Privacy Policy - Hook Storage

Last updated: [Insert Date]

This Privacy Policy explains how Hook Storage collects, uses, stores, shares, and protects personal data in connection with its products and services. It applies to all Hook Storage customers in area, including individuals, businesses, and authorized representatives who interact with Hook Storage in any capacity.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using Hook Storage services, customers acknowledge that personal data may be processed as described in this Policy.

1. Personal Data We Collect

Hook Storage collects personal data that is necessary to provide our services, manage customer relationships, maintain security, and comply with legal obligations. The categories of data we may collect include:

Identity data such as name, title, and business role.
Contact data such as email address, telephone number, billing address, and correspondence details.
Account and service data such as customer identifiers, service preferences, storage allocation, access records, and transaction history.
Payment data such as invoicing details, payment confirmations, and financial transaction references.
Technical data such as IP address, device information, browser type, system logs, and access timestamps when digital systems are used.
Security and access data such as entry logs, authorization details, CCTV-related information where applicable, and incident reports.
Communication data such as messages, inquiries, complaints, and support requests.

We generally collect personal data directly from customers, their representatives, or through the normal operation of our services. In some cases, data may be provided by payment providers, business partners, insurers, legal authorities, or other third parties where permitted by law.

2. How We Use Personal Data

Hook Storage uses personal data only for specified and legitimate purposes. These purposes include:

providing storage services and managing customer accounts;
verifying identity and access rights;
processing orders, payments, invoices, and refunds;
communicating service notices, operational updates, and contractual information;
maintaining security, preventing unauthorized access, and investigating incidents;
ensuring compliance with legal, regulatory, tax, and accounting obligations;
improving our services, processes, and customer experience;
responding to questions, complaints, and support requests;
protecting the rights, property, and safety of Hook Storage, customers, staff, and third parties.

We do not use personal data in ways that are incompatible with the original purpose for which it was collected unless we have a valid lawful basis to do so.

3. Lawful Basis for Processing

Under GDPR, Hook Storage must have a lawful basis for every processing activity. Depending on the context, we rely on one or more of the following grounds:

Contract – processing is necessary to enter into or perform a contract with the customer, including account administration, service delivery, and billing.
Legal obligation – processing is necessary to comply with legal and regulatory requirements, such as tax, accounting, anti-fraud, or record-keeping duties.
Legitimate interests – processing is necessary for our legitimate business interests, provided these are not overridden by the customer’s rights and freedoms. This may include service improvement, security monitoring, fraud prevention, and internal administration.
Consent – where required by law, we will obtain consent before processing certain data. Customers may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Where we rely on legitimate interests, we ensure that the processing is necessary, proportionate, and balanced against the rights of individuals. Where processing is based on consent, customers are informed of what they are consenting to at the time consent is requested.

4. Data Sharing and Processors

Hook Storage may share personal data with trusted third parties who act as processors or, in some cases, independent controllers. We only share data when necessary and with appropriate safeguards in place.

Processors may include:

IT and cloud service providers that host systems, store data, or provide technical support;
payment and invoicing providers that process transactions and related financial records;
security service providers that support access control, surveillance, monitoring, or incident response;
professional advisers such as legal, accounting, insurance, or audit partners;
logistics or operational partners who assist in service delivery where required;
regulatory or public authorities where disclosure is required by law or necessary to protect rights and safety.

All processors are required to process personal data only on documented instructions from Hook Storage, to keep the data confidential, and to implement appropriate technical and organizational measures. Where data is transferred outside the relevant jurisdiction, Hook Storage ensures that suitable safeguards are in place, such as Standard Contractual Clauses or equivalent legal mechanisms permitted under GDPR.

5. Data Retention

Hook Storage retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, tax, dispute resolution, and security purposes.

Retention periods depend on the type of data and the context of processing. In general:

customer account and service records are retained for the duration of the contractual relationship and for a reasonable period afterward;
financial and tax records are retained for the period required by applicable law;
security and access records are retained for as long as necessary to investigate incidents, enforce policies, or meet safety obligations;
support communications are retained for the period needed to resolve the matter and maintain service history;
where consent is the basis for processing, the related data is retained until consent is withdrawn or the purpose no longer exists.

When personal data is no longer required, Hook Storage will delete, anonymize, or securely archive it in accordance with applicable retention rules and internal data management procedures.

6. Security of Personal Data

We apply appropriate technical and organizational measures designed to protect personal data against accidental loss, unauthorized access, alteration, disclosure, or destruction. These measures may include access controls, encryption, logging, role-based permissions, secure storage, staff training, and regular review of security practices.

Although no system can be guaranteed to be completely secure, Hook Storage takes reasonable and proportionate steps to reduce risk and to respond promptly to suspected security incidents.

7. User Rights Under GDPR

Individuals whose personal data is processed by Hook Storage have specific rights under GDPR. Subject to legal limitations, these rights include:

Right of access – to obtain confirmation of whether personal data is being processed and to receive a copy of that data;
Right to rectification – to request correction of inaccurate or incomplete personal data;
Right to erasure – to request deletion of personal data in certain circumstances;
Right to restrict processing – to request temporary limitation of processing in certain situations;
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format and, where feasible, to have it transferred to another controller;
Right to object – to object to processing based on legitimate interests or to direct marketing where applicable;
Right not to be subject to automated decision-making – to avoid decisions based solely on automated processing that produce legal or similarly significant effects, where applicable.

Where processing is based on consent, individuals may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To help protect privacy, Hook Storage may need to verify identity before responding to any rights request. Requests will be handled within the time limits required by law, unless an extension is permitted due to complexity or volume.

8. Children’s Data

Hook Storage services are intended for business and adult customers. We do not knowingly collect personal data from children without appropriate authorization and a valid legal basis. If we become aware that personal data has been collected improperly from a child, we will take steps to delete or otherwise handle the data in accordance with applicable law.

9. Changes to This Privacy Policy

Hook Storage may update this Privacy Policy from time to time to reflect changes in legal requirements, our services, or our data processing practices. Any revised version will apply from the date it is made effective. Customers are encouraged to review the Policy periodically to remain informed about how personal data is handled.

By continuing to use Hook Storage services, customers acknowledge that they have read and understood this Privacy Policy.