Storage Kings Cross Privacy Policy
This Privacy Policy explains how Storage Kings Cross collects, uses, stores and protects personal data relating to customers and prospective customers. It applies to all Storage Kings Cross customers within our service area, including individuals and business clients who use, enquire about or are otherwise interested in our storage services.
We are committed to handling your personal data in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy is intended to provide clear and transparent information about our processing of your personal data and your associated rights.
Personal data we collect
We collect and process different categories of personal data depending on your relationship with us and how you interact with our services. The main categories of personal data we collect are:
Identification and contact details such as full name, postal address, billing address, contact address, date of birth, and other details required to identify you as a customer.
Communication details such as email address, correspondence history, records of enquiries, complaints, feedback, and any communications you send to us or we send to you.
Contract and account details such as storage unit number, rental start and end dates, payment history, details of services requested, contractual documentation, and preferences relating to your account.
Payment and billing information such as payment method, partial card details where required for processing, billing history and invoices. We do not store full card details when payment is processed by authorised payment providers.
Security and access information such as access codes, key or fob numbers, records of access to our premises where applicable, and closed-circuit television images captured at our storage facilities.
Technical and usage data such as IP address, device identifiers, browser type, and information about how you use our website and online services, where this is collected through logs or similar technologies.
Any other information you choose to provide to us such as additional contact persons for your account, emergency contact details, or special instructions relevant to the management of your storage unit.
How we collect your personal data
We may collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, contact us by telephone or online, visit our facilities, or interact with our website or other services.
We may also receive personal data from third parties where this is necessary to provide our services, verify your identity, or comply with legal or regulatory obligations. This may include payment providers, credit reference agencies where used, and professional advisers.
Lawful basis for processing
We process your personal data only where we have a lawful basis under the UK GDPR. Depending on the specific processing activity, we rely on one or more of the following lawful bases:
Performance of a contract. We process personal data when it is necessary for entering into, managing, or performing our storage contracts with you, including handling enquiries before you decide whether to enter into an agreement.
Compliance with legal obligations. We process personal data where we are required to do so by law, including record-keeping, tax, accounting, security, and regulatory requirements, and responding to lawful requests from public authorities.
Legitimate interests. We process personal data when it is necessary for our legitimate business interests and these interests are not overridden by your interests or fundamental rights. This includes managing our facilities, ensuring security, preventing fraud, improving our services, and communicating with existing customers about service-related matters.
Consent. In limited circumstances, we may rely on your consent, for example for certain optional communications that are not related to the provision of our services. When we rely on consent, you have the right to withdraw it at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
How we use your personal data
We use personal data for the following purposes:
To manage and perform storage contracts, including setting up and administering customer accounts, providing and managing access to storage units, handling payments, issuing invoices, and dealing with queries relating to our services.
To communicate with you, including responding to your enquiries, providing service updates, managing customer relationships, and notifying you about changes to our terms, policies, or facilities.
To ensure safety and security at our premises, including controlling access to storage units, monitoring facilities through access logs and closed-circuit television, and preventing and investigating incidents or potential criminal activity.
To manage our business operations, including accounting and financial management, internal reporting, quality assurance, training, and development of our services.
To meet legal and regulatory obligations, including retention of records for tax and accounting purposes, handling insurance matters where applicable, and cooperating with law enforcement or regulatory agencies when required.
To improve and develop our services, including analysing usage patterns and feedback, and maintaining the security and performance of our website and digital systems.
Data retention
We keep personal data only for as long as necessary for the purposes for which it is processed, and to comply with our legal and regulatory obligations. The specific retention period depends on the type of data and the context in which it is collected.
Generally, we retain customer account and contract information for a period after the end of the contractual relationship to enable us to resolve disputes, respond to queries about past services, and meet our legal obligations. Accounting and financial records are retained for periods required by applicable tax and accounting laws.
Security and access records, including closed-circuit television footage, are retained for shorter periods unless an incident requires us to preserve the data for longer in connection with investigations or legal proceedings.
When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with our data retention procedures and applicable law.
Data processors and third parties
We may engage trusted third-party service providers to process personal data on our behalf. These data processors may provide services such as payment processing, information technology support, secure data hosting, customer relationship management systems, or security monitoring.
Where we use data processors, we ensure that appropriate contractual and technical safeguards are in place so that your personal data is processed only according to our documented instructions, is kept secure, and is not used for the processor's own purposes.
We may also share personal data with other third parties where required by law, in connection with legal claims, or with professional advisers such as accountants, auditors, or legal advisers who are bound by confidentiality obligations.
If we are involved in a reorganisation, merger, or business transfer relating to Storage Kings Cross, personal data may be transferred as part of that transaction, where permitted by law and subject to appropriate protections.
International transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data in accordance with data protection law. These may include the use of approved standard contractual clauses or reliance on adequacy regulations for the destination country.
Your rights under data protection law
You have a number of rights in relation to the personal data we hold about you, subject to certain conditions and exemptions under the UK GDPR.
Right of access. You have the right to request confirmation as to whether we process your personal data and to receive a copy of that data, together with certain additional information.
Right to rectification. You have the right to request the correction of inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you have the right to request the deletion of your personal data, for example where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis exists.
Right to restriction of processing. You may request that we restrict the processing of your personal data in specific situations, for example while we are verifying the accuracy of data or considering an objection to processing.
Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and to request that it is transmitted to another controller where technically feasible.
Right to object. You have the right to object to processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for legal claims.
Rights related to consent. Where we rely on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has been processed in a way that does not comply with data protection law. We encourage you to contact us first so that we can address your concerns directly.
Security of your personal data
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, physical security at our premises, secure storage systems, and procedures designed to ensure that personal data is accessed only by authorised personnel who need it for legitimate business purposes.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any changes will be published in the latest version of the Privacy Policy, and the updated policy will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to remain informed about how we handle your personal data.
