Last Updated: 24.08.2026

Your privacy is important to us. It is the policy of BrickWorld OÜ (Registration code: 17057051) to respect your privacy regarding any information we may collect from you across our website, https://brickempire.eu, and other sites we own and operate.

Data Controller: MegaPC OÜ, registered in the Republic of Estonia.

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent.

• Account Data: Email address, username, and encrypted password.
• Transaction Data: Handled securely by our payment processors (PayPal/Stripe). We do not store your credit card details.
• Analytics & Security: We collect basic usage data (such as page views, browser type, and IP addresses) to improve our platform and ensure security. We use Google Analytics as a third-party service provider to analyze website traffic.
• Cookies: We use cookies to store your preferences (such as your consent to this privacy policy) and to keep you logged in. You can choose to decline non-essential cookies via our consent banner.

Under the GDPR, we must have a legal basis to process your data. We use the collected information for various purposes:

• Contractual Necessity: To provide and maintain our Service, process your orders, and provide customer care.
• Legal Obligation: To detect, prevent and address technical issues or fraud, and to comply with tax regulations.
• Consent: To collect website analytics (e.g., via Google Analytics) and improve your experience.

We only retain collected information for as long as necessary to provide you with your requested service, or as required by law.

• Account Data: Stored for as long as your account is active.
• Transaction Records: Stored for up to 7 years to comply with EU accounting and tax regulations.
• Security Logs: Stored for up to 1 year for fraud prevention.

What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access.

Under the General Data Protection Regulation (GDPR), you have the right to access, update, export, or request the deletion of your personal data at any time. To exercise these rights, please contact us. Please note that certain data (like transaction history) cannot be deleted immediately due to legal requirements.

Right to Complain: If you believe we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee.