Privacy Policy
Last updated: 22 May 2026
This Privacy Policy explains how Sheppards Bricks collects, uses, stores and protects your personal information when you visit our website, create an account, place an order, contact us, or sign up to receive marketing emails.
Sheppards Bricks is responsible for the personal information we collect and use. If you have any questions about this Privacy Policy or how we handle your personal information, you can contact us at:
Email: [email protected]
1. Who we are
Sheppards Bricks sells custom UV printed LEGO® compatible parts and related products.
For the purposes of UK data protection law, including the UK GDPR and Data Protection Act 2018, Sheppards Bricks is the data controller of the personal information we collect from you.
2. The personal information we collect
We may collect and use the following types of personal information.
Information you provide when placing an order
When you place an order, we may collect:
- Your name
- Email address
- Billing address
- Delivery address
- Phone number, if provided
- Order details
- Personalisation details, such as custom text or registration numbers for printed items
- Any notes or messages you include with your order
Payment information
Payments are processed securely by Stripe.
We do not see or store your full card number. Stripe may collect and process payment details, billing information and fraud prevention data in order to complete your payment securely.
Account information
If you create an account on our website, we may collect:
- Your name
- Email address
- Password or login credentials
- Saved addresses
- Order history
- Account preferences
Passwords are stored securely and are not visible to us.
Contact and enquiry information
If you contact us by email or through a contact form, we may collect:
- Your name
- Email address
- The content of your message
- Any information you choose to include in your enquiry
Newsletter and marketing information
If you sign up to receive marketing emails, we may collect:
- Your name, if provided
- Email address
- Marketing preferences
- Records of your consent to receive marketing
You can unsubscribe from marketing emails at any time.
Technical information
When you use our website, we may collect limited technical information needed to operate and protect the site, such as:
- IP address
- Browser type and version
- Device information
- Pages visited
- Date and time of access
- Basic security logs
We do not currently use analytics tools such as Google Analytics, Meta Pixel, TikTok Pixel, Microsoft Clarity, Hotjar or similar tracking tools.
3. How we use your personal information
We use your personal information for the following purposes.
To process and fulfil orders
We use your information to:
- Confirm your order
- Take payment
- Create personalised or custom printed items
- Pack and dispatch your order
- Send order updates
- Deal with returns, replacements, refunds or customer service queries
To provide customer accounts
We use account information to allow you to:
- Log in to your account
- View previous orders
- Save delivery details
- Manage your account information
To respond to enquiries
We use your contact details and message content to respond to questions, support requests, custom print enquiries or other messages you send to us.
To send marketing emails
If you choose to sign up to our newsletter or marketing emails, we may use your email address to send you updates about new products, offers, restocks or other Sheppards Bricks news.
You can withdraw your consent at any time by unsubscribing or contacting us.
To meet legal and accounting obligations
We may use and retain certain order, payment and transaction information to comply with tax, accounting, consumer protection and other legal obligations.
To protect our website and business
We may use limited technical information to:
- Keep the website secure
- Prevent fraud or misuse
- Diagnose technical issues
- Maintain business records
- Enforce our terms and conditions
4. Our lawful basis for using your information
Under UK data protection law, we must have a lawful basis for using your personal information. Depending on the situation, we rely on the following lawful bases.
Contract
We use your personal information to fulfil our contract with you when you place an order, create an account, request a product, or contact us about an existing order.
This includes processing your order, taking payment, creating custom items, arranging delivery and providing customer support.
Consent
We rely on your consent when you sign up to receive marketing emails.
You can withdraw your consent at any time.
Legal obligation
We may need to keep and use certain information to comply with legal, tax, accounting or regulatory obligations.
Legitimate interests
We may use your information where it is necessary for our legitimate business interests, provided your rights and interests do not override those interests.
