Privacy Policy

Last updated: 19 May 2026

This Privacy Policy is governed by the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the EU ePrivacy Directive (2002/58/EC) as transposed in the jurisdictions in which we operate.

1. Data Controller

The controller responsible for the processing of your personal data is Brick & Click Technologies ("we", "us", "our"). You can contact us at hello@brickandclick.tech. Full company registration details are available on our Imprint page.

2. Personal Data We Collect

• Data you provide directly: name, business name, email address, and the contents of any message you send via our contact form, email, or phone.
• Data collected automatically: IP address (truncated where possible), browser type and version, device type, operating system, referring URL, pages viewed, and approximate location derived from IP — collected via server logs and analytics cookies (subject to your consent).
• Data from service delivery: if you become a customer, additional information needed to deliver our services (business address, billing details, content you supply for your website).

We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us personal data, please contact us and we will delete it.

3. Purposes and Legal Bases

We process personal data only where we have a lawful basis under GDPR Article 6:

• Responding to enquiries — Art. 6(1)(b) (steps prior to entering into a contract) and Art. 6(1)(f) (legitimate interest in operating our business).
• Performing contracted services for our customers — Art. 6(1)(b) (contract performance).
• Site analytics (Google Analytics) — Art. 6(1)(a) (consent), collected only after you accept the cookie banner.
• Security, fraud prevention, server logs — Art. 6(1)(f) (legitimate interest in protecting our systems).
• Compliance with legal obligations (tax, accounting, lawful requests) — Art. 6(1)(c).

4. Cookies and Similar Technologies

We use the following categories of cookies and storage:

• Strictly necessary (no consent required): cookie-consent state stored in localStorage so we remember your choice.
• Analytics (consent required): Google Analytics 4 (_ga, _ga_*) — used to understand aggregate site usage. IP addresses are anonymised before storage.
• Advertising identifier (consent required): Google AdSense ownership verification meta tag is present on our site; advertising cookies are only set if and when ad serving is enabled and you have consented.

You can accept or decline non-essential cookies via our cookie banner. We implement Google Consent Mode v2, meaning non-essential storage defaults to "denied" until you give consent. You can change your choice at any time by clearing your browser storage or contacting us.

5. Sharing and Recipients

We share personal data only with the following categories of recipients, acting as processors or independent controllers:

• Hosting and infrastructure: Google Cloud Platform / Firebase (Google Ireland Limited).
• Analytics: Google Ireland Limited (Google Analytics 4).
• Email delivery: our Cloud Function provider and SMTP service used to deliver contact-form submissions.
• Professional advisers: accountants, lawyers, or auditors, where required by law.
• Authorities: where compelled by valid legal process.

We do not sell personal data.

6. International Transfers

Some of our service providers (notably Google) may transfer data outside the European Economic Area. Such transfers are protected by the EU Standard Contractual Clauses (Commission Decision 2021/914) and, where applicable, the EU–US Data Privacy Framework. A copy of these safeguards is available on request.

7. Retention

• Contact-form submissions: up to 24 months from the last contact, unless you become a customer.
• Customer records (contracts, invoices): as required by tax and accounting law in the relevant jurisdiction (typically 7–10 years).
• Server logs: up to 30 days.
• Analytics data: up to 14 months in Google Analytics 4 (default).

8. Your Rights under GDPR

If you are located in the EEA, the UK, or Switzerland, you have the right to:

• Access the personal data we hold about you (Art. 15);
• Request rectification of inaccurate data (Art. 16);
• Request erasure ("right to be forgotten") (Art. 17);
• Restrict processing (Art. 18);
• Receive your data in a portable format (Art. 20);
• Object to processing based on legitimate interests (Art. 21);
• Withdraw consent at any time without affecting prior lawful processing (Art. 7(3)).

To exercise any of these rights, email hello@brickandclick.tech. We will respond within one calendar month, as required by Art. 12(3) GDPR.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence or place of work. For example: in Ireland, the Data Protection Commission; in Latvia, the Data State Inspectorate; in the UK, the Information Commissioner's Office.

10. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you.

11. Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include HTTPS/TLS in transit, encryption at rest with our hosting provider, access controls, and regular review of our security posture. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

12. Third-Party Links

Our site may link to third-party services (e.g. Google Maps, social platforms, our customers' websites). We are not responsible for their privacy practices. Please review their privacy policies before submitting any information.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted at the top of this page. The "Last updated" date above reflects the most recent revision. Continued use of our site after the effective date constitutes acceptance of the revised policy.

14. Contact

For any privacy-related questions or to exercise your rights, contact us at hello@brickandclick.tech.