Storage Kingston upon Thames Privacy Policy
This Privacy Policy explains how Storage Kingston upon Thames collects, uses, stores and protects personal data relating to all of its customers and prospective customers in the Kingston upon Thames area. It is intended to provide clear information in line with the UK General Data Protection Regulation and the Data Protection Act 2018.
By using our services, visiting our premises or otherwise interacting with us, you acknowledge that you have read this Privacy Policy. We may update this policy from time to time and will apply the latest version to all new interactions from the date of publication.
Scope and Data Controller
This Privacy Policy applies to all Storage Kingston upon Thames customers, prospective customers and website visitors located in or using our services in the Kingston upon Thames area. Storage Kingston upon Thames is the data controller for the personal data described in this policy, meaning we determine the purposes and means of processing your personal data.
Personal data means any information that can identify you directly or indirectly, such as your name, contact details, payment information and identification documentation.
Personal Data We Collect
We may collect the following categories of personal data when you use our storage services, contact us or visit our facilities:
Identification and contact details, such as your full name, postal address, billing address, contact address, and communication preferences.
Account and contract information, such as storage unit number, contract start and end dates, rental terms, access rights and correspondence relating to your account.
Verification and security information, which may include copies of identification documents where required for security or legal purposes and vehicle registration numbers used to access our site.
Payment and transaction information, such as payment method details in a secure tokenised form, payment history, invoices, receipts and records of any arrears or refunds.
Communication records, including emails, letters, forms completed on our website, notes of telephone conversations and any feedback or complaints that you provide to us.
Technical and usage data, such as information about how you use our website, including pages visited, time spent on pages and basic device information, collected via cookies or similar technologies where used.
Site security and CCTV data, including images and footage captured by CCTV systems at our premises, used for safety, crime prevention and security monitoring.
Lawful Basis for Processing
We only process personal data where we have a lawful basis under the UK GDPR. Depending on the specific activity, we rely on one or more of the following legal bases:
Contract: We process personal data when it is necessary to enter into or perform a contract with you, such as creating your storage account, providing access to your storage unit, handling billing and managing your ongoing relationship with us.
Legal obligation: We process certain data to comply with legal and regulatory requirements, such as financial record-keeping, tax reporting, fraud prevention and obligations related to security or crime prevention.
Legitimate interests: We process personal data for our legitimate business interests, provided that your rights and interests do not override those interests. This includes securing our premises, managing our services, improving our operations, handling enquiries and protecting our property and customers.
Consent: In limited situations, we may rely on your consent, for example for certain types of direct marketing or when using optional cookies where required. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide and manage storage services, including processing applications, setting up and managing accounts, arranging access, and administering contracts.
To take and process payments, manage billing, handle debt recovery where required and maintain accurate financial and transaction records.
To respond to enquiries, provide customer support, handle complaints or disputes and communicate important service information, such as changes to terms or access arrangements.
To maintain the safety and security of our premises, including access monitoring and the use of CCTV to deter and investigate incidents.
To manage our business operations, including internal administration, reporting, auditing and service improvement initiatives.
To send you information about our services and offers where permitted by law and, where required, with your consent. You can opt out of marketing communications at any time.
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
Customer account and contract records are typically retained for a period after your contract ends, to enable us to respond to any queries, disputes or legal claims. Financial and transaction records are retained for the periods required by tax and accounting laws.
CCTV footage is retained for a limited period that is appropriate for security and investigation purposes, unless a longer retention period is required due to a specific incident or legal requirement.
When personal data is no longer required, we will securely delete, anonymise or destroy it in accordance with our data retention procedures.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the operation of our services or to meet legal obligations.
Service providers acting as data processors may process personal data on our behalf and under our instructions. These can include payment processing providers, cloud storage or IT support providers, security and CCTV service providers and professional advisers such as accountants or legal advisers. We require all processors to respect the security of your data and to treat it in accordance with the law.
We may also share information with law enforcement agencies, regulators or courts where we are legally required to do so or where it is necessary to protect our rights, property, customers or the safety of others.
International Transfers
If any of our service providers process personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent protections, to ensure that your data continues to be protected to a standard that is essentially equivalent to UK data protection law.
Data Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, encryption where appropriate, staff training and regular review of our security practices.
While we take reasonable steps to protect your personal data, no system can be completely secure. You are responsible for keeping any account credentials you use with us confidential and for notifying us of any suspected unauthorised access to your account.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
The right of access, allowing you to request confirmation that we process your personal data and to obtain a copy of that data, together with certain information about how it is processed.
The right to rectification, allowing you to request that inaccurate or incomplete personal data be corrected or updated.
The right to erasure, in certain circumstances, allowing you to request that we delete your personal data where there is no longer a valid reason for us to continue processing it.
The right to restrict processing, allowing you to request that we limit the way we use your personal data in certain situations, such as while we investigate a concern you have raised.
The right to data portability, which, in some cases, allows you to request that we provide your personal data in a structured, commonly used and machine-readable format or transfer it to another organisation.
The right to object to processing based on our legitimate interests and to object at any time to the use of your personal data for direct marketing purposes.
Where we rely on consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
How to Exercise Your Rights and Complaints
If you wish to exercise any of your data protection rights or have any questions about this Privacy Policy, you can contact us using the contact methods provided on our website or at our premises.
If you are not satisfied with our response or believe that we are not processing your personal data in accordance with data protection law, you have the right to lodge a complaint with the UK Information Commissioner's Office. Further information about your rights is available from the Information Commissioner's Office.
This Privacy Policy applies to all Storage Kingston upon Thames customers and prospective customers in the Kingston upon Thames area and is intended to give you clear and transparent information about how your personal data is handled.