This may include:
- Responding to enquiries
- Keeping business records
- Preventing fraud
- Protecting our website
- Improving our products and services
- Handling disputes or complaints
5. Who we share your information with
We only share your personal information where necessary to run our business, fulfil your order, comply with the law, or provide services you have requested.
We may share information with:
Stripe
We use Stripe to process payments securely. Stripe processes your payment information in order to authorise and complete your payment.
Royal Mail
We currently use Royal Mail to deliver orders. We may share your name, delivery address and relevant contact details so your order can be delivered.
Website and IT service providers
We may use service providers who help us host, maintain, secure or operate our website and systems.
Professional advisers
We may share information with accountants, legal advisers, insurers or other professional advisers where necessary for business, legal or accounting purposes.
Legal or regulatory authorities
We may share information if required to do so by law, court order, government authority, regulator or law enforcement body.
We do not sell your personal information.
6. International transfers
Some of our service providers, such as payment or website technology providers, may process personal information outside the UK.
Where this happens, we expect appropriate safeguards to be in place to protect your information in line with UK data protection law.
7. Marketing emails
You will only receive marketing emails from us if you have signed up to receive them or have otherwise given us permission.
Marketing emails may include updates about:
- New products
- Restocks
- Offers
- Custom printed parts
- Sheppards Bricks news
You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting:
Withdrawing consent will not affect the lawfulness of any marketing sent before you withdrew consent.
8. Cookies and tracking
Our website may use essential cookies or similar technologies that are needed for the website to function properly. These may be used for things such as:
- Keeping items in your basket
- Allowing checkout to work
- Keeping you logged in to your account
- Protecting the website from misuse
We do not currently use non-essential analytics or advertising tracking tools such as Google Analytics, Meta Pixel, TikTok Pixel, Microsoft Clarity or Hotjar.
If this changes in the future, we will update this Privacy Policy and, where required, ask for your consent.
9. How long we keep your information
We keep personal information only for as long as necessary for the purposes described in this Privacy Policy.
As a general guide:
- Order and transaction records are usually kept for up to 6 years for tax, accounting and legal record-keeping purposes.
- Customer account information is kept while your account remains active, unless you ask us to delete it and we no longer need to keep it for legal or business reasons.
- Customer service messages may be kept for as long as needed to deal with your enquiry and maintain appropriate business records.
- Marketing email records are kept until you unsubscribe or withdraw consent.
- Technical and security logs are kept for a limited period unless needed for security, fraud prevention or legal reasons.
We may retain limited information for longer where required to comply with legal obligations, resolve disputes, prevent fraud or enforce our terms.
10. Children’s privacy
Our products may appeal to children, but our website and checkout are intended to be used by adults or by children with the involvement and permission of a parent or guardian.
We do not knowingly collect personal information from children without appropriate parental or guardian involvement.
If you believe a child has provided us with personal information without appropriate permission, please contact us at:
11. How we protect your information
We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.
These steps may include:
- Secure payment processing through Stripe
- Password-protected customer accounts
- Limiting access to personal information where appropriate
- Maintaining website and system security
- Keeping only the information we need for legitimate business or legal purposes
No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.
12. Your rights
Under UK data protection law, you have rights in relation to your personal information. These may include the right to:
- Ask for a copy of the personal information we hold about you
- Ask us to correct inaccurate or incomplete information
- Ask us to delete your personal information in certain circumstances
- Ask us to restrict how we use your information
- Object to certain uses of your information
- Withdraw consent where we rely on consent
- Ask for your information to be transferred to another provider in certain circumstances
To exercise any of these rights, contact us at:
We may need to confirm your identity before responding to your request.
13. Complaints
If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.
You also have the right to complain to the UK Information Commissioner’s Office, the UK regulator for data protection matters.
Website: https://ico.org.uk
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, products, services, legal obligations or how we handle personal information.
When we make changes, we will update the “Last updated” date at the top of this page.
15. Contact us
For questions about this Privacy Policy or how we handle your personal information, contact:
Sheppards Bricks Email: [email protected]