Privacy Notice
Next Level Storage Northampton Ltd Last updated: 14 October 2026
This Privacy Notice explains how Next Level Storage Northampton Ltd uses personal information when you visit our website, contact us, apply for membership, enquire about storage, venue hire, events or private vehicle sales, or use our services.
1. Who we are
The data controller is Next Level Storage Northampton Ltd (“we”, “us” or “our”).
Our registered office for legal correspondence is:
71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
We do not publish our private storage location in this notice.
You can contact us about this notice or your information at info@nextlevelstorage.co.uk. Our website is nextlevelstorage.co.uk.
We are registered with the Information Commissioner’s Office (ICO): ZC119582. We have not appointed a Data Protection Officer.
2. Information we collect
Depending on how you interact with us, we may collect:
- your name, email address, telephone number and correspondence;
- information about your vehicle, such as its make, model, year, colour, registration number, VIN, fuel type, value, condition, documents and storage or collection requirements;
- information you provide for a storage, membership, eligibility, venue-hire, event or private-sale enquiry or application;
- identity, address, vehicle-ownership, insurance and other eligibility information you provide to us;
- customer agreements, service records, invoices and payment records;
- event attendance and invitation preferences;
- information about your marketing choices;
- CCTV and access-control information recorded for site security; and
- information submitted through our website, Meta lead forms, email, telephone, Facebook, Instagram or WhatsApp.
Our Meta storage enquiry form may ask for your name, email address, telephone number, number of vehicles, preferred storage start date and whether a vehicle is electric or a plug-in hybrid.
Please only give us information that is needed for your enquiry or service. If you give us information about another person, you should make sure you are entitled to do so and that they know how it will be used.
3. Where information comes from
We usually collect information directly from you when you contact us, submit a form, apply for membership, arrange a service, attend an event or communicate with us.
We may also receive information:
- through an instant form on Facebook or Instagram, operated by Meta;
- from a car club or event organiser in connection with an event or invitation;
- from another person involved in an agreed private vehicle sale; or
- from a vehicle collection or service provider where this is needed to arrange the work you have requested.
Where another person gives us your information, we use it only for the relevant enquiry, service, event or transaction.
4. Why we use information and our lawful bases
We use personal information for the following purposes:
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and taking steps you request before entering a storage, membership, event, venue-hire or private-sale arrangement | Contract: taking steps at your request before a contract, or performing a contract with you |
| Providing and administering storage and related automotive services, including vehicle records, handovers, collections and services you request | Contract |
| Processing invoices and keeping accounting, tax and business records | Legal obligation where the law requires the records; otherwise legitimate interests in managing our business |
| Managing membership, venue-hire, event and private-sale applications and communications | Contract or legitimate interests in assessing and administering the request |
| Protecting vehicles, people and property; controlling access; preventing and investigating incidents; and keeping records needed for insurance or legal claims | Legitimate interests in security, crime prevention, managing our services and establishing or defending legal claims |
| Sharing relevant information with police or insurers when reasonably needed to investigate an incident or claim | Legitimate interests and, where applicable, legal obligation |
| Sending event invitations where you have agreed to receive them | Consent; you can withdraw it at any time |
| Sending marketing by email, text or WhatsApp | Consent, or another permission allowed by electronic-marketing law where its requirements are met |
| Using photographs or video of vehicles for promotion, subject to the choice and objection process described below | Legitimate interests in promoting our services, balanced against people’s privacy |
| Operating and protecting our website, handling form submissions and maintaining business communications | Legitimate interests in operating and securing our business and responding to requests |
Where we rely on legitimate interests, our interests are to operate and protect our services, vehicles, property and business, respond to enquiries, promote our services fairly, and deal with incidents or claims. We consider people’s rights and expectations when deciding whether those interests justify using their information.
If we need information to enter into or perform a contract, and you do not provide it, we may not be able to assess your request or provide the relevant service.
