Question 1

1. Data Controller

Accepted Answer

The data controller responsible for your personal information is:
The Brick Stop LTD
26 Godstone Road
Caterham
CR36NE
United Kingdom
Email: hello@wearebrickstop.com

Question 2

2. Information We Collect

Accepted Answer

We may collect and process the following categories of personal data:
 • Identity and Contact Data: name, email address, telephone number.
 • Booking and Transaction Data: booking details, payment information (processed securely by third-party payment providers – we do not store full card details).
 • Communication Data: records of correspondence with us.
 • Marketing Data: preferences relating to receiving promotional communications.
 • Technical Data (if using our website): IP address, browser type, and cookie identifiers.

Question 3

2A. Children’s Data

Accepted Answer

Our services are not intended for children under 13, and we do not knowingly collect personal information from anyone below this age.

If we discover that personal data has been unintentionally collected from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information.

Parents or legal guardians who believe their child has provided us with personal data without consent are encouraged to contact us at hello@wearebrickstop.co.uk

Question 4

3. Legal Basis for Processing

Accepted Answer

We will only process your personal data where a lawful basis exists under data protection law. These bases include:
 • Contractual Necessity: to perform our obligations under a booking or purchase.
 • Consent: where you have opted-in to receive marketing communications.
 • Legitimate Interests: to manage our operations, improve customer experience, and promote our services (provided such interests are not overridden by your rights).
 • Legal Obligation: where processing is required to comply with applicable law.

Question 5

4. Use of Personal Data

Accepted Answer

Your personal data may be used for the following purposes:
 • To confirm, administer, and manage bookings.
 • To communicate with you regarding cancellations, rescheduling, or service updates.
 • To process payments and issue receipts.
 • To send promotional offers, newsletters, and event information (subject to your marketing preferences).
 • To comply with regulatory or legal obligations.

Question 6

5. Data Sharing and Disclosure

Accepted Answer

• We do not sell or rent your personal data to third parties.
 • We may disclose your data to trusted third-party service providers who act on our behalf (e.g., booking platforms, IT service providers, payment processors, email providers). Such providers are only permitted to process data in accordance with our instructions and applicable data protection law.
 • We may disclose information if required to do so by law, regulation, or governmental request.

Question 7

6. International Transfers

Accepted Answer

Where service providers process data outside the United Kingdom, we will ensure that appropriate safeguards (such as the UK International Data Transfer Agreement or other approved mechanisms) are in place.

Question 8

7. Data Retention

Accepted Answer

Personal data will be retained only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including any legal, accounting, or reporting requirements. Retention periods will be determined based on the nature of the data and our legal obligations.

Question 9

8. Data Security

Accepted Answer

We implement appropriate technical and organisational measures to safeguard personal data against unauthorised access, accidental loss, disclosure, or destruction.

Question 10

9. Your Rights

Accepted Answer

Under the UK GDPR, you have the following rights (subject to certain limitations):
 • Right of Access – to request a copy of the personal data we hold about you.
 • Right to Rectification – to request correction of inaccurate or incomplete data.
 • Right to Erasure – to request deletion of your data, where lawful.
 • Right to Restrict Processing – to request that we limit use of your data.
 • Right to Data Portability – to request transfer of your data to another provider.
 • Right to Object – to object to processing based on legitimate interests or for direct marketing.
 • Right to Withdraw Consent – where processing is based on consent, you may withdraw at any time.
To exercise any of these rights, please contact us at hello@wearebrickstop.co.uk.

Question 11

10. Cookies (Website Use)

Accepted Answer

If you use our website, cookies may be employed to enhance user experience, analyse traffic, and enable certain functionality. You may disable cookies through your browser settings; however, some features may not function correctly.

Question 12

11. Changes to this Privacy Policy

Accepted Answer

We reserve the right to update or amend this Privacy Policy from time to time. Any changes will be posted on our website with an updated “Last Updated” date.

Question 13

12. Complaints

Accepted Answer

If you are concerned about the handling of your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

Privacy Policy

First Café Near London Built for LEGO® Lovers!