rights.
Where we use data processors, they are only permitted to process your personal data under our instructions, must keep it secure, and are not allowed to use it for their own purposes. We may also share data with public authorities, regulators or law enforcement when required by law or where necessary to protect our rights, customers, staff or the public.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area by our processors or service providers, we ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms recognised by data protection law, to ensure your data is protected to a similar standard.
How We Protect Your Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include physical security at our premises, access controls, secure systems, staff training, and contractual obligations with our suppliers. While we work to protect your data, no system can be completely secure and we cannot guarantee absolute security, but we regularly review and improve our safeguards.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
The right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, along with certain information about how we use it.
The right to rectification. You can ask us to correct inaccurate or incomplete personal data we hold about you.
The right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
The right to restriction of processing. You can ask us to limit the use of your personal data in specific situations, such as while we are assessing a request for rectification or objection.
The right to data portability. In certain circumstances, you can request that we provide you with personal data you have given us in a structured, commonly used and machine-readable format, and where technically feasible, transmit it to another controller.
The right to object. You can object to our processing of your personal data based on legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds. You also have the right to object at any time to the processing of your personal data for direct marketing.
The right to withdraw consent. Where we rely on consent as the lawful basis, you can withdraw that consent at any time. This will not affect previous processing carried out before withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed.
Children
Our services are not intended for children, and we do not knowingly collect personal data relating to individuals under the age required to enter into a storage contract in our jurisdiction. If we become aware that we have collected such data without appropriate consent or authority, we will take steps to delete it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data protection practices. When we make significant changes, we will take reasonable steps to inform you, for example through our website or by other appropriate means. The version published on our website or made available at our premises will always set out the current policy that applies to all Storage Hatton customers in our service area.
