Privacy Policy - Chelsea Storage

This Privacy Policy explains how Chelsea Storage collects, uses, shares, stores, and protects personal data relating to our customers, prospective customers, visitors, and other individuals whose information we process in connection with our storage services. This policy applies to all Chelsea Storage customers in area. It is intended to be read together with any service terms or notices we provide at the time we collect your data.

1. Who We Are

Chelsea Storage is responsible for deciding how and why your personal data is used in connection with our storage operations. In data protection terms, we are generally the data controller for the personal data described in this policy. In limited cases, we may act as a data processor where we handle data strictly on behalf of another party. This policy is designed to meet the requirements of the UK General Data Protection Regulation and, where applicable, the Data Protection Act 2018.

2. Personal Data We Collect

We may collect and process different types of information depending on how you interact with us and which services you use. The categories of data may include:

Identity information such as your name, date of birth, and identification details.
Contact information such as address, email address, and telephone number.
Account and service information such as booking details, unit allocation, payment records, access permissions, and correspondence.
Financial information such as billing details, transaction history, and payment status.
Security and access information such as entry logs, CCTV footage, key or access code records, and incident reports.
Communication data including emails, phone calls, written requests, complaints, and feedback.
Technical data where relevant, such as device information or basic usage data from our systems.

We may also receive data from third parties, such as payment providers, identity verification services, insurance partners, contractors, or public sources where necessary and lawful.

3. How We Use Your Data

We use personal data only where the law allows us to do so. The main purposes for which Chelsea Storage processes personal data include:

setting up and managing your customer account;
providing storage services and maintaining access to your unit;
processing payments, refunds, and invoicing;
verifying identity and carrying out fraud prevention checks;
protecting our sites, staff, customers, and property;
communicating with you about your account, service changes, or operational matters;
handling complaints, disputes, and legal claims;
complying with legal and regulatory obligations;
improving our services, systems, and customer experience;
maintaining records for administrative, accounting, and audit purposes.

We will not use your data for purposes that are incompatible with the original reasons for collection unless we have a lawful basis to do so.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Chelsea Storage relies on one or more of the following bases:

Performance of a Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes setting up your storage account, managing unit access, taking payment, and providing the services you request.

Legal Obligation

We process personal data where we are required to do so by law. This may include tax, accounting, anti-fraud, health and safety, or regulatory compliance requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include protecting our premises, preventing crime, ensuring operational security, improving our services, and managing internal administration. Where we rely on legitimate interests, we assess whether the processing is necessary and proportionate.

Consent

In limited circumstances, we may rely on your consent, for example where you agree to receive certain marketing messages or optional communications. Where consent is used, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

5. Sharing Your Personal Data

We may share personal data with third parties when necessary for the purposes described in this policy. These may include:

Payment processors who handle card or electronic payments on our behalf;
IT and cloud service providers who support our systems, storage, and communications;
Security and monitoring providers who help protect our premises and assets;
Professional advisers such as accountants, insurers, lawyers, and auditors;
Delivery, maintenance, and contractor services where access or coordination is needed;
Public authorities, regulators, or law enforcement where disclosure is required or permitted by law;
Debt recovery or legal service providers where necessary to enforce rights or recover outstanding amounts.

We only share the minimum amount of data required and require relevant third parties to protect personal data appropriately. Where a third party acts as a processor on our behalf, they may only use the data according to our instructions and the applicable contract.

6. Processors and Data Security

Where Chelsea Storage uses processors, those processors may include providers of booking systems, payment systems, CCTV storage, customer support tools, document management, hosting, and backup services. We choose processors carefully and require them to implement suitable technical and organisational measures to safeguard your data.

We use reasonable security measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, restricted permissions, encryption where appropriate, secure storage, staff confidentiality obligations, and monitoring of systems. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, tax, insurance, or dispute-resolution requirements. Retention periods may vary depending on the type of record and the reason for processing.

Customer account and contract records are normally retained for the duration of the relationship and for a further period after it ends, to manage claims and legal obligations.
Payment and accounting records are retained for the period required by law and standard accounting practice.
Security records such as access logs or CCTV footage are kept only as long as needed for safety, crime prevention, or incident investigation.
Enquiry records may be retained for a limited period where they are needed to follow up, defend against claims, or assess service interest.

When personal data is no longer needed, we will delete it securely or anonymise it so it can no longer identify you.

8. Your Rights

Data protection law gives you a number of rights in relation to your personal data. Subject to legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete information;
Erase your data in certain circumstances;
Restrict how we use your data in certain situations;
Object to processing based on legitimate interests or direct marketing;
Port certain data to another provider where technically feasible;
Withdraw consent where processing is based on consent;
Lodge a complaint with a data protection supervisory authority if you believe your rights have been infringed.

We may need to verify your identity before responding to a request. We will respond within the time limits set by law and will explain if any exemption applies.

9. Marketing Preferences

If we send you marketing communications, we will do so only where permitted by law. You can object to direct marketing at any time. If you opt out, we will stop sending such communications as soon as reasonably practicable. Service-related communications are not marketing and may still be sent where necessary to manage your account or the services you receive.

10. International Transfers

Where personal data is transferred outside the UK or other applicable jurisdictions, we will take steps to ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We assess transfers carefully to help protect your rights and freedoms.

11. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children except where necessary in connection with lawful customer arrangements, authorisations, or legal requirements. If we learn that we have collected data from a child without proper authority, we will take reasonable steps to delete it or obtain the appropriate permission.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated version will apply from the date it is published or otherwise communicated. We encourage you to review it periodically so you remain informed about how we use personal data.

13. Additional Information

Where this policy refers to legal rights, obligations, or terms such as personal data, processing, or controller, these terms have the meanings given to them in applicable data protection law. Nothing in this policy is intended to limit any rights you may have under law.

By using Chelsea Storage services, you acknowledge that your personal data will be handled in accordance with this Privacy Policy.

Last updated: 2026