At Boomerang Bricks we realise how important your information is and we recognise the trust you put in us to keep it safe. We believe it is very important to manage your personal data correctly. We want to be transparent and honest about how we collect, use and store your personal data, and the rights you have regarding your private information.
Throughout our Privacy Policy, we may refer to Boomerang Bricks as “we”, “us” or “our”, www.boomerangbricks.com as “Website”, and the subscriber as “you” or “your”. All services offered and performed by Boomerang Bricks may be referred to as “Services”.
ACCEPTING THE PRIVACY POLICY
It is considered that users who visit and continue to use Boomerang Bricks agree to our Terms and Conditions, and by doing so you are confirming that you have read and understood the terms detailed in our Terms and Conditions and in this Privacy Policy, including how we collect and process your personal data. In order for us to fulfil our Services this data must be acquired, so if you don’t want us collecting and processing your personal data you shouldn't use our Services.
INFORMATION COLLECTED AND RECEIVED
Subscribing to Our Services
When you subscribe to Boomerang Bricks, PayWhirl (the subscription application we use) will create an account for you so that you can use the Subscription Portal. This will also create a Boomerang Bricks website account. Your login details for PayWhirl’s Subscription Portal and your Boomerang Bricks website account will be identical. Your accounts are password-protected and we ask that you don’t share your login details with any third parties.
The Subscription Portal is for you to freely manage your own subscription without our interference. The Boomerang Bricks website account is what you use to inform us which LEGO® sets you would like to borrow. We ask that subscribers keep their information up-to-date.
When you subscribe and an account is automatically generated for you, the information you provide is remembered and this creates a record of your use of our Services. Subscribers voluntarily provide their name, delivery and billing address, phone number and email address. Other personal data, such as your IP address, web browser and/or mobile device, are automatically detected and this is collected to prevent fraud, to improve our security and to improve our Services. All of this data is securely stored on our website host BigCommerce. We retain this information for a historical record of our Services.
Renting LEGO® Sets
In order to process LEGO® rentals, we need certain information to fulfil your request. The information you provided during the account creation stage (such as your name, delivery and billing address, phone number and email address) will be used for our Services.
Newsletter Sign Up
If you decide to sign up for the Boomerang Bricks Newsletter we will only ask for your name and email address. This data is stored on MailChimp and will only be used to send you news and promotional offers via email. You can unsubscribe at any time and a link for unsubscribing will always be provided in the footer of each newsletter. If you choose to unsubscribe the information you have provided is still remembered by MailChimp. If you would like to have your details completely removed please contact MailChimp.
Availability Notifications
Availability notifications are available on all LEGO® sets. If you decide to sign up for one of these availability notifications we will only ask for your name and email address. This data is stored on MailChimp and will only be used to notify you when the LEGO® set is available to borrow. You can unsubscribe at any time and a link for unsubscribing will always be provided in the footer of each email. If you choose to unsubscribe the information you have provided is still remembered by MailChimp. If you would like to have your details completely removed please contact MailChimp.
Customer Reviews
We really appreciate your feedback as it helps us to improve our Services, so customers are emailed by Trustpilot in order for them to submit a customer review. The email address used by Trustpilot is the same email address you used to sign up for our Services. Email addresses are not visible on the Boomerang Bricks’ Trustpilot page but aliases are. If you would like to remain anonymous, please edit your settings on your Trustpilot account. As Trustpilot has a record of your email address, if you would like to have your details completely removed please contact Trustpilot.
Cookies
Boomerang Bricks uses cookies to provide you with the best online subscription experience possible. These first-party cookies are essential for us to offer you our Services. While using the Website cookies keep subscribers logged into their accounts, lets them create wish lists, and lets the Website remember what LEGO® sets have been added to their carts. Cookies are used to remember what pages you may have visited and what URLs you may have clicked on. You can remove permission to have these cookies collected in the settings of your web browser but blocking BigCommerce will severely limit the use of our Services.
When you visit our Website we ask that you agree to the use of third-party cookies. Our Website uses third-party plug-ins, such as the Facebook 'Like' button on blog posts for example, and the use of these convenient functions may result in third parties tracking your actions. The same may apply if you visit our Website by clicking on a link or advert on another website or social media network. We are not responsible for the way third parties collect, store and use cookies. Please refer to those third-party privacy policies for more information. You can remove permission to have third-party cookies collected in the settings of your web browser but blocking third-party cookies may limit the use of our Services.
We use Google Analytics to measure the behaviour of visitors to our Website. Google Analytics assigns users with a unique number and although this cannot identify you as an individual it is considered personal data as it allows Google Analytics to track your behaviour on our Website. This cookie expires after 2 years or when you erase cookies from your browser settings.
We use Meta for BigCommerce to advertise on Facebook and on Instagram, and to track conversions made through Facebook and Instagram. Meta for BigCommerce encrypts your information and retains this information for 48 hours. For more information please visit Meta’s cookie policy.
