Statues of London

Privacy policy

Last updated: 2 October 2026

This policy explains what personal data Statues of London (statuesoflondon.com) collects, why, how long we keep it, and the rights you have over it. We've kept it short and in plain English.

Who we are

Statues of London is built and run by Northrule Ltd (company number 13479194), registered office: 9 Conifer Close, Church Crookham, Fleet, Hampshire, GU52 6LR. We are the “controller” of the personal data described here. For anything about your data, contact us at hello@northrule.com.

What we collect and why

  • Messages you send us through the contact form: your name, email address and message, so we can reply. Lawful basis: our legitimate interest in answering enquiries.
  • Suggestions you send through the suggestion form: the details you give and, if you choose to add it, your email so we can tell you when it's added. Lawful basis: legitimate interest in keeping the directory complete and accurate.
  • Technical data. Like any website, our hosting provider sees your IP address and basic request details when you visit. We use IP addresses briefly to stop abuse (for example, limiting how often a form can be sent) and keep short-lived server logs for security and troubleshooting.

Things that stay on your device

Some features save what you choose in your own browser (“local storage”) so they work without an account. This data stays on your device — it is never sent to us — and you can clear it at any time by clearing your browser's site data:

  • Favourites and My walk — the statues you heart and the walk built from them.

Cookies

We don't use advertising or tracking cookies, and we don't run third-party analytics. This site sets no cookies.

Who else is involved

We don't sell your personal data. We share it only with services that help run the site:

  • Cloudflare hosts the website and its database and sends our emails, acting on our instructions as a data processor.
  • OpenStreetMap — map tiles on our maps are loaded from OpenStreetMap's servers, which see your IP address like any website you load images from.
  • FOSSGIS routing (routing.openstreetmap.de) — when you plan a walk, the coordinates of the statues on it (not your own location) are sent to this OpenStreetMap routing service to draw the walking route.
  • Google Maps — only if you tap a "Google Maps" or "Directions" link, which opens Google's own site.

Some of these providers may process data outside the UK and EEA. Where they do, it's protected by the safeguards the law requires, such as standard contractual clauses.

How long we keep it

  • Messages and suggestions: as long as we need to deal with them, then deleted.
  • Abuse-prevention records (IP-based): overwritten within about a day.

If Statues of London changes hands

If Statues of London, or the business that runs it, is sold or transferred to a new owner, the personal data we hold for it — messages and suggestions — will transfer to that new owner so the directory can keep running. The new owner must keep using it in line with this policy. We'll post a notice on this page before the transfer happens, and you can ask us to delete your data beforehand.

Your rights

Under UK and EU data protection law (the UK GDPR and the GDPR) you can ask to see the personal data we hold about you, have it corrected or deleted, restrict or object to how we use it, and receive a copy to take elsewhere. To do any of these, contact us at hello@northrule.com. We'll reply within one month.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or, if you live in the EU, your local data protection authority.

Changes to this policy

If we change this policy we'll update the date at the top.