Last updated: July 2026.
This notice is provided pursuant to Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003, and describes how the personal data of users of the Brickollector website is processed.
1. Data controller
- Brickollector di Antonio Volpicelli — VAT number 01342020862
- Via Ammiraglio La Marca 24, 94015 Piazza Armerina (EN)
- Email: info@brickollector.com
2. Data processed
- Registration and order data: first name, last name, shipping and billing address, email, phone number.
- Payment data: managed directly by the payment service providers; the seller does not store full card data.
- Browsing data: technical data collected automatically (IP address, browser type, pages visited) and technical cookies (see Cookie Policy).
- Communications: the content of emails or requests sent to the seller.
3. Purposes and legal bases
- Performance of the sales contract, order management, shipping, returns and refunds — art. 6.1.b GDPR.
- Tax and legal obligations — art. 6.1.c GDPR.
- Account management and customer support — art. 6.1.b GDPR.
- Site security and abuse prevention — art. 6.1.f GDPR (legitimate interest).
- Any marketing communications — only with prior consent (art. 6.1.a), revocable at any time.
4. Data recipients
Data may be shared, within the limits of the purposes indicated above, with: the courier/carrier responsible for delivery; payment service providers; the site’s hosting and maintenance provider; tax consultants; competent authorities where required by law. These parties act as data processors or independent data controllers. Data is not disclosed or sold to third parties.
5. Retention
Data is retained for the time necessary to fulfil the purposes indicated and any legal obligations (in particular tax and accounting obligations, normally 10 years). Account data is retained for as long as the account remains active.
6. Transfers outside the EU
Where some providers (e.g. payment service providers) process data outside the EU, the transfer takes place in compliance with the safeguards required by the GDPR (adequacy decisions or standard contractual clauses).
7. Data subject rights
You have the right of access, rectification, erasure, restriction, portability and objection (arts. 15-22 GDPR), as well as the right to withdraw consent. To exercise these rights, write to info@brickollector.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
8. Cookies
The site uses cookies as described in the Cookie Policy.
9. Affiliate programme
If you reach the site through an affiliate’s link, we store a technical cookie, ldd_aff, on your device for 30 days. It contains only the affiliate’s identifier and the date of the click, it is signed, and it does not identify you: it is used only to recognise the affiliate if you place an order within that period. We also keep ldd_aff_fino in your browser’s storage; it only records until when the box offering the 5% discount stays hidden. For each click on an affiliate’s link we keep for 90 days the date, the language, the landing page and an encrypted fingerprint of the IP address, a fingerprint that changes every day (the address itself does not change); we do not store your IP address or any browser data.
If you are an affiliate yourself, we keep your affiliate profile, your code, your commissions and the payment notes for as long as the collaboration lasts. A second cookie, ldd_aff_me, shows you the button to copy your link: it is set when you log in as an affiliate, lasts 30 days and is removed when you log out. If you ask for erasure, your affiliate profile and your code are deactivated; the commissions on record remain, because they are needed to settle the compensation.
You can ask for a copy or the deletion of this data by writing to info@brickollector.com.
10. Reviews on Trustpilot
A few days after an order is delivered, we share your name, e-mail address, order number and the language you shopped in with Trustpilot A/S (Copenhagen, Denmark). Trustpilot uses them only to send you, on our behalf, an invitation to review your purchase. We do this on the basis of our legitimate interest in collecting verified customer feedback (Article 6(1)(f) GDPR). Leaving a review is optional: if you do, it is published on Trustpilot under its own terms and privacy policy.
You can object at any time by writing to info@brickollector.com: we will not send you the invitation and we will ask Trustpilot to delete your data. Every Trustpilot e-mail also contains a link to stop receiving them.
11. Social media publishing tools
Brickollector uses the official APIs of TikTok (Login Kit, Content Posting API), Meta (Instagram, Facebook) and YouTube only to publish its own promotional videos on its own business accounts.
Through these APIs we only access the basic profile information of our own accounts (name and profile picture) needed to confirm which account is connected. We do not collect, store or share any data of other users of these platforms.
