Lockit local Limited Privacy Notice

1. Who we are

Lockit Local Limited (‘Lockit Local’) is the data controller and is responsible for your personal data.

Contact details

Email: info@lockitlocal.com

Phone: +44 (0)73 9215 4749

Address: Wohl Building, 2b Redbourne Avenue, London, England, N3 2BS

If you have questions about this Privacy Notice or how we handle your personal data, please contact us using the details above.

2. Purpose of this Privacy Notice

This Privacy Notice explains how we collect, use, store, and protect personal data when you use our website and mobile application, together referred to as the App, and when you interact with us in connection with our storage services.

It also explains your rights and how you can contact us or the supervisory authority if you have a complaint.

This Privacy Notice should be read alongside any other privacy notices we may provide to you from time to time for specific activities. Those notices supplement this Privacy Notice.

3. Personal data we collect

Personal data means any information that can identify you as an individual. It does not include anonymised data.

We may collect, use, store and transfer the following categories of personal data:

• Identity Data
  First name, last name, username or similar identifier, title and date of birth.
• Identity Verification Data
  Photographic identification and a selfie for identity verification purposes. This data is collected and processed by our service provider Stripe Identity, operated by Stripe Payments Europe Limited. Further information is available athttps://stripe.com/gb/privacy.
• Contact Data
  Billing address, delivery address, email address and telephone numbers.
• Profile Data
  Username and password, preferences, feedback and survey responses.
• Financial Data
  Payment card details and payment related information processed by Global Payments (the trading name of GPUK LLP). We do not store full payment card details.
• Storage and Booking Data
  Storage quotes, unit size and rental periods, declared value of stored goods where provided, bookings past, current and future, move in and move out details, and where applicable proof of insurance.
• Transaction Data
  Details of payments to and from you and details of products and services purchased.
• Technical Data
  IP address, login data, browser type and version, time zone setting, device and operating system information, and other technology used to access the App. IP addresses may also be used for security, fraud prevention, and system integrity purposes.
• Usage Data
  Information about how you use the App, website and services.
• Emergency Contact Data
  First name, last name, relationship to you and telephone number of your nominated emergency contact.
• Marketing and Communications Data
  Your preferences in receiving marketing and your communication preferences.
• Smart Access Data
  Access credentials and access logs generated through our smart access system provided by Nokē Smart Entry System, part of the Janus International Group, LLC. This data is used to enable secure, staffless access to our storage locations and to maintain site safety and security.
• CCTV Data
  Video footage recorded at our storage locations for security and crime prevention.
• Customer communications
  We may record or monitor communications with you, including telephone calls, emails, and chat messages. This may be done for customer service, training, quality assurance, fraud prevention, dispute resolution, and compliance with legal obligations.
• Aggregated Data
  We may use aggregated data, such as statistical or usage data, for operational, analytical, and reporting purposes. Aggregated data is not personal data unless it is combined with other information that identifies you.
• Special category data
  We do not collect special category personal data, except for biometric data used for identity verification (selfie) via Stripe Identity. We do not collect criminal convictions data.

4. If you fail to provide personal data

Where we need personal data to provide our services or to comply with legal obligations and you do not provide it, we may be unable to provide those services. This may include being unable to set up your account, verify your identity, process payments, or allow access to a storage unit.

If this applies, we will inform you at the relevant time.

5. How we collect personal data

We collect personal data in the following ways:

• Direct interactions: When you create an account, request a quote, make a booking, contact us, provide feedback, complete surveys, or provide details of an emergency contact. When you provide Emergency Contact Data, you confirm that you have permission to provide that person’s details.
• Automated technologies: When you use the App or website, we may automatically collect Technical Data and Usage Data through cookies and similar technologies. If you disable cookies, parts of the App may not function correctly. Further information is available in our Cookie Notice.
• Third party sources: We may receive data from service providers involved in delivering our services, including:
  • Global Payments for payments processing
  • Stripe Identity for identity verification
  • Nokē Smart Entry System by Janus International Group for smart access control
  • IT, analytics, hosting and security providers

6. How we use your personal data and our legal bases

We only process personal data where the law allows us to do so. We rely on one or more of the following legal bases:

• performance of a contract
• legitimate interests
• consent, where required
• compliance with legal obligations

We use personal data for purposes including:

• registering customers and managing accounts
• verifying identity and preventing fraud
• providing storage quotes and processing bookings
• enabling secure access at staffless sites
• managing payments, fees, and debt recovery
• handling customer service, support, and complaints
• monitoring and maintaining site safety and security
• improving our App and services through analytics
• communicating with emergency contacts where necessary to manage safety, access, or storage units
• sending marketing communications where permitted

Where personal data is used for fraud prevention or debt recovery, it may be shared with specialist service providers acting on our instructions.

7. Marketing and advertising

We will only send you marketing communications where we are permitted to do so. You can opt out at any time by using the unsubscribe link in our messages or by contacting us.

Where you consent to marketing or advertising cookies, we may share limited data with advertising and analytics partners to measure performance and show relevant content. You can withdraw your consent at any time via your cookie settings.

8. Who we share your personal data with

We do not sell your personal data.

We may share personal data with trusted third parties where necessary for the purposes described in this Privacy Notice, including:

• payment providers, including Global Payments
• identity verification providers, including Stripe Identity
• smart access providers, including Nokē Smart Entry Systems
• IT, hosting, analytics and customer support providers
• professional advisers such as lawyers, accountants, auditors and insurers
• regulators, tax authorities, law enforcement and courts where required or permitted by law
• third parties in connection with a sale, merger, acquisition or reorganisation of our business (subject to appropriate safeguards)

All third party providers must keep your personal data secure and only process it on our instructions.

9. International transfers

Some of our service providers may process personal data outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as adequacy decisions or approved contractual protections.

You can contact us for further information about safeguards used.

10. Keeping your personal data secure

We use technical and organisational measures designed to protect your personal data from unauthorised access, loss, misuse or alteration. These may include access controls, encryption where appropriate, secure hosting, and limiting access to those who need it.

No system is completely secure. If you believe your interaction with us is no longer secure, please contact us promptly.

Our App or website may include links to third party websites or services. Those third parties have their own privacy policies, and we are not responsible for them.

11. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including providing services, complying with legal and regulatory obligations, resolving disputes, and enforcing our rights.

Certain records may be retained for several years after your relationship with us ends, for example for accounting, tax, or legal compliance purposes.

We may anonymise personal data for research or statistical purposes, in which case it may be used indefinitely.

12. Children

Our services are not directed to children and we do not knowingly collect personal data relating to children under 16. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps.

13. Your legal rights

You have rights under UK data protection laws, including the right to:

• request access to your personal data
• request correction of inaccurate or incomplete data
• request erasure of your data (in certain circumstances)
• object to processing (including for direct marketing)
• request restriction of processing (in certain circumstances)
• withdraw consent at any time where we rely on consent

To exercise your rights, contact info@lockitlocal.com. We may ask for information to verify your identity before responding.

We aim to respond within one month, although this may take longer for complex requests. You will not usually need to pay a fee, but a reasonable fee may apply for requests that are manifestly unfounded, repetitive or excessive.

14. Complaints

You have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

We would appreciate the opportunity to deal with your concerns first, so please contact us in the first instance.

15. Changes to this Privacy Notice

We keep this Privacy Notice under regular review and may update it from time to time. The latest version will be published on our website and in the App where appropriate.

It is important that the personal data we hold about you is accurate and up to date. Please inform us of any changes.