5. Website forms and Meta lead forms
Website forms are handled through our website platform. Form submissions are sent to info@nextlevelstorage.co.uk using Resend and arrive in our Microsoft 365 mailbox. Some website forms also save a copy in website storage before the email is sent. The “Build Your Storage Plan” form is configured to send an email and not to create a website database record.
The website is built and hosted using ChatGPT Sites, provided by OpenAI. Next Level Platform Ltd manages and pays for the website and may have technical access to website data as part of managing the site, depending on its access permissions.
If you submit a Meta lead form, Meta collects the answers you provide and makes them available to us for your storage enquiry. Meta also processes information under its own privacy information and settings. We use the information you provide to respond to your request. We do not use a storage enquiry alone as permission to send you unrelated marketing.
6. Marketing, event invitations and photographs
We may send you service information needed to manage an enquiry or an existing arrangement. This is not the same as marketing.
We send event invitations where we have recorded your permission to receive them. You can withdraw permission or ask us to stop by replying to the message or contacting info@nextlevelstorage.co.uk.
We do not send promotional storage emails or WhatsApp messages unless we have the permission required by law.
Our terms explain that we may photograph or film vehicles for promotional purposes. We normally try to cover registration plates, but this is not always possible. If you do not want your vehicle photographed or used in our social-media or promotional content, tell us before the photography or publication. You can also ask us to stop future use by emailing us. We will consider the request and remove or edit content where reasonably possible. This does not affect use that has already happened lawfully.
7. Who we share information with
We share information only where it is needed for the purposes in this notice. Depending on the service, recipients may include:
- OpenAI / ChatGPT Sites, for website hosting and form storage;
- Resend, to deliver website form emails and maintain delivery records;
- Microsoft 365, for our company email;
- GoDaddy, which provides our domain and Microsoft 365 service;
- Meta, for Facebook and Instagram lead forms and platform services;
- Xero, for invoices and accounting records;
- New Normal FD Ltd, our accountant;
- Usafe Systems, our security provider for CCTV and site security;
- vehicle transport or service providers, where needed to arrange work you request. For a vehicle collection, a provider may need the collection address. For a vehicle going from storage to a service, the information shared may be limited to the vehicle registration, make and model;
- the other buyer or seller in a private vehicle sale, but only after the parties have agreed to proceed and only with the contact details needed to complete the transaction;
- the police or insurers, where relevant information is needed for an incident, investigation or claim; and
- professional advisers, regulators, courts or public authorities where disclosure is required or legally permitted.
We do not give event organisers attendee names or contact details as a routine event report. We may give them an overall attendance number.
We do not routinely collect customers’ bank account details. Customers pay our invoices by bank transfer. We keep the invoice and payment records needed to manage the payment and our accounts.
8. International transfers
Some of the technology providers listed above may store or access information outside the United Kingdom. Where a transfer is restricted by UK data-protection law, it must be covered by UK adequacy regulations, an approved safeguard, or a permitted exception. You can contact us at info@nextlevelstorage.co.uk to ask for details of a particular transfer and its safeguards.
9. How long we keep information
We keep personal information only for as long as it is needed for the purpose for which it was collected, including applicable legal, accounting, insurance and claims requirements. When it is no longer needed, we delete it securely or anonymise it.
