Privacy policy

Last updated: 22 September 2026

1. Who we are

Sort A Brick is a service operated by Br1ck, UAB, a company registered in Lithuania, registration number 306328284, with its registered office at Terminalo g. 3, Biruliškių k., LT-54469 Kauno r., Lithuania, and its office at J. Jasinskio g. 16, LT-03163 Vilnius, Lithuania.

Br1ck, UAB ("Sort A Brick", "we", "us") is the controller of your personal data.

This policy explains how we handle your personal data when you visit www.sortabrick.com, buy a refurbished set, sell mixed bricks, register on the sets restoration service waiting list, contact us, or subscribe to our release notifications.

Contact for all privacy matters: hello@sortabrick.com

2. What data we process

We process different data depending on what you do with us.

When you buy a refurbished set

Identity data: first name, last name.
Contact data: email address, phone number, billing and delivery address.
Order data: order number, order history, and our correspondence about your order.
Payment data: payment method and payment status. Card and bank details are entered directly with our payment providers; we never see or store full card numbers.
Return and guarantee data: the part you reported, any photos you send us, and the address for a replacement part or refund.

When you sell us your mixed bricks

Identity data: first name, last name, and date of birth. The date of birth is collected later in the process, when the purchase and sale agreement is prepared.
Contact data: email address, phone number, address.
Shipment data: the approximate weight you enter, the photos of your collection, the weight we measure on arrival, and the sorting results.
Payment data: your IBAN, which we use to transfer your payout.
Agreement data: the signed purchase and sale agreement and its electronic signature record.

When you use the set restoration service or join its waiting list

Identity data: first name, last name.
Contact data: email address, phone number, delivery address.
Order data: the weight and content of the collection you send us, your Set Matching Report, the sets you choose to restore, and our correspondence about your order.
Payment data: payment method, payment status and invoice data. Card and bank details are entered directly with our payment providers; we never see or store full card numbers.

When you contact us or subscribe to our marketing communication

Identity data: first name, last name.
Contact data: email address, and phone number if you give it to us.
Message data: the content of your message and our reply.
Marketing data: your communication preferences, and whether you opened or clicked an email we sent you.

When you browse the website

Usage data: device type, browser, pages visited, click behaviour, session duration and similar information collected through cookies and comparable technologies (section 7).

We look at this data in aggregated form, to understand how the website performs as a whole: how many people visited a page, which pages they came from, where they stopped. We do not build profiles of individual visitors based on this information.

The cookies themselves may assign your browser an identifier, and the analytics and marketing tools we use work with that identifier to count visits and measure campaigns. You control this: statistics and marketing cookies are only set if you consent in the cookie banner, and you can withdraw that consent at any time (section 7).

3. How we collect it

Directly from you: when you place an order, fill in a form, join the waiting list, subscribe, contact us, or submit a guarantee claim.
Automatically: when you browse the website or interact with its features, through cookies and similar technologies.
From third parties who help us operate and deliver our services: for example payment status from the payment provider, delivery status from the shipping partner, or a signature record from the e-signature provider.

4. Legal basis and purposes of processing

We process your personal data only when a valid legal basis under the General Data Protection Regulation (GDPR) applies. Below is an overview of the purposes, the data we process, and the corresponding legal basis:

Purpose	Data we process	Legal basis
To process and fulfil your order, whether you buy a refurbished set, send us your bricks for restoration, or sell us your bricks	First name, last name, date of birth (only when you sell us your bricks), email address, phone number, delivery address, order and shipment details, and payment details	Performance of a contract
To manage payments and prevent fraud	Name, email address, order history, payment status, and transaction details	Legitimate interest
To comply with legal obligations (e.g., tax and accounting)	Purchase records and payment information	Legal obligation
To provide customer support and respond to inquiries	Name, contact details, order information, and message content	Legitimate interest
To send marketing communications and keep you on the set restoration waiting list (if you opt in)	Name, email address, communication preferences, and the details you provide when joining the waiting list	Consent
To analyze website usage and improve user experience	Device type, pages visited, click behavior, and session duration	Legitimate interest or Consent
To defend legal claims or respond to official requests	Depending on the situation, any of the data outlined in this Privacy Policy	Legal obligation and Legitimate interest

5. Data Sharing

We may share your personal data with trusted third parties who help us operate and deliver our services. This includes:

Payment service providers
IT and analytics providers
Communication and email platforms
Shipping and logistics partners
Legal and regulatory authorities

All third parties are contractually bound to protect your data and process it in accordance with applicable data protection laws.

We do not sell or rent your personal data.

6. Transfers outside the European Economic Area

We aim to keep processing within the European Economic Area. Some of our providers may process data outside the European Economic Area. Where that happens, the transfer is based on an adequacy decision of the European Commission, or on Standard Contractual Clauses together with additional safeguards. You can ask us for a copy of the safeguards in place.

7. Cookies and similar technologies

Our website uses cookies and comparable technologies. Strictly necessary cookies (shopping bag, checkout, security, and the record of your consent) are used without consent, because the website cannot work without them. All other cookies, for statistics and marketing, are set only after you give consent in the cookie banner.

You can change or withdraw your consent at any time through the cookie icon on the website. The full, automatically updated list of the cookies we use is available in our cookie declaration, linked from the banner.

8. Data Retention

Order, invoice, payment and purchase agreement data: for as long as statutory accounting and tax retention periods require, up to 10 years.
Customer support correspondence: normally 3 years after the last contact.
Restoration waiting list: until you ask to be removed, or until we close the waiting list and tell you so.
Marketing data: until you unsubscribe or withdraw your consent, plus a record of the withdrawal itself.
Photos of brick collections sent with a selling request: 2 years.
Usage data from cookies: for the period stated in the cookie declaration.

When a retention period ends, we delete the data or irreversibly anonymise it.

9. Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss and misuse. These include encrypted transmission (HTTPS), restrictive access rights, and storage with providers we have vetted.

10. Your rights

You have the right to access your personal data, to ask us to correct or delete it, to restrict or object to its processing, and to receive it in a machine-readable format. Where we process your data based on your consent, you can withdraw that consent at any time with effect for the future; withdrawing it does not affect the processing that took place before.

To exercise any of these rights, write to hello@sortabrick.com. We answer within one month.

You also have the right to lodge a complaint with a data protection supervisory authority.

11. Children

Our services are not directed at children, and we do not knowingly collect their personal data.

Orders, selling requests and waiting list registrations are meant to be made by an adult. Where a child takes part in one of our activities, for example an event at our office, we collect their data only with the written consent of a parent or guardian, and only to the extent described to them at that time.

If we learn that we have collected a child's personal data without the consent of a parent or guardian, we delete it promptly.

12. Changes to this policy

We may update this policy when our processing or the legal situation changes. The current version is always available on this page.