Privacy Policy

Our Privacy Policy

Learn how we collect, use and protect your personal information.

Updated on 1 October 2026

1. Data controller

The controller of your personal data is Brickter Holdings Ltd. (together with its affiliated and subsidiary companies, collectively "Brickter"), owner of the Website brickter.com. To exercise rights or raise privacy queries, you may write to us using the Contact form on the Website, stating "Data protection" in the subject line.

2. Data Protection Officer (DPO)

Brickter has appointed a Data Protection Officer. You may contact the DPO through the Contact form on the Website, expressly stating "DPO" or "Data Protection Officer" in the subject line. The DPO will handle queries relating to the processing of personal data and the exercise of rights.

3. Data we collect

We collect data you provide to us directly (for example, when creating an account, submitting the contact form or communicating with us): first name, surname, email address, phone number, company, subject and message. We may also process technical data needed to provide the service (IP address, browser type, language and security logs) and data derived from the use of cookies as described in the Cookie Policy.

4. Purposes of processing

We process your data to: (a) provide, maintain and improve the Services; (b) manage user accounts and authentication; (c) handle contact and support requests; (d) comply with legal obligations; and (e) ensure the security of the Website (prevention of abuse, fraud or unauthorised access).

5. Legal basis

The legal bases for processing are: (a) performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) when you use the Services or request information; (b) compliance with legal obligations (Art. 6(1)(c) GDPR); (c) legitimate interest (Art. 6(1)(f) GDPR) in the security of the Website and the improvement of the Services, provided your rights do not override it; and (d) consent (Art. 6(1)(a) GDPR) for, where applicable, commercial communications.

6. Retention

We retain data only for as long as necessary for the stated purposes. Contact messages are kept for the period required to handle the enquiry and, where applicable, legal liability periods. Account data is retained while the account is active and for subsequent periods required by law. Security logs are retained for a period proportionate to the protection purpose.

7. Recipients and processors

We do not sell or rent your personal data. We may disclose data to providers acting as processors (hosting, email, infrastructure) under contract with confidentiality and security obligations. We may also disclose data to competent authorities when required by law.

8. International transfers

If any provider processes data outside the European Economic Area, Brickter will adopt the safeguards provided for in the GDPR (for example, standard contractual clauses or other appropriate measures) before proceeding with the transfer.

9. Rights of data subjects

You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw consent where processing is based on it, without affecting the lawfulness of prior processing. To exercise them, use the Contact form stating the right you wish to exercise and providing sufficient details to identify you. We will respond within the legal timeframe.

10. Complaint to the AEPD

If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, or through www.aepd.es.

11. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. No system is completely secure; we ask you to protect your credentials and notify us of any suspicious incident.

12. Updates

We may update this Privacy Policy to reflect legal or Service changes. The update date appears at the top of this page. Continued use of the Website after changes are published implies awareness of the current version.