What this notice covers
This notice describes the CommunitySafety Advisor data service used by the Partner in Crime map. The conversational research assistant has a separate notice because it processes chat messages and uses different providers.
Information processed
The service processes the location, boundary, date range and crime category that you request. Cloudflare also processes network information needed to deliver and protect the service, which can include an IP address and request metadata.
- Street crime and neighbourhood requests: Location and date parameters for England, Wales and Northern Ireland are sent to the UK Police public API.
- Scottish council statistics: Official annual aggregate data is bundled with the site. Your council selection is processed in the browser and is not sent to the Scottish Government.
- Netherlands area statistics: Official municipality, district or neighbourhood codes, requested months and offence categories are sent to the Dutch Police open-data table hosted by CBS. The service returns area totals rather than incident locations.
- Finnish municipality statistics: Official municipality codes, requested months and offence categories are sent to Statistics Finland’s PxWeb API. The service returns municipality totals rather than incident locations.
- Danish local-area statistics: Official municipality or Christiansø area codes, requested quarters and offence categories are sent to Statistics Denmark’s StatBank API. The service returns quarterly area totals rather than incident locations.
- French commune statistics: The reviewed annual SSMSI commune release and matching IGN 2026 boundaries are bundled with the site. Your commune, year and indicator selections are processed in the browser and are not sent to the French Ministry of the Interior, IGN or either application Worker.
- Generated map data: Successful heatmap results are cached in Cloudflare KV for up to 24 hours so the map can retrieve them.
- Read-response cache: Successful read-only API responses may be cached at Cloudflare’s edge for up to six hours. Application cache keys use a one-way hash of the service contract, route parameters and allowed origin rather than a raw query string.
- Operational security: A short-lived, in-memory request counter may use the connecting IP address to limit abuse. It is not written to KV by this Worker.
How the information is used
Request data is used to return crime, neighbourhood, outcome, stop-and-search and demographic context, create temporary map results, and protect the service from misuse. The service does not create user profiles or use request data for advertising.
Optional site analytics
The explorer offers optional Google Analytics measurement (property G-TJPKVJ25SD) to help understand visits and feature usage. The Google tag is not downloaded and Google is not contacted unless you explicitly select Accept analytics. Declining leaves the tag unloaded.
If accepted, the Google tag can process page URLs and titles, browser and device information, approximate location derived from network information, and interaction or usage measurements. Google Analytics may set first-party _ga cookies after consent. Advertising storage, advertising user data and advertising personalisation remain denied; Google Signals and advertising-personalisation signals are disabled in the site configuration.
The site stores only your analytics choice in local storage for this consent feature. You can reopen Analytics settings in the explorer and change that choice. Withdrawing consent disables further collection on the page and removes accessible Google Analytics cookies, but it cannot undo processing that occurred while consent was active.
Storage and retention
Temporary generated GeoJSON is stored by Cloudflare. Resident-demographic reference data is also read from Cloudflare KV. Generated heatmap data is configured to expire after 24 hours. Cached read-only responses expire after no more than six hours. In-memory rate-limit counters normally expire within minutes and disappear when the Worker isolate is recycled.
Cloudflare may retain operational logs according to the account’s configured infrastructure settings. If analytics is accepted, Google’s retention and deletion controls apply to the resulting analytics records.
Providers and disclosure
Cloudflare processes requests as the hosting provider. The location, boundary and date parameters needed for a street-crime query are sent to the UK Police public API at data.police.uk. Scottish annual council-area figures originate from the Scottish Government’s official publication and are served as a static site asset. Netherlands area requests are sent to the Dutch Police table 47022NED hosted by CBS. Finnish municipality requests are sent to Statistics Finland table 13it. Danish local-area requests are sent to Statistics Denmark StatBank table STRAF11. French annual commune figures come from the SSMSI recorded-crime database; matching official boundaries come from IGN Admin Express COG 2026. Both French resources are served as static site assets, so France map selections create no request to either publisher. Request data is not sold.
Google acts as the optional analytics provider only after consent. See Google’s privacy policy for information about its processing.
Your choices and rights
You can accept, decline or later withdraw optional analytics through the explorer’s Analytics settings control. Depending on where you live, you may also have rights concerning personal information processed by the service. Contact us with a sufficiently specific request. Temporary map data normally expires automatically within 24 hours.
Changes and contact
Updates to this notice will be published here with a revised date. For privacy questions or a data-rights request, email support@partnerincrime.io.