Privacy policy
Privacy Policy
Last updated: 29 March 2026
This privacy policy describes how Peter James Trading Ltd (trading as BuyMyBricks) collects, uses, and discloses your personal information when you visit or make a purchase from buymybricks.com. Our store is powered by Shopify.
1. Personal Information We Collect
When you visit our site or place an order, we collect the following categories of information:
- Contact details: Name, email address, phone number, billing and shipping addresses.
- Payment information: Payment card details and transaction records. Card details are processed securely by our payment provider (Shopify Payments) and are not stored on our servers.
- Order information: Items viewed, added to cart, wishlisted, or purchased, along with order history.
- Account information: Username, password, and account preferences (if you create an account).
- Communications: Customer support enquiries and correspondence.
- Device and usage information: IP address, browser type, device type, operating system, pages visited, time spent on pages, referring URLs, and unique device identifiers. This information is collected automatically through cookies and similar technologies.
2. How We Use Your Information
We use your personal information for the following purposes:
- Processing and fulfilling your orders, including shipping and payment processing.
- Communicating with you about your orders, account, or customer support requests.
- Sending marketing emails about new products, offers, and content (only with your consent — you can unsubscribe at any time).
- Improving our website, products, and services.
- Fraud prevention and security.
- Complying with legal obligations.
3. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to provide and improve your experience. A cookie is a small data file stored on your device when you visit a website.
Essential Cookies
These are necessary for the website to function and cannot be switched off. They include session cookies for cart functionality, authentication, and security.
- Shopify session cookies — required for browsing, cart, and checkout functionality.
- Fraud prevention cookies — used to detect and prevent fraudulent transactions.
Analytics Cookies
These help us understand how visitors interact with our website so we can improve it.
- Google Analytics (GA4) — tracks page views, session duration, and traffic sources. Data is anonymised and processed by Google. Opt out of Google Analytics.
- Microsoft Clarity — records session replays and heatmaps to help us improve usability. No personally identifiable information is captured.
Marketing Cookies
These are used to deliver relevant advertising and measure campaign performance. They are only set with your consent.
- Meta Pixel (Facebook/Instagram) — tracks website activity to deliver targeted ads and measure conversions on Meta platforms.
- Google Ads — tracks conversions from Google advertising campaigns.
- Klaviyo — tracks on-site behaviour to personalise email marketing (e.g. browse abandonment, product recommendations).
Managing Cookies
You can manage your cookie preferences through our cookie consent banner when you first visit the site. You can also control cookies through your browser settings. Note that disabling essential cookies may affect site functionality.
4. Third-Party Services
We share your information with the following categories of third parties, only as necessary to operate our business:
- Shopify — our e-commerce platform. Shopify Privacy Policy.
- Payment processors — Shopify Payments, PayPal, Klarna. Payment data is processed in accordance with PCI-DSS standards.
- Shipping carriers — to fulfil and deliver your orders.
- Email marketing — Klaviyo, for transactional and marketing emails. Klaviyo Privacy Policy.
- Analytics — Google Analytics, Microsoft Clarity.
- Advertising — Meta (Facebook/Instagram), Google Ads.
- Reviews — Trustpilot, for collecting and displaying customer reviews.
We do not sell your personal information to third parties.
5. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Order data is retained for a minimum of 6 years in accordance with UK tax and accounting obligations.
6. Your Rights (UK GDPR)
Under the UK General Data Protection Regulation, you have the following rights:
- Access — request a copy of the personal information we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your personal data (subject to legal retention requirements).
- Restriction — request that we limit how we use your data.
- Portability — request a copy of your data in a structured, machine-readable format.
- Object — object to processing of your data for marketing purposes.
- Withdraw consent — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at support@buymybricks.com. We will respond within 30 days.
7. Data Security
We take reasonable precautions to protect your personal information. All payment transactions are encrypted using SSL technology and processed through PCI-DSS compliant payment providers. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Children
Our website is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this privacy policy from time to time. The “last updated” date at the top of this page will reflect the most recent version. We encourage you to review this policy periodically.
10. Contact Us
For questions or concerns about this privacy policy or your personal data, contact us:
Peter James Trading Ltd (trading as BuyMyBricks)
Company No. 15028631 | VAT No. GB 471701210
Wellington House, Aviator Ct, York YO30 4UZ
support@buymybricks.com
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at
