Privacy Policy - Sevenkings Storage

Sevenkings Storage is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with our storage services. It applies to all Sevenkings Storage customers in area, including individuals, business customers, account holders, authorized users, and anyone who interacts with us in relation to our services.

This policy is designed to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It should be read together with any service terms or customer agreements that apply to your use of our storage services.

1. Personal Data We Collect

We collect only the personal data that is necessary for the operation of our services, the administration of customer accounts, the security of our facilities, and compliance with legal obligations. The types of information we may collect include:

Identity details such as name, date of birth, and identification numbers where verification is required.
Contact details such as postal address, email address, and telephone number.
Account information such as customer reference numbers, service preferences, billing records, and payment status.
Transaction data relating to payments, invoices, deposits, refunds, and service usage.
Security and access records such as entry logs, key or access-code use, CCTV images where applicable, and incident reports.
Communication records including enquiries, complaints, instructions, and correspondence with our staff.
Technical data such as IP address or device information if you interact with any digital systems we provide.

We generally collect personal data directly from you when you create an account, complete a booking, sign an agreement, make a payment, contact us, or use our facilities. In some cases, we may also receive information from third parties, such as payment providers, identity verification services, insurers, legal advisers, or public authorities.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide storage services and manage customer accounts.
To verify identity and prevent fraud or unauthorised access.
To process payments, deposits, refunds, and account adjustments.
To communicate with customers about bookings, service updates, reminders, and notices.
To monitor and maintain the security of our sites, staff, customers, and stored property.
To investigate incidents, resolve disputes, and enforce our agreements.
To comply with legal and regulatory requirements.
To improve service quality, operations, and customer experience.

We will not use personal data for purposes that are incompatible with the original reason it was collected unless we have a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the situation, Sevenkings Storage may rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes managing your storage agreement, billing, access arrangements, and related customer services.

Legal obligation

We may process data where required to comply with legal obligations, including tax, accounting, fraud prevention, regulatory compliance, and responding to lawful requests from public authorities.

Legitimate interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include protecting our premises, preventing misuse of services, managing business operations, and improving service efficiency. Where we rely on legitimate interests, we consider the impact on individuals and apply safeguards where appropriate.

Consent

In limited situations, we may rely on your consent, for example for certain optional communications or uses that are not necessary for service delivery. Where consent is used, you may withdraw it at any time.

Special category data is not usually required for our services. If such data is ever processed, we will do so only where permitted by law and with appropriate safeguards.

4. Data Sharing and Processors

We may share personal data with trusted third parties only where necessary and appropriate. These parties act either as data processors on our behalf or as independent controllers in their own right.

Our processors may include:

IT and cloud service providers that host, store, or support our systems.
Payment service providers that process card payments, direct debits, or refunds.
Identity verification and fraud prevention providers that help us verify customers and protect against misuse.
Security providers such as CCTV, alarm monitoring, or access-control support services.
Professional advisers such as accountants, auditors, insurers, and legal advisers.
Maintenance and facility support contractors where access to data is necessary to provide services securely.

All processors are required to handle personal data only on our documented instructions, keep it confidential, implement appropriate security measures, and comply with data protection law. We do not sell personal data.

We may also disclose personal data if required by law, if necessary to protect the rights, property, or safety of Sevenkings Storage, our customers, staff, or others, or in connection with legal claims, investigations, or disputes.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including for the fulfilment of our contractual duties, legal obligations, and legitimate business needs. Retention periods vary depending on the type of data and the purpose for which it is held.

As a general approach:

Customer account and contract records are retained for the duration of the relationship and for a reasonable period afterwards.
Financial and tax records are retained for the period required by law.
Security records, such as access logs or CCTV footage, are retained only for as long as needed for security, incident review, or legal purposes.
Correspondence and complaint records are kept as long as necessary to manage the matter and for audit or legal defence purposes.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction, or disclosure. These measures may include access controls, authentication procedures, staff confidentiality obligations, secure storage, and regular review of security practices.

Although we strive to protect personal data, no system can be guaranteed to be completely secure. If a personal data breach occurs and there is a risk to your rights and freedoms, we will respond in line with legal requirements.

7. Your Rights

Subject to certain conditions and exemptions under data protection law, you have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data where there is no lawful reason for us to keep it.
Right to restriction – to ask us to limit how we use your data in certain circumstances.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data has been handled unlawfully. We encourage customers to raise concerns with us first so we can try to resolve them quickly and fairly.

8. International Transfers

If personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect it in line with applicable law. This may include approved contractual protections or transfer arrangements permitted under data protection rules.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary in connection with a customer account and permitted by law. Where we become aware that we have collected such data inappropriately, we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, business practices, or our services. The most current version will apply to the processing of personal data. We encourage customers to review this policy periodically so they remain informed about how their information is used.

11. Summary of Our Commitment

Sevenkings Storage will process personal data fairly, lawfully, and transparently. We will collect only what we need, use it for clear and legitimate purposes, keep it no longer than necessary, and protect it with appropriate safeguards. We respect your privacy rights and aim to handle all data responsibly and in compliance with applicable law.

By using Sevenkings Storage services, customers in area acknowledge that their personal data may be processed as described in this Privacy Policy.