About this Privacy Policy

This Privacy Policy explains how BrickMetrics collects, uses, stores, and shares personal information when you visit our website, create an account, connect a marketplace, subscribe to a plan, contact us, or use our services.

BrickMetrics is operated by Steve Parkinson, trading as BrickMetrics. For the personal information described in this policy, BrickMetrics is the data controller unless stated otherwise.

You can contact us at support@brickmetrics.co.uk.

Account and profile information

When you register or manage your account, we may collect:

• your first and last name;
• email address;
• BrickLink or other marketplace store name;
• password in hashed form;
• country, region, timezone, currency, and account preferences;
• plan, subscription, account status, and marketing preferences; and
• support messages and feedback you send to us.

Payment and subscription information

Stripe or another identified payment provider processes your payment details. BrickMetrics may receive and store customer, subscription, transaction, plan, billing-status, and payment-status identifiers needed to manage your subscription.

BrickMetrics does not receive or store your complete payment-card number.

Technical and usage information

When you use BrickMetrics, we may collect technical and operational information such as your IP address, browser or device information, session and login records, timezone, pages or features used, API counters, errors, security events, and diagnostic logs.

Cookies and similar technologies are described in our Cookie Policy.

How we use your information

We use personal information to:

• create, authenticate, and manage your account;
• connect to marketplaces and provide the features you request;
• import, synchronise, analyse, display, and update your store data;
• calculate metrics, suggested prices, reports, and opportunities;
• manage subscriptions, payments, limits, and account access;
• respond to support requests and communicate service information;
• protect accounts, investigate misuse, and maintain security;
• diagnose faults, monitor performance, and improve BrickMetrics; and
• meet legal, tax, accounting, and regulatory obligations.

Our lawful bases

Under UK data-protection law, we rely on one or more of the following lawful bases:

• Contract: where processing is necessary to create your account or provide the service you request.
• Legitimate interests: where reasonably necessary to operate, secure, support, and improve BrickMetrics, provided those interests do not override your rights.
• Legal obligation: where we must retain or disclose information to comply with the law.
• Consent: where you make an optional choice, including agreeing to receive marketing where consent is required.

You may withdraw consent at any time. Withdrawal does not make earlier processing unlawful.

Service and account communications

We may send messages needed to operate your account, including security notices, password resets, billing information, service changes, automation reports, and support responses. These are service communications rather than marketing.

We will send marketing communications only where permitted. You can change your marketing preference in your account or use the unsubscribe option in a marketing message.

Who we share information with

We do not sell your personal information.

We may share the minimum information necessary with:

• marketplaces and data providers when you connect an account or request an operation;
• Stripe or another payment provider to process and manage payments;
• hosting, infrastructure, email, security, and technical service providers acting on our behalf;
• professional advisers where reasonably necessary; and
• courts, regulators, law-enforcement bodies, or other parties where required by law or necessary to protect legal rights.

Service providers may use personal information only for the services they provide to us and under appropriate contractual or legal safeguards.

International transfers

Some marketplaces or service providers may process information outside the United Kingdom. Where UK data-protection law requires it, we use an approved transfer mechanism or rely on another lawful safeguard.

The independent privacy policies of connected marketplaces and payment providers also apply to information they process as separate controllers.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including while your account is active and for an appropriate period afterwards.

Retention depends on the type of information and may reflect account recovery, backup cycles, fraud prevention, dispute handling, and legal, tax, or accounting obligations.

When information is no longer required, we delete or anonymise it where reasonably practicable. Some information may remain temporarily in backups or be retained where the law requires it.

How we protect information

We use technical and organisational measures intended to protect personal information against unauthorised access, alteration, loss, or disclosure. These include access controls, password hashing, encrypted storage for marketplace credentials, and operational security measures.

No internet service or storage method can guarantee absolute security. You should use a strong, unique password and contact us promptly if you suspect unauthorised access.

Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to delete information;
• ask us to restrict how information is used;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format; and
• withdraw consent where processing relies on consent.

These rights are not absolute and may be subject to legal exceptions. We may ask for information needed to confirm your identity before responding.

To exercise a right, email support@brickmetrics.co.uk.

Account deletion

You can request account deletion using the available account controls or by contacting us. Cancelling a subscription does not automatically delete the account or its information.

Deletion requests remain subject to information we must retain for legal, financial, fraud-prevention, security, or dispute-resolution purposes.

Changes to this policy

We may update this Privacy Policy when our services, practices, providers, or legal obligations change. The current version will display its effective date.

We will take reasonable steps to bring material changes to your attention before they take effect where appropriate.

Questions and complaints

For questions, requests, or complaints about personal information, contact support@brickmetrics.co.uk.

If you are not satisfied with our response, you may complain to the UK Information Commissioner's Office. Information about making a complaint is available at ico.org.uk.