Storage Knightsbridge Privacy Policy
This Privacy Policy explains how Storage Knightsbridge collects, uses, stores, and protects personal data relating to our self-storage and associated services. It applies to all Storage Knightsbridge customers and prospective customers in our service area, as well as individuals who contact us, visit our premises, or otherwise interact with us in relation to our services.
Storage Knightsbridge acts as a data controller for the personal data described in this Privacy Policy. We process personal data in accordance with the UK General Data Protection Regulation and all applicable data protection laws.
Personal Data We Collect
We collect and process different types of personal data depending on your relationship with us and how you use our services. The categories of personal data we typically collect include:
Identification and contact details, such as your full name, postal address, billing address, contact address, and similar contact information you provide to us. This also includes any login identifiers or account names that are necessary to manage your customer account.
Account and contract information, including unit numbers, contract start and end dates, rental rates, payment terms, deposit amounts, renewal details, and any correspondence relating to your storage agreement with us.
Payment and transaction data, such as details of payments made to us, payment method, amounts, dates, and related billing records. We do not retain complete payment card numbers; these are handled by our payment service providers who process transactions securely on our behalf.
Verification and security information, including copies or details of identity documents, proof of address, or similar evidence we require to verify your identity and to comply with legal or regulatory obligations.
Communications data, comprising records of communications you have with us by post, in person at our site, or through other communication channels. This can include enquiries, feedback, complaints, and records of your responses where we contact you about your account or our services.
Technical and usage information, such as basic device and browser details, and information about how you access or use our online tools, portals, or digital services, where these are available. This may include log data, access times, and similar usage-related information.
CCTV and site access data, including video images captured on our CCTV systems in and around our facilities, as well as electronic access records that may show entry and exit times for security and operational purposes.
Lawful Bases for Processing
We only process personal data where we have a lawful basis to do so under data protection law. Depending on the circumstances, we rely on the following lawful bases:
Contractual necessity: We process personal data to enter into and perform our contracts with you, including providing storage units, administering your account, processing payments, communicating about your booking, and handling renewals and terminations.
Legal obligations: We process certain data to comply with legal and regulatory requirements, such as tax and accounting obligations, fraud prevention, record-keeping requirements, and obligations to assist law enforcement or regulatory authorities when legally required to do so.
Legitimate interests: We process personal data for purposes that are necessary to pursue our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. These interests include ensuring site security, managing and improving our services, preventing and detecting crime, handling queries and complaints, and protecting our property and the property of our customers.
Consent: In limited cases, we may rely on your consent for specific processing activities, such as certain types of optional marketing or communication. Where we rely on consent, you have the right to withdraw your consent at any time, and we will make this clear at the point where consent is requested.
How We Use Personal Data
We use the personal data we collect for the following purposes:
To provide and manage storage and related services, including processing bookings and reservations, allocating and managing storage units, administering contracts, processing payments, issuing invoices, and handling renewals or terminations.
To communicate with you regarding your account, including sending confirmation notices, updates about your storage unit, important information about access and safety, and responses to enquiries or complaints you may raise.
To maintain the security and integrity of our site, systems, and property, including the use of CCTV, access control systems, and monitoring activities to prevent and detect criminal behaviour, protect customers and staff, and safeguard stored goods.
To manage our business operations, including internal administration, auditing, service improvement, staff training, and the development of new or improved services and processes.
To comply with legal and regulatory requirements, cooperate with authorities when we are legally obliged to do so, manage disputes or legal claims, and maintain accurate records for tax and accounting purposes.
To send service-related messages and, where permitted and appropriate, information about our services that may be relevant to you. You may request not to receive marketing communications at any time.
Data Retention
We keep personal data only for as long as it is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The precise retention period will vary depending on the nature of the data and our legal obligations.
Contract and account records relating to your storage agreement are generally retained for a set number of years after your contract ends. This period allows us to respond to any queries or disputes and to meet tax and accounting requirements.
CCTV recordings are kept for a limited period that is appropriate for security and investigative purposes, unless a particular recording needs to be retained for longer in connection with an incident, claim, or legal obligation.
Where we have collected personal data based on your consent and that data is no longer needed for any other lawful purpose, we will delete or anonymise it promptly after you withdraw your consent or after a reasonable period of inactivity.
When personal data is no longer needed, we will securely delete or anonymise it so that it can no longer be associated with you.
Data Processors and Third Parties
We may share personal data with carefully selected third-party service providers who act as data processors on our behalf. These processors are engaged to perform services such as payment processing, customer account systems, IT hosting and maintenance, CCTV or access control system support, and professional services such as accounting or legal advice.
All processors are required to handle personal data only in accordance with our documented instructions, to keep it secure, and to comply with data protection law. They are not permitted to use personal data for their own purposes.
Where necessary, we may also share personal data with independent controllers, such as law enforcement agencies, regulatory bodies, insurers, or professional advisors, where we have a legal obligation or legitimate interest in doing so.
We do not sell personal data. If we were to undergo a business restructuring, merger, or transfer, personal data may be disclosed to a prospective or new owner under appropriate safeguards.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we take steps to ensure that it is afforded an equivalent level of protection. This may include relying on adequacy regulations, standard contractual clauses, or other safeguards approved under data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply subject to certain conditions and exemptions:
Right of access: You have the right to request confirmation of whether we process your personal data and to receive a copy of that data, along with information about how we use it.
Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected or updated.
Right to erasure: In certain circumstances, you may request that we delete your personal data. This right is not absolute and may not apply where we need to retain data to comply with legal obligations or to establish, exercise, or defend legal claims.
Right to restriction of processing: You may request that we restrict the processing of your personal data in specific situations, for example while we are verifying its accuracy or assessing an objection you have raised.
Right to object: You have the right to object to processing that is based on our legitimate interests or for direct marketing purposes. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is needed for legal claims.
Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another controller.
Right to withdraw consent: Where we rely on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can address your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any changes will take effect when the updated policy is made available through our usual communication channels. We recommend that you review this Privacy Policy periodically to stay informed about how we handle personal data.