YouTube: our internal tool uses YouTube API Services to upload our own videos to our own channel (https://www.youtube.com/@brickollector). By using features that rely on YouTube API Services you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms); see also the Google Privacy Policy (https://policies.google.com/privacy). The only data we keep is the authorization token of our own channel and the list of the videos we uploaded, stored on our own computer and never shared. Access can be revoked at any time from the Google security settings page (https://myaccount.google.com/connections); when access is revoked, or on request to info@brickollector.com, we delete the stored token and related data within 7 days.
12. Discount code by e-mail
If you ask for the 5% discount code through the box on the site, we store your e-mail address, the language you are browsing in, the date of the request and the code we sent you. They are used to send you the code, to tie it to your address (at checkout it only works with that e-mail) and to avoid sending more than one to the same person. Your IP address is not stored: we keep only a partial, encrypted fingerprint of it to stop automated requests.
If you also tick the optional box about offers, we record your consent and the date you gave it, and we may write to you with news and offers from the shop. Every e-mail of this kind contains a link to stop receiving them. Without that consent your address is used only for the code and is deleted automatically 12 months after the request. With the same consent we link your address to the cart of the visit in which you gave it, so that we can write to you if you leave sets in it: the address stays on that cart for at most 60 days, like one typed at checkout, and if you withdraw your consent it is removed from the carts straight away. With the same consent, which you can give in the box on the site or with the tick box at checkout, we may send you at most two reminders about the sets left in your cart.
You can ask for a copy or the deletion of this data, or withdraw your consent, by writing to info@brickollector.com.
13. Microsoft Clarity (only with your consent)
If you accept cookies in the banner, we use Microsoft Clarity, a service of Microsoft Corporation, to understand how the site is used: in pseudonymous form it records mouse movements, clicks, scrolling and the pages visited, and shows us heatmaps and replays of visits. The text you type into form fields is masked and not recorded. Clarity uses its own cookies; recordings remain available for 30 days and aggregate statistics for up to 13 months. The data is also processed by Microsoft outside the European Union, with the safeguards provided for by the GDPR (EU-U.S. Data Privacy Framework and standard contractual clauses). Legal basis: your consent.
If you reject cookies, Clarity is not loaded. You can withdraw your consent at any time by deleting the site’s cookies from your browser: on your next visit the banner will ask you again. Microsoft’s privacy statement: https://privacy.microsoft.com/privacystatement
14. Browsing statistics
To understand which sets attract the most interest and where visitors stop, this site anonymously counts page views and cart steps. For this count we install no cookies, we build no profiles and we do not keep your IP address: it is used only in encrypted form, and for one minute, to stop automated requests.
We also record, still anonymously, where the visit comes from — only the name of the referring site or search engine and, for Google Ads, the fact that the click came from an ad and from which campaign —, the words typed into the catalogue search with the number of sets found, the themes chosen in the filters, the language set in the browser and, for set pages, whether the set was available at that moment. They help us see which channels work, which sets are missing from the shop and whether everyone finds the site in their language; they are not linked to you.
Since 1 October 2026 we also record, still anonymously and linked only to the random visit number described below, how long each page stays open in the foreground, which links and buttons on the site are clicked (never the text you type into the fields), what happens to the 5% offer (shown, opened, closed, requested) and the checkout steps: shipping offered and chosen, payment method selected, clicks on the purchase button and any errors, noting only the name of the field or method, never its content. They help us understand where the site works and where people stop.
Each visit is given a random number, kept in the browser’s storage (it is not a cookie), used solely so that the same browsing session is not counted twice, even if you open the site in several tabs. It is not linked to your name or your account, and it expires after 30 minutes of inactivity: your next visit starts from scratch.
If you type your e-mail address during checkout and then do not complete the order, that address is kept for 60 days together with the list of sets left in the cart, so we can see which purchases remain unfinished and, where useful, help you complete them. After 60 days it is deleted automatically, without you having to ask.
Before then you can ask for a copy or the deletion of this data by writing to info@brickollector.com. Once deleted, the address is gone and only the anonymous count remains, which no longer leads back to you.