Privacy Policy

Brikl BV and its U.S. subsidiary Brikl Inc. (“Brikl,” “we,” “our,” or “us”) are committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard personal information when you use our websites, applications, and services (collectively, the “Platform”).

By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Brikl BV, a company registered in Belgium, and its wholly owned U.S. subsidiary, Brikl Inc., together operate the Brikl Platform. Brikl BV is the primary data controller or data processor for users located in the European Economic Area (EEA), the United Kingdom, and Switzerland. Brikl Inc. is the data controller or processor for users located in the United States and other regions.

2. Scope

This Privacy Policy applies to: Visitors to our websites, Users of our Software Platform, End-users of stores powered by Brikl (where we act as a data processor on behalf of our customers).

3. Information We Collect From You

We collect and process the following types of personal data:

3.1 Information You Provide

• Name, email address, phone number and company name
• Login credentials and account information
• Billing and payment details (processed securely by our payment partners)
• Communications with us (support tickets, emails, chat messages)
• Other information you choose to share (e.g., store settings, uploaded files, or customization data)

3.2 Information We Collect Automatically

• Device and connection data (IP address, browser type, operating system)
• Usage data (pages visited, time spent, clicks, referring URLs)
• Log data, diagnostic data, and error reports
• Cookies and similar technologies (see Section 9)

3.3 Information From Third Parties

• Analytics and advertising partners
• Payment processors and hosting providers
• Your employer or organization (if you access Brikl on their behalf)

4. How We Use Your Information

We use personal data to:

• Operate, maintain, and improve our Platform and services
• Deliver products and features you request
• Process transactions and manage billing
• Provide customer support and respond to inquiries
• Send service-related notifications and updates
• Improve user experience and develop new features
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We may also use your data to send you product updates or offers related to Brikl. You can opt out at any time (see Section 11).

5. Legal Basis for Processing (EU/UK Users)

We process personal data based on:

• Contract – to provide the Platform and related services
• Legitimate interest – to improve services, ensure security, or communicate important information
• Consent – for marketing communications, analytics, or cookies (where required)
• Legal obligation – to comply with laws or regulatory requirements

6. Data Sharing and Disclosure

We share personal data only when necessary and consistent with this Policy:

• Service Providers / Subprocessors: trusted partners who help us host, process, or analyze data (e.g., AWS, Google Cloud, Stripe, Zoho)
• Business Transfers: in the event of a merger, acquisition, or sale of assets
• Legal Requirements: when required by law, regulation, or court order
• With Your Consent: when you explicitly authorize us to share data with a third party

A current list of subprocessors is available on request at support@brikl.com.

7. International Data Transfers

When we transfer data from the EEA/UK to the U.S. or other regions, we use approved Standard Contractual Clauses (SCCs) or other lawful safeguards to protect your data.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, or as required by law. When no longer needed, data is securely deleted or anonymized.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in
• Analyze usage and performance
• Personalize content and marketing

Analytics and Tag Management

On our marketing website (brikl.com), we use Google Tag Manager to load Google Analytics 4 (measurement ID G-4MKNSC1M2E). These tools help us understand site usage — which pages are viewed, how visitors arrive, and what actions they take — so we can improve content and product positioning.

Google Analytics may set cookies (typically _ga, _ga_*) and process pseudonymous identifiers such as a randomly-generated client ID and a truncated IP address. Data is processed by Google LLC and its affiliates; Google's practices are governed by the Google Privacy Policy.

Geographic Restriction (EU / EEA / UK / Switzerland)

Visitors connecting from the European Union, the European Economic Area, the United Kingdom, or Switzerland do not receive Google Tag Manager or Google Analytics. When you load brikl.com, your browser makes a single request to Cloudflare's public country-detection endpoint (cloudflare.com/cdn-cgi/trace) to determine your country. If you are in one of these regions, the GTM and GA scripts are never loaded, no analytics cookies are set, no events are sent to Google, and no personal data is processed for analytics purposes.

The country-detection request itself does not set tracking cookies and is processed by Cloudflare in accordance with its own privacy policy.

Essential cookies required for site functionality (for example, session and authentication cookies on the Brikl Platform at platform.brikl.com) are unaffected by this restriction.

Opt-Out and Controls

You can manage or disable cookies at any time through your browser settings. To opt out of Google Analytics tracking specifically (in regions where it loads), you can install the Google Analytics Opt-out Browser Add-on or use a browser that blocks third-party tracking.

10. Data Security

We implement administrative, technical, and organizational measures to protect your data, including encryption, access controls, and regular audits. No system is completely secure, and transmission of data over the internet is at your own risk.

11. Your Rights

Depending on your location, you may have the following rights:

EU/UK (GDPR)

• Access, correct, or delete your personal data
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your local Data Protection Authority

U.S. (CCPA/CPRA and similar state laws)

• Know what personal data we collect and how we use it
• Request deletion of personal information
• Request correction of inaccurate information
• Opt out of the “sale” or “sharing” of personal data (we do not sell data)
• Non-discrimination for exercising your privacy rights

You can make any of these requests by emailing privacy@brikl.com.

12. Children's Privacy

Brikl does not knowingly collect or process personal data from children under 16. If you believe a child has provided data to us, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website, and material changes will be communicated directly if required by law.

14. Contact Us

Questions, concerns, or requests about this policy can be sent to:

• Email: support@brikl.com
• Brikl Inc., 300 E Business Way, Cincinnati, OH 45241, USA