Privacy Policy

Little Brick Capital Limited ("we", "us", "our") is committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

We are registered as a data controller with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2.1 Information You Provide

• Identity Data: Name, title, date of birth, nationality
• Contact Data: Email address, telephone numbers, postal address
• Financial Data: Bank account details, funding amounts, transaction history
• Tax Data: Tax identification numbers, residency status
• Verification Data: Passport/ID copies, proof of address, source of funds documentation
• Preference Data: Acquisition preferences, objectives, budget and risk appetite, collection holdings
• Communication Data: Correspondence and feedback you provide

2.2 Information We Collect Automatically

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent, click patterns, navigation paths
• Cookie Data: As detailed in our Cookie Policy
• Location Data: Geographic location based on IP address

2.3 Information from Third Parties

• Identity verification services for KYC/AML compliance
• Credit reference agencies
• Fraud prevention agencies
• Public sources (Companies House, electoral register)
• Professional advisors acting on your behalf

We process your personal data under the following legal bases:

4.1 Service Provision

• Managing your account and collection
• Processing acquisitions and sales
• Sourcing and acquiring LEGO sets on your behalf
• Providing valuations of your collection
• Managing storage and protection of your collectables
• Facilitating liquidation of your collection when requested
• Arranging and managing supervised facility visits

4.2 Compliance and Legal

• Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Tax reporting to HMRC and other authorities
• Regulatory reporting and compliance
• Fraud prevention and detection
• Handling complaints
• Legal proceedings and dispute resolution

4.3 Communications

• Service updates and important notices
• News about our services and the collectables market (with consent)
• Market insights and research
• Customer service and support

We may share your personal data with:

5.1 Service Providers

• Storage and logistics partners
• Insurers, where we hold cover (for example transit insurance)
• Online contracting and e-signature providers
• Banking and payment processors
• IT and cloud service providers
• Professional advisors (lawyers, accountants, auditors)

5.2 Legal and Regulatory

• HMRC for tax reporting
• Law enforcement agencies
• Courts and tribunals
• Regulators and public authorities, where required by law

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

Your data may be transferred outside the UK/EEA for processing or storage. When we do so, we ensure that one or more of the following safeguards applies:

• The country has an adequacy decision from the UK government
• Appropriate safeguards are in place (Standard Contractual Clauses)
• The transfer is necessary for contract performance
• You have explicitly consented to the transfer

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure servers with firewall protection
• Access controls and authentication requirements
• Regular security assessments and penetration testing
• Staff training on data protection
• Incident response procedures
• Business continuity and disaster recovery plans

We retain your personal data for as long as necessary to:

• Provide our services to you
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

Retention Periods

Under UK GDPR, you have the following rights:

To exercise any of these rights, contact us at: info@littlebrickcapital.co.uk

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you are under 18, please do not provide any personal information to us.

We may update this privacy policy from time to time. We will notify you of material changes by:

• Posting the new policy on our website
• Sending you an email notification
• Updating the "Last Updated" date