Privacy Policy

Nelson’s Self Store King’s Lynn
Last updated: September 2026

1. Who we are

This Privacy Policy explains how NELSONS SELFSTORE LIMITED, trading as Nelson’s Self Store King’s Lynn, collects and uses personal information in connection with our King’s Lynn website, enquiries and storage services. It also explains your choices and data protection rights.

NELSONS SELFSTORE LIMITED is the controller responsible for deciding how and why we use the personal information covered by this policy.

Company number: 10066586, registered in England and Wales.
Registered office and postal address for privacy correspondence: Unit 14, Hoddesdon Enterprise Centre, Pindar Road, Hoddesdon, Hertfordshire, EN11 0FJ, United Kingdom.
King’s Lynn storage location: Plot 5, Land at Campbells Meadow, King’s Lynn, PE30 4YR.
Website: https://nelsonsselfstorekingslynn.co.uk
Email: nelsonskingslynn11@gmail.com
Telephone: 07414 225057.

Please address privacy enquiries to the Privacy Contact at NELSONS SELFSTORE LIMITED. You can use the email, telephone number or registered office address above. You do not need to use a particular form to exercise your rights.

We handle personal information under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, including relevant changes made by the Data (Use and Access) Act 2025.

2. Who this policy covers

This policy covers people who visit our King’s Lynn website, request information or quotations, use our storage services, act as an authorised or alternative contact, or communicate with us about those services.

It applies specifically to the King’s Lynn operation. A different Nelson’s location or a third-party service may provide its own privacy information. We will provide additional information where a particular activity needs a more specific notice.

3. Information we collect

The information we need depends on your interaction with us.

Website enquiries and correspondence: your name, email address, telephone number, the contents of your message, storage requirements and any further details you choose to provide. We may also record the time of your enquiry, how you contacted us, our replies and your communication preferences.

Storage customers: contact and address details, company details where relevant, unit reference, storage dates, signed agreement, billing records, payments and balances, and information needed to administer your storage account. The storage registration process may require identity and proof-of-address checks. Where copies are necessary, we limit them to what is needed for the relevant check and recordkeeping purpose.

Alternative and authorised contacts: names, contact details and their relationship to your storage account, where you nominate someone to help us contact you or act on your behalf. An alternative contact is not automatically authorised to access your belongings or receive all information about your account.

Discount enquiries: information needed to establish eligibility for an advertised military or Blue Light discount. Please do not send a full identity document, membership card or unrelated employment information through our general enquiry form. We will explain any necessary verification separately.

Technical information: information generated by visiting the website, such as IP address, browser and device information, requested pages, timestamps and error or security events. Additional analytics or advertising information is collected only as explained in section 7 and the applicable cookie information.

Complaints and incidents: information you provide about a concern, relevant correspondence, supporting evidence and the steps taken to investigate or resolve it.

Please avoid including health information, National Insurance numbers, payment-card security codes or other unnecessary sensitive information in website enquiries. If we need sensitive information for a particular purpose, we will explain why and identify the additional lawful condition before collecting it. A general form acknowledgement is not consent to process special-category information for unrelated purposes.

4. Where information comes from

Most information comes directly from you through forms, email, telephone conversations, written correspondence or the storage registration process. Technical information is generated by your interaction with the website.

We may receive information from a person authorised to act for you, or from a customer who has nominated you as an alternative contact. Payment providers, professional advisers or authorities may supply information necessary to deal with a transaction, dispute or legal obligation.

If you provide someone else’s details, please make sure they know you are doing so and direct them to this policy. We will also provide the privacy information required when we obtain information indirectly, normally within one month or earlier when we first communicate with that person or disclose their information, unless a lawful exception applies.

5. Why we use information and our lawful bases

We identify the appropriate lawful basis for each use of personal information. These bases are not interchangeable permissions to use information for any purpose.

