Self Storage Knightsbridge Privacy Policy
This Privacy Policy explains how Self Storage Knightsbridge collects, uses, stores, and protects personal data relating to our customers and prospective customers within the Knightsbridge area. It also describes your rights under the UK General Data Protection Regulation and the Data Protection Act, and how you can exercise those rights.
Scope of this Privacy Policy
This Privacy Policy applies to all Self Storage Knightsbridge customers, former customers, and prospective customers in the Knightsbridge area who interact with us in person, by post, or through any digital channels we may provide. By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Data Controller
Self Storage Knightsbridge is the data controller in respect of the personal data we collect and process about you. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you make an enquiry, request a quote, enter into a storage agreement, or otherwise interact with us:
Identification data: name, title, date of birth, customer reference number, identification document details where required for verification and security.
Contact details: home address, correspondence address, billing address, and any other address you provide, as well as your preferred contact details such as email and communication preferences where supplied.
Contract and account data: information relating to your storage unit, rental term, payment history, invoices, correspondence regarding your contract, and details of services requested or provided.
Payment and financial data: limited payment information as required to process transactions, including payment method details, billing information, and records of payments made or due. We do not store full card details when processed by a payment provider acting as a data processor or separate controller.
Security and access data: CCTV footage in and around our premises, access logs for entry systems, records of visits, and any incident reports necessary to maintain the safety and security of our customers and property.
Communication data: records of enquiries, complaints, feedback, and any other communications you send to us or that we send to you in relation to our services.
How We Collect Your Personal Data
We collect personal data directly from you when you request information about our services, visit our storage facility, sign a storage agreement, make a payment, or contact us for any reason. We may also obtain personal data from third parties where this is necessary to verify your identity, perform credit or fraud checks if applicable, or comply with our legal obligations. We only obtain such data where we have a lawful basis to do so.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under the UK GDPR. Depending on the circumstances, this may include the following:
Contract: to take steps at your request before entering into a storage agreement, and to perform our obligations under any contract we have with you, such as providing storage services, managing your account, and processing payments.
Legal obligation: to comply with laws and regulations, including tax, accounting, and anti-fraud requirements, maintaining appropriate records, and responding to lawful requests from public authorities or law enforcement.
Legitimate interests: to pursue our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include ensuring the security of our premises through CCTV and access logs, improving our services, recovering debts, handling customer enquiries, and managing business operations.
Consent: where we rely on your consent, for example for certain direct marketing communications where these are not covered by our legitimate interests. You may withdraw your consent at any time, and this will not affect the lawfulness of processing before withdrawal.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide and manage storage services, including setting up and administering your account, managing your unit and access, processing payments, issuing invoices, and communicating with you about your agreement.
To respond to your enquiries, provide quotes, handle complaints, and otherwise communicate with you about our services and your customer experience.
To maintain security and safety at our Knightsbridge facilities through CCTV recording, monitoring access, and investigating security incidents or suspected fraud.
To comply with our legal and regulatory obligations, including record keeping, tax reporting, and cooperating with law enforcement or regulatory authorities where necessary and proportionate.
To manage our business operations, carry out internal reporting, audits, quality assurance, and develop or improve our services and customer offerings.
To send you information about services that may be of interest to you where permitted by law. You have the right to opt out of such communications at any time.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. In determining appropriate retention periods, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and legal obligations.
Typically, we retain customer and contract records for the duration of your storage agreement and for a defined period thereafter to address any disputes, queries, or legal claims. Financial records may be retained for longer where required by tax or accounting laws. CCTV footage is retained for a limited period appropriate to security needs, unless it is required for an investigation or legal proceedings, in which case it may be kept for a longer period until the matter is resolved.
Data Processors and Third Parties
We may engage trusted third party service providers to process personal data on our behalf as data processors. These may include payment processors, IT and system support providers, cloud storage and backup services, security and CCTV maintenance providers, document management and destruction services, and professional advisers such as accountants or legal advisers.
Where we use data processors, we require them to process your personal data only in accordance with our instructions, to implement appropriate technical and organisational measures to protect it, and to comply with applicable data protection legislation. They are not permitted to use your personal data for their own independent purposes.
We may also share personal data with third parties where we have a lawful basis to do so, such as with law enforcement or regulatory bodies, insurers, or debt recovery agencies, where necessary to protect our rights, the rights of our customers, or to comply with legal obligations.
International Transfers
Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. These safeguards may include adequacy regulations or standard contractual clauses approved for use by the relevant authorities. Further information on such safeguards can be provided upon request where applicable.
Security of Your Personal Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include controlled access to our premises and systems, use of secure storage, encryption and password protection where appropriate, staff training, and regular review of our security procedures.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access: you have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of the data and certain related information.
Right to rectification: you have the right to request that inaccurate or incomplete personal data is corrected or updated.
Right to erasure: in certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and we have no other lawful basis for processing.
Right to restriction: you may request that we restrict the processing of your personal data in certain situations, such as while we verify its accuracy or assess an objection you have raised.
Right to object: you have the right to object to processing that is based on our legitimate interests, including profiling based on those interests, and to object at any time to the processing of your personal data for direct marketing.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, and machine readable format and to have it transmitted to another controller where technically feasible.
Right to withdraw consent: where we rely on your consent to process your personal data, you may withdraw your consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we process your personal data, you can contact Self Storage Knightsbridge using the contact details made available on our customer correspondence or at our premises. We will respond to your request in accordance with applicable data protection laws and may ask you to verify your identity before acting on your request.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has been processed in a way that does not comply with the law. We encourage you to contact us first so that we can seek to resolve any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. Any updated version will be made available to customers through our usual communication channels or at our premises. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
