Privacy Policy

We collect information you provide directly, information collected automatically when you use the Service, and information from trusted third parties who help us operate our business.

• Create and manage your account and membership.
• Fulfill rentals — including reserving, shipping, and receiving returned LEGO® sets.
• Process payments and prevent fraud.
• Communicate with you about your orders, membership, and support requests.
• Improve the Service, personalize your queue, and develop new features.
• Comply with legal obligations.

We do not sell your personal information. We share limited information only with:

• Service providers such as Shopify (payments and subscription billing), our shipping partners, and our infrastructure and analytics providers.
• Legal and safety — when required by law or to protect the rights, safety, or property of The Bryck Box, our members, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings. Disabling certain cookies may limit the functionality of the Service.

We use industry-standard administrative, technical, and physical safeguards to protect your information — including encryption in transit, restricted access controls, and secure hosting. No method of transmission over the internet is 100% secure, but we work hard to protect your data.

We retain your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

• Access, update, or delete your account information at any time.
• Unsubscribe from marketing emails using the link in each message.
• Request a copy of your data or ask us to delete it by contacting the address below.
• Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

The Bryck Box is designed for families to build together, but accounts are intended for adults (18+). We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can delete it.

The Service is operated from the United States. By using the Service, you understand your information may be processed in the United States and other jurisdictions with different data-protection laws than your own.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Continued use of the Service after changes means you accept the updated policy.

Questions about this Privacy Policy or your data? Reach us at info@thebryckbox.com or visit our contact page.