Privacy Policy

Last updated: October 8, 2026

BrickHavenShop (“we,” “us,” “our”) operates brickhavenshop.com (the “Site”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to everyone who visits our Site or buys from us, in the United States and internationally.

By using the Site, you agree to this Privacy Policy. If you do not agree, please do not use the Site.

1. Information We Collect

Information you give us:

• Name, email address, phone number, and billing and shipping address
• Account login details (username and password)
• Order and payment information (payment card details are processed by our payment providers; we do not store full card numbers)
• Messages you send us by email, live chat, or phone
• Reviews, photos, or other content you submit

Information collected automatically:

• IP address, browser type, device type, and operating system
• Pages viewed, time on site, referring URL, and clickstream data
• Cookie and similar technology data (see our Cookie Policy)

Information from third parties:

• Payment processors, fraud-prevention services, shipping carriers, and analytics providers (such as Google Analytics 4)

2. How We Use Your Information

We use your information to:

• Process, fulfill, and ship your orders
• Send order confirmations, shipping updates, and delivery notifications
• Respond to your questions and provide customer support, including 24/7 live chat and email
• Manage your account and order history
• Process returns, refunds, and warranty claims
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Improve our Site, products, and services
• Send marketing emails and offers (only where you have opted in; you can unsubscribe at any time)
• Comply with legal, tax, and accounting obligations

3. Legal Bases for Processing (International Customers)

If you are in the European Economic Area (EEA), the UK, or Switzerland, we process your personal data under these legal bases:

• Contract: to fulfill your order
• Legitimate interests: to run and improve our business and prevent fraud
• Consent: for marketing and non-essential cookies
• Legal obligation: for tax, accounting, and compliance

4. Sharing Your Information

We do not sell your personal information. We share it only with:

• Payment processors: to take payment securely
• Shipping carriers and logistics partners: to deliver your order
• IT, hosting, and analytics providers: to run the Site
• Live chat provider: to answer the messages you send us through live chat
• Email and marketing platforms: to send you updates you requested
• Fraud-prevention and security services
• Professional advisers: lawyers, accountants, and auditors
• Authorities: where required by law or to protect our rights

All service providers are required to protect your data and use it only for the purposes we specify.

5. International Data Transfers

We are based in the United States and may process and store your data in the US or other countries. If you are outside the US, your data may be transferred to and processed in the US. Where required, we use appropriate safeguards (such as standard contractual clauses) for these transfers.

6. Data Retention

We keep your personal data only as long as needed for the purposes described here, including:

• Order and transaction records: 7 years, as required for tax and accounting
• Account data: while your account is active, or until you ask us to delete it
• Marketing data: until you unsubscribe
• Support messages: as long as needed to resolve your issue

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (the “right to be forgotten”)
• Object to or restrict processing
• Data portability
• Withdraw consent at any time
• Opt out of marketing
• Lodge a complaint with your local data protection authority

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. We do not sell personal information.

To exercise any of these rights, email sales@brickhavenshop.com. We will respond within the time required by applicable law.

8. Children’s Privacy

Our Site is safe for all ages to browse, and we sell LEGO sets suitable for children. However, we do not knowingly collect personal data from children under 13 (or under 16 where required). Purchases must be made by an adult, or by a minor with permission from a parent or guardian. If you believe a child has provided us with personal data without consent, contact us and we will delete it.

9. Security

We use SSL encryption and other reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it last changed. Material changes will be posted on this page and, where required, we will notify you.

11. Contact Us