Privacy Policy

Underbrick, Cyprus, is the data controller for personal data processed through underbrick.com and the Underbrick App. Contact: hello@underbrick.com.

• Order data: name, delivery and billing address, email, phone number, order contents and payment status.
• Account data: email, name and the projects, printers and print jobs you save in the Underbrick App.
• Enquiry data: the messages and project details you send us through the contact, custom work, quote and B2B conversations.
• Technical data:IP address, browser and device type, and pages viewed, used to keep the site working and to understand what's useful.
• Marketing data: your email if you opt in to updates from the studio.

Payment card details are handled by our payment provider. We receive a confirmation and the last four digits for support — never the full card number.

• Contract: taking your order, printing and shipping the item, delivering files, providing app features you asked for, handling refunds.
• Legal obligation: keeping accounting and tax records the law requires.
• Legitimate interests: answering enquiries, preventing fraud and abuse, improving the site and our product range.
• Consent: studio updates and newsletters, which you can withdraw at any time through the unsubscribe link.

Conversations in the enquiry assistants are stored so we can pick your project up where it stopped and quote it properly. Ask us to delete an enquiry and we will.

Only with the parties needed to complete your order, and only for that purpose:

• Our payment provider, to authorise and settle payment.
• Courier and postal services, to deliver the parcel.
• Our hosting, database and email providers, to run the site and send confirmations.
• Our accounting support, where a bookkeeper or tax adviser handles records.

We never sell or rent personal data, and we don't share it with advertisers for behavioural targeting.

Some providers process data outside the European Economic Area. Where they do, transfers rely on the European Commission's standard contractual clauses or an adequacy decision, and the provider is contractually limited to using your data for our service only.

• Orders and invoices: for the tax and accounting retention period required by Cypriot law (up to 6 years).
• App accounts: until you delete the account, then within a short grace period.
• Enquiries: until the project is closed, then deleted or anonymised.
• Marketing: until you unsubscribe.

The site uses essential cookies and local storage to keep your cart, remember your session and stay secure. Where we add analytics or optional cookies, they load only after you accept, and you can withdraw consent at any time.

You can clear cookies through your browser, though the cart and checkout won't work without the essential ones.

Data is transmitted over HTTPS and stored in access-controlled systems with least-privilege accounts and regular key rotation. No system is perfect; if a breach ever affects your data and poses a risk to you, we notify the supervisory authority and you within the timeframes the GDPR requires.

You can ask us for a copy of your data, correct it, delete it, restrict or object to processing, or receive it in a portable format. Email hello@underbrick.com and we'll respond within one month. We may ask you to confirm who you are before releasing data.

If you think we've mishandled your data, you can complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy) or to your local supervisory authority.

The site and app are not aimed at children under 16, and we don't knowingly collect their data. If you believe a child has sent us personal data, email us and we'll delete it.

We update this policy when our practice changes and always show the last-updated date at the top of this page.