Storage Kidbrooke Privacy Policy
This Privacy Policy explains how Storage Kidbrooke collects, uses, stores, and protects personal data relating to customers and prospective customers in the Storage Kidbrooke service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Storage Kidbrooke customers in the area, including individuals, sole traders, and representatives of business customers.
Who We Are and Scope of This Policy
Storage Kidbrooke provides storage and related services to customers within its operating area. In providing these services, Storage Kidbrooke acts as a data controller in relation to the personal data described in this policy. This means that Storage Kidbrooke decides how and why your personal data is processed and is responsible for ensuring that such processing complies with applicable data protection laws.
Types of Personal Data We Collect
Storage Kidbrooke may collect and process different types of personal data depending on your relationship with us and the services you use. This may include:
Identification and contact details, such as your full name, postal address, billing address, and other contact details required to manage your account and provide services.
Account and service information, such as details of the storage unit or services you have booked, contract start and end dates, payment status, and communications relating to your account.
Payment and transaction information, such as records of payments made, payment methods used, and invoicing history. We do not store full payment card details when processed by third party payment providers.
Security and access information, such as access logs, unit numbers, time and date of entry and exit, and, where applicable, recorded CCTV images at Storage Kidbrooke facilities.
Communication data, such as copies of correspondence, enquiries, feedback, and complaints you submit to us, as well as notes relating to customer service interactions.
Technical and usage information, such as basic information about your interaction with our website or online booking systems, including time and date of access and basic device or browser details, to the extent necessary for security, performance, and service improvement.
How We Collect Personal Data
We collect personal data in several ways, including:
Directly from you when you contact us, request a quote, make a booking, sign a contract, set up an account, or correspond with us in any way.
Automatically when you use our website or online services, through basic technical data that is necessary for the operation and security of our systems.
From third parties, such as payment processors, referencing or verification providers, and business partners, where this is necessary for us to deliver our services and manage risk.
Lawful Bases for Processing Your Personal Data
Storage Kidbrooke processes your personal data only where we have a lawful basis under data protection law. The main lawful bases we rely on are:
Contract. We process your personal data where it is necessary to enter into, or perform, a contract with you. This includes processing your details to set up and manage your storage agreement, to administer payments, and to provide customer service.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests and where these are not overridden by your interests or fundamental rights. This includes ensuring the security of our premises, improving our services, protecting against fraud and misuse, and managing our business operations.
Legal obligations. We process certain personal data to comply with legal and regulatory requirements, such as record keeping, tax and accounting obligations, preventing fraud, and cooperating with law enforcement or regulatory authorities where required by law.
Consent. In some cases, we may rely on your consent, for example for certain forms of direct marketing that are not covered by legitimate interests. Where we rely on consent, you have the right to withdraw your consent at any time.
How We Use Your Personal Data
Storage Kidbrooke uses personal data to:
Provide you with storage and related services, including managing bookings, contracts, account administration, and access to facilities.
Process payments, issue invoices, handle refunds, and manage any outstanding balances.
Maintain the safety and security of our premises, staff, and customers, including the use of access controls and CCTV where in place.
Respond to your enquiries, manage complaints, and provide customer support.
Improve our services, manage our business operations, and perform internal administration, including monitoring service quality and training staff.
Comply with legal duties, including responding to lawful requests from authorities and maintaining required records.
Data Sharing and Use of Processors
Storage Kidbrooke may share your personal data with carefully selected third parties where necessary for the purposes outlined in this policy. These third parties act either as data processors on our behalf or as independent data controllers.
Data processors are service providers who process personal data on our instructions and for our purposes. They assist us with, for example, payment processing, customer relationship management, IT hosting and support, security and access systems, and document storage. We require all processors to keep your data secure and to process it only in accordance with our written instructions and applicable data protection law.
Other data controllers may include financial institutions that process payments, professional advisers such as accountants or legal advisers, and authorities or law enforcement bodies where we are required to share information by law or in order to protect our rights or the rights of others.
We do not sell your personal data. We only share it to the extent necessary to provide our services, run our business, protect our legitimate interests, or comply with legal obligations.
International Data Transfers
Where we use processors or service providers located outside the United Kingdom or the European Economic Area, or where data may be accessed from such locations, we take steps to ensure that appropriate safeguards are in place. These may include ensuring that the destination country has an adequacy decision, using standard contractual clauses approved by relevant authorities, or applying other safeguards recognised under data protection law.
Data Retention and Storage Periods
Storage Kidbrooke keeps personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet any legal, accounting, or reporting requirements. The specific retention period will depend on the type of data and our relationship with you.
In general, we retain customer account and contract data for a period after the end of your contract to deal with any enquiries, disputes, or legal claims and to comply with tax and financial record keeping requirements. CCTV and access log data, where used, may be retained for shorter periods, unless required longer for security or legal reasons.
When personal data is no longer required, it will be securely deleted, anonymised, or otherwise removed from our systems, subject to any legal obligations that require us to retain certain information for specified periods.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures are designed to ensure a level of security appropriate to the risks associated with the processing of your personal data. Access to personal data is limited to those employees, contractors, and service providers who need it for the purposes described in this policy and who are subject to confidentiality obligations.
Your Rights Under Data Protection Law
As a customer of Storage Kidbrooke, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions under data protection law. These include:
The right of access. You can request a copy of the personal data we hold about you and information about how we process it.
The right to rectification. You can ask us to correct any inaccurate or incomplete personal data we hold about you.
The right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
The right to restrict processing. You can ask us to restrict the processing of your personal data in certain situations, such as while we verify the accuracy of the data or deal with an objection.
The right to data portability. In certain circumstances, you can request that we provide you with personal data you have given us in a structured, commonly used, machine readable format, or that we transmit it to another controller.
The right to object. You can object to our processing of your personal data where it is based on legitimate interests or for direct marketing. If you object to direct marketing, we will stop processing your personal data for that purpose.
The right to withdraw consent. Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed.
Changes to This Privacy Policy
Storage Kidbrooke may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. When we make material changes, we will take appropriate steps to inform you. The version published on our website or provided to you will always state the date of the latest update, and the updated Privacy Policy will apply from that date.
