Privacy Policy - Ham Storage

This Privacy Policy explains how Ham Storage collects, uses, stores, shares, and protects personal data relating to customers, visitors, and other individuals whose information we handle. It applies to all Ham Storage customers in area. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Who We Are

Ham Storage provides storage-related services to customers in area. In the course of delivering our services, we may process personal data about customers, account holders, authorized users, contractors, and other individuals connected with a booking, account, payment, or service request.

Personal data means any information that identifies or can identify a living individual, either directly or indirectly. This may include names, contact details, service records, billing information, access logs, and other relevant data.

2. Data We Collect

We collect only the information necessary to operate our services, manage customer relationships, comply with legal obligations, and maintain security. Depending on how you interact with us, we may collect the following categories of data:

Identity data: name, username, title, and similar identifiers.
Contact data: address, telephone number, and email address.
Account data: account number, service preferences, communications history, and customer records.
Transaction data: payment records, invoices, service dates, and related billing information.
Technical data: device information, log data, IP address, browser type, and usage information collected through security and system tools.
Security data: access records, incident reports, CCTV or other monitoring data where permitted by law, and fraud-prevention information.
Correspondence data: messages, complaints, service requests, and other communications with us.

We generally do not intentionally collect special category data, such as health data, unless you choose to provide it and we have a lawful basis to process it. If such data is ever required, we will process it only where permitted by law and with appropriate safeguards.

3. How We Use Personal Data

Ham Storage uses personal data for the following purposes:

to provide and manage our services;
to create and maintain customer accounts;
to process bookings, payments, refunds, and billing;
to communicate service updates, notices, and administrative information;
to respond to queries, complaints, and support requests;
to ensure the safety, integrity, and security of our systems and premises;
to detect, prevent, and investigate fraud, misuse, or other unlawful activity;
to comply with legal and regulatory obligations;
to maintain business records and improve our operations;
to defend or establish legal claims where necessary.

We will only process personal data for these purposes or for other compatible purposes permitted by law.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each processing activity. Depending on the context, Ham Storage relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes managing your account, delivering services, taking payment, and providing customer support.

Legal obligation

We process personal data where needed to comply with legal or regulatory requirements, including accounting, tax, consumer protection, and record-keeping obligations.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Examples include service improvement, security monitoring, fraud prevention, internal administration, and business record management.

Consent

Where required by law, we will rely on your consent. If we ask for consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We do not sell personal data. However, we may share personal data with trusted third parties who assist us in operating our business. These parties act as data processors or, in some cases, independent controllers. We ensure that any sharing is limited to what is necessary and subject to appropriate contractual and security safeguards.

Processors may include:

Payment service providers: to process card or electronic payments and related fraud checks.
IT and hosting providers: to store, secure, and maintain systems and data.
Customer support tools: to manage enquiries, requests, and service communications.
Accounting and bookkeeping providers: to support invoicing, reporting, and tax compliance.
Security providers: to support monitoring, incident response, and data protection.
Professional advisers: including legal, audit, and compliance advisers where needed.

We may also disclose personal data where required by law, court order, regulatory authority, or to protect our rights, property, staff, customers, or the public.

6. International Transfers

If personal data is transferred outside the European Economic Area or the United Kingdom, we will take steps to ensure that appropriate safeguards are in place. These safeguards may include adequacy decisions, standard contractual clauses, or equivalent legal mechanisms recognized by applicable law.

7. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, reporting, and dispute-resolution requirements. The length of retention depends on the type of data, the purpose of processing, and applicable legal obligations.

In general:

account and customer records are retained for the duration of the relationship and for a reasonable period afterward;
payment and tax records are kept for the period required by law;
security and access logs are kept for a limited period unless needed for investigation or legal purposes;
correspondence and complaint records are retained as long as needed to manage the matter and any follow-up obligations.

When personal data is no longer required, we will delete, anonymize, or securely archive it in accordance with our retention practices.

8. Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, encryption, secure storage, staff training, monitoring, and restricted administrative permissions. No system is completely secure, but we work continuously to reduce risk and improve our safeguards.

9. Your Rights

Subject to applicable law, individuals have the following rights regarding their personal data:

Right of access: to request confirmation of whether we process your data and to obtain a copy.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of data in certain circumstances.
Right to restriction: to request limited processing in specific situations.
Right to object: to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability: to receive certain data in a structured, commonly used format and to transmit it to another controller where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint: to complain to the relevant data protection authority if you believe your rights have been infringed.

To exercise your rights, you may submit a request using the methods we make available for customer service and privacy matters. We may need to verify your identity before responding to a request.

10. Data Minimisation and Accuracy

Ham Storage aims to collect only the data that is necessary for specified purposes. We also take reasonable steps to keep personal data accurate and up to date. If your information changes, please ensure that we can maintain accurate records so that our services, notices, and billing remain correct.

11. Automated Decision-Making

We do not generally use automated decision-making that produces legal or similarly significant effects on individuals. If this changes, we will provide appropriate information about the logic involved and the consequences for you, together with any rights available under applicable law.

12. Children’s Data

Our services are intended for adults and business users where applicable. We do not knowingly collect personal data from children unless it is necessary in connection with a lawful service arrangement and appropriate authority has been provided. If we become aware that we have collected data improperly, we will take reasonable steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any updated version will apply from the date it is made effective. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

14. Summary of Our Commitment

Ham Storage respects your privacy and handles personal data in a responsible and lawful way. We collect only what we need, use it for clear purposes, retain it for appropriate periods, and share it only with trusted processors or where required by law. We also support your rights under GDPR and take security seriously. Our aim is to maintain trust, transparency, and compliance in all customer relationships.