Privacy policy

Last Updated: April 24, 2026

At Brick Now, we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard your information when you visit our website and use our custom mosaic services.

1. Information We Collect

Personal Identifiers: Name, shipping and billing addresses, email address, and phone number.
Payment Information: Processed securely via third-party processors (Stripe/PayPal). We do not store or have access to your full credit card details.
User-Uploaded Content: Photos, images, or designs uploaded for customization.
Technical & Usage Data: IP address, browser type, time zone settings, device information, and interaction data collected via cookies and similar tracking technologies.

2. Legal Basis for Processing (GDPR Requirement)

We process your data only when we have a legal basis to do so:

Contractual Necessity: To fulfill your order and provide our services.
Consent: For marketing communications (which you may withdraw at any time).
Legal Obligation: To comply with tax, accounting, or anti-fraud regulations.
Legitimate Interests: To improve our Site’s security and user experience.

3. Protection & Retention of Your Photos (Critical)

We recognize the high sensitivity of your personal images.

Automated Processing: Your photos are processed primarily by our proprietary mosaic conversion algorithms. Human access is strictly limited to authorized production staff for quality control and fulfillment.
Strict Retention Policy: We retain your uploaded photos only as long as necessary to fulfill the order and resolve potential after-sales claims. Original high-resolution images are automatically deleted from our active production servers 60 days after the order is marked as "Delivered." * No Unauthorized Use: We will never use your personal photos for marketing, social media, or public display without your explicit, separate written consent.

4. Data Sharing & Third Parties

We only share data with essential partners who adhere to strict data protection standards:

Logistics Partners: (e.g., FedEx, UPS, DHL) for delivery.
Payment Processors: To facilitate secure transactions.
Cloud & IT Service Providers: For secure data storage and website hosting.
Manufacturing Partners: Only the necessary blueprint or optimized design is shared for production; original photos are shielded whenever possible.

5. Cookies & Behavioral Advertising

We use cookies to maintain your shopping cart and analyze site traffic. We may also use pixels (e.g., Meta Pixel) to measure the effectiveness of our advertising. You can manage your preferences through our Cookie Banner or your browser settings. For "Do Not Track" (DNT) signals, please note our site responds to Global Privacy Control (GPC) settings where required by law.

6. Your Rights (Global Compliance)

Depending on your residency (e.g., EU, UK, California), you have the right to:

Access & Portability: Request a copy of your data in a machine-readable format.
Correction & Deletion: Update inaccurate data or request the permanent deletion of your profile ("Right to be Forgotten").
Opt-Out of Sale/Sharing: Brick Now does not "sell" personal data for money; however, we comply with CCPA/CPRA requirements regarding the sharing of data for cross-contextual advertising.
Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

7. Children’s Privacy

Our Services are not intended for individuals under the age of 18 . We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data without parental consent, we will take immediate steps to delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries outside of your own. We utilize Standard Contractual Clauses (SCCs) or similar legal frameworks to ensure your data receives an equivalent level of protection regardless of where it is processed.

9. Data Security

We utilize SSL/TLS encryption for all data transmissions. While we implement rigorous physical and electronic safeguards, no method of electronic storage is 100% secure. We have a dedicated data breach response plan in place to notify you and regulators should an incident occur.