Storage Seven Kings Privacy Policy
This Privacy Policy explains how Storage Seven Kings collects, uses, stores and protects personal data relating to our customers and prospective customers in our service area. It also sets out the legal bases under the UK General Data Protection Regulation and the EU General Data Protection Regulation, where applicable, and describes your rights in relation to your personal data.
This Privacy Policy applies to all Storage Seven Kings customers and applicants for storage services in our operating area, whether you interact with us in person, by telephone, in writing, or through any other communication channel we make available.
Who we are and scope of this policy
Storage Seven Kings acts as the data controller for the personal data described in this Privacy Policy. This means that we decide how and why your personal data is processed when you use our storage services or contact us about them.
This policy covers information relating to individuals who are customers, potential customers, guarantors, payers on an account, and authorised contacts for a storage unit, as well as individuals contacting us with general enquiries or visiting our premises.
Types of personal data we collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. The main categories of data we may collect include:
Identification and contact details such as name, postal address, billing address, identification document details where required for verification, and any other contact details you provide.
Account and contract information such as storage unit number, contract start and end dates, services selected, payment terms, and communications about your contract.
Payment and transaction data such as payment method, partial card details where permitted, payment history, and records of invoices and receipts. We do not store full payment card details when processed through secure payment providers.
Communication data such as records of emails, letters or other correspondence you send to us, notes of telephone calls where we log information about your query or request, and any feedback you provide.
Site security and access data such as times and dates of access to the premises where this is recorded for security purposes, vehicle registration information where required for site access, and recordings from closed circuit television systems covering entrance, exit and common areas, to the extent we operate such systems.
Technical data where you use any online platform or digital tools we may provide, such as IP address, basic device information and interaction logs, collected in line with data protection requirements to ensure the security and functionality of our systems.
How we collect personal data
We collect personal data directly from you when you request a quote, sign a storage agreement, make a payment, update your account details or communicate with us in any way.
We may also receive information about you from third parties where it is lawful to do so, such as payment service providers confirming the outcome of a transaction, or debt collection agencies if your account is in arrears and has been referred to them.
Where CCTV or access control is in use on our premises, personal data may be collected automatically when you enter, move within, or exit the site.
Lawful basis for processing your data
We rely on several lawful bases for processing personal data under the GDPR. The main ones are:
Contract performance: We process your personal data when it is necessary to enter into or perform a contract with you, for example to set up and manage your storage unit, take payments, and provide customer service related to your contract.
Legal obligation: We process certain data because we are required to do so under applicable laws, for example to keep certain financial and transactional records for tax and accounting purposes, or to comply with lawful requests from authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This includes maintaining the security of our premises, preventing and addressing fraud or misuse, managing our business operations, and improving our services. When relying on legitimate interests, we assess and balance any potential impact on you.
Consent: In limited cases, we may rely on your consent, for example where local law requires consent for certain types of marketing communications. Where we rely on consent, you may withdraw it at any time, and we will provide clear information on how to do so.
How we use your personal data
We use personal data for the following purposes, to the extent that each is relevant to your relationship with us:
To provide storage services, including setting up your account, preparing and administering your contract, allocating and managing your storage unit, facilitating access, handling queries, and providing customer support.
To process payments and manage billing, including raising invoices, receiving and recording payments, and taking steps to recover overdue amounts where necessary.
To maintain safety and security on our premises, including operating access control systems and CCTV where in use, detecting and investigating incidents, and cooperating with law enforcement where required by law.
To manage our business operations, including internal administration, quality control, training, and maintaining accurate records of customer interactions.
To comply with legal and regulatory obligations, including record keeping, responding to lawful requests from public authorities, and helping to prevent crime and fraud.
To communicate with you about your storage agreement, changes to our terms, service updates, or other issues directly related to your use of our services.
Data retention and storage
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, or to meet legal, accounting or reporting requirements.
In general, we retain core customer and contract data for a period after your storage agreement ends, to resolve any outstanding issues, deal with potential disputes, and comply with record keeping obligations. The exact retention period can vary depending on the type of data and applicable legal requirements.
Access control and security records, such as CCTV footage where used, are kept for a shorter period unless an incident requires us to retain specific recordings for longer in connection with an investigation or legal claim.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be linked to an identifiable individual.
Data processors and sharing with third parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These service providers process data strictly in accordance with our instructions and only for the purposes described in this Privacy Policy. Categories of processors may include:
Payment processing providers who handle card or electronic payments.
IT and cloud service providers who host our systems, store data, or provide technical support.
Security service providers who assist in maintaining the safety and security of our premises and systems, where applicable.
Professional advisers such as accountants or legal advisers where necessary to obtain professional services.
We may also share personal data with other third parties in limited circumstances, such as:
With debt collection agencies or legal representatives in the event of non payment or serious breaches of contract.
With law enforcement agencies, regulators or public authorities where we are legally required or permitted to do so.
With any third party acquiring our business or assets, in which case personal data may be transferred as part of a business transfer, subject to appropriate safeguards.
We do not sell your personal data to third parties.
International transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, or where data is otherwise transferred internationally, we will ensure that appropriate safeguards are in place to protect your personal data. These may include using standard contractual clauses approved by relevant authorities or ensuring that the destination country has been recognised as providing an adequate level of data protection.
Your data protection rights
Under the GDPR, you have a number of rights in relation to your personal data. These rights apply to all Storage Seven Kings customers in our service area, subject to certain limitations and conditions:
Right of access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data, along with information about how we use it.
Right to rectification: You have the right to ask us to correct or complete personal data that is inaccurate or incomplete.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and we do not need to keep it for legal reasons.
Right to restriction of processing: You can ask us to restrict the processing of your personal data in specific situations, for example while we verify its accuracy or assess an objection you have raised.
Right to object: You have the right to object to processing of your personal data that is based on our legitimate interests, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive personal data you have provided to us in a structured, commonly used and machine readable format, and to request that we transfer it to another controller where technically feasible.
Right to withdraw consent: Where we rely on your consent for processing, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with a data protection authority if you believe your data protection rights have been infringed. In the United Kingdom, this is the Information Commissioner's Office.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, the way we handle personal data, or legal requirements. When we make significant changes, we will take reasonable steps to inform you, for example by displaying a notice at our premises or updating the version date on this page. We encourage you to review this Privacy Policy periodically so that you remain informed about how we use your personal data.
Your continued use of our services after any changes take effect will signify your acknowledgement of the updated Privacy Policy.
