Privacy Policy

Last updated: 5 November 2025

This Privacy Policy explains how Henley Self Storage (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website, enquire about storage, take a unit, or otherwise interact with us.

By using our services or website, you agree to this Policy.

1) Who we are (Data Controller)

Henley Self Storage

[Newtown House, Henley Village, Newtown Rd, Henley-on-Thames, RG9 1HG]

Email: [info@henleyselfstorage.co.uk]

Phone: [Insert phone]

We are the Data Controller for the personal data we process.

2) What data we collect

We may collect and process the following categories:

• Identity & contact data: name, phone, email, postal address, business name.
• Customer & contract data: unit size, start/end dates, invoices, payments, direct debit details (via our payment provider), communications, insurance selection and values.
• Verification data: copy of ID where required (e.g. passport/driving licence), proof of address.
• Site security data: CCTV images in and around the facility; access control logs (e.g., keyfob/door PIN times); ANPR/vehicle registration if used on site.
• Technical & usage data: IP address, device/browser type, pages visited, referral source, cookies.
• Marketing preferences: your choices for email/SMS/phone marketing.
• Support interactions: enquiries via forms, email, phone, or chat.

We do not intentionally collect special category data unless you provide it (please avoid sending it).

3) How we collect your data

• Directly from you (website forms, phone/email enquiries, sign-up, on-site).
• Automatically via our website (cookies, analytics).
• From third parties (e.g., payment providers, referencing/credit checking where relevant, lead generators you opt into).

4) Why we use your data (Purposes & Lawful Bases)

We process your data for:

1. Providing storage services (set up your account, allocate a unit, billing, access, customer support) – Contract.
2. Security & safety (CCTV, access logs, incident management) – Legitimate Interests and/or Legal Obligation.
3. Identity verification & fraud prevention – Legitimate Interests and/or Legal Obligation.
4. Payments & invoicing – Contract and Legal Obligation (tax).
5. Service communications (renewals, arrears, maintenance, access changes) – Contract / Legitimate Interests.
6. Marketing (news, offers, tips) – Consent or Legitimate Interests (you can opt-out anytime).
7. Analytics & site improvements – Legitimate Interests.
8. Legal and regulatory compliance – Legal Obligation.
9. Debt recovery / enforcement of T&Cs – Legitimate Interests.

5) Sharing your data

We only share what’s necessary with:

• Payment providers and banking partners.
• IT/hosting and CRM providers (website hosting, email, storage management software).
• Security & facility vendors (CCTV, access control, alarm monitoring).
• Insurers/brokers (if you take insurance or make a claim).
• Debt collection agencies and legal advisors (if required).
• Analytics and marketing tools (see Cookies).
• Law enforcement/regulators where required by law.

We do not sell your data.

6) International transfers

Some providers may store/process data outside the UK. Where this occurs, we ensure appropriate safeguards (e.g., UK International Data Transfer Agreement, Standard Contractual Clauses, or adequacy decisions).

7) Retention – how long we keep data

We keep personal data only as long as needed for the purposes above, including to meet legal, tax, and insurance requirements:

• Contract/account records: typically 6–7 years after the end of your agreement.
• CCTV footage: normally 30–90 days unless required for an investigation.
• Access logs: typically 12–24 months.
• Marketing data: until you unsubscribe or your consent is withdrawn, plus a short suppression period to honour the request.

8) Your rights (UK GDPR)

You have the right to:

• Access your data and receive a copy
• Rectify inaccurate or incomplete data
• Erase data (where applicable)
• Restrict or object to processing (including direct marketing)
• Data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent)

To exercise rights, contact us at [info@henleyselfstorage.co.uk]. We may need to verify your identity. If you’re unhappy, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk.

9) Security

We use technical and organisational measures to protect personal data (access controls, encryption in transit where supported, least-privilege access, staff training, vendor due diligence). No system is 100% secure; please keep your access credentials confidential.

10) Cookies & analytics

Our site uses cookies and similar technologies for functionality, performance, and analytics (e.g., Google Analytics) and, where applicable, marketing measurement.

• You can manage cookies via your browser settings and any on-site cookie banner.
• For details, see our Cookie Notice: [link to your cookie policy/page].

11) Marketing

We may send you service updates (non-marketing). For marketing messages, we rely on consent or legitimate interests. You can opt out at any time by using the unsubscribe link or contacting us.

12) CCTV, access control & on-site data

• CCTV operates in and around the facility for security, safety, and crime prevention. Signs are displayed where CCTV is in use.
• Access control logs (e.g., keyfob/PIN usage) are recorded to maintain site security and support incident investigations.
• Where used, vehicle registration/ANPR is processed for access management and security.

Lawful bases: Legitimate Interests and/or Legal Obligation.

13) Children

Our services are not directed at children, and we do not knowingly collect data from individuals under 16 without parental/guardian involvement.

14) Links to other websites

Our website may contain links to third-party sites. We’re not responsible for their content or privacy practices. Please review their policies.

15) Changes to this Policy

We may update this Policy from time to time. The latest version will always be posted on our website with the “Last updated” date.

16) Contact us

For questions, requests, or complaints about this Policy or your data, contact us.