Storage Kennington Privacy Policy
This Privacy Policy explains how Storage Kennington collects, uses, stores and protects your personal data. It applies to all Storage Kennington customers and prospective customers in the Kennington area, including individuals and businesses that enquire about, use or have used our storage services.
We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy is intended to give you clear and transparent information about our processing of your personal data and your rights.
Data Controller
Storage Kennington is the data controller for the personal data described in this Privacy Policy. This means that we decide how and why your personal data is processed and are responsible for ensuring that it is handled in a lawful and secure manner.
Personal Data We Collect
We may collect and process the following categories of personal data when you interact with us, depending on your relationship with Storage Kennington and the services you use:
Identification and contact details, such as your name, postal address, billing address, date of birth, and contact details including your preferred contact method.
Customer account and contract information, such as your storage unit details, contract start and end dates, pricing and payment terms, communications relating to your contract, and proof of identity documents where required for security or legal purposes.
Payment and transaction information, such as payment history, amounts, dates, and the method used to make payments. We do not store full card details when payments are processed by a payment service provider.
Communications, such as records of emails, letters, forms, and notes of phone or in-person conversations related to enquiries, bookings, complaints, or support requests.
Security and access information, such as vehicle registration numbers used to access our premises, entry and exit logs, and CCTV footage captured on or around our sites for security and safety purposes.
Website and usage data, such as basic technical information provided by your browser, including IP address and device type, and information about how you use our online forms or tools where applicable.
How We Collect Your Data
We collect personal data directly from you when you contact us, request a quote, make a booking, sign a contract, access our storage facilities, or communicate with us by any method. We may also receive personal data from third parties where this is necessary to manage our services, such as payment service providers or professional advisers.
Lawful Basis for Processing
We only process your personal data where we have a lawful basis to do so under the UK GDPR. Depending on the purpose, we may rely on one or more of the following lawful bases:
Performance of a contract: We process your personal data to provide storage services to you, to manage your account, to handle payments, to respond to your enquiries, and to take steps at your request before entering into a contract.
Legal obligation: We process certain data because we are legally required to do so, for example to comply with tax, accounting and financial regulations, or to assist law enforcement when we are legally obliged to share information.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override these interests. This includes ensuring the security of our premises, preventing fraud, managing our customer relationships, improving our services, and defending legal claims.
Consent: In some limited cases we may rely on your consent, for example where required for certain types of optional communications. Where we rely on consent, you can withdraw it at any time by contacting us.
Purposes of Processing
We use your personal data for the following purposes:
To provide and manage storage services, including setting up your account, administering your contract, operating access control, and providing customer support.
To process payments, manage billing and invoicing, and maintain accurate financial records.
To communicate with you about your account, including service updates, changes to our terms and conditions, and important information about your storage unit.
To maintain security and safety at our premises through access control measures, CCTV monitoring and incident management.
To comply with legal and regulatory obligations, including responding to lawful requests from public authorities.
To manage and improve our business operations, such as training staff, monitoring service quality, and analysing service usage.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and to meet any legal, accounting or reporting requirements.
Customer account and contract data will generally be kept for the duration of your relationship with us and for a reasonable period after your contract ends, to enable us to answer queries, handle disputes, and comply with tax and accounting rules.
Payment and financial records are typically kept for a number of years after the end of the financial year to which they relate, in accordance with legal and regulatory requirements.
CCTV footage and access records are kept for a limited period, usually only long enough to investigate incidents, respond to requests from law enforcement, or ensure the safety and security of our premises. Footage will be retained for longer only where it is relevant to an ongoing investigation or legal claim.
When personal data is no longer needed for these purposes, it will be securely deleted, anonymised, or otherwise removed from our systems.
Data Processors and Third Parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are only permitted to process your personal data in accordance with our instructions and are required to implement appropriate security measures.
Such processors may include providers of data storage and hosting, payment processing services, customer relationship management systems, security and CCTV maintenance providers, and professional and legal advisers.
In some circumstances, we may share personal data with other third parties who act as independent data controllers, such as regulators, law enforcement agencies or our professional advisers, where we are legally required or have a legitimate interest in doing so.
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in line with data protection law.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, staff training, secure storage systems and regular review of our security practices.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Storage Kennington customers and prospective customers in the Kennington area, although they may be subject to certain conditions and legal exceptions.
Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of the data we hold about you, together with certain information about how we use it.
Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and we have no other lawful basis for processing.
Right to restriction of processing: You may have the right to request that we restrict the processing of your personal data, for example while we verify its accuracy or consider an objection you have raised.
Right to object: You have the right to object to our processing of your personal data based on legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests or where processing is required for legal claims.
Right to data portability: In some cases, you may have the right to receive personal data you have provided to us in a structured, commonly used and machine readable format, and to request that we transmit this data to another controller where technically feasible.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the UK data protection supervisory authority if you believe that your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. Any significant changes will be communicated where appropriate. The most current version will always apply to how we handle your personal data.
