Storage Kilburn Privacy Policy
This Privacy Policy explains how Storage Kilburn collects, uses, stores, and protects personal data relating to its customers and prospective customers in the Kilburn area. It is intended to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies whenever you interact with Storage Kilburn, including when you make an enquiry, enter into a storage agreement, access our premises, or use our services in any other way.
Scope and data controller
Storage Kilburn is the data controller for the personal data described in this Privacy Policy. This means that Storage Kilburn decides how and why your personal data is processed. This policy applies to all customers and prospective customers using Storage Kilburn services in the Kilburn area, including individuals and, where applicable, the representatives of business customers.
Personal data we collect
We collect and process different categories of personal data depending on how you interact with us. The types of data we may collect include:
Identification and contact information: name, postal address, billing address, contact preferences, and national identification details where required for verification or anti-fraud checks.
Account and contract information: storage unit number, contract dates, services selected, payment history, correspondence relating to your account, and records of agreements entered into with Storage Kilburn.
Payment and billing information: payment method details, billing records, invoices, and information necessary to process payments and prevent fraud. Where third-party payment processors are used, we receive limited information from them such as payment confirmation and status.
Security and access information: CCTV footage from our premises, access logs, entry and exit records, and information relating to security incidents or suspicious activity. CCTV is used for the safety and security of our customers, staff, and property.
Communication information: records of emails, letters, and notes of telephone conversations with you, including enquiries, complaints, feedback, and service updates.
Technical and usage information: basic technical information related to your use of our online services, such as the date and time of visits and pages viewed, to help us operate and secure our website and systems.
How we collect personal data
We collect personal data directly from you when you make an enquiry, request a quote, sign a storage agreement, set up or manage your account, make a payment, enter our premises, or contact us by phone or in writing. We may also collect data automatically through CCTV systems on site and from access control systems used to enter and exit the premises.
In certain circumstances, we may receive personal data from third parties, such as payment processors, credit reference agencies, or law enforcement agencies, where this is necessary for the purposes described in this policy.
Lawful bases for processing
We only process your personal data where we have a valid lawful basis under data protection law. The main lawful bases we rely on are:
Contract: We process personal data to enter into and perform our contract with you, including setting up your account, providing storage services, managing your bookings, and processing your payments.
Legal obligation: We process personal data where necessary to comply with legal obligations, such as tax and accounting requirements, fraud prevention, law enforcement requests, and health and safety regulations.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This includes securing our premises with CCTV, managing and improving our services, preventing and investigating misuse of our facilities, recovering debts, and maintaining business records.
Consent: In limited situations, we may rely on your consent, for example for certain forms of direct marketing or optional communications. Where we rely on consent, you can withdraw it at any time by contacting us, and this will not affect the lawfulness of processing carried out before consent was withdrawn.
How we use your personal data
We use your personal data to:
Provide and manage storage services, including setting up and administering your account, managing access to units, and handling bookings or renewals.
Process payments, issue invoices, and maintain financial and audit records.
Maintain the security and integrity of our premises, systems, customers, and staff, including through CCTV monitoring and access control.
Respond to your enquiries, requests, and complaints, and communicate with you about your account and our services.
Meet our legal and regulatory obligations, including cooperating with law enforcement and regulatory authorities where required.
Improve our services, manage our business operations, and perform internal analysis and reporting.
Data sharing and processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where this is necessary for the purposes described in this policy and where appropriate safeguards are in place.
Service providers and processors: We use third-party processors to support our operations, such as providers of payment processing, secure data storage, IT and systems support, access control systems, CCTV maintenance, and professional advisers such as accountants. These processors act on our instructions, use your data only for our specified purposes, and are bound by contractual obligations to protect your personal data.
Authorities and legal recipients: We may share personal data with law enforcement agencies, regulatory authorities, courts, or other public bodies where we are legally required to do so or where it is necessary to protect our rights, the rights of our customers, or the safety of individuals.
Business transfers: In the event of a sale, merger, reorganisation, or similar business transaction involving Storage Kilburn, personal data may be transferred as part of that transaction, subject to appropriate safeguards and in accordance with applicable data protection laws.
International transfers
Where we use processors or service providers located outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your personal data, such as standard contractual clauses or other measures recognised under data protection law. Further information about such safeguards can be provided upon request.
Data retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected and to meet legal, accounting, or reporting requirements.
Customer and contract records: We typically retain records relating to your storage contract and account for the duration of your relationship with us and for a reasonable period afterwards to deal with queries, disputes, or legal claims, and to satisfy statutory retention obligations.
Financial and transaction data: We retain payment and billing records for a period required by tax and accounting laws.
CCTV footage and access logs: We retain CCTV recordings and access control records for a limited period, which is determined by our security needs and legal obligations. This period is generally short unless footage is required for a specific investigation, in which case it may be retained for longer.
When data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe manner.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply subject to certain conditions and legal exceptions.
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you, together with certain information about how we use it.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you have withdrawn consent and there is no other lawful basis for processing.
Right to restriction of processing: You can request that we restrict the processing of your personal data in certain situations, for instance while we are investigating a concern you have raised about the accuracy or use of your data.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used, machine-readable format, and you may have the right to transmit that data to another controller.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is required for legal claims.
Rights in relation to automated decision-making: Storage Kilburn does not carry out solely automated decision-making that produces legal or similarly significant effects on you.
Exercising your rights and contacting us
If you wish to exercise any of your data protection rights, or if you have questions or concerns about how we handle your personal data, you can contact Storage Kilburn using the usual contact details provided in your contract or on our official communications. We may need to verify your identity before responding to certain requests to protect your privacy and security.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so that we can attempt to resolve your concerns directly.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any changes will take effect when the updated policy is made available. We recommend that you review this policy periodically to stay informed about how we protect your personal data.
