Storage Kingsbury Privacy Policy
This Privacy Policy explains how Storage Kingsbury collects, uses, shares and protects personal data in connection with our storage services. It applies to all Storage Kingsbury customers and prospective customers in our service area, including individuals and businesses that enquire about, use, or have used our storage facilities or related services.
Storage Kingsbury acts as the data controller for the personal data described in this Privacy Policy. We are committed to processing your personal data lawfully, fairly, transparently and in accordance with the UK General Data Protection Regulation and other applicable data protection laws.
Personal data we collect
We may collect and process the following categories of personal data when you interact with us, make an enquiry, sign a contract, or use our services:
Identity and contact details: name, title, postal address, billing address, contact address, and any other contact information you provide such as messaging handles that do not identify you directly outside our service relationship.
Account and contract information: customer account number, unit number, access credentials specific to our facility, vehicle registration details used for site access, details of your contract with us, records of payments due and made, and information relating to any discount or promotion applied.
Communication records: records of emails, letters and other correspondence you send to us or that we send to you, and notes of telephone or in-person conversations where relevant to your contract, enquiry or a complaint.
Usage and access data: dates and times of site entry and exit, use of access control systems, CCTV footage within and around our facility, and information about incidents, accidents or security concerns on site.
Payment information: limited payment details required to process your payment, such as payment method and transaction references. Where we use third-party payment processors, we do not store your full card details; these are processed securely by the relevant payment provider.
Marketing preferences: your preferences about receiving marketing communications from us and your communication channel choices.
Data about third parties: where you provide details of an alternative contact person or authorised user for your unit, we will process that person’s basic contact and identification details for access and security purposes. You must ensure that any such person is aware that you have shared their details with us.
How we collect your data
We collect personal data directly from you when you contact us, request a quote, sign a storage agreement, visit our facility, make a payment, raise a query or complaint, or update your details.
We also collect data automatically when you use our site access systems and CCTV. In addition, we may receive personal data indirectly from third parties such as payment processors and credit reference agencies, where this is necessary to provide our services or comply with our legal obligations.
Lawful bases for processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, we rely on the following lawful bases:
Contractual necessity: to take steps at your request before entering into a contract, to set up your account, to provide and manage your storage unit, to process payments, to communicate with you about your contract, and to handle any changes, renewals or terminations.
Legal obligations: to meet our legal and regulatory duties, including record-keeping, tax and accounting requirements, responding to lawful requests from public authorities, and complying with health and safety and security obligations.
Legitimate interests: to protect our premises and property, maintain site security, prevent and detect crime and fraud, maintain and improve our services, handle customer queries and complaints, recover debts, and pursue or defend legal claims. When relying on legitimate interests, we balance our interests against your rights and reasonable expectations.
Consent: for certain marketing activities and, where required by law, for any optional data you choose to provide that is not necessary for your contract. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
How we use your personal data
We use your personal data for the following purposes:
To create and manage your customer account and storage agreement.
To provide access to our facility, manage your unit, and administer your relationship with us.
To process payments, issue invoices, and maintain financial records.
To communicate with you about your bookings, renewals, service updates, changes to terms, and important safety or security information.
To maintain the safety and security of our customers, staff, and premises, including through the use of CCTV and access control systems.
To respond to your enquiries, requests and complaints, and to provide customer support.
To send you service-related messages and, where permitted, relevant marketing communications about our services, which you can opt out of at any time.
To perform internal reporting, analysis and service improvement, using aggregated or anonymised data where possible.
To comply with legal obligations and cooperate with regulators and law enforcement where necessary and lawful.
Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected, and to comply with legal, accounting or reporting requirements.
In general, we keep customer account and contract data for a period after the end of your contract, to resolve potential disputes, answer queries about past services and meet legal obligations. CCTV footage and access logs are kept for shorter periods, unless they are required for the investigation of an incident or legal claim, in which case they may be retained for as long as reasonably necessary for that purpose.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be linked to an identified or identifiable person.
Data processors and sharing
We may share your personal data with carefully selected third-party service providers acting as data processors. These may include providers of data storage and hosting, software and customer management systems, payment processing services, security and CCTV system maintenance, and professional advisers such as accountants or legal advisers.
Where we use processors, they are only permitted to process your personal data on our instructions, for the purposes we specify, and subject to appropriate confidentiality and security obligations as required by law.
We may also share personal data with other third parties where required by law, for example with law enforcement, regulatory or governmental bodies, or where necessary to establish, exercise or defend legal claims, to recover debts, or in connection with a potential or actual sale or transfer of our business, subject to appropriate safeguards.
We do not sell your personal data to third parties.
International transfers
If we transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as using standard contractual clauses approved by relevant authorities or transferring to countries deemed to provide an adequate level of data protection. We will take steps to ensure that your privacy rights remain protected.
Security of your data
We take reasonable and appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. These measures include access controls, physical security at our premises, staff training, and procedures for handling suspected data security incidents.
While we use robust security measures, no system can be guaranteed to be completely secure. We will notify you and any relevant authorities of a data breach where we are legally required to do so.
Your data protection rights
Subject to certain conditions and exceptions under data protection law, you have the following rights in relation to your personal data:
Right of access: to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of that data and certain other information.
Right to rectification: to have inaccurate or incomplete personal data corrected.
Right to erasure: to request deletion of your personal data where there is no good reason for us to continue processing it, for example where you have successfully objected to processing or where we no longer need the data.
Right to restriction: to request that we restrict the processing of your personal data in certain circumstances, such as while we verify its accuracy or consider an objection.
Right to object: to object to processing based on our legitimate interests, including profiling, and to object to direct marketing at any time.
Right to data portability: to receive certain personal data in a structured, commonly used and machine-readable format and to request that we transmit that data to another controller where technically feasible.
Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed. We encourage you to contact us first so that we can seek to resolve any concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or applicable law. We will post the updated version in an accessible location and, where appropriate, notify you of significant changes. We recommend that you review this Privacy Policy periodically to stay informed about how we handle your personal data.
