Privacy Policy

Who we are

WADAYA SELF STORAGE W.L.L, CR No. 197353 - 1, is a self storage business operating in the Kingdom of Bahrain. For the personal data covered by this policy, we act as the data controller within the meaning of Bahrain's Personal Data Protection Law (PDPL).

What we collect

What we collect depends on how you interact with us:

• Contact details — such as your name, phone number, and email address.
• Identity and agreement details — such as your ID number, address, signature, and the storage agreements you sign, collected when you rent a unit.
• Billing records — rentals, invoices, payments, and balances relating to your account.
• Payment card details — collected and held by our licensed payment provider when you save a card or pay; we do not store your full card number.
• Usage data — such as pages visited and device and browser information, collected through cookies and similar technologies.
• Communications — messages and correspondence you exchange with us.
• Facility records — such as access logs and security (CCTV) footage where in operation at the facility.

How we use personal data

We use personal data:

• to provide our services — running the waitlist, rent flow, customer portal, agreements, and rentals;
• to manage billing — invoicing, charging saved cards, receipts, reminders, and collecting amounts owed;
• to verify identity and prevent fraud, misuse, and security incidents;
• to send service communications about your rental, account, or payments;
• to send marketing communications where permitted, always with a way to opt out;
• to operate, secure, and improve the website and our services;
• to comply with legal obligations and to establish, exercise, or defend legal claims.

Legal grounds

We process personal data where it is needed to perform a contract with you or to take steps you request before a contract; where we have a legal obligation; where you have given consent (which you may withdraw); and where processing is otherwise permitted under the PDPL, including for our legitimate business purposes such as securing our services and collecting amounts owed.

Cookies and analytics

The website uses cookies and similar technologies to operate and to understand how visitors use it, including analytics services that measure usage and may replay browsing sessions with personal-data fields masked. You can control cookies through your browser settings; blocking them may affect parts of the website.

Who we share data with

We do not sell personal data. We share it only with:

• service providers who process data for us — such as hosting and cloud infrastructure, billing systems, payment providers, messaging services (SMS and email), and analytics providers — under appropriate safeguards;
• professional advisers — such as lawyers, accountants, auditors, and insurers, where needed;
• authorities, courts, and regulators — where the law requires or permits it;
• a buyer or successor — if our business or assets are transferred, as part of that transaction.

Where data is processed

Our service providers may store or process data outside the Kingdom of Bahrain. Where they do, we take steps intended to ensure the data is protected consistently with this policy and applicable law.

How long we keep data

We keep personal data only as long as it is needed for the purposes described in this policy — including the life of your agreement, amounts owed, disputes, and the record-keeping periods required or advisable under applicable law — and then delete or anonymise it.

How we protect data

We apply technical and organisational measures appropriate to the data we hold, including access controls, encryption in transit, and restricting access to those who need it. No system can be guaranteed fully secure, and transmission over the internet is at your own risk to the extent permitted by law.

Your choices and rights

Subject to the PDPL, you may request access to, correction of, or deletion of your personal data, object to certain processing, and withdraw consent where processing is based on consent. You can opt out of marketing at any time using the link in the message or by contacting us.

To exercise a right, contact us through the channels published on this website; we may need to verify your identity first. You may also lodge a complaint with the Personal Data Protection Authority in Bahrain.

Children

Our services are intended for adults with legal capacity to contract. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy at any time. The current version is always published on this page with its date.

Contact

Questions or requests about this policy or your personal data can be sent through the contact channels published on this website.