Privacy Policy – Knightsbridge Storage

Effective date: This Privacy Policy applies to all Knightsbridge Storage customers in the area and explains how we collect, use, share, store, and protect personal data when providing storage and related services.

1. Introduction

Knightsbridge Storage is committed to protecting your privacy and handling personal data in a lawful, fair, and transparent manner. This Privacy Policy explains what information we collect, why we collect it, the legal grounds we rely on under applicable data protection law, how long we keep it, who may process it on our behalf, and the rights available to you.

By using our services, entering into an agreement with us, or otherwise interacting with us, you acknowledge that your personal data may be processed as described in this policy.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, date of birth, and identification details where required for verification.
Contact data: postal address, email address, and telephone number.
Account and contract data: service agreements, account references, payment status, and communication history.
Payment data: billing information and transaction records. We do not store full payment card details if processed securely by a payment provider.
Security data: CCTV footage, access logs, key or access-card usage, and incident reports where applicable.
Correspondence data: information contained in messages, complaints, enquiries, or other communications with us.
Technical data: IP address, device information, browser data, and usage data if you interact with our digital systems.

We generally collect personal data directly from you when you make an enquiry, sign a contract, use our storage facilities, or contact us. We may also receive information from third parties such as payment processors, identity verification services, insurers, professional advisers, or public authorities where lawful and appropriate.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide and manage storage services;
to verify identity and prevent fraud, misuse, or unauthorised access;
to process payments, invoices, and account administration;
to communicate with you about your account, service changes, and operational matters;
to maintain site safety, security, and business records;
to handle complaints, disputes, and claims;
to comply with legal, regulatory, tax, accounting, and insurance obligations;
to improve our operations, systems, and customer experience.

We will only process your data for the purposes for which it was collected, unless we reasonably determine that another compatible purpose applies or we are otherwise permitted or required by law.

4. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you, including setting up accounts, managing storage access, billing, and customer support.

Legal Obligation

We process data where required to comply with laws and regulations, including tax, accounting, fraud prevention, and lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include site security, CCTV monitoring, protecting property, maintaining accurate records, and preventing abuse of our services. We assess these interests carefully and apply safeguards where appropriate.

Consent

In limited cases, we may rely on your consent, for example for optional communications or specific processing not covered by another legal basis. Where consent is relied upon, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties acting as processors or independent controllers, but only where lawful and necessary. Processors may process data on our behalf under written contracts requiring confidentiality, security, and compliance with data protection law.

Examples of processors and recipients may include:

IT and hosting providers: to operate secure systems, data storage, and communications tools.
Payment service providers: to process transactions and manage billing.
Security providers: to support monitoring, alarms, access control, and incident response.
Professional advisers: including accountants, insurers, auditors, and legal advisers.
Identity verification services: where checks are necessary for fraud prevention or legal compliance.
Public authorities and regulators: where disclosure is required by law or necessary to protect rights, property, or safety.

We do not sell your personal data. If data is transferred outside the UK or EEA, we will ensure appropriate safeguards are in place in accordance with applicable law.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, operational, and security requirements. Retention periods depend on the nature of the data and the reason for processing.

Contract and account records: retained for the duration of the relationship and for a further period where required for dispute resolution, tax, or record-keeping.
Payment and invoicing records: retained for statutory accounting and tax periods.
Security records and CCTV: retained for a limited period unless needed for an investigation, incident, or legal claim.
Correspondence: retained as long as necessary to respond to queries, manage claims, and maintain records.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, staff training, secure storage, restricted permissions, monitoring, and regular review of our systems.

While no system can be guaranteed to be completely secure, we take reasonable steps to protect your information in line with the nature of the data and the risks involved.

8. Your Rights

Under applicable data protection law, you may have the following rights in relation to your personal data:

Right of access: to obtain confirmation and a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to request that we limit processing in certain situations.
Right to data portability: to receive certain data in a structured, commonly used format where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent.

You may also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed.

9. Automated Decision-Making

We do not use personal data for automated decision-making that produces legal or similarly significant effects on you, unless we have informed you and a lawful basis applies. If that changes, we will provide appropriate information about the logic involved and your rights.

10. Children’s Data

Our services are intended for adult customers and business users. We do not knowingly collect personal data from children unless required in connection with a lawful service arrangement and supported by appropriate safeguards. If we become aware that we have collected data from a child without a valid legal basis, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or operational practices. Any revised version will apply from the stated effective date. We encourage you to review this policy periodically to stay informed about how we handle your personal data.

12. Summary of Your Privacy

In summary: we collect only the information needed to provide secure storage services, meet legal obligations, and manage our business responsibly. We process personal data on lawful grounds such as contract, legal obligation, legitimate interests, and consent where applicable. We keep data only as long as necessary, use trusted processors under contract, and respect your rights to access, correct, delete, restrict, or object to certain processing.

This Privacy Policy applies to all Knightsbridge Storage customers in the area.