Privacy policy
What we hold, why, and your rights.
This is the privacy notice for earlybrick.co.uk, written to be read. Last updated: 1 July 2026.
Who's responsible
EarlyBrick is the data controller. Contact: contact@earlybrick.co.uk. Our ICO registration is in progress and the number will appear here.
What we collect, and why
If you subscribe: your email and password (login), your business details and filters (business name, trade, base postcode, radius, job sizes, digest cadence, optional logo), and your billing status. Lawful basis: performing our contract with you. Payments are handled by Stripe — we never see or store your card number.
If you request a free sample: your trade, postcode and email, with your consent captured on the form and confirmed by the double-opt-in email. Lawful basis: consent. We may send a short series of follow-up emails about the sample and the service; every email has a one-click unsubscribe, and unsubscribing stops everything immediately.
Email telemetry: our email provider reports deliveries, opens, clicks, bounces and complaints so we can stop sending to dead or unwilling addresses. Lawful basis: legitimate interest in running a clean, lawful mailing list. Addresses that bounce hard, complain or unsubscribe go on a suppression list — kept so we don't email you again.
The leads themselves come from public planning records published by local planning authorities. We hold what the public record holds — site addresses and, where an application names one, the architect/agent practice (business contact details only). We never hold or share homeowners' phone numbers or emails, and our terms ban subscribers from cold-contacting homeowners electronically. If a planning record names you and you have concerns, contact us and we'll help — though the underlying record belongs to the council.
Who processes data for us
Supabase (database, authentication and file hosting — EU/London region), Stripe (payments), MailerSend (email delivery), Hostinger (website hosting and our mailbox), and GitHub (build infrastructure — no personal data at rest). Each processes data under their own GDPR terms; we don't sell personal data to anyone.
How long we keep things
Subscriber accounts: while your account is open, then up to 24 months (billing records up to 6 years, as tax law requires). Sample prospects: 12 months from our last contact, or immediately on unsubscribe (bar the suppression entry). Email telemetry: 12 months.
Cookies and tracking
The site sets no advertising or analytics cookies. Signing in stores an authentication token in your browser's local storage — essential to keep you logged in, and it holds no tracking identifiers.
Your rights
You can ask for a copy of your data, have it corrected or deleted, object to or restrict processing, take your data elsewhere, and withdraw consent at any time — email contact@earlybrick.co.uk and we'll act within a month. If you're unhappy with how we've handled something, you can complain to the Information Commissioner's Office at ico.org.uk.
The commercial terms are in the terms of service.