PRIVACY POLICY
At Brick Borrow, we care about protecting your privacy. This policy explains what personal information we collect, why we collect it, how we use it, who we may share it with and what rights you have.
This policy applies when you use our website, contact us, join or manage a Brick Borrow subscription, take part in a competition or promotion, or otherwise interact with us.
Brick Borrow Limited is the data controller for the personal information described in this policy. This means we are responsible for deciding how and why your personal information is used.
If you have any questions about this policy or how we use your personal information, you can contact us at:
Registered address:Unit 12a Castlegrove Business Park, Durban Road, Bognor Regis, West Sussex, PO22 9QT
Company number: 14564937
1. The information we collect
We collect personal information when you interact with Brick Borrow, use our website or sign up for our subscription service.
This may include:
Your name and contact details, such as your email address, phone number and delivery address.
Your account details, including your username, password and subscription package.
Your date of birth, where this is needed.
Your billing and payment information, including billing address, delivery address, payment status and transaction history.
Your LEGO® preferences, wish lists, set choices, subscription history and delivery history.
Messages you send to us, including customer service enquiries, complaints, reviews, feedback and survey responses.
Photos, comments or testimonials you choose to share with us.
Your marketing preferences, including whether you have chosen to receive marketing emails.
Information linked to SMS account updates, such as your phone number and payment reminder history.
When you visit our website, we may also collect technical information, including:
Your IP address.
Browser type and version.
Device type and operating system.
Time zone setting.
Pages you visit and how you use the website.
Links clicked, products viewed or searched for, page loading times and any errors.
Cookie and analytics information, where permitted.
Some of this information is collected through cookies and similar technologies. You can read more about this in the Cookies section below.
We may also receive limited information from trusted service providers, such as payment, delivery, analytics or fraud prevention partners, where this is needed to run our service safely and effectively.
2. How we use your information
We use your personal information to provide and manage the Brick Borrow service. This includes:
Creating and managing your account.
Processing subscriptions and payments.
Delivering LEGO® sets to you.
Managing returns, swaps and customer service requests.
Keeping you updated about your account or subscription.
Sending essential service messages, including payment reminders.
Responding to questions, feedback, reviews or complaints.
Personalising your experience, such as helping us understand which sets may be most relevant to you.
Improving our website, products, services and customer experience.
Managing competitions, promotions or surveys.
Sending marketing emails where we are allowed to do so.
Protecting Brick Borrow, our customers and our website from fraud, misuse, security issues or unlawful activity.
Meeting our legal, accounting and regulatory obligations.
3. Our lawful bases for using your information
We only use your personal information where we have a lawful reason to do so.
We use your information to fulfil our contract with you when we need it to provide your subscription, process payments, arrange deliveries, manage returns, respond to account queries and provide customer support.
We use your information where we have a legitimate interest in running and improving Brick Borrow. This includes improving our website and services, understanding customer needs, handling complaints, preventing fraud, protecting our business and keeping internal records.
We use your information where we have your consent, such as when you agree to receive certain marketing emails, accept non-essential cookies or choose to share photos, testimonials or other content with us.
We use your information where we have a legal obligation, such as keeping financial records, responding to lawful requests from authorities, dealing with legal claims or meeting regulatory requirements.
4. Marketing
We may send you marketing emails about Brick Borrow products, services, offers, updates or related content where we are allowed to do so.
You can opt out of marketing at any time by using the unsubscribe link in our emails, updating your communication preferences in your account, or contacting us at hello@brickborrow.com.
You have an absolute right to object to direct marketing at any time. If you opt out, we may keep a limited record of your request so we know not to contact you with marketing in future.
Service messages are different from marketing messages. We may still send you important account or subscription updates, such as delivery information, payment reminders, renewal information or changes to our terms.
5. SMS messages
We may contact you by SMS for essential account-related updates. This may include payment reminders if your account goes into arrears, delivery updates or other important information about your Brick Borrow account.
We do not use SMS for general marketing unless you have clearly agreed to receive it.
6. Who we share your information with
We only share personal information where we need to and where there is a lawful reason.
We may share your information with:
-
Delivery and fulfilment providers, such as Royal Mail Click & Drop, so we can send and receive LEGO® sets.
-
Payment providers, such as Stripe, so payments can be processed securely.
-
Website, hosting, IT and platform providers who help us run our website and systems.
-
Email, customer support and communication providers.
-
Analytics providers, such as Google Analytics, where cookies or similar technologies are used in line with your choices.
-
Professional advisers, such as accountants, auditors, insurers and legal advisers.
-
Fraud prevention, security or compliance providers, where needed to protect our business and customers.
-
Government bodies, regulators, courts or law enforcement where required by law or where needed to protect our legal rights.
-
Third parties where you have asked us or given us permission to share your information, such as social media platforms if you choose to interact with us there.
Our service providers must only use your personal information for the purpose we have asked them to carry out and must protect it properly.
7. Payment information
Payments are processed securely by our payment provider, currently Stripe.
We do not store your full card details on our own systems. Sensitive payment information is handled by our payment provider and protected using secure payment processes.
8. International transfers
Some of our service providers may process personal information outside the UK.
Where this happens, we take steps to make sure your information is protected. This may include relying on UK adequacy regulations, approved contractual safeguards or other measures allowed under UK data protection law.
You can contact us if you would like more information about international transfers.
