PRIVACY POLICY

Version 1.0 · Updated 31 August 2026

WHO CONTROLS YOUR DATA

500 BRICKS (brick500.com) is the controller. The legal entity is Ryan McNamee at 3 Bonnymuir Crescent, Bonnybridge, Scotland, FK4 1GD. Data-protection questions: support@brick500.com. ICO reference number: ZC230344.

NO ACCOUNTS, NO TRACKING

You do not create an account to rent a brick. Browsing The Wall does not require you to give any personal data. There are no advertising or analytics cookies and no third-party trackers on the wall itself. A small amount of information about your own draft booking is kept in your browser's local storage so you do not lose your place; it never leaves your device by itself.

WHAT WE STORE WHEN YOU BOOK

Your email addressTo verify the booking, send your private manage link, payment receipt, review outcome, live/expiry notices and renewal reminders.For the life of the booking and then as a record of the transaction.

Your advert content — image or GIF, title, message, destination link, promo codeTo display your brick, and to screen it against the content rules.Images are held in private storage and served through the site; content is kept while the booking exists.

Booking details — bricks chosen, size, dates, cycles, visual upgrade, amount paidTo run the booking and to keep an accurate sales record.Retained as an accounting record.

Payment references — Stripe session and payment intent identifiers, amount, currency, status, refundsTo confirm payment, reconcile it and issue refunds.Retained as an accounting record. Card details never reach this site.

Verification codes and manage-link tokensTo prove you control the booking email and to secure your manage link.Stored only as one-way keyed hashes, never as readable values; codes expire quickly.

Moderation and report records — automated screening verdicts, reasons, moderator decisions, and reports about a brickTo enforce the content rules, decide refunds, and defend a decision if challenged.Kept with the case. Reports are stored without identifying the reporter's account.

Email delivery logs — recipient, message type, status, provider message id, failure reasonTo prove a required notice was sent and to investigate non-delivery.Kept for operational troubleshooting.

Aggregate view and click counts per brickTo show renters simple performance figures.Counters only — no visitor profiles, no cross-site tracking, no advertising cookies.

WHY WE ARE ALLOWED TO

Contract — running your booking: verification, payment, display, renewal reminders and the notices about your own brick.
Legitimate interests — screening content, handling reports, preventing fraud and abuse, keeping the service secure and investigating failures.
Legal obligation — keeping accounting records and responding to lawful requests, including reporting illegal material to the authorities.

The emails we send about a booking are service messages, not marketing. We do not run a newsletter and we do not sell or rent your data to anyone.

WHO ELSE PROCESSES IT

Stripe — takes the payment and holds the card data. We only receive references, amounts and status.
Our hosting and database platform — stores the booking records and your uploaded image in private storage, and runs the site.
Our email delivery provider — sends the booking emails and returns delivery, bounce and complaint outcomes.
An automated content-screening model — receives your advert text and image to check them against the content rules. It is not used to profile you.

These providers may process data outside the UK/EEA under the safeguards their terms provide. Your public brick content — image, title, message, link and promo code — is visible to everyone by design once it goes live.

SECURITY

Booking data is only reachable through the site's own server code, never directly from a browser. Uploaded images live in a private bucket. Manage links and verification codes are stored as one-way keyed hashes, are bound to a single booking and purpose, expire, and are compared in a way that resists guessing. Administrator access is restricted to verified accounts holding an administrator role.

YOUR RIGHTS

You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing based on legitimate interests, or ask us to restrict it. Email support@brick500.com from the address used for the booking. Some records — payment and moderation history in particular — must be kept for accounting and legal reasons even after your brick comes down. You can also complain to your data-protection authority; in the UK that is the Information Commissioner's Office.

CHILDREN

The Wall is not intended for under-18s and bookings may only be made by adults.

CHANGES

If this policy changes materially we will update the version and date above and, where the change affects a live booking, tell the booking email. See also our Terms of Service and Content Rules.