Last updated: June 2026
1. Who We Are
Bricks and Data ("we", "us", "our") is a software development service operated in the United Kingdom. We provide AI-assisted custom business software to clients on a subscription basis. If you have any questions about this policy, contact us at: legal@bricksanddata.com.
2. What Data We Collect
- Contact & account data: name, email address, business name, and the description of software you need — collected when you submit the enquiry form or create an account.
- Usage data: pages visited, time on site, browser type, device type, and IP address — collected automatically via analytics tools.
- Cookie data: session identifiers, preferences and analytics identifiers — see the Cookie Policy below.
- Communications: messages you send to us via email or any messaging channel.
- Payment data: we do not store card details. Payments are processed by our third-party payment provider (Stripe) and subject to their privacy policy.
3. How We Use Your Data
- To deliver our service, including building and hosting your software.
- To respond to enquiries and provide customer support.
- To process payments and manage your subscription.
- To send service-related communications (e.g. progress updates, invoices).
- To improve our website and service using anonymised analytics.
- To comply with legal obligations.
We will only send you marketing emails if you have explicitly opted in. You can unsubscribe at any time.
4. Legal Basis for Processing (UK GDPR)
- Contract: processing necessary to perform the services you've requested.
- Legitimate interests: analytics, fraud prevention, and improving our service.
- Consent: for marketing emails and non-essential cookies.
- Legal obligation: to comply with UK law, including HMRC requirements.
5. Data Sharing
We do not sell your personal data. We may share data with:
- Stripe — for payment processing.
- Base44 — our hosting and infrastructure platform.
- Analytics providers — such as Google Analytics (anonymised).
- Legal authorities — where required by law.
6. Data Retention
We retain personal data for as long as your account is active or as required by law. If you cancel your subscription, we will retain your data for up to 6 years for legal and accounting purposes, after which it will be securely deleted.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict processing.
- Data portability.
- Withdraw consent at any time.
To exercise any of these rights, email us at legal@bricksanddata.com. You also have the right to lodge a complaint with the ICO at ico.org.uk.
8. Security
We use industry-standard security measures including encrypted data storage, HTTPS, and access controls. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your data.
9. Changes to This Policy
We may update this policy from time to time. We'll notify active subscribers by email of any material changes. Continued use of our service after changes constitutes acceptance of the updated policy.
10. Cookie Policy
The website uses essential cookies and local storage where needed for security, contact-form sessions and saving your cookie preference. Optional analytics cookies or identifiers are only enabled after you select “Allow analytics”. You can change this choice at any time using the Cookie settings link in the footer.
Disabling optional analytics does not stop you from browsing the website or using essential contact-form functions.
