Last updated: September 2026
1. Who We Are
Bricks and Data ("we", "us", "our") is the trading name of Bricks and Data Ltd, a company registered in England and Wales with company number 12405842, operating in the United Kingdom. We provide custom business software, written with AI coding tools and checked by a developer, to clients on a subscription basis. If you have any questions about this policy, contact us at: legal@bricksanddata.com.
2. What Data We Collect
- Contact & account data: name, email address, business name, and the description of software you need — collected when you submit the enquiry form or create an account.
- Usage data: pages visited, time on site, browser type, device type, and IP address — collected automatically via analytics tools.
- Cookie data: session identifiers, preferences and analytics identifiers — see the Cookie Policy below.
- Communications: messages you send to us via email or any messaging channel.
- Payment data: we do not store card details. Payments are processed by our third-party payment provider (Stripe) and subject to their privacy policy.
3. How We Use Your Data
- To deliver our service, including building and hosting your software.
- To respond to enquiries and provide customer support.
- To process payments and manage your subscription.
- To send service-related communications (e.g. progress updates, invoices).
- To improve our website and service using anonymised analytics.
- To comply with legal obligations.
We will only send you marketing emails if you have explicitly opted in. You can unsubscribe at any time.
4. Legal Basis for Processing (UK GDPR)
- Contract: processing necessary to perform the services you've requested.
- Legitimate interests: analytics, fraud prevention, and improving our service.
- Consent: for marketing emails and non-essential cookies.
- Legal obligation: to comply with UK law, including HMRC requirements.
5. Data Sharing
We do not sell your personal data. We may share data with:
- Stripe — for payment processing.
- Base44 — our hosting and infrastructure platform.
- Google — for website analytics and advertising measurement (Google Analytics), only if you allow these cookies.
- Legal authorities — where required by law.
6. Data Retention
Enquiries: if you contact us but do not become a customer, we keep your enquiry only for as long as we need to respond and follow up, and then delete it.
Customer records: we keep records about you as a customer, such as contracts, invoices and payment records, for up to 6 years after your subscription ends for legal and accounting purposes, after which they are securely deleted.
Data in your software application: records and files that you and your users store in your software application are processed on your behalf. After your subscription ends we keep them for 30 days so that you can request an export, after which they are deleted from the live Service and removed from backups as those backups expire.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict processing.
- Data portability.
- Withdraw consent at any time.
To exercise any of these rights, email us at legal@bricksanddata.com. You also have the right to lodge a complaint with the ICO at ico.org.uk.
8. Security
We use industry-standard security measures including encrypted data storage, HTTPS, and access controls. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your data.
9. Changes to This Policy
We may update this policy from time to time. We'll notify active subscribers by email of any material changes. Continued use of our service after changes constitutes acceptance of the updated policy.
10. Cookie Policy
The website uses essential cookies and local storage where needed for security, contact-form sessions and saving your cookie preference. Optional Google Analytics cookies, which also measure which adverts lead to enquiries, are only enabled after you select “Allow measurement”. You can change this choice at any time using the Cookie settings link in the footer.
Declining optional measurement does not stop you from browsing the website or using essential contact-form functions. If you change your choice to decline, we remove the Google Analytics cookies set on this website.
