Privacy Policy - Kenton Storage

This Privacy Policy explains how Kenton Storage collects, uses, stores, shares, and protects personal data. It applies to all Kenton Storage customers in the area, including prospective customers, current customers, former customers, and individuals who interact with us on behalf of a business, household, or organization. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

Important: This policy applies only to personal data processed by Kenton Storage in connection with our storage services, account administration, billing, security, operations, and related customer support activities.

1. Data We Collect

We collect only the personal data that is necessary for the purposes described in this policy. Depending on how you use our services, we may collect the following categories of data:

Identity data: name, title, date of birth, and any identifying information needed to set up or manage your account.
Contact data: address, email address, telephone number, and correspondence details.
Account and service data: customer reference numbers, storage unit details, rental dates, payment status, invoices, and service preferences.
Financial data: payment card details, bank details, payment history, refund information, and transaction records. Where possible, payment processing is handled by a secure third-party processor rather than stored directly by us.
Verification data: copies of identification documents or proof of address where required for fraud prevention, compliance, or contractual verification.
Technical data: IP address, device information, browser type, operating system, and access logs from digital systems used to manage bookings or account access.
CCTV and security data: video recordings, access-control logs, entry and exit records, and incident reports collected to protect our premises, customers, staff, and property.
Communication data: emails, telephone notes, written enquiries, complaints, feedback, and any records of customer service interactions.

We may also receive personal data from third parties, such as payment providers, identity verification services, insurers, lawful authorities, or a person acting on your behalf. Where this happens, we treat the data in line with this policy.

2. How We Use Personal Data

We use personal data only where we have a valid legal reason to do so. Our uses include:

creating and administering customer accounts;
providing storage services and managing access to units;
processing payments, deposits, refunds, and account balances;
verifying identity and preventing fraud;
protecting our premises, customers, staff, and stored property;
communicating about bookings, invoices, service changes, and account matters;
responding to enquiries, complaints, and support requests;
meeting legal, tax, accounting, insurance, and regulatory obligations;
enforcing agreements, recovering debts, and resolving disputes;
improving the safety, efficiency, and reliability of our services;
maintaining internal records and business administration.

We will not use personal data for purposes that are incompatible with the original reason for collection unless we have a lawful basis to do so and we notify you where required.

3. Lawful Basis for Processing

Under data protection law, Kenton Storage must have a lawful basis to process personal data. Depending on the purpose, we rely on one or more of the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes creating your account, administering your storage agreement, managing access to a unit, and handling payment or service-related communications.

Legal Obligation

We process personal data where necessary to comply with legal duties, including tax, accounting, record-keeping, fraud prevention, health and safety, and any lawful request from authorities.

Legitimate Interests

We process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include securing our site, preventing misuse, improving our services, maintaining audit trails, and resolving disputes. We ensure this processing is proportionate and limited to what is necessary.

Consent

In limited situations, we may rely on your consent, for example for optional marketing communications or certain non-essential data uses. Where consent is used, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Vital Interests

In exceptional circumstances, we may process personal data to protect someone’s vital interests, such as in an emergency involving health, safety, or security.

4. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary for the operation of our services, legal compliance, or protection of our legitimate interests. These third parties may act as processors or, in some cases, as independent controllers.

Examples of processors and service providers may include:

payment processors and banking service providers;
IT hosting, cloud storage, and software providers;
identity verification and fraud prevention providers;
security and CCTV system providers;
accounting, audit, and business administration services;
maintenance, cleaning, and facilities management providers who require limited access to relevant information;
professional advisers such as lawyers, insurers, or consultants when necessary.

We require processors to act only on our instructions, to keep personal data secure, and to use it only for the agreed purpose. We do not sell personal data.

We may also disclose data where required by law, court order, regulatory authority, law enforcement request, or to protect the rights, property, or safety of Kenton Storage, our customers, staff, or the public.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, contractual, and reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

Customer account and contract records: kept for the duration of the relationship and for a period after closure to manage claims, disputes, and legal obligations.
Financial and tax records: retained for the period required by law.
Security records and CCTV footage: retained for a limited period unless needed longer for an investigation, claim, or legal process.
Correspondence and support records: kept as long as necessary to handle your enquiry and maintain service history.
Verification data: retained only as long as needed for the relevant compliance or fraud prevention purpose.

When personal data is no longer required, it is securely deleted, anonymised, or otherwise disposed of safely.

6. Your Rights

You have a number of rights in relation to your personal data. These rights may be limited in some situations, but we will always assess requests carefully and respond as required by law.

Right of access: you may request confirmation of whether we process your data and receive a copy of it.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: in certain cases, you may ask us to delete your personal data.
Right to restriction: you may request that we limit how we use your data in certain circumstances.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: where applicable, you may request your data in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you are unhappy with how your data is handled. We encourage you to raise concerns with us first so we can try to resolve them promptly.

7. Security of Personal Data

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff training, physical security measures, and monitoring of key systems. Although no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risk.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place. These may include approved transfer mechanisms and contractual protections designed to keep personal data safe and to provide a level of protection consistent with UK data protection law.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our business operations. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we handle personal data.

10. Summary of Our Commitments

Kenton Storage is committed to treating personal data with care, transparency, and respect. We collect only what we need, use it for clear and lawful purposes, keep it no longer than necessary, and share it only with trusted processors or where required by law. We also respect your rights and aim to support you in exercising them.

By using Kenton Storage services, you acknowledge that this Privacy Policy applies to all Kenton Storage customers in the area and describes how we manage personal data in connection with our services.

This policy is intended to provide clear and accessible information about our data protection practices.

End of Privacy Policy.