AFFILIATE MARKETING
Please read our Affiliate Marketing Disclosure.
CHOICE, CONTROL AND YOUR RIGHTS
If you have accounts with us and you would like to update your details you can do this at any time. To edit your subscription details please sign in to the Subscription Portal. To edit your Boomerang Bricks website account details please sign in here and click on 'Your Account Details'. If you would like your personal data erased please contact us. In order for us to process your request as quickly as possible please provide as many details as you can. If you can't remember which email address you used to subscribe with us we can always use your name, phone number and delivery address instead. We are able to permanently delete your account but a record of your transactions must be retained for legitimate business purposes.
Once your account has been deleted you will lose access to:
- Subscription Portal
- Your Account
- Order History
- Wish List
- Store Credit
- Gift Vouchers
- Refunds
If you are absolutely sure you want to be forgotten please don't hesitate to contact us.
The information you provide us with is shared with Royal Mail as this is the company we work with to ship orders. The information you provide us with will also be shared with other delivery companies if we are required to use them. If you would like your personal data forgotten by these third parties please contact them directly. You can contact us to find out which of these shipping services may have information about you.
If you have subscribed to our newsletter MailChimp retains your name and email address, even when you have unsubscribed. If you would like your personal data forgotten by MailChimp please contact MailChimp directly.
If you have submitted a customer review Trustpilot will have personal details relating to your Trustpilot user account. If you would like your personal data forgotten by Trustpilot please contact Trustpilot directly.
If you don't want a particular website or company to have information about you, or if you feel a website or company is tarnishing your reputation, you have the right to ask them to erase everything they know about you. As all of this information represents you as an individual you have the right to have this information removed. You also have the right to know all the information a website or company has about you. You can contact us at any time and we will provide you with everything we have regarding you as an individual. Ultimately, it is up to you what information we are free to collect, store and use. If you feel like we are misusing your information you have the right to object to the way we are processing your personal data but by doing so you will no longer be able to use our Services.
CORRESPONDENCE WITH US
When you subscribe we will send you an email to confirm your subscription. We will also send you an email when your LEGO® rental has been shipped and/or when a refund has been issued. Emails are sent automatically through BigCommerce to the email address provided by you. You may also receive an email from PayPal and/or your bank to confirm payment for your purchase and/or when a refund has been issued. Please visit PayPal and your bank's website if you wish to edit your email notification settings.
When a purchase has been made BigCommerce automatically emails us to notify us of the activity. PayPal also automatically emails us to confirm payment. Your information contained within these emails is your name, delivery address and email address.
If we need to contact you we will use the email address provided by you. If we cannot contact you via email we will attempt to contact you via phone using the phone number provided by you. We don’t use your phone number for any other purpose. If you have reached out to us via social media we may attempt to contact you through social media if we feel like we are required to do so.
The emails we receive are securely stored on Gmail and only we have access to the Boomerang Bricks Gmail account. We retain this information for a historical record of our Services. As evidence of correspondence between ourselves and our customers, and we advise customers to keep a record of any correspondence with us.
Subscribers who abandon their cart checkout when picking LEGO® sets to borrow are eligible to receive Abandoned Cart emails. Abandoned Cart emails are sent automatically by BigCommerce using the email address provided by you. These emails are not marketing-related and are a legitimate part of our Services.
You may also receive service-related emails from us regarding changes to our Website, our products, your account and transactions.
We love to see how much fun you have with LEGO® and if we want to show off your talent and creativity on social media we will contact you, either by email or on the social media channel we found you on. We will contact you for your permission to share your photo and both parties should keep the conversation as evidence of consent. Images used are stored on Google Drive and our Dropbox account, which allows us to access the photos from multiple devices, and we will retain the photos for as long as we are able to use them to promote our Services.
COMMUNITY
The Boomerang Bricks blog is a public page that can be viewed by anyone, and anyone can leave a comment. You don't have to use this Service but if you choose to leave a comment your Disqus username (or whatever pseudonym you choose to use) and anything you share can be read, collected and used by others.
As an online business, we use social media channels to encourage interactivity and conversation with our subscribers and those who show interest in Boomerang Bricks. Communication with us via social media is public and anything you share can be read, collected and used by others.
It is important to use common sense and not to share valuable information in online public spaces, and anything you choose to share is your responsibility.
We have the right to remove content if it is deemed offensive or inappropriate. If you contact us and request the removal of content we will do our best to do so (upon investigation) but due to the nature of social media, we can not guarantee usernames/pseudonyms will be removed.
INFORMATION USES, SHARING AND DISCLOSURE
The information you voluntarily provide and the information we automatically collect is necessary to fulfil our obligations to you, which in most cases is fulfilling a LEGO® rental request to completion but also applies to all of our Services. Your information is used for billing, payment, identification and authentication. This includes sharing specific information with third-party shipping companies. Specific information shared with our newsletter service provider and our customer review service provider is only done with your consent.
