.png)
Account
This policy explains what personal information Brick Box Club collects, why we collect it, who we share it with, and how you can see, fix or delete it. We’ve tried to keep it in plain English. If anything is unclear, just email us.
Brick Box Club is run by Brick Box Club Pty Ltd (ABN 57 686 680 811), a small Queensland business that lends LEGO® sets to members around Australia. In this policy, “we”, “us” and “our” mean Brick Box Club Pty Ltd. Brick Box Club is not endorsed by the LEGO Group.
Questions about privacy go to support@brickboxclub.com.au.
We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) as a guide to good practice.
We don’t ask for sensitive information like health details, and we don’t need your date of birth. Please don’t include sensitive information in messages or reviews.
You can browse our website without an account. To borrow sets we need your name, email and delivery address. We can’t lend to you anonymously.
We collect most information from you, when you create an account, borrow, pay, fill in a form on your Borrow Dashboard, or email us. Some comes from the services we use: our payment provider tells us whether a payment worked, and Google tells us your name and email if you sign in with Google. If someone gives you a gift card or refers you, we know which code you used.
We only use your information for these purposes, or for related purposes you’d reasonably expect, unless you agree otherwise or the law allows or requires it.
After you return a set, you can rate it and leave a comment. Ratings are private. Only Brick Box Club sees them. We use them to look after the library and choose new sets.
Many of our members borrow for their kids, but accounts are for adults: account holders must be 18 or over. We don’t knowingly collect personal information directly from children, and we never ask for children’s names or birthdays.
If a child appears in a review photo, the member must confirm they’re the child’s parent or guardian, or have the parent or guardian’s permission. Please avoid anything that could identify where a child lives or goes to school, such as school uniforms, name tags or house numbers. A parent or guardian can ask us to remove a photo at any time by emailing support@brickboxclub.com.au.
We don’t sell, rent or trade your personal information. We share it only with businesses that help us run Brick Box Club, and only what they need to do their job:
These businesses may only use your information to provide their services to us or as their own privacy policies allow.
We may also share information if the law requires it, to protect our rights or property (for example, to recover sets that aren’t returned), or with professional advisers such as an accountant or lawyer. If Brick Box Club is ever sold, your information may pass to the new owner, and they must keep protecting it.
Our member database and review photos are stored in Australia. Some of the businesses described in section 7 are based overseas and may store or process information outside Australia, mainly in the United States (and, for some, in other countries where they run data centres). We choose well-established providers with strong security and privacy protections of their own.
Cookies are small files a website saves in your browser. We use only a few:
| What | Why | Needed? |
|---|---|---|
| Login cookies | Keep you logged in to your account | Yes, to log in |
| Google reCAPTCHA | Checks you’re a real person, to protect member pages. Google’s Privacy Policy and Terms of Service apply | Yes, for security |
| Google Ads | Tells us if someone visited after clicking one of our Google ads, and whether they joined | No |
| Meta Pixel | Tells us if our Facebook and Instagram ads lead to visits and sign-ups, and helps show our ads to people likely to be interested | No |
| Your browser’s local storage | Remembers small choices on your Borrow Dashboard, like when you tap “Not now” | Only on that device |
Google and Meta may receive technical information such as your IP address, browser details and the pages you visit. If you’re logged in to their services, they may link this to your account with them. They handle this under their own privacy policies (see how Google uses information from sites that use its services). Some set pictures on the Borrow Dashboard load from the LEGO website, so LEGO may receive basic technical information like your IP address.
Your choices: you can block or delete cookies in your browser settings (you’ll need login cookies to use your account). You can also change ad settings at Google My Ad Center and in Meta Ad Preferences.
Some things are worked out automatically by our systems: your deposit (from the set’s value and how long you’ve been a member), your postage (from your postcode and box size), and any Big Build fee. Decisions to charge you for missing pieces, a recount or a set that isn’t returned are always made by a person, never automatically. If you think something has been worked out wrongly, email us and we’ll check it.
No system is completely secure, but we take reasonable steps to protect your information from loss, misuse and unauthorised access. If a data breach is likely to cause you serious harm, we’ll tell you as soon as we can and explain what we’re doing about it.
We keep your account and borrowing records while you’re a member. After your membership ends, we keep them for five years, so we can finish any returns, refunds or outstanding charges, welcome you back if you rejoin, and keep the tax and business records the law requires. After that, we delete them or remove anything that identifies you.
Review photos are kept for the times described in section 5. The businesses we work with keep some records under their own policies, for example payment records our payment provider must keep by law.
We’ll reply within 30 days and won’t charge you. We may ask you to confirm your identity first. If we can’t do what you ask, we’ll explain why.
If you have a question or a complaint about how we’ve handled your personal information, email support@brickboxclub.com.au. Tell us what happened and how we can contact you. We’ll look into it and reply within 30 days.
You can find more information about privacy in Australia from the Office of the Australian Information Commissioner at oaic.gov.au.
We may update this policy as Brick Box Club grows or the law changes. The date at the top shows when it last changed. If we make a big change that affects how we use your information, we’ll let members know by email.
Questions? Email us at support@brickboxclub.com.au. We’re happy to help.