Privacy Policy

This Privacy Policy explains how Next Brick Build LLC("Next Brick," "we," "us," or "our") collects, uses, shares, and protects personal information when you use our website and services. It applies to all visitors and customers and is written to meet the requirements of the California Consumer Privacy Act (as amended by the CPRA), the Utah Consumer Privacy Act, and similar state privacy laws, so that one policy covers you wherever you live in the United States. State-specific rights are summarized in Section 12.

We serve customers in the United States only. By using our services you agree to this Policy. If you do not agree, please do not use our services.

We collect the following categories of personal information:

• Identifiers & contact data: name, email address, postal/shipping address, phone number, and account login credentials.
• Commercial information: your rentals, purchases, subscription plan, Brick Points balance and history, order and return history, and fees.
• Payment information: processed by our payment processor (Stripe). We store a token and limited card details (such as brand and last four digits); we do not store full card numbers.
• Internet & device activity: pages viewed, actions taken, approximate location derived from IP address, browser and device type, and similar usage data, collected with analytics technologies. This includes which version of a page or product card you were shown when we are testing a design, and what you did next.
• Communications: messages you send us (support tickets, emails) and your communication preferences.
• Referral & marketing data: referral codes, promo codes, and the marketing source that brought you to us.

Sources: directly from you (when you create an account, place an order, or contact us), automatically as you use our site, and from service providers such as our payment processor and shipping carriers. We do not buy personal information from data brokers.

We do not intentionally collect sensitive personal information (such as government IDs, precise geolocation, or health data) and ask that you not send it to us.

We use personal information to:

• Provide our services, process rentals, purchases, subscriptions, returns, and Brick Points.
• Charge fees you owe and process payments and refunds.
• Send transactional messages (order, shipping, return, renewal, and fee notices).
• Send marketing messages you have opted into, and operate referral and promotional programs.
• Provide customer support and resolve disputes.
• Detect, prevent, and address fraud, abuse, and security issues.
• Improve our site and services using privacy-limited analytics.
• Comply with legal obligations and enforce our Terms.

We share personal information only as needed to run our business, with:

• Service providers who process information on our behalf under contract, payment processing (Stripe), shipping carriers, email delivery, hosting and analytics, and customer-support tools.
• Legal and safety recipients, when required by law, to respond to legal process, or to protect our rights, customers, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information for money,and we do not share it for cross-context behavioral advertising. Because our analytics are first-party and we do not use third-party advertising pixels, we do not believe we "sell" or "share" personal information as those terms are defined under California law. If that ever changes, we will update this Policy and provide the required opt-out. You can still exercise your choices at any time (see Sections 5 and 6).

We use a small number of cookies and similar technologies: essential cookies needed to log you in and keep the site working, functional cookies that remember your preferences, and first-party analytics that help us understand and improve the site. We do not use third-party advertising or cross-site tracking cookies. For details, see our Cookies & Tracking section below.

Global Privacy Control (GPC).We honor the Global Privacy Control browser signal. If your browser or extension sends a GPC signal, we treat it as a request to opt out of any "sale" or "sharing" of personal information and to limit non-essential analytics for that browser, no account or extra steps required.

You can also use our Your Privacy Choices / Do Not Sell or Share My Personal Information section below at any time, and you can control cookies through your browser settings.

Depending on where you live, you may have the right to:

• Know / access the personal information we hold about you and how we use it.
• Delete your personal information, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of any "sale" or "sharing" of personal information and of targeted advertising.
• Data portability: receive a copy of certain information in a portable format.
• Appeal a decision we make about your request.
• Non-discrimination: we will not deny service, charge a different price, or provide a different quality of service because you exercised your rights (other than differences tied to a financial-incentive program you choose to join; see Section 7).

How to make a request (at least two methods): email us at privacy@nextbrick.build, or use the controls in your account and our Your Privacy Choices section below. We will verify your request (typically by confirming control of your account email) and respond within 45 days, with one extension where permitted. An authorized agent may submit a request on your behalf with proof of authorization.

We offer programs that may be considered "financial incentives" under California law because they provide a benefit in connection with collecting or retaining personal information:

• Welcome and promotional Brick Points: bonus Brick Points we may grant when you create an account, subscribe, or take part in a promotion.
• Referral rewards: Brick Points or other rewards when you refer a friend and they join.

How to opt in / out: you opt in by creating an account, joining a promotion, or participating in the referral program; you can opt out at any time by not participating, by contacting us, or by closing your account (closing your account forfeits unused promotional Brick Points).

Material terms & value. The value of these incentives is reasonably related to the value of your information to us, which we calculate as the cost or monetary value of the incentive we provide, that is, the value of the bonus Brick Points or referral reward granted. We offer these incentives to build a community of builders, not to profit from your data, and we do not sell your information. Full program terms appear on our Brick Points and referral pages.

We keep personal information only as long as we need it:

• Account information: for the life of your account and up to 7 years after closure.
• Transaction & tax records: about 7 years, to meet financial and legal obligations.
• Communications: about 3 years.
• Usage / analytics data: about 2 years.
• Page behaviour records (time on a page, scroll depth, click positions): about 90 days, after which only a daily count remains, not connected to any browser or account.

Deletion vs. business records. When you ask us to delete your information, we delete or de-identify what we can. We may keep a limited set of records we are legally required or permitted to retain, for example, transaction and tax records, fraud-prevention data, and information needed to complete an open rental, resolve a dispute, or enforce our Terms. Where we keep such records after a deletion request, we retain only the minimum needed and treat it accordingly.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and a payment processor that handles card data in a PCI-compliant environment. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Next Brick is intended for adults. You must be at least 18 years old to create an account, and the adult account holder is responsible for any use by a child or family member they allow. Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us personal information, contact us at privacy@nextbrick.build.

Email. We send marketing email only to people who have opted in, and every marketing email includes a working unsubscribe link and our postal address. We honor unsubscribe requests promptly. Transactional messages: such as order, shipping, return, renewal, and fee notices, are part of the service and are sent regardless of marketing preferences.

Text messages (SMS). If and when we offer SMS notifications in the future, we will send them only to people who expressly opt in to text messages, will disclose message frequency and that message and data rates may apply, and will let you stop them at any time by replying STOP. We do not currently send marketing or notification text messages.

Residents of states with comprehensive privacy laws (including California, Utah, Virginia, Colorado, and Connecticut) have the rights described in Section 6, which we honor for all U.S. customers. A summary of state-specific rights, the categories of information we collect and disclose, and how to exercise the "Do Not Sell or Share" right is available in our Your Privacy Choices section below. California residents may also designate an authorized agent and have the right to appeal as described above.

We may update this Privacy Policy from time to time. When we make a material change, we will post the updated Policy with a new effective date and, where required, notify you. Our services are operated from the United States and intended for U.S. residents.

To exercise your rights or ask about this Policy, contact us: