BrickForever ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our LEGO set borrowing service in Seattle, Washington.
1. Information We Collect
Personal Information
When you create an account, we collect:
- Name: To identify you and personalize your experience
- Email address: For account verification, communications, and notifications
- Phone number: For pickup coordination and important notifications
- Password: Stored securely (hashed) for account access
Transaction Information
When you borrow sets, we collect:
- Borrowing history (which sets, dates, return status)
- Deposit and fee payment records
- Communication history with our team
Automatically Collected Information
When you visit our website, we may automatically collect:
- Browser type and version
- Device information
- IP address
- Pages visited and time spent
- Referring website
2. How We Use Your Information
We use your information to:
- Create and manage your account
- Process borrowing reservations and returns
- Send confirmation emails and reminders
- Communicate about your account, due dates, and service updates
- Process membership payments and deposits
- Improve our service and user experience
- Prevent fraud and enforce our Terms of Service
- Respond to your inquiries and support requests
- Send occasional marketing communications (with your consent)
3. Information Sharing
We do not sell your personal information. We may share your information only in the following circumstances:
- Service Providers: With trusted third parties who help us operate our service (e.g., email delivery, payment processing), bound by confidentiality agreements
- Legal Requirements: When required by law, court order, or government request
- Safety: To protect the rights, property, or safety of BrickForever, our users, or the public
- Business Transfer: In connection with a merger, acquisition, or sale of assets, with notice to you
4. Third-Party Services
We use the following third-party services:
Supabase
Database hosting and authentication. Your data is stored securely with encryption.
Resend
Email delivery service for confirmations, reminders, and notifications.
Vercel
Website hosting and deployment platform.
Venmo
Payment processing for deposits and membership fees. We do not store your Venmo credentials or financial information.
5. Data Security
We implement appropriate security measures to protect your information:
- Encrypted data transmission (HTTPS/TLS)
- Secure password hashing
- Access controls and authentication
- Regular security updates
- Secure database hosting with encryption at rest
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as:
- Your account is active
- Needed to provide our services
- Required by law or for legitimate business purposes
- Necessary to resolve disputes or enforce agreements
After account deletion, we may retain anonymized data for analytics and service improvement.
7. Your Rights
You have the right to:
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing emails
- Withdraw consent: Where processing is based on consent
To exercise these rights, contact us at contact@brickforever.com.
8. Cookies and Local Storage
We use cookies and local storage for:
- Essential cookies: For authentication and security
- Local storage: To save your cart items before you sign up
- Preference cookies: To remember your settings
We do not use tracking or advertising cookies. You can disable cookies in your browser, but some features may not work properly.
9. Children's Privacy
BrickForever is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
10. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect
- Right to delete your personal information
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our service. Your continued use of BrickForever after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
By using BrickForever, you acknowledge that you have read and understood this Privacy Policy.