Privacy Policy
Last updated: 8 October 2026
1. Who we are
TJ Holdings provides LEGO sourcing, storage and resale management services. The data controller is Jude Gerard Taylor, sole trader trading as TJ Holdings. Business correspondence address: Available on request pending publication of a business correspondence address. Contact: thebrickbusiness1@gmail.com.
2. Information we collect
We may collect your name, contact details, enquiry, indicative budget, holding preferences, customer asset and transaction records, newsletter preferences and correspondence. Our website host may also process technical connection and security logs.
3. How we use it and lawful bases
- Responding to enquiries and taking steps before a contract: contract or legitimate interests, as appropriate.
- Managing approved purchases, storage, sales and asset records: contract.
- Maintaining tax and accounting records: legal obligation.
- Protecting our service against misuse: legitimate interests.
- Sending optional marketing newsletters: consent where required, with an unsubscribe option.
4. Newsletters
Newsletter sign-up is optional and separate from submitting an enquiry. You may unsubscribe at any time by contacting us or using the unsubscribe link where provided. Operational messages about your holdings are separate from marketing.
5. Sharing information
We may use hosting, email, spreadsheet, payment, delivery and resale service providers where necessary. We do not sell customer personal information to advertisers. Our website is hosted by Cloudflare Pages, and website enquiries are processed by Formspree. We may use Google services for email and customer spreadsheets. These providers may process data outside the UK; where applicable we rely on their contractual international-transfer safeguards. Other providers will be identified if introduced.
6. Retention and security
We restrict access to customer records and use appropriate technical and organisational safeguards. We retain records only as long as needed for the service, legal obligations or disputes. We normally retain unsuccessful enquiries for up to 12 months after our last substantive contact, unless continued retention is necessary. We retain customer contract and transaction records for up to six years after the end of the relevant relationship, or longer where the law requires. Newsletter contact details are retained until you unsubscribe; we may retain a minimal suppression record to honour your preference. To request deletion, email us.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, objection or portability of your personal data, or withdraw consent. Email thebrickbusiness1@gmail.com. You can complain to the Information Commissioner's Office.
8. Cookies and technical information
We will explain any cookies and similar technologies used on the published website. Non-essential technologies will not be used without appropriate consent where required. At launch, the website uses Cloudflare Pages for delivery and Formspree for enquiries. Essential security and operational technologies may be used by those services. We do not intentionally deploy advertising or optional analytics cookies in this website code. If this changes, we will update this notice and seek consent where required.
9. Changes
We may update this notice as our services and systems change. The latest version will be published here.