Storage Kenley Privacy Policy
This Privacy Policy explains how Storage Kenley collects, uses and protects personal data relating to our customers and prospective customers in our local service area. It sets out the types of information we process, the lawful bases we rely on, how long we keep your data, how we share it with third parties, and the rights you have under the UK General Data Protection Regulation and related data protection laws.
Scope of this Privacy Policy
This Privacy Policy applies to all Storage Kenley customers and prospective customers in our service area who use or enquire about our storage units, packing materials, vehicle access, or any associated services, whether in person, by phone, or through other communication channels. By engaging with Storage Kenley and providing your personal data, you acknowledge that you have read and understood this Privacy Policy.
Personal Data We Collect
Storage Kenley collects and processes personal data that is necessary to provide our services and operate our business. The types of personal data we may collect include:
Identity and contact information such as your full name, postal address, billing address, and any other contact information you choose to provide, such as communication preferences.
Customer account and contract information such as unit numbers, contract start and end dates, payment status, deposit details, records of changes to your contract, and correspondence relating to your storage agreement.
Payment and transaction information such as payment method, partial card details where required for billing, payment history, invoices and receipts. We do not store full card details where this is not necessary and we rely on secure payment processors to handle card transactions.
Communication records such as notes of enquiries, complaints, feedback, and any other correspondence with Storage Kenley, including information you provide when you request a quote or ask for support.
Security and access information such as CCTV footage at our premises, access logs for entry systems where applicable, vehicle registration numbers when required for site access, and incident reports relating to the security and safety of our facility.
Technical and usage information such as basic technical data that may be collected when you interact with our online platforms, including device information, dates and times of access, and general usage statistics. We only collect technical data that is needed to operate and improve our services.
Purposes and Lawful Bases for Processing
Storage Kenley processes your personal data only where we have a lawful basis under data protection law. The main purposes and lawful bases are:
To provide storage services: We use your identity, contact, account and payment information to set up and manage your storage contract, provide access to your storage unit, process payments, and deliver customer support. The lawful basis is performance of a contract or steps taken at your request before entering into a contract.
To comply with legal obligations: We may process your personal data to meet legal and regulatory requirements, such as tax, accounting, security and safety obligations, record keeping rules, and requirements from law enforcement authorities where applicable. The lawful basis is compliance with a legal obligation.
To protect our legitimate interests: We may process your personal data to manage and protect our premises, investigate potential misuse of our services, handle disputes, maintain and improve our operations, and ensure the security of our customers and staff. The lawful basis is our legitimate interests in running and safeguarding our business, provided that your rights and interests are not overridden.
To communicate with you: We may use your contact details to respond to enquiries, send important service communications about your contract, inform you of changes to our terms, and request feedback. The lawful basis is performance of a contract and our legitimate interests in keeping you informed about your services.
Marketing communications: Where we send you marketing communications about Storage Kenley products or services that are similar to those you already use, we rely on our legitimate interests in promoting our business and will respect any objection you raise. Where the law requires your consent for certain types of marketing, we will only send such communications if you have given your consent, and you may withdraw it at any time.
Data Retention
Storage Kenley will keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements.
Customer contract and billing information is generally retained for the duration of your contract and for a period afterwards that allows us to meet legal record keeping and tax obligations, respond to queries, and manage any disputes. This period will normally not exceed seven years from the end of your contract, unless a longer retention period is required by law or is necessary for the establishment, exercise or defence of legal claims.
CCTV footage and access logs are retained for a shorter period that is appropriate for security and incident investigation, after which they are securely deleted or anonymised, unless they need to be kept longer as part of an ongoing investigation or legal matter.
Marketing preference information will be kept for as long as you remain subscribed to our communications or until you object or withdraw consent, after which we will retain only minimal information needed to ensure we respect your preferences in the future.
Data Processors and Third Parties
Storage Kenley may share personal data with carefully selected third party service providers who act as data processors on our behalf. These processors are engaged to support the operation of our business and must only process personal data according to our instructions and in compliance with applicable law.
Typical categories of data processors include payment processing providers who handle card or electronic payments, information technology and hosting providers who supply systems, storage and maintenance services, customer relationship and communication platforms used to manage bookings and correspondence, professional advisers such as accountants or legal advisers where necessary for business operations, and security service providers who assist with CCTV, access control or incident management.
We require all processors to implement appropriate technical and organisational measures to protect your personal data and to enter into written agreements that reflect the requirements of data protection law. We do not sell your personal data to third parties.
Where personal data is transferred outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place, such as an adequacy decision or standard contractual clauses, to ensure that your data remains protected.
Your Data Protection Rights
As a customer or prospective customer of Storage Kenley, you have a number of rights in relation to your personal data under data protection law. Subject to certain conditions and legal exemptions, you have the right to:
Access your personal data and receive a copy of the information we hold about you, together with an explanation of how it is used.
Request correction of any inaccurate or incomplete personal data we hold about you, so that it is accurate and up to date.
Request erasure of your personal data where there is no good reason for us to continue processing it, for example where the data is no longer needed for the original purpose and no legal obligation requires its retention.
Object to processing of your personal data where we are relying on legitimate interests and you believe that your rights and interests override our reasons for processing. You also have an absolute right to object to direct marketing.
Request restriction of processing where you contest the accuracy of the data, where the processing is unlawful and you prefer restriction instead of erasure, or where we no longer need the data but you require it for legal claims.
Request the transfer of your personal data to you or to another organisation in a structured, commonly used and machine readable format, where the processing is based on consent or on a contract and is carried out by automated means.
Withdraw consent where we rely on your consent for a particular form of processing, such as certain marketing communications. Withdrawal of consent will not affect the lawfulness of processing carried out before you withdraw it.
How We Protect Your Data
Storage Kenley takes appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include restricting access to personal data to those staff and processors who need it for their role, applying physical security measures at our premises, using suitable IT security safeguards and backup procedures, and providing staff with guidance on data protection responsibilities.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. Any significant changes will be communicated through our usual customer communication channels where appropriate. The most recent version of this Privacy Policy will always apply to the personal data we hold and process about Storage Kenley customers in our service area.
