Storage Ham Privacy Policy
This Privacy Policy explains how Storage Ham collects, uses, stores, and protects personal data relating to customers and potential customers. It also describes your rights under the General Data Protection Regulation and how you can exercise them. This Privacy Policy applies to all Storage Ham customers in the service area where we operate and to individuals who interact with us in connection with our storage services.
Data Controller
Storage Ham is the controller of the personal data processed in connection with the provision of our storage services, customer accounts, and related communications. As controller, Storage Ham is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing complies with applicable data protection laws.
Categories of Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. The main categories of data we may collect are:
Identification and contact information, such as name, postal address, billing address, and any contact preferences you provide to us.
Account and contract information, such as customer account identifiers, unit numbers, contract start and end dates, payment history for services, and information related to your chosen storage plan.
Payment-related information, including details required to process payments through our payment service providers. We do not store full payment card details; these are processed by our payment processors on our behalf.
Usage and communication information, such as records of your communications with us, including inquiries, feedback, and service-related messages, as well as information about your use of our services.
Security and access information, such as access logs and, where applicable, visual recordings from security systems used to protect the premises and ensure the safety of customers and staff.
Purposes and Lawful Bases for Processing
We process your personal data only when we have a lawful basis to do so. The main purposes and corresponding lawful bases are:
To provide and manage storage services. We process your data to create and manage your customer account, administer your storage contract, allocate and secure units, and provide customer support. The lawful basis is the performance of a contract or taking steps at your request prior to entering into a contract.
To process payments and manage billing. We process payment-related data to collect fees, issue invoices, manage refunds, and handle payment queries. The lawful basis is the performance of a contract and compliance with legal and accounting obligations.
To communicate with you. We use your contact details to respond to inquiries, send service updates, and notify you about changes to terms or this Privacy Policy. The lawful basis is the performance of a contract and our legitimate interest in ensuring effective communication with our customers.
To maintain security and prevent misuse. We process access data and, where present, security recordings to protect our premises, detect and prevent fraud or theft, and ensure compliance with site rules. The lawful basis is our legitimate interest in maintaining the safety and security of our services and premises.
To comply with legal obligations. We may process personal data where required by applicable law, including obligations relating to taxation, accounting, anti-money laundering, and responding to lawful requests from authorities. The lawful basis is compliance with a legal obligation.
To improve and develop our services. We may use aggregated or pseudonymised data for internal analysis, service improvement, and planning. Where personal data is used, the lawful basis is our legitimate interest in improving our services while respecting your privacy.
For direct marketing, where allowed. We may send you information about products or services that are similar to those you already use. The lawful basis is our legitimate interest, and where required by law we will rely on your consent and give you the option to opt out at any time.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with legal requirements.
Customer account and contract data are generally kept for the duration of the contract and for a period thereafter in line with statutory limitation periods and accounting rules. This is to enable us to respond to queries, manage any disputes, and meet legal obligations.
Payment and invoicing records are retained in accordance with applicable tax and accounting regulations, which may require storage for several years after the end of the relevant financial period.
Security and access data, such as access logs and security recordings, are kept for a limited period that is appropriate to the security purpose and will be deleted or anonymised when no longer required, unless a longer retention period is needed in connection with an incident or legal claim.
Marketing-related data will be kept until you opt out of receiving marketing or until it is no longer necessary for the purpose for which it was collected, after which it will be deleted or anonymised.
Data Processors and Sharing of Personal Data
We may share your personal data with carefully selected third parties that act as processors on our behalf. These processors only process personal data according to our documented instructions and are contractually required to provide appropriate technical and organisational measures to protect your data.
Typical processors may include providers of payment processing services, providers of customer relationship and account management systems, providers of cloud hosting and data storage, and providers of security and maintenance services for our facilities.
We may also share personal data with professional advisers such as legal and accounting service providers where necessary to protect our rights or to comply with legal obligations, and with public authorities or law enforcement bodies when required by law or when necessary to protect vital interests.
We do not sell your personal data to third parties. Any sharing of data is limited to what is necessary and proportionate for the purposes described in this Privacy Policy.
International Transfers
Where we use service providers located outside the European Economic Area, we take steps to ensure that your personal data receives an equivalent level of protection. This may include the use of adequacy decisions, standard contractual clauses, or other appropriate safeguards recognised under applicable data protection law.
Security of Your Personal Data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, encryption, secure data storage, and regular reviews of our security practices and policies. While we strive to protect your information, no system can be completely secure, and we cannot guarantee absolute security.
Your Data Protection Rights
Under the General Data Protection Regulation and applicable local laws, you have several rights in relation to your personal data. These rights apply to all Storage Ham customers in our service area, subject to certain legal limitations and exceptions.
You have the right to access your personal data and to receive information about how it is processed. You can request a copy of the personal data we hold about you.
You have the right to request rectification of inaccurate or incomplete personal data. We will take reasonable steps to ensure that data which is incorrect or no longer accurate is updated or corrected.
You have the right to request erasure of your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
You have the right to request restriction of processing where you contest the accuracy of the data, where processing is unlawful, or where you have objected to processing and a verification of the legitimate grounds is pending.
You have the right to object to processing based on our legitimate interests, including profiling, and to object at any time to the processing of your personal data for direct marketing purposes.
Where processing is based on your consent or on a contract and carried out by automated means, you may have the right to data portability, meaning you can receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact Storage Ham using the contact methods provided through our usual customer communication channels. When you make a request, we may need to verify your identity before acting on it to protect your privacy and security.
You also have the right to lodge a complaint with a supervisory authority if you believe that your personal data has been processed in violation of data protection laws. The relevant authority will depend on your place of residence or the location where the alleged infringement occurred.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any changes will be made available through our usual communication channels and will apply from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