Purpose	Information involved	Lawful basis
Respond to a request for storage, prepare a quotation and take steps you request before a contract	Contact details, messages and storage requirements	Steps at your request before entering a contract
Provide storage and administer an individual customer’s agreement	Customer, unit, contact and billing records	Performance of the contract
Communicate with employees or representatives of business customers	Business contact details, role and relevant correspondence	Legitimate interests in managing business relationships; the employee is not necessarily a party to our contract
Verify identity and authority to use a storage account	Necessary identity and address information	Legitimate interests in preventing impersonation and protecting customers, property and our business; a legal obligation where a specific duty applies
Contact nominated people about a necessary account matter or emergency	Alternative contact details and limited relevant account information	Legitimate interests in communicating effectively and protecting people and property
Maintain accounting, tax and other legally required records	Transaction and supporting customer records	Compliance with applicable legal obligations
Secure and maintain the website, prevent misuse and diagnose failures	Technical logs and limited relevant enquiry information	Legitimate interests in operating a reliable, secure service
Verify a requested discount	Relevant eligibility information	Steps before a contract or performance of the contract, and legitimate interests in preventing misuse of an offer
Handle complaints, recover debts and establish or defend legal claims	Relevant account records, correspondence and evidence	Legitimate interests in resolving disputes and protecting legal rights; legal obligations where applicable
Send optional promotional emails or text messages	Contact details and recorded preferences	Consent under the approach described in section 8
Use optional analytics or advertising technologies	Device identifiers, website interactions and consent choices	Consent under the approach described in section 7

When relying on legitimate interests, we consider whether the processing is necessary and proportionate and whether your interests, rights or freedoms override our interests. We do not rely on this basis to bypass a separate consent requirement under PECR.

Providing information through an enquiry form is voluntary. However, without a way to contact you or sufficient details about your request, we may not be able to respond or provide an accurate quotation. Information required to establish and administer a storage contract will be explained during registration. Marketing consent is optional and is not a condition of requesting or using storage.

6. Website forms and notification emails

Our website uses WordPress and SureForms to collect enquiries. Submitted entries are held in the website’s database and made available to authorised administrators. Email notifications are sent through our configured SureMail/SureContact delivery arrangements to the team’s designated Gmail inboxes.

This means that enquiry information may exist in the website entry, notification email, email delivery records and relevant backups. Deleting a form entry alone does not necessarily remove those other copies.

Our authorised website support provider may access relevant entries and delivery records when maintaining the website or investigating a fault, under our instructions and subject to appropriate confidentiality and data protection arrangements. We limit access and copies to what is necessary for the task.

We use enquiry information to deal with your request. An automated acknowledgement, email notification or consent-record field does not enrol you in marketing or reserve a storage unit.

7. Cookies, analytics, advertising and embedded content

Cookies and similar technologies can store information on your device or access information already held there. Some support necessary website functions, while others measure use, personalise content or support advertising.

Our approach is to seek your consent before activating optional analytics and advertising technologies. You can accept or reject optional categories and change your choices through the website’s cookie settings. Refusing optional cookies does not prevent you from sending an enquiry. Strictly necessary technologies do not require consent where the applicable legal exception is met.

Where enabled with your consent, analytics may measure pages viewed and interactions such as form submissions, telephone-link clicks or directions requests. Advertising technologies may measure whether an advertisement led to an enquiry or help build audiences for later advertising. We do not place message contents or contact details in ordinary analytics event labels or page addresses.

Google Tag Manager, if used, manages other tags; it does not itself replace a consent mechanism. Server-side advertising integrations also require appropriate privacy controls. Hashing an email address for matching does not make it anonymous.

Embedded maps, videos or review tools may communicate information to their providers when loaded. Optional third-party content that requires consent will be held until you choose to enable it. When you follow an external link, the destination website applies its own privacy and cookie arrangements.

8. Marketing and your choices

We may contact you to answer your enquiry, send a requested quotation or administer your storage agreement. Necessary service messages are separate from optional promotional communications.