We may use your information to find lookalike audiences through Facebook Advertising and Google AdWords. Your interest in Boomerang Bricks helps us improve our efforts to reach new people to improve our Services and help our business grow, which is in the legitimate interest of Boomerang Bricks and our subscribers.
We may share your information with third parties for the purposes of strengthening the security of our Website and this is in our legitimate interests to prevent spam, harassment, copyright infringement, crime and safety risks.
We may also retain, preserve, or release your personal information to a third party if required to do so by law, such as complying with a court order or if requested to do so by national security and/or law enforcement. We have the right to disclose personal information if we believe in good faith that it is reasonably necessary to prevent illegal activities such as (but not limited to) theft, fraud, financial loss or violations of our Terms and Conditions.
Our Website has third-party plug-ins that allow you to share our products on social media channels. We have no control over the information they are able to collect when you use the third-party plug-ins. It is in your best interest to check the privacy policies for the third-party plug-ins you choose to use, and if you have any queries to contact them directly.
TRANSFERS
Boomerang Bricks operates in England, United Kingdom and we only ship orders to UK addresses. However, BigCommerce is based in Australia and the United States of America, so in order for us to carry out the Services we provide we need to move your information whenever and wherever it is required.
BigCommerce complies with the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks which is a way for companies on both sides of the Atlantic to comply with data protection guidelines when exchanging personal data from Europe and Switzerland to the United States of America. You can view BigCommerce's certificate here.
SECURITY
In order to log in to your accounts an email address and password are required. You must keep your email address and your password secure, and never disclose them to a third party. If you suspect that your account has been accessed by somebody else, or without your permission, change your password immediately. We cannot recover forgotten passwords but we can reset your password for you.
Once you are logged in all pages regarding your account are secure. You can check that the page you are on is secure by looking at the URL address bar. You will see the text 'Secure' in green with a green padlock. The text 'https' will also be displayed in green.
We use secure payment facilities and follow generally accepted industry standards and practices to process online purchases. Your information is safely processed using SSL encryption software through PayPal and our merchant service provider Stripe, which is how Visa/Debit card payments and digital wallets are processed. Our merchant providers then inform us, via the encryption system, of the outcome of the transaction. Once your transaction is complete you will receive an email to confirm your subscription has been paid for. Please keep this email as proof of purchase. A record of all transactions is stored on PayPal or Stripe, and this includes your name, delivery address and email address. No credit card details are remembered. This information is retained for legal purposes and as a historical record of our Services.
We may print invoices that contain your name, delivery and billing address, phone number and email address, and these are used to process LEGO® rentals. Invoices and any other copies containing your information are shredded and disposed of appropriately.
All devices used to carry out our Services are password-protected and are only accessed by us. All devices are installed with antivirus and malware protection software.
Although measures have been taken to prevent the circumstances of personal data from being lost or stolen, we cannot 100% guarantee the security of personal data collected and stored by us. By using Boomerang Bricks and our Services you agree to the terms laid out in this Privacy Policy and thereby understand that your information must be collected and stored to fulfil your requests and to finish our Services to completion. By doing so you are acknowledging that renting LEGO® online has its risks. If there is a data breach all customers involved will be emailed to inform them of the situation and what actions they must undertake. Our Website may be temporarily offline and renting LEGO® will be temporarily suspended until all security issues have been resolved.
RETENTION
The personal data we collect is retained for as long as it is considered purposeful. When you take out a subscription or manually make an account the information you provide is remembered until your accounts are deleted. When you rent LEGO® sets a record of your transaction history is created and it is retained as a historic record of our Services. The information we retain is also necessary to fulfil certain legal obligations, such as accounting/taxes.
When you contact us we keep all email correspondence in order to stay on top of ongoing queries, order history, refunds, customer complaints and anything else we deem necessary to continue our Services.
Personal data that is no longer useful or required is deleted. This applies to both physical and digital data.
PRIVACY POLICY CHANGES
We may amend or update this Privacy Policy from time to time, and any changes made will go into action from the updated date. If we believe that the changes greatly alter our relationship with our subscribers, such as how information is collected, stored and used, subscribers will be notified of the changes via email. If amendments are minor and we feel it is unnecessary to contact subscribers directly we may outline any changes on our blog and/or in our newsletter.
We encourage subscribers to review our Privacy Policy regularly for any updates.
CONTACT
You can contact us at: hello@boomerangbricks.com
Our mailing address is:
Boomerang Bricks
9 Prior Close
Halstead
Essex
CO9 1AX
United Kingdom
If you feel like our Privacy Policy is not satisfactory and you would like to offer suggestions for improvement you can send an email to: hello@boomerangbricks.com
LAST UPDATED: 21/06/2023