Storage Kentish Town Privacy Policy
This Privacy Policy explains how Storage Kentish Town collects, uses, stores, and protects personal data relating to customers and prospective customers in the Kentish Town area. It also describes your rights under the UK General Data Protection Regulation and the Data Protection Act 2018.
By using our services or contacting us, you acknowledge that you have read and understood this Privacy Policy. This Policy applies to all Storage Kentish Town customers, including individuals and businesses, within the Kentish Town area.
Data Controller
Storage Kentish Town is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that it is handled in accordance with applicable data protection laws.
Personal Data We Collect
We collect only the personal data that is necessary to provide our storage services, manage our relationship with you, and meet our legal obligations. The types of personal data we may collect include:
Identification details such as full name, title, and, where necessary, date of birth and proof of identity documents or reference numbers. Contact details such as home or business address, billing address, and any other address you provide; as well as communication preferences. Account and contract information such as storage unit number, access codes, rental terms, payment history, and communications relating to your contract. Payment and billing information such as details needed to process payments and prevent fraud. Operational and security information such as CCTV footage in and around our premises, records of access to the facility, and incident reports relating to safety or security. Communications data such as queries, complaints, feedback, and any information you choose to provide when you contact us by any channel.
We generally collect data directly from you when you complete forms, enter into a storage agreement, make a payment, or communicate with us. We may also receive data from third parties where this is necessary to carry out identity checks or address verification, in accordance with applicable law.
Lawful Basis for Processing
We only process your personal data where we have a lawful basis to do so. Depending on the context, our lawful bases include:
Contract performance. We process your data to enter into and perform our contract with you, including setting up and managing your storage account, maintaining access control, processing payments, communicating service updates, and handling renewals or terminations. Legal obligation. We process certain data to comply with legal requirements, such as tax and accounting rules, anti money laundering and fraud prevention obligations, health and safety laws, and law enforcement requests where required by law. Legitimate interests. We process personal data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. These interests may include managing and improving our services, maintaining the security of our premises and customers belongings, handling customer queries, training staff, and preventing misuse of our services. Consent. In limited cases, we may rely on your consent, for example for certain optional marketing communications. Where processing is based on consent, you may withdraw your consent at any time.
How We Use Your Personal Data
We use personal data for the following purposes:
To register you as a customer and set up your storage account. To manage the contract, including processing payments, managing access rights, and communicating with you about your storage unit and any changes to our services. To maintain the safety and security of our premises, staff, and customers, including the use of CCTV and access logs. To respond to your enquiries, requests, and complaints, and to provide customer support. To send service communications such as notices of changes to terms, billing reminders, or information about operational issues that may affect you. To comply with legal and regulatory obligations, including record keeping, accounting, and responding to lawful requests from authorities. To protect our legal rights, pursue or defend claims, and prevent fraud or misuse of our facilities. With your consent, to send you relevant information about our services and offers that may be of interest to you.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Retention periods will vary depending on the type of data and the context of our relationship with you.
In general, we keep contract, billing, and account data for a period necessary to manage your relationship with us and for an additional period afterwards to comply with legal, tax, and accounting requirements and to resolve potential disputes. CCTV footage is retained for a limited period, which is kept to the minimum required to ensure security and to investigate incidents, unless a longer retention period is needed in connection with a specific investigation or legal claim. Where we rely on consent for marketing, we will continue to use your contact details for this purpose until you opt out or withdraw consent.
When data is no longer required, we will take reasonable steps to delete or anonymise it securely.
Data Processors and Sharing of Personal Data
We may share your personal data with third parties where this is necessary for the purposes described in this Privacy Policy, always in accordance with data protection laws. Such third parties may act as our data processors, processing personal data on our behalf and under our instructions.
Categories of processors and recipients may include payment service providers who process payments and handle card transactions, IT and hosting providers who support our systems, customer management tools, and data storage, security and CCTV service providers who maintain and support our security systems, professional advisers such as auditors, accountants, or legal professionals where needed for compliance and legal purposes, and regulatory or law enforcement authorities where disclosure is required by law or necessary to protect our rights, property, or safety.
We require all processors with whom we share personal data to respect the security of your information and to treat it in accordance with the law. They are only permitted to process your personal data for specified purposes and in accordance with our documented instructions.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data. These safeguards may include using countries that have been recognised as providing an adequate level of data protection, or using standard contractual clauses approved by the relevant authorities.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include physical security at our premises, access controls, encryption or pseudonymisation where appropriate, regular review of our procedures, and staff training on data protection responsibilities.
While we take reasonable steps to protect your data, no system can be completely secure. You also play an important role in keeping your information safe by keeping your access credentials and any codes or keys secure and not sharing them with others.
Your Rights Under Data Protection Law
Under the UK General Data Protection Regulation and related laws, you may have the following rights in relation to your personal data:
The right of access. You can request confirmation that we process your personal data and obtain a copy of the data we hold about you, along with certain information about how we use it. The right to rectification. You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you. The right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. The right to restrict processing. In some situations, you can ask us to restrict the use of your personal data, for example while we verify its accuracy or consider an objection you have raised. The right to object. You can object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests, rights, and freedoms or the processing is needed for legal claims. You always have the right to object to direct marketing. The right to data portability. Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, machine readable format and to request that it is transmitted to another controller where technically feasible. The right to withdraw consent. Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before the withdrawal.
If you wish to exercise any of these rights, please contact us using the contact methods you normally use when dealing with Storage Kentish Town. We may need to verify your identity before responding.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us so that we can address your concerns. You also have the right to lodge a complaint with the relevant data protection authority in the United Kingdom.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted in our latest Privacy Policy version. We recommend that you review this Policy periodically to stay informed about how we process your personal data.
