Here is how Brickk keeps your data safe, uses it responsibly and explains credit reference agency reporting in plain English.
The short version first, then the full privacy notice below.
Identity, rent and usage data
Service, reporting and safety
Only where needed
Control and transparency
Your data is used for the Brickk service: rent verification, consent-led reporting, account support, discounts, security and legal duties. No mystery wording, no selling your data.
Brickk privacy
Bud Open Banking access is based on consent, and you can withdraw it where the law allows.
Data is used for rent verification, account support, discounts, security and lawful reporting.
Brickk does not sell your personal data or use it for unrelated commercial purposes.
01
Brickk is a UK rent reporting and discounts platform. This Privacy Policy explains how we collect, use, share and protect personal data when you use our website, app, onboarding, Open Banking flows or partner services.
The policy applies to renters, prospective members, landlords, partners and people who contact Brickk for support, media or partnership enquiries.
02
We process personal data under consent, contractual necessity, legal obligation and legitimate interests, depending on the feature you use.
Consent is used for Open Banking access, optional credit reporting choices, marketing preferences and other optional features. You can withdraw consent where the law allows.
03
Identity and contact data may include your name, date of birth, address, email and phone number.
Financial and rental verification data may include bank transaction data, rent payment history, property address and tenancy details.
Technical and communication data may include device type, IP address, usage logs, emails, support messages and feedback.
04
We collect data directly from you during registration, onboarding, consent flows and support requests.
We collect rent payment information through secure Bud Open Banking access where you have given permission.
We may collect website and app usage data through cookies, analytics and security tooling.
05
We use personal data to verify rent payments, support credit reference agency reporting, manage your account and communicate service updates.
We may use data to support discount eligibility, improve platform functionality, detect misuse, prevent fraud and meet legal or regulatory obligations.
We do not sell personal data or use it for unrelated commercial purposes.
06
We may share relevant personal data with Experian, Equifax and TransUnion for credit reference agency reporting where the service applies and consent or another lawful basis is in place.
We may share data with Bud for Open Banking access, technology partners that help us operate Brickk, and regulators or law enforcement where required by law.
Third-party processors are expected to follow UK GDPR and Brickk data protection requirements.
07
We retain personal data only for as long as needed for the purposes described in this policy, including service delivery, reporting, security, dispute handling and legal obligations.
Brickk does not routinely transfer personal data outside the UK. If a transfer is needed, appropriate safeguards such as adequacy rules or contractual protections are used.
08
Brickk uses security measures such as encrypted transmission, secure integrations, role-based access controls and vulnerability management.
Our website and app may use cookies and analytics to improve the service and understand usage. You can manage cookie preferences through your browser.
We may update this policy from time to time. The latest version is available on this page.
When rent payment data is reported, Experian, Equifax and TransUnion use that data as independent controllers. Their Credit Reference Agency Information Notice explains their purposes, lawful bases, sharing and retention.
Read how Experian may use credit reference data and rental information as an independent controller.
Open noticeRead the Equifax CRAIN information about collection, use, sharing and retention of credit reference data.
Open noticeRead how TransUnion explains its independent controller responsibilities through the CRAIN notice.
Open noticeUnder UK GDPR, you have rights over your personal data. To use these rights, contact Brickk and we respond in line with the law.