logo

Privacy Policy

Last updated: 24 juin 2026

Introduction

Bricks respects users' privacy and strictly complies with French Law No. 78-17 of 6 January 1978 on data processing, files and freedoms, as amended, known as the "Informatique et Libertés" Law, and since 25 May 2018 with the European General Data Protection Regulation (GDPR) No. 2016/679.

We take data protection very seriously and therefore have a dedicated customer service to answer all your questions regarding the rights mentioned above.

You can contact us at contact@bricks.co with "Privacy policy" as the email subject.

As a European Crowdfunding Service Provider, Bricks collects personal data as part of its crowdfunding service provision activity, a collection to which the User expressly consents by using the Site.

Use of data

Data is collected when the User visits the platform, creates an account or communicates with Bricks, after identifying themselves on the Site or after providing their identity.

The purpose of collecting this data is to allow the User to access the Services available on the Site, to offer the opening of an Electronic Wallet, to propose investment products suited to their profile, and to enable Bricks to comply with the obligations applicable to its crowdfunding service provision activity.

Data retention

The retention period for personal data depends on the purpose of the processing and the circumstances in which it is collected. It is in principle five (5) years due to the regulatory obligations applicable to Bricks in its capacity as a European Crowdfunding Service Provider. However, if the duration of the investors' contractual commitment is longer for the purposes of the fundraising, the retention period may be aligned with that duration. In that case, the five (5) year period only begins to run from the last repayment made in connection with that investment.

The personal data collected is not used for purposes other than those mentioned above. In particular, Bricks does not sell this personal data. All information provided by the User when creating their Profile, except for their username, is protected by a username and a password, so that only the User has access to their personal information.

Bricks uses personal data when processing the client suitability questionnaire, in order to determine the products suited to the Investor's profile, both in terms of knowledge and risk, and to set the Investor's investment caps.

Personal data collected

As a crowdfunding service provider, Bricks collects and stores certain personal data in order to provide its services. The information is collected when you create an account or complete the registration form as an Approved or prospective Investor.

The data collected includes:

  • your password,
  • your email address,
  • your last name,
  • your first name,
  • your date and place of birth,
  • your postal address,
  • your phone number,
  • your proof of identity and address,
  • your answers to the questionnaires,
  • your preferences and tax options,
  • the last IP address of your identification.

For legal entities, the information collected may include the SIRET number, the entity's address, the articles of association, the KBIS extract, the Declaration of beneficial owners, and the details of a valid bank account opened in France of which the investor is the holder.

Data relating to online payment is processed and stored directly by Bricks' Banking Partner and does not pass through Bricks' servers.

Server logs (IP addresses and pages visited) are kept for a period of 8 days. The data is used to allow access to the services available on the site, to offer the opening of an Electronic Wallet, to propose investment products suited to the investor's profile, and to comply with the obligations applicable to the crowdfunding service provision activity.

The personal data collected is not used for other purposes, and in particular the Company does not sell this personal data. The retention period for personal data depends on the purpose of the processing and the circumstances in which it is collected. It is in principle five (5) years due to the regulatory obligations applicable to Bricks in its capacity as a European Crowdfunding Service Provider.

Finally, the last IP address of your identification is used in collaboration with Bricks' internet service provider only if the Company deems it necessary to enforce its Terms of Use or to protect its services, its clients, or at the request of the judicial authorities.

Sharing of this information

We take the confidentiality of your information very seriously and do not share your personal data with third parties, except in the cases provided for in this privacy policy.

However, we are under a legal obligation to share some of your information with third parties in the following circumstances:

  • With public authorities, when required by law;
  • With the project owner, after a subscription, in order to comply with their legal obligation to keep a register of issued securities. We then transmit your last name, first name and tax address so that the project owner can include you in their register of subscribers;
  • With our payment service provider (PSP), in accordance with the law, in order to manage your funds securely and to verify your identity as part of Anti-Money Laundering and Counter-Terrorist Financing (AML-CTF). We are therefore required to communicate your email, last name, first name, proof of identity, proof of address and IP address to our Banking Partner, who stores them in accordance with the law. Your bank details are also stored;
  • With the company selected to ensure run-off management (where applicable the company CapSens), in the event that Bricks were to disappear;
  • With our other third-party service providers, such as server managers, customer services, emailing services and CRMs, in order to comply with our regulatory obligations, manage our platform and improve your experience. We have obtained from these providers their confidentiality charter and their data protection policy, updated in compliance with the General Data Protection Regulation.

We are committed to ensuring that these third parties comply with the same confidentiality and data protection requirements as those set out in this privacy policy.

Use of cookies

When you browse our website, we store certain messages on your browser, called "cookies", in order to facilitate your use of our platform. Some of these cookies are essential for the proper functioning of our site, such as session cookies that allow you to browse our platform without having to log in again on each new page opened, or authentication cookies that allow you to be identified if you come from a partner site.

Other non-essential cookies are used to measure the effectiveness of certain commercial and marketing actions, or to improve the ergonomics of our platform. We have set up a system that allows you to refuse the use of these non-essential cookies by clicking on the yellow icon at the bottom left of a browsing page, via the Axeptio tool that we use.

Your rights regarding the personal data collected

As a data subject, you have a number of rights under national and European personal data protection regulations. First, you have the right to access your personal data and to request information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom the data has been or will be disclosed, the retention period for the data, as well as the rights available to you under the regulations.

You also have the right to ask the data controller to rectify or erase your personal data, or to restrict the processing of this data, as well as the right to object to this processing. You may also lodge a complaint with the competent supervisory authority.

It is important to note that providing personal data to Bricks is both contractual and regulatory, and that Bricks will only be able to provide its crowdfunding services if you provide this information.

Finally, if decisions are made about you on the basis of automated processing, including profiling, you have the right to receive meaningful information about the logic underlying this processing, as well as the consequences envisaged for you.

In accordance with the applicable data protection legislation, you also have the right to ask Bricks to restrict the use of your personal data in the following situations:

  • If you contest the accuracy of your personal data, you can request that its use be restricted for the time needed to verify it.
  • If the processing of your personal data is unlawful, you can require that its use be restricted, instead of requesting its deletion, where possible.
  • If we no longer need your personal data for the purposes of the processing, but you still need it to exercise, defend or establish legal claims, you can request that its use be restricted.
  • If you object to the processing of your personal data under Article 21 of the General Data Protection Regulation (GDPR) while we verify whether our legitimate grounds override yours, you can request that its use be restricted.

When processing is restricted, we ensure that your personal data is used only with your consent, for the exercise or defence of legal claims, to protect the rights of another person, or for important reasons of public interest. We will inform you before the restriction is lifted.

To exercise these rights, you can contact Bricks by email at: contact@bricks.co

Complaint to a supervisory authority

For any difficulty concerning your personal data, or if you believe that Bricks is using your personal data inappropriately, please do not hesitate to let us know.

You also have the option of lodging a complaint with the competent Authority, the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés, CNIL):

On its website: https://www.cnil.fr/fr/plaintes By post: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris CEDEX 07