Privacy Policy

Little Brick Capital Limited ("we", "us", "our") is committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

We are registered as a data controller with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2.1 Information You Provide

• • Identity Data: Name, title, date of birth, nationality
• • Contact Data: Email address, telephone numbers, postal address
• • Financial Data: Bank account details, investment amounts, transaction history
• • Tax Data: Tax identification numbers, residency status
• • Verification Data: Passport/ID copies, proof of address, source of funds documentation
• • Investment Data: Investment preferences, risk tolerance, portfolio holdings
• • Communication Data: Correspondence and feedback you provide

2.2 Information We Collect Automatically

• • Technical Data: IP address, browser type, device information, operating system
• • Usage Data: Pages visited, time spent, click patterns, navigation paths
• • Cookie Data: As detailed in our Cookie Policy
• • Location Data: Geographic location based on IP address

2.3 Information from Third Parties

• • Identity verification services for KYC/AML compliance
• • Credit reference agencies
• • Fraud prevention agencies
• • Public sources (Companies House, electoral register)
• • Professional advisors acting on your behalf

We process your personal data under the following legal bases:

4.1 Service Provision

• • Managing your investment account and portfolio
• • Processing investment transactions
• • Sourcing and acquiring LEGO sets on your behalf
• • Providing portfolio valuations and performance reports
• • Managing storage and insurance of your assets
• • Facilitating asset liquidation when requested

4.2 Compliance and Legal

• • Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• • Tax reporting to HMRC and other authorities
• • Regulatory reporting and compliance
• • Fraud prevention and detection
• • Legal proceedings and dispute resolution

4.3 Communications

• • Service updates and important notices
• • Investment opportunities (with consent)
• • Market insights and research
• • Customer service and support

We may share your personal data with:

5.1 Service Providers

• • Storage and logistics partners for asset management
• • Insurance providers for asset coverage
• • Banking and payment processors
• • IT and cloud service providers
• • Professional advisors (lawyers, accountants, auditors)

5.2 Legal and Regulatory

• • HMRC for tax reporting
• • Financial Conduct Authority (if applicable)
• • Law enforcement agencies
• • Courts and tribunals
• • Regulatory bodies and ombudsmen

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

Your data may be transferred outside the UK/EEA for processing or storage. When we do so, we ensure:

• • The country has an adequacy decision from the UK government
• • Appropriate safeguards are in place (Standard Contractual Clauses)
• • The transfer is necessary for contract performance
• • You have explicitly consented to the transfer

We implement appropriate technical and organisational measures to protect your personal data:

• • Encryption of data in transit and at rest
• • Secure servers with firewall protection
• • Access controls and authentication requirements
• • Regular security assessments and penetration testing
• • Staff training on data protection
• • Incident response procedures
• • Business continuity and disaster recovery plans

We retain your personal data for as long as necessary to:

• • Provide our services to you
• • Comply with legal and regulatory requirements
• • Resolve disputes and enforce agreements

Retention Periods

Under UK GDPR, you have the following rights:

To exercise any of these rights, contact us at: info@littlebrickcapital.co.uk

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you are under 18, please do not provide any personal information to us.

We may update this privacy policy from time to time. We will notify you of any material changes by:

• • Posting the new policy on our website
• • Sending you an email notification
• • Updating the "Last Updated" date

Your continued use of our services after changes constitutes acceptance of the updated policy.