9. How we keep your information safe
We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure or alteration.
This includes using secure systems, password protection, HTTPS technology on our website, access controls and trusted service providers. We also monitor our systems and review our security measures where needed.
No website or online service can be completely secure, but we work hard to keep your information safe.
10. How long we keep your information
We keep personal information only for as long as we need it.
Account and subscription information is usually kept while your account is active and for up to 3 years after your account closes, unless we need to keep it for longer for legal, tax, accounting, fraud prevention or dispute purposes.
Payment, transaction and contract records are usually kept for up to 6 years from your last interaction with us, where needed for legal, accounting or business records.
Marketing information is kept until you opt out or withdraw your consent. We may keep a suppression record after that so we can make sure we do not contact you again with marketing.
Customer service messages, complaints and feedback may be kept for as long as needed to respond properly, improve our service and protect our legal rights.
Cookie information is kept for the period stated in our cookie settings or cookie banner, depending on the type of cookie used.
11. Your rights
You have rights over your personal information.
You can ask us to:
Confirm whether we use your personal information.
Give you a copy of your personal information.
Correct information that is inaccurate or incomplete.
Delete your personal information in certain circumstances.
Restrict how we use your information in certain circumstances.
Transfer certain information to you or another provider.
Object to certain uses of your information, including direct marketing.
Withdraw your consent where we rely on consent.
You can make a request by contacting us at hello@brickborrow.com.
Some rights only apply in certain circumstances. We may need to keep some information where we have a legal reason to do so, such as tax, accounting, fraud prevention or legal claim requirements.
We may need to confirm your identity before responding to a request.
12. Complaints
We hope you will contact us first if you have any concerns, so we can try to resolve them.
You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator.
You can contact the ICO at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
Telephone: 0303 123 1113
13. Children’s privacy
Brick Borrow subscriptions are intended to be managed by adults.
We do not knowingly ask children to create accounts or provide personal information directly to us. If you believe a child has provided personal information to us without appropriate permission, please contact us at hello@brickborrow.com.
14. Photos and content you share with us
If you choose to share photos, videos, reviews, testimonials or other content with us, we may use this content on our website, social media channels, marketing materials or other Brick Borrow communications.
We will only use content that you have shared with us, or where you have given us permission to use it. This may include photos of LEGO® builds, Brick Borrow boxes, customer feedback or other content relating to your experience with Brick Borrow.
If your content includes other people, including children, please only share it with us if you have the appropriate permission for us to use it.
You can contact us at hello@brickborrow.com if you would like us to stop using content you have previously shared with us. We will do our best to remove it from our own channels where reasonably possible, although we may not be able to remove content that has already been shared, saved or reposted by others.
15. Account payments, grace periods and overdue balances
If a subscription payment is missed, fails or becomes overdue, we may contact you about your account, payment status and any outstanding balance.
This may include contacting you by email, SMS, WhatsApp, phone, letter or through your Brick Borrow account. These messages are service-related and are used to help you keep your account up to date, explain any grace period that may apply, let you know what action is needed and explain what may happen if payment is not received.
If your account moves into our debtors process, we may continue to contact you about the outstanding balance. Where necessary, we may also share relevant account and payment information with trusted third parties who help us manage overdue payments, recover unpaid amounts, prevent fraud, resolve disputes or meet our legal obligations.
We will only use the personal information needed for this purpose, such as your name, contact details, account details including address, payment status, subscription history, delivery history and records of our communication with you.
16. Links to other websites
Our website may include links to other websites.
Once you leave our website, we are not responsible for how other websites use your information. Please read the privacy policy of any website you visit.
17. Cookies and similar technologies
Cookies are small text files placed on your device when you visit a website. Similar technologies may also be used to recognise your device, understand how the website is used and support website features.
We use cookies to help our website work properly, improve performance and, where you agree, understand how visitors use our website.
The types of cookies we may use are:
Strictly necessary cookies
These are needed for the website to work. They help with things like secure account access, shopping basket features, checkout and website security. These cookies cannot usually be switched off because the website would not work properly without them.
Analytics or performance cookies
These help us understand how visitors use our website, such as which pages are visited most often and whether visitors experience errors. We use this information to improve the website. These cookies are only used where required consent has been given.
Functionality cookies
These allow the website to remember choices you make, such as preferences or settings, so your experience feels smoother and more personal.
Advertising or social media cookies
These may be used to deliver more relevant adverts, measure advertising performance or support social media features. These cookies may be set by us or by selected third parties. They are only used where required consent has been given.
18. Cookie consent and settings
We will tell you about cookies when you visit our website.
Strictly necessary cookies may be used without consent because they are needed for the website to work.
Non-essential cookies, such as analytics, advertising and social media cookies, will only be used where you have given consent.
You can also control cookies through your browser settings. If you block or delete some cookies, parts of the website may not work as expected.
You can also find information about behavioural advertising choices at:
19. Changes to this policy
We may update this policy from time to time.
When we make changes, we will update the date at the top of this page. If the changes are important, we may also let you know by email or through your account.
20. Contact us
If you have any questions about this policy, your personal information or your rights, please contact:
Email: hello@brickborrow.com
Registered address: Unit 12a Castlegrove Business Park, Durban Road, Bognor Regis, West Sussex, PO22 9QT
Company number: 14564937
Last updated: June 2026