Under this policy, we send optional promotional emails or text messages only where you have actively opted in to the relevant channel. We will not treat silence, a pre-ticked box or agreement to this Privacy Policy as marketing consent. We do not use a general enquiry acknowledgement as permission for third-party marketing.

You can withdraw marketing consent at any time using the unsubscribe option provided or by contacting nelsonskingslynn11@gmail.com. Withdrawal does not affect the lawfulness of processing before withdrawal. It does not stop necessary service or legal communications.

You have an absolute right to object to the use of your personal information for direct marketing, including profiling related to that marketing. We will stop that use when you object. We may keep a minimal suppression record so that we continue to respect your choice.

9. Who we share information with

Access is limited to people and organisations that need information for the purposes described in this policy. These may include:

• Authorised staff and managers responsible for King’s Lynn enquiries and storage accounts.

• Website hosting, maintenance, security, backup and technical support providers, including our authorised website agency.

• Form and email delivery services used in our website setup, including SureForms/SureMail components, SureContact and Google’s Gmail service, according to their actual role in the data flow.

• Payment, banking, accounting or booking providers where used for your transaction or account.

• Professional advisers, insurers or claims handlers where necessary for advice, an arranged insurance service or a claim.

• Debt recovery providers where reasonably necessary to recover unpaid charges, with disclosure limited to relevant information.

• Police, courts, regulators or other public bodies where disclosure is required or otherwise lawful, necessary and proportionate.

• A prospective buyer or successor where necessary for a genuine business transaction, subject to confidentiality, proportionate disclosure and continued data protection safeguards.

We do not sell personal information or give it to other businesses for their own unrelated marketing. We do not disclose information simply because a third party requests it. We assess the purpose, lawful basis and amount of information required.

Where a provider processes information on our behalf, appropriate processor terms must govern that processing. Some organisations, such as banks or authorities, may act as separate controllers for their own purposes and provide their own privacy notices.

10. International processing

Using online hosting, support and email services can involve access to or processing of information outside the United Kingdom. UK data protection requirements continue to apply to transfers for which we are responsible.

Where a restricted international transfer occurs, we must use a valid transfer route, such as applicable UK adequacy regulations or appropriate contractual safeguards, with any required assessment and additional protections. We do not rely on your acceptance of this policy as blanket consent to international transfers.

You can request information about the safeguards applicable to your information, including a copy where appropriate, using our privacy contact details. We may redact confidential commercial information or information relating to others.

11. How long we keep information

We keep identifiable information only for as long as it is needed for its purpose. We use the following criteria rather than applying one retention period to every record:

• Unsuccessful enquiries: how long is reasonably needed to answer the enquiry, complete requested follow-up and address a related complaint. Once there is no continuing purpose, we delete or anonymise the information.

• Customer and agreement records: the duration of the storage relationship and any further period necessary for applicable accounting duties, unresolved balances, complaints and legal claims. Applicable statutory requirements and limitation periods are considered rather than treating every document as needing indefinite retention.

• Identity and discount evidence: the time needed to complete and evidence the relevant check. We prefer a record that the check was completed over retaining unnecessary full document copies.

• Email and form delivery records: the time needed to investigate delivery problems, protect the service and evidence relevant communications. They are reviewed alongside the corresponding enquiry or account record.

• Marketing records: until consent is withdrawn or the record is no longer needed for the stated purpose. Minimal consent evidence and suppression records may be retained to demonstrate compliance and respect objections.

• Complaints, incidents and disputes: until resolution and expiry of any justified related legal or regulatory retention requirement.

• Cookies and other device storage: the individual lifetimes stated in our completed cookie information, subject to your choices and browser controls.

• Backups: until overwritten under the backup cycle. Information awaiting overwrite is protected from ordinary use; if a backup is restored, relevant deletion requests must be reapplied.

Information needed for an active claim or investigation may be held longer, with access restricted. You can contact us for the retention criteria or period applicable to a particular record.

