Information we collect
We collect information you provide when placing an order, creating or using an account, submitting a wholesale or business enquiry, or contacting support. This can include identity, contact, delivery, order and business details. If you choose Google or Facebook sign-in, we receive the basic profile name, provider user id and email address needed to create or access your Bricks Power account. We do not receive your Google or Facebook password. We also receive basic device, security and website-usage information.
How we use it
We use information to operate the shop, process and deliver orders, provide support, review business applications, prevent fraud, meet legal obligations and improve our products and services. Marketing messages are sent only where permitted, and you can unsubscribe.
Payments and service providers
Card and eligible wallet details are entered with Stripe; PayPal payments are entered with PayPal. Bricks Power does not store raw card numbers. We may share the minimum necessary information with hosting, payment, delivery, analytics, support and professional service providers that help us operate.
Storage, security and retention
We use access controls, encryption in transit, signed callbacks, slow salted password hashing, revocable account sessions and operational monitoring. Social-provider access tokens are used only to complete sign-in and are not retained. Information is retained only as long as reasonably necessary for orders, support, fraud prevention, accounting, legal obligations and legitimate business records.
Your choices
You can ask to access or correct your personal information, withdraw marketing consent or raise a privacy concern by emailing hello@brickspower.com.au. We may need to verify your identity before disclosing account information.