Storage West Kensington Privacy Policy
This Privacy Policy explains how Storage West Kensington collects, uses, stores and protects personal data relating to customers and prospective customers in the West Kensington area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
By using our services or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage West Kensington customers and prospective customers in the West Kensington area who use or enquire about our storage services. It covers personal data collected both online and offline, including at our premises, through our website, in written correspondence, and via any other communication channels we may use.
Types of personal data we collect
We may collect and process the following categories of personal data:
Identification and contact details: name, address, previous address, date of birth, proof of identity details, and proof of address details.
Contact information: correspondence address, billing address, and other contact details relevant to managing your account and storage contract.
Contract and account information: storage unit number, contract dates, payment history, rental status, communications related to your contract, and other information required to manage your storage agreement.
Payment and billing information: billing details, payment records, and limited payment card information processed in accordance with applicable payment security standards. We do not store full payment card details where this is not necessary.
Security and access information: entry and exit logs, access codes, CCTV footage from our facilities, and records of incidents or security-related events.
Marketing preferences: your preferences about receiving marketing communications and information about our services or offers.
Technical data: to the extent that we use online tools, we may collect technical information such as IP address, device details, and basic usage data related to visits to our website, where this is necessary for security, performance and service improvement.
How we collect personal data
We collect personal data directly from you in the following ways:
When you enquire about our services.
When you enter into a storage contract with us.
When you make a payment or update your billing information.
When you contact us with questions, feedback or complaints.
When you visit our facilities, including through CCTV and access control systems.
We may also collect personal data from third parties where lawful and appropriate, for example credit reference agencies or fraud prevention services, in order to verify your identity, assess creditworthiness or prevent unlawful activity.
Lawful bases for processing your personal data
We process your personal data only where we have a lawful basis to do so. The main lawful bases we rely on are:
Contract: we process personal data that is necessary to enter into, perform and manage your storage contract, including setting up your account, processing payments, providing access to your storage unit, and communicating with you about your contract.
Legal obligation: we process personal data where necessary to comply with legal or regulatory requirements, such as tax and accounting obligations, law enforcement requests, and health and safety rules.
Legitimate interests: we may process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. These legitimate interests include managing our facilities, ensuring security and prevention of crime, improving our services, handling customer queries, and defending our legal rights.
Consent: in some cases we rely on your consent, for example to send you certain types of marketing communications that you have opted in to receive. Where we rely on consent, you have the right to withdraw your consent at any time.
How we use your personal data
We use your personal data for the following purposes:
To respond to enquiries and provide information about our storage services.
To set up and manage your customer account and storage contract.
To process payments, issue invoices and manage billing.
To provide you with access to your storage unit and maintain security of our premises.
To monitor and enhance the safety and security of our facilities, including through CCTV monitoring and access records.
To communicate with you about your contract, including notices, changes to terms, payment reminders and service updates.
To handle complaints, disputes and customer support issues.
To meet legal and regulatory obligations, including record keeping and responding to legally binding requests.
To send you information about our services, offers or updates where you have given consent or where we are otherwise permitted by law to do so.
To protect our business, staff, customers and property, including the prevention and detection of fraud and other unlawful activity, and to enforce our contractual and legal rights.
Data sharing and processors
We may share your personal data with carefully selected third parties where necessary and lawful, including:
Payment service providers that process payments on our behalf.
IT and cloud service providers that host or support our systems and data storage.
Security service providers who help us protect our premises and systems.
Professional advisors, such as accountants, auditors, legal advisors and insurers, where required for business or legal purposes.
Debt collection agencies or credit reference agencies where necessary to manage unpaid accounts or assess risk.
Law enforcement agencies, regulatory bodies and courts where we are legally required to do so or where this is necessary to protect our rights, customers or property.
Where we engage third parties to process personal data on our behalf, they act as data processors and are bound by contractual obligations to keep personal data secure, to use it only for the specified purposes, and to act in accordance with applicable data protection laws.
International data transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, such as using data transfer agreements that incorporate standard contractual clauses or relying on other legally recognised transfer mechanisms.
Data retention
We keep your personal data only for as long as necessary for the purposes for which it was collected and in line with applicable legal, regulatory and operational requirements.
In general, we retain personal data for the duration of your contract and for a period afterwards to comply with legal obligations, resolve disputes, enforce contracts and maintain appropriate business records. Retention periods may vary depending on the type of data and the context in which it was collected.
Security and access-related data, such as CCTV footage and access logs, is kept only for as long as necessary for security, incident investigation and legal compliance, after which it is securely deleted or anonymised.
How we protect your personal data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include physical security at our facilities, restricted access to personal data, secure systems and backups, staff training, and policies designed to protect confidentiality and integrity of information.
While we take these precautions, no system can be guaranteed to be completely secure. We continuously review and update our security measures in line with legal requirements and industry practices.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights are subject to certain legal conditions and exceptions.
Right of access: you have the right to request confirmation of whether we process your personal data and to request a copy of that data, along with information about how we use it.
Right to rectification: you have the right to request correction of inaccurate personal data and completion of incomplete data we hold about you.
Right to erasure: you may have the right to request deletion of your personal data where there is no good reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected and we are not required to keep it for legal or regulatory reasons.
Right to restriction: you may have the right to request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to its processing.
Right to data portability: in certain circumstances, you have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format and to request that we transmit that data to another controller, where technically feasible.
Right to object: you have the right to object to processing that is based on our legitimate interests, including profiling based on those interests, and to object at any time to the processing of your personal data for direct marketing purposes.
Rights in relation to automated decision making: if we use automated decision making that has legal or similarly significant effects on you, you have the right to request human intervention and to express your point of view and contest the decision.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. When we make changes, we will revise the date of the latest version and, where appropriate, notify you in advance. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.
Contact and further information
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the contact details provided on our main customer information materials or at our premises in the West Kensington area.
