London Reuse Map ("we", "the site") is a community-maintained directory of material reuse facilities, case studies, and consultants/contractors across London. This page explains what personal data we handle, why, and what you can do about it.
Who this concerns
Most of the personal data on this site is business or professional contact information — a facility's contact person, a consultant or contractor's name and details, or a case study's project contacts. A distinctive feature of this site is that this information is often submitted by someone other than the person it describes — for example, a member of the public adding a facility they know of, or a consultant being listed as part of a case study submitted by someone else. If that's you, see "Your rights" below — we want this to be easy to fix.
What we collect
Facility and operation listings — site name, address, operator name, and optional contact name/email/phone/website, submitted through "Map a Facility".
Case study submissions — project details, and any linked consultants/contractors or client name.
Consultant/Contractor listings — organisation name, discipline, contact details, and address, either entered manually or looked up via the UK's public Companies House register.
Admin account access — a single login, protected by two-factor sign-in, used to review and moderate submissions, handled by our hosting provider (Supabase Auth).
Visitor accounts (optional) — see "Your account" below. You never need an account to use the map, add a listing or use the AI project advisor.
AI-assisted features — when you use an AI feature (for example the project advisor), we keep a short usage record: which feature was used, when, and a one-way scrambled (hashed) version of your IP address. This is used only to prevent abuse and keep costs under control. We don't store your IP address itself, and these features don't ask for or send any information about you. The site administrator can also run a monthly policy check, which looks up the policies recorded here against public web sources. It involves no visitor information at all, and its usage records (which task ran, when, and how many tokens and web searches it used) contain no IP address.
We do not use advertising or analytics cookies, and we do not track visitors browsing the site. A few things are kept in your own browser's storage so the site works: whether you have seen the introduction; if you have used up the AI project advisor's allowance, when it will be available again; and, if you sign in, a sign-in session so you stay signed in. These are needed to provide what you asked for, and you can clear them at any time in your browser settings. Beyond that, we only store what is submitted through the forms described above, what you choose to keep in an account (below), and the short anti-abuse usage record described under "AI-assisted features".
Your account (optional)
If you create an account, we keep:
Your email address and password. Your password is stored only in scrambled (hashed) form by our authentication provider; we never see it and cannot read it.
An optional name and organisation, if you add them on your profile.
Projects you save. If you choose "Save to My Projects" after using the AI project advisor, we keep the description you wrote, the materials table you checked, the project's borough, type and rough location (the coordinates found from a postcode, not the postcode itself), and the plan that was produced. Free accounts can keep two projects. Saved projects are private to you: nothing in the site lets anyone else, including the site administrator, see them. As with any database, the administrator who runs it can technically access it, and we will not look at your projects except to keep the service working or if the law requires.
Places you save — the facilities, consultants/contractors and case studies you mark with "Save".
This is used only to provide your account and the features above. It is never shown to other visitors, sold, or used for advertising. Please don't put names, contact details or other personal information about other people into a project description. Your account is kept until you delete it, and we do not currently delete inactive accounts automatically. You can delete it yourself at any time (see "Your rights"). Deleting it erases your account, profile, saved projects and saved places; case studies you submitted stay on the site but are no longer linked to you. Copies may remain in routine backups of our database for a short time afterwards.
Why we process it, and on what basis
The site exists to help people find and connect with material reuse facilities and professionals in London. For published business contact details, our legal basis under UK GDPR is legitimate interests — maintaining an accurate, useful public directory — balanced against the individual's right to have inaccurate or unwanted entries corrected or removed. For visitor accounts, our basis is that it is necessary to provide the account and features you asked for (UK GDPR Article 6(1)(b)), together with our legitimate interest in keeping accounts secure and preventing misuse.
Where data comes from
Directly from the person submitting it, or — for consultants/contractors — optionally from the UK's public Companies House register via its official search API. Companies House data is already public by law; we don't add anything to it beyond what you enter yourself.
Who we share it with
We don't sell or share data with advertisers. The site runs on:
Supabase — our database and authentication provider, which stores all submitted content and account information.
Our email-sending service — used only to send you the emails that sign-in needs (confirming your address and resetting a password). It receives your email address and the message, nothing else.
Cloudflare — hosts the website itself, and provides the "Turnstile" check shown on submission forms to tell people from automated bots.
OpenStreetMap (Nominatim) — used only to convert an address you type into map coordinates; the address text is sent to their service for that lookup.
Companies House — queried only when you use the "search Companies House" feature.
Anthropic — provides the AI model behind our AI-assisted features. What's sent to it is public policy information from this site along with fixed instructions — never anything you've typed about yourself. For the monthly policy check, the model also runs public web searches about the published policies and councils we've recorded, never about visitors.
The AI project advisor (beta) is different from the above, because it uses what you type. If you use it, the description you write and the materials table you check are sent to the AI service (Anthropic, acting as our processor) to write your plan, together with information about the facilities, consultants, case studies and policies recorded on this site. If you add screenshots of an audit and ask us to read them, those images are sent to the AI service too, for that purpose. A spreadsheet is read and added up on your own device and never uploaded: only the short totals table you confirm is sent. We do not store your description, your table or your screenshots, unless you sign in and choose "Save to My Projects" (see "Your account"). A Cloudflare Turnstile check confirms you are a person, and to limit misuse we keep a hashed (not readable) form of your IP address with a count of AI usage, deleted after 90 days. Please don't include names, contact details or anything that identifies individuals, or anything you wouldn't want an AI service to process.
How long we keep it
Approved listings remain until removed by an editor or by request. Submissions that are rejected during review, or left pending for an extended period without being approved, are periodically deleted rather than kept indefinitely. AI usage records are automatically deleted after 90 days. Account information is kept until you delete your account.
Your rights
Under UK GDPR, you can ask us to:
Show you what data we hold about you (if you have an account, you can download all of it yourself from the Profile tab of your account page)
Correct inaccurate details
Remove a listing entirely, including if you didn't submit it yourself
Object to your details being published here
Delete your account and everything in it, yourself, at any time from the Profile tab of your account page
To make a request, or to report an issue with any listing, email info@londonreusemap.org. Please include a link to (or the name of) the listing in question. We aim to respond within a reasonable time and will typically action removal or correction requests promptly once verified.