Our retention rules are:
| Information | Retention rule |
|---|---|
| Unsuccessful website, email and Meta storage enquiries | We will delete our company-held enquiry record within six months after the enquiry is closed. If the enquiry proceeds to a service, we keep the relevant customer and vehicle records under the active-customer rules below. |
| Website form copies, email notifications and provider delivery records | The six-month rule above applies to company-held unsuccessful storage enquiry copies. For other form records, see the relevant purpose above or below. Website, email and delivery providers may separately keep technical logs or backup copies under their own retention arrangements. |
| Active storage and vehicle records | We keep the records needed to provide the service while it is active. When a vehicle leaves permanently, we destroy that vehicle’s paper file unless specific information must be retained for accounting, insurance, a legal claim or another legal requirement. If you store more than one vehicle, this applies separately to each vehicle. |
| Invoices and accounting records, including records in Xero | We keep these for as long as needed for accounting, tax and legal duties and to deal with payment queries or claims. The exact period depends on the record and applicable requirements. |
| Event records | We keep event attendance records for approximately five years for security, insurance and investigation purposes. |
| Event invitation list | We usually keep this in email and a spreadsheet for approximately one year, where you have agreed to receive invitations. |
| CCTV footage | Footage is usually retained for six weeks, unless it is needed for an incident, investigation, insurance matter or legal claim. |
| Private-sale records | We keep communications and any NDA while the proposed transaction is being considered. If a sale completes, we retain the sale and accounting records for as long as needed for tax, accounting, insurance or legal-claim purposes. |
| Other enquiries and applications | We keep these only while needed to assess and respond to the request. If it does not proceed, we delete or anonymise the record when it is no longer needed, unless it is required for a complaint, legal claim, security matter or legal obligation. |
The six-month rule is our company retention policy for unsuccessful storage enquiries. We apply it to records we control, including website records. Provider backups and technical logs may follow separate provider retention periods.
10. CCTV and site security
CCTV is used at our storage premises for security, to protect vehicles, people and property, and to help investigate incidents. The system is provided by Usafe Systems. Footage is stored in a video database system. Directors and authorised staff can access the footage. Usafe Systems must request our permission before accessing it, and the system records when access occurs.
We usually keep CCTV footage for six weeks. We may keep relevant footage for longer if it is needed for an incident, police investigation, insurance matter or legal claim. We may share relevant footage or information with the police or insurers for those purposes.
CCTV signage is displayed at the premises. The storage location is private and is not published in this notice. You can ask about CCTV or make a request about footage by contacting info@nextlevelstorage.co.uk and giving the date, time and area, if known.
11. Cookies and similar technologies
Our website may use cookies and similar technologies needed to make the site work, keep it secure and remember your choices. Analytics or advertising technologies may also be used if enabled. Where the law requires consent, we will ask before using them and provide a way to change your choice.
The technologies used can change when the website is updated. Please use the cookie controls displayed on the website, where available, or contact us at info@nextlevelstorage.co.uk for information.
12. How we protect information
We use access controls and practical safeguards appropriate to the information we hold. Access to company spreadsheets in iCloud is restricted to the director who maintains them. Xero access is limited to the directors and our accountant. Vehicle paper files are kept in a secure room and arranged by vehicle number. Access to CCTV is restricted to directors and authorised staff, with access by Usafe Systems requiring our permission and being recorded by the system.
We also use the access and security controls provided by the email, website, accounting and other services we use. No method of storing or sending information is completely risk-free, but we take reasonable steps to prevent loss, misuse or unauthorised access.
13. Your data-protection rights
Depending on the circumstances and the lawful basis we use, you may have the right to:
- ask for a copy of your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to delete information we no longer need or where the law gives you a right to erasure;
- ask us to restrict how we use your information;
- object to processing based on legitimate interests, including direct marketing;
- ask for information you provided to us to be transferred to you or another organisation, where the right to data portability applies; and
- withdraw consent at any time where we rely on consent.
The right to object to direct marketing is absolute. You can use the unsubscribe option in a marketing message or contact us.
To exercise a right, email info@nextlevelstorage.co.uk. We may need to confirm your identity before responding. We normally respond within one month, subject to any lawful extension or other rules that apply.
14. Complaints
Please contact us first at info@nextlevelstorage.co.uk if you have a concern about how we have used your information. You also have the right to complain to the Information Commissioner’s Office:
15. Changes to this notice
We may update this notice when our services, systems or legal requirements change. The latest version will be published on this page with its update date.