Privacy Policy

Who we are

Brick Stories provides interactive mini figure experiences for events across the United Arab Emirates. In this policy, "we" and "us" mean Brick Stories, and "you" means anyone who contacts us or uses this website.

You can reach us at hello@brickstories.ae about anything in this policy, including a request to delete your data.

What we collect, and when

We only collect what you give us. We do not buy data, and we do not track you across other websites.

When you submit the quote request form, we collect your name, your phone number, and, if you choose to give it, your email address. We also collect the details of your event: the date, the emirate, the venue if you name it, the type of event, the guest-number band you select, and anything you write in the message field.

When you visit the website, our analytics records the page you viewed, the approximate country you viewed it from, and the site that referred you. This is aggregated and cannot identify you. We do not use cookies for analytics or advertising, which is why this site shows no cookie banner.

Our spam protection checks that a form submission comes from a person rather than an automated script. It processes your IP address for that check and does not store it.

Why we use it, and our lawful basis

We use your details for one purpose: to answer your enquiry, prepare a quotation, and, if you book, deliver your event.

Our lawful basis is your consent, given when you submit the form. The form says so in plain words above the button. There are no pre-ticked boxes and no bundled permissions.

We will not add you to a marketing list as a result of enquiring. If we ever want to send you something that is not about your own enquiry, we will ask first.

Who else processes your data

Delivering a website and answering an enquiry requires a small number of trusted service providers. They host this website and its form, send our emails, store enquiries securely, and check form submissions for spam. Each processes your data only on our instructions and only to provide that service.

Some of these providers process data outside the UAE, so your data may be transferred outside the UAE. Where it is, we rely on the contractual safeguards the provider offers for international transfers. If you would prefer we did not hold your enquiry in these services, contact us on WhatsApp instead of using the form and we will handle your enquiry by message only.

We never sell your data, and we never share it for advertising.

How long we keep it

We keep enquiry details for two years after our last contact with you, then delete them. If you book an event, we keep the booking record for five years after the event date, because UAE commercial record-keeping requires it.

You can ask us to delete your data sooner. See below.

Your rights

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you have the right to:

• ask what personal data we hold about you, and get a copy
• have inaccurate data corrected
• have your data deleted
• withdraw consent at any time
• object to how we are processing your data
• ask us to restrict processing while a dispute is resolved
• receive your data in a portable format

To exercise any of these, email hello@brickstories.ae. We will respond within 30 days. There is no charge.

If you are not satisfied with our response, you may complain to the UAE Data Office.

Security

Enquiries are transmitted over an encrypted connection and stored in access-controlled accounts. Only the people who need to see your enquiry to answer it can see it. We keep the number of people and systems involved deliberately small.

No system is perfectly secure. If a breach ever affected your data, we would tell you and the UAE Data Office without undue delay.

Children

This website is aimed at adults planning events. We do not knowingly collect data from anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.

Photography at events

If you book us, we may photograph the setup and the finished figures for our portfolio. We will always ask your permission before photographing identifiable guests, and you can say no, or change your mind afterwards, without it affecting anything else. Ask us and we will remove any photograph of your event from our website and social accounts.

Changes

If we change this policy we will update the date at the top. Material changes affecting data we already hold will be notified to you directly.