Privacy Policy

Last Updated: [March 2026]

At Brick Mayhem, we are committed to protecting the privacy and security of our customers. This policy outlines how we collect, use, and safeguard your information when you visit www.brickmayhem.com or purchase from our associated stores.

1. Information We Collect

When you make a purchase, rent LEGO®, or contact us for a quote, we collect the following personal information:

• Contact Details: Name, email address, and phone number.

• Shipping/Billing Address: Required for delivery of parts or rental kits.

• Payment Information: We do not store your credit card details. All payments are processed securely through third-party providers like Stripe, PayPal, or Interac e-Transfer.

2. How We Use Your Information

We use your data strictly for business operations, including:

• Processing and shipping your LEGO® orders.

• Managing LEGO® rental agreements in the GTA.

• Communicating regarding your order status or collection buy-back quotes.

• Complying with Canadian tax and legal obligations.

3. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to others. We only share data with trusted third parties necessary to run our store:

• Shipping Carriers: Canada Post, UPS, Chit Chats, or FedEx to deliver your bricks.

• Payment Processors: To securely handle your transactions.

• Marketplaces: If you order via BrickLink or Brick Owl, your data is handled according to their respective privacy platforms.

4. LEGO® Rental Data

For our rental customers in Toronto & the GTA, we may retain contact information for the duration of the rental period to ensure the safe return of our 25lb bulk kits. This data is deleted upon completion of the service and inspection of the inventory.

5. Security

We implement industry-standard security measures, including SSL (Secure Socket Layer) encryption on our website, to protect your data during transmission.

6. Your Rights

You have the right to request a copy of the personal information we hold about you or to ask that we delete your data (provided it is not required for active tax or legal purposes).