12. Site Security and CCTV

Our King’s Lynn storage facility at Campbells Meadow is secured and operates CCTV 24 hours a day, seven days a week. NELSONS SELFSTORE LIMITED is responsible for the personal information collected through this system.

CCTV may capture images of customers, visitors, staff and vehicles within camera coverage. We use it to protect people, premises and stored property, deter and investigate security incidents, and support the prevention and detection of crime. Our lawful basis is our legitimate interests in maintaining a safe and secure storage facility.

Access to footage is restricted to authorised people who need it for these purposes. Relevant footage may be shared with police, insurers, professional advisers or security providers where necessary and lawful.

Recordings are kept only for as long as reasonably necessary for these purposes. Footage relating to an incident, complaint or legal claim may be retained longer while that matter is investigated or resolved, then securely deleted when no longer required.

You may request access to footage containing your personal information or object to its use by emailing nelsonskingslynn11@gmail.com. Please provide the approximate date, time and location to help us identify the footage. Requests are subject to applicable legal requirements and the privacy rights of other people.

13. Protecting information

We use appropriate technical and organisational measures proportionate to the information and risks involved. Access must be limited to authorised people, accounts protected, software maintained and records disposed of securely. Staff and service providers who handle personal information must follow their confidentiality and data protection responsibilities.

No website, email system or transmission method can be guaranteed completely secure. If a personal data breach occurs, we will assess it and notify the regulator and affected individuals where legally required. Please contact us promptly if you believe information sent to us has been misdirected or compromised.

14. Your rights

Depending on the circumstances and the lawful basis used, you can:

• Ask for access to your personal information and a copy of it.

• Ask us to correct inaccurate or incomplete information.

• Ask us to erase information where there is no lawful reason to continue keeping it.

• Ask us to restrict certain processing, for example while an accuracy dispute is considered.

• Receive certain information you supplied in a structured, commonly used, machine-readable format, and request transfer to another controller where technically feasible, when the portability conditions apply.

• Withdraw consent where processing relies on it.

• Complain about our handling of your information.

Your right to object: where we rely on legitimate interests, you may object for reasons connected with your particular situation. We will stop unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the information is needed for legal claims. The separate right to object to direct marketing is absolute.

Rights are subject to legal conditions and exemptions; for example, a deletion request does not automatically require removal of a record that must be kept by law. If we cannot fulfil a request in full, we will explain why and tell you how to challenge that decision.

Contact nelsonskingslynn11@gmail.com or use our other contact details to make a request. We normally respond without undue delay and within one month, subject to legally permitted extensions or pauses. If more time or proportionate identity information is needed, we will explain. Requests are normally free; a fee or refusal will only be considered where the law permits it.

15. Automated decisions and children

Automated form acknowledgements and notification emails help us route enquiries. They do not themselves decide whether to accept a storage customer or create a storage agreement. If we introduce solely automated decisions with legal or similarly significant effects, we will provide the information and safeguards required before using them.

Our website and storage enquiries are intended for adults and business representatives. We do not intentionally seek children’s information through the website. If a child has provided unnecessary information, please contact us so that we can assess and remove it where appropriate.

16. Privacy complaints

If you are concerned about our use of your information, email nelsonskingslynn11@gmail.com, telephone 07414 225057 or write to the Privacy Contact at our registered office. Please explain the concern and how you would like us to respond. You may use the subject “Privacy complaint”, but this is not required.

We will acknowledge a data protection complaint within 30 days, investigate without undue delay, keep you appropriately informed and explain the outcome and any action taken. We will offer a reasonable alternative communication method where needed.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. You do not need our permission to do so.

ICO complaints: https://ico.org.uk/make-a-complaint/
ICO telephone: 0303 123 1113
Postal address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

17. Updates to this policy

We will review this policy when our services, processing arrangements or legal obligations change. The date at the top identifies the current version. Where a significant new use requires additional information or fresh consent, we will provide that information or obtain consent before proceeding.

You can request a copy of this policy or ask for help understanding it using the contact details in section 1.