Privacy Policy - Hampton Storage

This Privacy Policy explains how Hampton Storage collects, uses, stores, shares, and protects personal data. It applies to all Hampton Storage customers in the area, including prospective customers, current customers, former customers, and anyone who interacts with our services in connection with storage rentals, account management, billing, access control, or support. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018 where relevant.

By using Hampton Storage services, you acknowledge that we may process your personal data as described in this policy. We encourage you to read it carefully so you understand what information we collect, why we collect it, how long we keep it, and what rights you have.

1. Personal Data We Collect

Hampton Storage may collect personal data directly from you, automatically through your interactions with our services, and from third parties where permitted by law. The types of data we collect depend on your relationship with us and the services you use.

Information you provide directly

Identity and contact details, such as your name, address, telephone number, and email address.
Account and booking details, including storage unit information, rental dates, payment preferences, and communications relating to your account.
Payment information, such as billing addresses, partial payment card details, or transaction references used to manage payments and invoices.
Identification information where necessary for verification, fraud prevention, or compliance with legal obligations.
Customer communications, including enquiries, complaints, feedback, and service requests.

Information collected automatically

Usage data relating to how you interact with our systems, portals, or digital communications.
Access records where entry systems are used to manage site security and access control.
Technical data such as device type, browser information, IP address, and log information.
Security-related information, including CCTV footage or access logs where used for safety, security, and incident investigation.

Information from third parties

Service providers assisting with payment processing, identity verification, or IT support.
Publicly available sources where needed to verify identity, prevent fraud, or maintain accurate records.
Legal or regulatory bodies where disclosure is necessary or required by law.

We only collect personal data that is relevant and limited to what is necessary for the purposes described in this policy. We do not seek to collect unnecessary information.

2. How We Use Personal Data

Hampton Storage uses personal data for the following purposes:

To register and manage your storage agreement.
To process payments, deposits, refunds, and invoices.
To provide customer service, respond to enquiries, and resolve disputes.
To maintain site safety, protect our premises, and manage access.
To meet legal, tax, accounting, and regulatory requirements.
To detect and prevent fraud, misuse, or unlawful activity.
To maintain internal records and improve our services.

Where permitted, we may also use limited data for service administration, operational analysis, and security monitoring. We will not use personal data in ways that are incompatible with the purposes for which it was collected.

3. Lawful Basis for Processing

Under data protection law, Hampton Storage must have a lawful basis for each processing activity. Depending on the context, we rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes setting up your storage account, managing access, processing payments, and providing customer support connected to the agreement.

Legal obligation

We may process data to comply with legal and regulatory requirements, including accounting, tax, security, and lawful requests from authorities.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include maintaining security, preventing fraud, protecting property, improving operations, and managing customer relationships.

Consent

In limited circumstances, we may rely on your consent, for example where required for certain optional communications or processing activities. Where consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

We will always ensure that the basis used is appropriate to the specific purpose and that processing is proportionate.

4. Data Retention

Hampton Storage retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and the reason for processing.

Active customer records are kept for the duration of the storage relationship and for a reasonable period afterwards to manage queries, disputes, and administrative needs.
Financial records are retained for the period required by law and accounting practice.
Security records, such as access logs or CCTV footage, are retained for a limited period unless needed for investigation, legal proceedings, or insurance matters.
Correspondence and support records are kept as long as necessary to resolve issues and maintain accurate records of service interactions.

When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with our retention practices. We aim to retain data only for the minimum time necessary.

5. Processors and Sharing of Data

Hampton Storage may use third-party processors to help deliver services and operate efficiently. A processor is an organisation that processes personal data on our behalf and under our instructions. We choose processors carefully and require them to protect personal data appropriately.

Types of processors we may use

Payment processors to handle transactions securely.
IT and cloud service providers to store and manage data systems.
Customer support tools to manage communications and service requests.
Security and monitoring providers to support site safety and access control.
Professional advisers, such as legal, accounting, or insurance providers, where needed.

We may also share data with independent third parties where required by law, to protect our rights or property, or in connection with a business transaction such as a restructuring or transfer of assets. In all cases, we only disclose the minimum amount of personal data necessary.

We do not sell personal data. Any sharing is limited to the purposes described in this policy and subject to appropriate contractual and legal safeguards.

6. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, staff training, encryption, secure storage, and monitoring of systems and premises. While no system can be guaranteed completely secure, we work to reduce risks and respond promptly to incidents.

Where a personal data breach is likely to result in a high risk to your rights and freedoms, we will take appropriate action in line with applicable law, which may include notifying affected individuals and relevant authorities where required.

7. Your Rights

Depending on your location and the applicable law, you may have the following rights regarding your personal data:

Right of access to obtain a copy of the personal data we hold about you.
Right to rectification to correct inaccurate or incomplete data.
Right to erasure in certain circumstances, also known as the right to be forgotten.
Right to restrict processing where you contest the accuracy or legality of processing.
Right to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability to receive certain data in a structured, commonly used format, where technically feasible and legally applicable.
Right to withdraw consent at any time where processing is based on consent.

You may also have the right to complain to a data protection authority if you believe your rights have been infringed. We encourage you to raise any concerns directly first so we can address them promptly.

We will not discriminate against you for exercising your rights.

8. Children’s Data

Hampton Storage services are intended for adults and business users. We do not knowingly collect personal data from children unless it is incidentally provided in connection with a customer relationship and there is a lawful basis for processing it. If we become aware that we have collected data inappropriately, we will take steps to delete or protect it as required.

9. International Transfers

If personal data is transferred outside the UK or the European Economic Area, we will ensure that appropriate safeguards are in place to protect the data in accordance with applicable law. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent transfer mechanisms.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process data. The most current version will apply to your use of Hampton Storage services. We encourage you to review this policy periodically to stay informed about our privacy practices.

11. Summary of Our Commitments

We collect only necessary personal data.
We use data lawfully and transparently.
We keep data only as long as needed.
We use trusted processors under contract.
We respect and support your data rights.

This Privacy Policy is designed to give Hampton Storage customers in the area a clear understanding of how their personal data is handled. Our approach is based on accountability, security, and respect for privacy.