Privacy policy

Last updated: 17 May 2026

This Privacy Policy describes how BrickCrest ("we," "us," or "our") collects, uses, and shares personal information when you visit, use, or make a purchase from our website (the "Site"). By using the Site, you agree to the collection and use of information in accordance with this policy.

Who We Are

BrickCrest is an online retailer of original and authentic new and pre-owned LEGO® products, operating from 39 Mount Low Parkway, Mount Low, Queensland 4818, Australia. We sell to customers worldwide.

We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Information We Collect

When you visit the Site, we automatically collect certain information about your device and your interaction with the Site. We refer to this automatically-collected information as "Device Information," which may include:

  • IP address
  • Browser type and version
  • Time zone and operating system
  • Pages viewed, referring/exit pages, and date/time stamps
  • Cookies installed on your device

When you make a purchase or attempt to make a purchase through the Site, we collect "Order Information," including:

  • Full name
  • Billing and shipping address
  • Email address
  • Phone number
  • Payment details (processed securely through Shopify Payments)
  • Order history and product preferences

When you use our live chat support, we collect the conversation transcript along with any details you voluntarily provide (your name, email, order number, and the substance of your enquiry). Live chat conversations are retained to help us improve service and resolve future questions about your order.

We may also collect information you voluntarily provide when you contact us, subscribe to our newsletter, leave a product review, or participate in promotions.

How We Collect Information

We collect Device Information using the following technologies:

  • Cookies: Small data files placed on your device that help us recognise you and remember your preferences.
  • Log files: These track actions occurring on the Site and collect data such as IP address, browser type, and timestamps.
  • Web beacons, tags, and pixels: Electronic files used to record information about how you browse the Site.
  • Live chat tools: When you start a chat session, our chat provider may set its own cookies to maintain the conversation.

How We Use Your Information

We use the personal information we collect to:

  • Fulfil orders placed through the Site, including processing payments, arranging worldwide shipping, and providing order confirmations and invoices
  • Communicate with you about orders, returns, refunds, and customer service inquiries (including via live chat)
  • Screen orders for potential risk or fraud
  • Improve and optimise the Site and customer service
  • Send you marketing communications, where you have consented to receive them
  • Comply with applicable Australian and international laws and regulations

Sharing Your Information

We share your personal information with trusted third parties who help us operate our store. These include:

  • Shopify: We use Shopify to power and host our online store. You can read more about how Shopify uses your information at https://www.shopify.com/legal/privacy.
  • Shopify Payments: Payment processing is handled through Shopify Payments. We do not store your full payment card details on our servers.
  • Live chat provider: Our live chat tool processes your messages and contact details to enable the conversation. The provider acts as a data processor on our behalf.
  • Shipping carriers: We share your name, address, and contact details with carriers (Australia Post, StarTrack, DHL, FedEx, UPS, and others) to deliver your orders. For international shipments, customs declarations may include additional details required by the destination country.
  • Service providers: We may share information with email service providers, analytics platforms, and customer service tools that help us run our business.

We may also share your personal information to comply with applicable laws, to respond to a subpoena, warrant, or other lawful request, or to protect our rights.

Overseas Disclosure

Because we use global service providers (such as Shopify) and ship worldwide, your personal information may be disclosed to and stored by recipients located outside Australia. We take reasonable steps to ensure these recipients handle your information consistently with the Australian Privacy Principles.

Behavioural Advertising

We may use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. You can opt out of targeted advertising via:

Cookies

Cookies help us provide a better browsing experience. You can choose to disable cookies through your browser settings; however, some features of the Site (including live chat) may not function properly if cookies are disabled.

Data Retention

We retain your Order Information for as long as required by Australian tax and accounting law (generally 5 years), unless you ask us to delete it sooner and we are no longer required to retain it. We retain Device Information and live chat transcripts for as long as needed to fulfil the purposes outlined in this Privacy Policy, typically up to 24 months.

Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or outdated information
  • Request deletion of your personal information, subject to legal obligations
  • Withdraw consent for marketing communications at any time
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

Customers in the EU, UK, U.S., and Canada have equivalent rights under GDPR, CCPA, PIPEDA, or applicable local laws. To exercise any of these rights, please contact us at robin_yaden984@usa.com.

Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. All payment transactions are encrypted using SSL technology and processed through Shopify Payments, which is PCI-DSS compliant. However, no method of transmission over the internet or electronic storage is 100% secure.

Children's Privacy

Our Site is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The "Last updated" date at the top of this page indicates when this policy was last revised.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:

BrickCrest
39 Mount Low Parkway, Mount Low, Queensland 4818, Australia
Email: robin_yaden984@usa.com
Phone: +61 468 175 736
Live chat: available on our website during business hours