Storage The Hyde Privacy Policy
This Privacy Policy explains how Storage The Hyde collects, uses, stores and protects personal data relating to customers in our service area. It also describes the lawful bases we rely on under the General Data Protection Regulation and related data protection laws, how long we keep your information, which third parties process data on our behalf, and the rights you have in relation to your personal data.
This Privacy Policy applies to all Storage The Hyde customers in our area, including individuals, sole traders and representatives of corporate clients who use or enquire about our storage or related services.
Who this policy applies to
This policy applies to you if you are a current or former customer of Storage The Hyde, an individual making an enquiry about our services, a guarantor or emergency contact given in connection with a storage agreement, a person authorised to access a storage unit, or a representative or contact person for a business customer.
Personal data we collect
Storage The Hyde may collect and process the following categories of personal data, depending on your relationship with us and the services you use:
Identification and contact details, such as full name, postal address, billing address, proof of address details, date of birth, government identification details where required for verification, and contact details including your preferred communication methods.
Account and contract information, such as customer reference numbers, storage unit numbers, contract start and end dates, information about the services you have purchased, payment status, deposit information, and records of communications regarding your account.
Payment and billing information, such as payment method details associated with your account, invoices, payment history, and information needed to prevent or detect fraud or misuse of accounts. We do not store full card details when processed by payment service providers.
Communication and enquiry data, including records of enquiries, complaints, feedback, call notes, and correspondence by post or electronic means.
Security and access data, such as access control information to enter the facility or specific units, logs of entry times where relevant to safety and security, and any incident reports. Where security cameras are in operation, we may process images of individuals on site for security and safety purposes, subject to applicable law.
Technical data, when you use our online services, such as information about your device, browser type, and basic usage data that helps us manage the website and improve user experience. We do not seek to identify individual users from this information except where required for security or legal reasons.
How we collect personal data
We collect personal data directly from you when you request a quote, enter into a storage agreement, contact us with a question, make a payment, visit our facility, or update your account details. We may also receive information from third parties such as payment service providers, credit reference agencies where permitted, or business partners who introduce you to our services.
Purposes and lawful bases for processing
Storage The Hyde processes personal data only where we have a lawful basis under applicable data protection laws. The main purposes and lawful bases are:
To provide and manage storage services. We use your identification, contact, account, and payment information to set up your account, administer your contract, allocate units, process payments, manage access, and provide customer support. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.
To communicate with you. We use your contact details and communication data to respond to enquiries, send important information about your contract, notify you of changes to our terms, and manage operational messages. The lawful basis is performance of a contract, legitimate interests in running our business, and compliance with legal obligations.
To manage security and safety. We process access logs and security camera footage where used, to protect customers, staff, property and facilities, and to assist in the prevention and detection of crime. The lawful basis is our legitimate interests in ensuring the security of our premises and complying with legal and insurance requirements.
To handle payments, billing and debt recovery. We process payment information, invoices and related records to take and receive payments, manage billing queries, and pursue unpaid amounts where necessary. The lawful basis is performance of a contract and our legitimate interests in managing our finances and preventing fraud.
To comply with legal and regulatory obligations. We may use and share your personal data where required by law, such as for tax, accounting, law enforcement requests, or other regulatory requirements. The lawful basis is compliance with a legal obligation.
To improve our services and manage business operations. We may use aggregated and anonymised data to monitor demand, improve customer experience, and plan capacity. Where personal data is used for these purposes, the lawful basis is our legitimate interests in operating and developing the business. We will assess these interests against your rights and expectations.
Where we rely on consent, for example for certain types of optional marketing communications, we will ask for your clear consent in advance and you may withdraw it at any time.
Data sharing and processors
Storage The Hyde may share personal data with carefully selected third parties who act as data processors on our behalf. These third parties are only permitted to process your data in accordance with our instructions and for the purposes described in this policy. We require all such processors to implement appropriate security measures and to comply with applicable data protection laws.
Typical categories of processors include payment service providers who process payments and manage card transactions, information technology and system support providers, providers of customer relationship or booking systems, professional advisers such as accountants or legal advisers where needed for business operations, and security service providers involved in monitoring or maintaining access control and surveillance systems.
We may also share your personal data with third parties who act as independent controllers in certain situations, for example law enforcement agencies, courts, regulatory bodies where disclosure is required by law or is necessary to protect our rights, or insurers and claims handlers if there is an incident at our facility.
Where personal data is transferred outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection laws, such as relying on adequacy decisions or standard contractual clauses where required.
Data retention
Storage The Hyde keeps personal data only for as long as necessary for the purposes for which it was collected and to meet legal, accounting, or reporting requirements. We consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, and the purposes for which we process it.
In general, we retain customer account and contract information for a period after your contract has ended, in order to respond to queries, resolve disputes, demonstrate compliance with our contractual obligations, and meet tax and financial reporting obligations. Security camera footage and access logs, where used, are typically retained for shorter periods unless needed for an investigation or legal proceedings.
When personal data is no longer required for these purposes, we will either securely delete it or irreversibly anonymise it so that it is no longer associated with an identifiable individual.
Your data protection rights
Under data protection law, individuals have a number of rights in relation to their personal data. These rights apply in many situations, although there are some exceptions and limitations. Subject to those, you may have the following rights:
The right of access. You can request confirmation that we process your personal data and obtain a copy of the personal data we hold about you, together with certain information about how and why we use it.
The right to rectification. You can request that we correct personal data that is inaccurate or complete personal data that is incomplete. We encourage you to keep your contact details and account information up to date.
The right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, where you withdraw consent and there is no other lawful basis, or where you object to processing and there are no overriding legitimate grounds.
The right to restrict processing. You can ask us to restrict the use of your personal data in certain situations, such as while we are considering a request for rectification or an objection to processing.
The right to object. You may object to processing that is based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims. You have an absolute right to object to direct marketing at any time.
The right to data portability. Where processing is based on consent or on a contract and carried out by automated means, you may request that we provide your personal data in a commonly used, machine readable format or transmit it to another controller, where technically feasible.
Where we rely on consent as our lawful basis, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with a supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns.
Changes to this Privacy Policy
Storage The Hyde may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. When we make material changes, we will take appropriate steps to bring the updated policy to your attention. The most current version will apply to our use of your personal data.
