Privacy policy

Version 1.1 · 25 August 2026

This policy explains how we collect and use your personal data when you use our website, enquire about or rent storage with us, or visit our facilities. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller is My Storage Group Ltd (company number 16390299, VAT registration number GB 523 5860 89), which trades as Collect Storage and is registered in England and Wales. We are registered with the Information Commissioner’s Office under registration number C2015927. Our data protection contact is the owner of the business. For anything to do with your data, contact us at hello@collectstorage.co.uk or by post at New Shelve Farm, Ashford Road, Lenham, Maidstone, ME17 2DS.

What we collect

• Identity and contact details: your name, address, phone number and email.
• Identity verification: before we collect your things we verify who you are (see below). From that check we keep the outcome, the name shown on your document, whether it matches your booking, the address shown, the document type, and any warnings raised. We do not keep your date of birth, age, gender, document number, issue or expiry dates, or the photographs of your document and face.
• Agreement and payment details: your storage agreement, the value you declare for your things, the size and service you booked, and your collection and return dates. Card payments are taken on a card terminal supplied by CreatePay and processed by Worldpay: card details are never entered on this website, and we never see or store them. We keep invoices and a record of payments.
• Security information: our facility is covered by CCTV. We do not record telephone calls. We may keep records of when your things are collected, accessed or returned.
• Website information: cookies and similar technologies, as described in our cookie policy. If you reach us by clicking one of our adverts, this includes the advert code and campaign labels carried in the web address you landed on. We store those alongside your enquiry so we can see which adverts bring us genuine customers, and we may send that code back to the advertising platform to tell it the advert worked.
• An alternate contact: if you give us a second contact for your account, you confirm they’re happy for us to hold their details for that purpose.

Why we use it

We only use your data where the law allows. In practice that means:

• To provide our service to you: managing your account, arranging collection and return, taking payment, and sending you notices about your storage.
• To meet our legal obligations: verifying identity, keeping tax and accounting records, and responding to lawful requests from the police, HMRC or other authorities.
• For our legitimate interests: keeping our site and your things secure (including CCTV), preventing fraud and crime, recovering debts, improving our service, and defending legal claims. We balance these against your rights.
• With your explicit consent: the face match and liveness part of the identity check, which is biometric data. You give that consent to the verification provider at the point of the check, and you are free to refuse, in which case we cannot collect your things and you may cancel at no charge.
• With your consent: sending you marketing. You can withdraw consent at any time by emailing us or using the unsubscribe link in any message.

Who we share it with

We do not sell your data, and we never share it with anyone for their own marketing. We share it only where we need to:

• Our professional advisers, and debt-collection agencies, if an account falls into default.
• The police or other authorities, where the law requires or allows it.
• A buyer of our business, if we ever sell or transfer it, in which case your data would move with it.

We also use these providers, who act on our instructions only:

Where your data is kept, and for how long

Some of the providers above process data outside the UK. Where they do, we rely on the UK’s adequacy regulations where the country is covered by them, and otherwise on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

We keep data only as long as we need to:

Your rights

You have the right to ask for a copy of your data, to have anything inaccurate corrected, and to have data deleted where there’s no longer a reason to keep it. You can also ask us to restrict or stop certain uses, ask for your data in a portable format, and withdraw any consent you’ve given, including your consent to the biometric check. To do any of this, email hello@collectstorage.co.uk. We’ll respond within one month.

Identity verification

Before we collect your things, we ask you to verify your identity. We do this because we take your property into our possession and store it, so we need to know whose property it is.

The check is carried out by Didit, an independent verification provider. You are sent a link, you photograph an identity document and yourself, and Didit compares the two and checks the document is genuine. That comparison involves biometric data, which is a special category of personal data. Didit asks for your explicit consent before carrying it out, and you are free to refuse.

We receive only the summary listed above. The photographs of your document and your face are held by Didit under their own privacy notice and are not stored by us.

If the check cannot be completed, or the details do not match your booking and the difference is not explained, we may decline to proceed and end the agreement, refunding what you have paid less any journey we have already made.

CCTV

CCTV runs at and around our facility to keep staff, customers and everything we store safe and to prevent and detect crime. Signs are displayed on site. Footage is kept for the period above and only shared with people who have a lawful reason to see it. You can ask for footage of yourself as part of your right of access.

Complaints

If you’re unhappy with how we’ve handled your data, please tell us first and we’ll do our best to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

We’ll post any changes here and, if a change is significant, tell existing customers by email. This version is dated 25 August 2026.