Privacy Policy | Brick Surplus

1. Who we are

This policy explains how CL Cubed Inc., operating as Brick Surplus ("Brick Surplus", "we", "us"), collects, uses and shares personal information when you visit bricksurplus.com, buy from us, or contact us. We are an Alberta corporation based in Calgary, Alberta, Canada.

We handle personal information in line with Alberta's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). By using our website or placing an order, you agree to the practices described here. If you do not agree, please do not use the site.

2. Information we collect

We collect only what we need to run the store and serve you.

Information you give us: name, email address, phone number, shipping and billing address, and order details when you check out, create an account, or sign up for updates. Messages you send us (for example, to info@bricksurplus.com) and any details you include in them.
Payment information: card and payment details are entered directly with our payment processors. We do not see or store your full card number.
Information collected automatically: IP address, browser and device type, pages viewed, referring site, and approximate location, recorded by our website host and service providers when you visit the site (see Section 5).
Order history: what you bought, when, and how it was shipped.
Marketplace information: if you buy from us on Etsy or eBay, we receive the order and shipping details that marketplace passes to us. Their privacy policies govern what they collect.

3. How we use your information

We use personal information for these purposes:

To process and ship orders, send order confirmations, and handle returns and support requests.
To take payment and prevent fraud.
To send marketing emails about new products and drops, only where you have opted in. You can unsubscribe at any time using the link in any message.
To operate, secure and improve the website, and to understand how visitors use it.
To meet legal, tax and accounting obligations.

We collect and use your information with your consent, which you give when you provide it for a stated purpose, or where the law permits or requires it without consent (for example, to fulfil a contract or keep tax records). We do not sell your personal information.

We share personal information only with service providers who help us run the business, and only as needed for the task:

E-commerce platform: Shopify hosts our store, processes checkout and stores order data.
Payment processors: Shopify Payments, PayPal or similar providers handle your payment.
Shipping carriers: Canada Post, couriers and shipping-label services receive your name, address and contact details to deliver your order.
Marketplaces: Etsy and eBay, for orders placed through those platforms.
Email and analytics providers: tools we use to send updates and understand site traffic.
Accounting and professional advisors: our accounting software and accountants, for bookkeeping and tax filings.

We may also disclose information if required by law, to respond to a lawful request, to protect our rights or the safety of others, or in connection with a sale or restructuring of the business. Our service providers may only use your information to perform services for us.

5. Cookies

We do not use cookies to track you, and we do not use analytics or advertising cookies on our website.

Our store platform, Shopify, may set strictly necessary cookies or similar technologies that the cart, checkout and site security need in order to work. We do not use these for tracking or advertising. If our practices change, we will update this policy.

6. Retention, security and where data is stored

We keep personal information only as long as needed for the purposes above or as the law requires. Order and accounting records are kept for at least six years to meet Canadian tax requirements. Marketing contact details are kept until you unsubscribe.

We use reasonable safeguards to protect your information, including encrypted connections (HTTPS), access controls and reputable service providers. No system is perfectly secure, and we cannot guarantee absolute security.

Our service providers, including Shopify, may store and process data on servers outside Alberta and outside Canada, including in the United States. Your information may be subject to the laws of those jurisdictions, including access by their courts and authorities.

7. Your rights, children, changes and contact

Your rights. You may ask to access the personal information we hold about you, correct it, or withdraw your consent to our using it (subject to legal and contractual limits). You can opt out of marketing emails at any time. To make a request, email us; we will respond within 30 days and may need to verify your identity first.

Children. Our website is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Changes. We may update this policy from time to time. The "Last updated" date at the top shows the current version, and material changes will be posted on this page.

Contact us. Questions, requests or complaints about privacy:

Brick Surplus (CL Cubed Inc.) Email: info@bricksurplus.com

If we cannot resolve a concern, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.