Privacy Policy

Last updated: 2024-08-18

How we handle your data

ScoreMyStreet turns open data from data.police.uk, Ofsted and OpenStreetMap into postcode-level insights. You can use the public site without creating an account and we only collect the minimum information needed to answer your request, keep the platform secure and comply with UK GDPR.

Information we collect

Personal details you choose to share

We do not require sign-ups for postcode searches. We only receive personal data when you explicitly provide it or if you are part of our internal dashboard team.

  • Contact information and message content when you email us at or request support.
  • Authentication credentials, audit logs and role assignments for ScoreMyStreet staff or partners who sign in to the dashboard.

Service and technical data

To operate the service we collect a small amount of usage data. None of it is sold or used for advertising.

  • The postcode or coordinates you search, processed in-memory to fetch crime, school and amenity data. We do not persist these lookups on our servers.
  • Standard device and network metadata (IP address, browser version, timestamps) captured in Netlify/Vercel access logs to prevent abuse.
  • Local settings such as cookie consent, language selection, theme preference and optional dashboard cache stored only in your browser.
  • Aggregate API metrics (request counts, error rates) that help us monitor performance without storing personal identifiers.

Cookies & local storage

We rely on essential cookies and local storage to remember your preferences. Optional analytics cookies are only activated if you give consent in the cookie banner.

Essential cookies

Required for core functionality such as remembering dark mode, language, cookie consent choices and keeping admin users signed in.

Analytics cookies

We may enable privacy-friendly analytics in the future to understand usage trends. These tools remain disabled unless you actively opt in.

How we use the information

Any information we process is used for legitimate purposes connected to delivering ScoreMyStreet.

  • Provide postcode insights, personalise the on-site experience and troubleshoot issues you report.
  • Maintain security, investigate abuse, rate-limit automated traffic and keep detailed datasets accurate.
  • Respond to legal obligations or requests from you about your data.

How we share data

We do not sell your information. We only disclose it when necessary to run the service or comply with the law.

  • Hosting and infrastructure partners (Netlify, Vercel and their cloud providers) that process data under contract and only as instructed by us.
  • Communication and productivity tools (for example Google Workspace email) when you contact us.
  • Public-data APIs such as data.police.uk, Ofsted, Postcodes.io and OpenStreetMap that receive the postcode or coordinates required to return results.

How we protect your data

All traffic is encrypted via HTTPS, access to dashboards is restricted by role-based controls, secrets are stored outside the codebase and infrastructure logs are reviewed for suspicious activity.

How long we keep information

Postcode searches are discarded once the results are returned. Support correspondence and account records are retained only while needed to resolve the request or operate the dashboard (generally no longer than 24 months). Hosting providers keep access logs for a short operational window (typically under 30 days) before automatic deletion.

Your privacy rights

If you are in the UK or European Economic Area you can exercise the rights granted by the UK GDPR and EU GDPR.

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Ask us to correct incomplete or inaccurate information.
  • Erasure: Request deletion of data when it is no longer needed or you withdraw consent.
  • Restriction: Ask us to pause processing while we review a concern.
  • Portability: Receive the data you provided to us in a structured, machine-readable format.
  • Objection: Object to processing based on our legitimate interests.

To exercise any of these rights, email privacy@scoremystreet.com. We respond within 30 days unless the request is complex.

Children

ScoreMyStreet is aimed at adults researching housing decisions. We do not knowingly collect information about children under 16 and will delete such data if we discover it.

Changes to this policy

We review this notice whenever we add new features or data sources. We will update the "Last updated" date and publish the revised policy on this page.

Contact us

Questions about privacy or data protection can be sent to info@scoremystreet.com.