Legal
Privacy Policy
Last updated 13 July 2026
Who we are
BlockBrick is a pre-launch, Malta-based property intelligence project. This website is informational and research-focused: it does not offer investments, securities, or fractional property access, and any future access would be subject to legal and regulatory approval.
The data controller for personal data collected through this site is [to be completed: registered company name, registration number and registered address]. You can reach us about privacy at hello@blockbrick.eu .
What we collect and why
We only collect what you actively submit, plus basic technical data needed to run the site securely. We do not sell personal data, and we do not use it to make automated decisions that produce legal effects about you.
| What | Why | Legal basis |
|---|---|---|
| Waitlist details: name, email, country, optional phone, and any investor-profile fields you choose to add (intended range, interests, preferred areas/property types, risk comfort) | Run the pre-launch waitlist and tell you when things change | Consent (Art. 6(1)(a)) |
| Property demand polls: email plus the areas or property types you select | Gauge research demand and follow up if you asked us to | Consent (Art. 6(1)(a)) |
| Investor-deck and investor-interest requests: email, interest type, intended range, country, and any notes | Send the requested materials and hold pre-launch investor conversations | Consent (Art. 6(1)(a)) |
| Partner enquiries and partner-discussion requests: name, email, organisation, role, and your message | Respond to and evaluate a partnership or research enquiry you sent us | Legitimate interest (Art. 6(1)(f)) [confirm] |
| Account details: email, password (stored only as a secure hash by our auth provider), and optional display name and profile picture | Create and secure your account so you can save research and track submissions | Contract / pre-contract (Art. 6(1)(b)) |
| Property submissions and uploaded documents: the property details you provide, your contact details, and any files you upload (e.g. plans, permits, photos, income or energy evidence). Documents are stored privately and are never shown publicly. | Review a property you submitted and respond to you about it | Contract / pre-contract (Art. 6(1)(b)) |
| Property suggestions: the listing details you send us for research | Consider a property you suggested for Market Watch research | Consent / legitimate interest (Art. 6(1)(a)/(f)) |
| Assistant conversations: the free text you type into our chatbot or the “Ask about this property” panel | Answer your question (see “AI assistant” below) | Legitimate interest (Art. 6(1)(f)) [confirm] |
| Technical data: IP address and basic request details, handled by our hosting provider and used for security and aggregate, cookieless analytics | Keep the site secure, prevent abuse, and understand overall usage | Legitimate interest (Art. 6(1)(f)) |
Where our basis is consent, you can withdraw it at any time (see “Your rights”). Investor-profile fields are optional. You can join the waitlist with just your name, email and country.
AI assistant
Our website chatbot and the “Ask about this property” panel send the text you type to our AI provider, Anthropic (based in the United States), which generates the reply. This is an international transfer of data outside the EU/EEA, carried out under [to be confirmed: the safeguard in Anthropic’s data-processing agreement, e.g. Standard Contractual Clauses].
Please don’t enter sensitive personal information into the assistant. We don’t use these conversations to build a profile of you, and the assistant answers from public research context only. It doesn’t have access to your account or private submissions.
Who else processes your data (sub-processors)
We use a small number of trusted providers to run the service:
| Provider | Role | Region |
|---|---|---|
| Supabase | Database, private file storage, and authentication | [Confirm hosting region: EU where available] |
| Anthropic (Claude) | Processes the text you type into our assistant tools to generate a reply | United States (international transfer) |
| Vercel | Website hosting, plus cookieless traffic and performance analytics | United States / global edge network |
| Resend | Sends transactional emails (e.g. confirmations and enquiry notifications) | [Confirm region per Resend DPA] |
| Google Fonts | Serves the site’s webfont; Google receives your IP address when the font loads | United States / global |
Where a provider is outside the EU/EEA, the transfer relies on the safeguards in that provider’s data-processing agreement (such as Standard Contractual Clauses). [Specific mechanisms to be confirmed with counsel.]
How long we keep it
We keep personal data only as long as we need it for the purpose it was collected, then delete or anonymise it. Our current intended periods are:
- Waitlist, poll, and investor/partner contact details: until the pre-launch phase ends, or until you ask us to delete them. [proposed]
- Property submissions and uploaded documents: for the duration of the review and a short period after, then deleted unless you become an ongoing contact. [proposed retention period to be set]
- Account data: until you delete your account or ask us to close it. [proposed]
- Assistant conversations: not stored by us beyond answering your question.
Cookies and browser storage
We do not use advertising cookies or cross-site tracking, and we do not sell or share your data with ad networks. Everything we set is either strictly necessary or a first-party feature, and our analytics are cookieless, so we don’t show a cookie consent banner. Here is everything we store:
| Item | Type | Purpose | Duration |
|---|---|---|---|
| Sign-in session | localStorage (first-party) | Keeps you signed in. Only set if you create an account | Until you sign out or the session expires |
| Saved-listings memory | localStorage (first-party) | Remembers listings you save before signing in | Until you clear it |
| Compare selection | sessionStorage (first-party) | Remembers the listings you chose to compare during a visit | Cleared when you close the tab |
| Assistant prompt flag | sessionStorage (first-party) | Avoids re-showing the chat prompt during the same visit | Cleared when you close the tab |
| Analytics (Vercel) | No cookie, no device storage | Aggregate visit counts and page performance. No cross-site tracking and no profile | Not stored on your device |
Your rights
Under the GDPR you can ask us to give you access to your data, correct it, delete it, restrict or object to how we use it, and provide it in a portable format. Where we rely on consent, you can withdraw it at any time. This doesn’t affect anything done before you withdrew. To exercise any of these, email hello@blockbrick.eu and we’ll act without undue delay.
You also have the right to complain to a supervisory authority. In Malta this is the Information and Data Protection Commissioner (IDPC), idpc.org.mt.
How we protect it
Personal data is transmitted over encrypted connections (HTTPS). Access is restricted to BlockBrick administrators, and our database enforces row-level security so records are only readable by the people entitled to see them. Uploaded documents and profile pictures are held in private storage and shown only through short-lived, signed links. No system is perfectly secure, but we take reasonable steps to protect your data.
Children
BlockBrick is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as BlockBrick develops. When we do, we’ll change the “last updated” date at the top of this page, and for significant changes we’ll take reasonable steps to let affected users know (for example, by email where appropriate).
Contact
For any privacy question or request, email hello@blockbrick.eu.