Privacy Policy
Last updated: 4 October 2026
Aspery Co Ltd ("BrickFlip", "we", "us") is the data controller for the personal data described below, for the purposes of UK GDPR and the Data Protection Act 2018.
What we collect
Just what's needed to run your account: your email address and a securely hashed password (we never store your actual password). If you subscribe to a paid plan, Stripe handles your payment details directly — we never see or store your card number. If you use portfolio tracking, we store what you enter yourself (item names, prices you paid/sold for, and any notes you add).
What we don't collect
No tracking or advertising cookies. No selling or sharing your data with third parties for marketing. No unnecessary personal data beyond what's listed above.
Browser storage
We store a small login token in your browser (not a traditional cookie, but similar in purpose) so you stay signed in. See our cookie policy for detail.
Third parties we use
- Stripe — payment processing for paid plans. Stripe processes your payment details under its own privacy policy; we only receive confirmation that a payment succeeded, not your card details.
- BrickLink — price reference data. No personal data of yours is sent to BrickLink; we only send item identifiers (set/minifig numbers) to look up prices.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your account and data ("right to be forgotten")
- Request a copy of your data in a portable format
- Object to how we process your data
To exercise any of these, email us at the address below. We'll respond within one month, as required by law. You can also complain to the UK Information Commissioner's Office (ICO) if you're unhappy with how we've handled your data.
Data retention
We keep your account and portfolio data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're required to keep records for longer (for example, billing records for tax purposes, which Stripe retains under its own schedule). To delete your account, email us at the address below.