Terms and Conditions

Introduction

Integrity is a service made available by brickchain limited (“company”, “us”, “we” or “our”). The service consists of a mobile application (“application” or “app”) which allows users to access goods and services via realms set up by third parties. Realms are set up by third parties using the app and our website (“services”). We respect the privacy of every person who visits, registers with or uses Integrity either via the website or the mobile application (the together the “Sites”) including those who use our Services and we are committed to ensuring a safe online experience.

Who we are and what we do

The Service is operated by Brickchain Limited (”we” “us” or “our”) whose principal activities include operating the Integrity platform to allow businesses to set up realms and users to access goods and services via the realms.
Brickchain Limited is the data controller responsible for your personal information. Brickchain Limited is registered at the UK Information Commissioner’s Office with registration number: ZA281442
Brickchain Limited is an English company with registered company number: 10168499 and whose principal address is 100 Brompton Road 3rd Floor, London, England, SW3 1ER.

Purpose of this notice

This privacy notice explains our approach to any personal information that you might supply to us (or that might be collected from you) in connection with your use of the Service and sets out your rights in respect of our processing of your personal information.This privacy notice will inform you how you can verify which of your personal information is collected by us through the Service and how you can request that we delete, update or transfer it.

This privacy notice is intended to assist you in making informed decisions when using the Service. Please take a moment to read and understand it. Please note that it should be read in conjunction with our Website Terms of Use and the relevant Application Terms of Use.

Please also note that this privacy notice only applies to the use of personal information collected by us from your use of the Service or during your communications with us. It does not apply to personal information collected during your communications with third parties.

How to contact us

If you have any questions about this privacy notice or want to exercise your rights, please contact us by:

sending an e-mail to our DPO: dpo@brickchain.com
calling us on +44 207 536 1720
writing to us at Brickchain Limited at 100 Brompton Road 3rd Floor, London, England, SW3 1ER
marking your letter for the attention of Nicolas Granatino.

Personal information we collect

Personal information may be collected from you in the following ways:

Information you voluntarily provide to us
We collect personal information that you voluntarily submit to us during your use of the Service (e.g. when we verify your email address, during the course of e-mail exchanges with us or as part of any customer support interactions). In particular, in order verify your identity and use our services, we may request the following personal information from you:
- e-mail address; and
- phone number (verified with SMS).
Other than the information which we absolutely require to verify your identity you have the flexibility to provide us with as little information as you like. However, the more information you provide, the more you will get out of the Service. Please note that the information above is not necessary to use the App in all cases, but some Services may require the information to be shared. The information will only be shared with Services when necessary. Certain Services may require additional information, such as geographical information at the time of a transaction or a Facebook ID. If you contact us we may also collect additional personal information from you such as your opinion on our Service.
Information we collect through your use of the Service
Through our use of log files and other technologies, we may collect personal information regarding your mobile device on which you have downloaded the Application or the computer/device hardware and software used to access the Service. This may include the following:
- IP address of device(s) used;
- browser type;
- operating system and device type;
- approximate location (e.g. London);
- access times and dates; and
- referring website addresses; and
- your public key generated by the Integrity app.
This personal information allows us to deliver more helpful information, services and tools. The App may also send this information on all requests to any Service it uses.
Information we collect from third parties
We may combine personal information that we collect from you and through your use of the Service with personal information that:
- you have provided to third parties and in respect of which you have given the third party permission to share with us; and/or
- we have obtained from a public record. For example, we may use a third party to verify certain of your personal details.

How we use your personal information

Our primary goals in collecting personal information from you is to set up your realm and verify your identity which allows us to provide you with the Service and to ensure that you are receiving the best and most suitable Service from us. In particular, we may use your personal information for the following purposes:

Provision of the Service
We use this information to communicate with you and to carry out actions you request on the Site, such as setting up your realm or linking you to other realms.
What is our legal basis? It is necessary for us to use your personal information to provide the Service to you and perform our obligations in accordance with any contract that we may have with you. It is also in our legitimate interest to use your personal information in such a way to ensure that we provide the very best and most suitable Service we can to you.
Information Requests and Feedback
Our Service includes various user interfaces to allow you (if you have set up a realm) to tailor your realm. We may request feedback from you about how this functionality is working. Contact information may be requested in each case, along with information about your computing environment and/or industry, and details of your request or reported feedback. This information is used in order to allow us to respond to your requests and to ensure that our software and services work correctly.
What is our legal basis? It is in our legitimate business interests to respond to any requests you make to us or use the information you provide to us in your feedback in order to improve our Service.
Service administration
We may use your personal information to:
- develop and improve the Service;
- send you administrative e-mails about the Service; and
- contact you to answer any queries you may have.
What is our legal basis? It is in our legitimate interest to use your personal information in such a way to ensure that we provide you with the very best service we can.
Internal record keeping and legal compliance
We may use your personal information for internal record keeping purposes and to check you comply with the Application Terms of Use and the Website Terms of Use.
What is our legal basis? It is in our legitimate interest to ensure that we keep our records up-to-date in order to monitor who uses the Service, to comply with our legal obligations and to monitor your compliance with the relevant Application Terms of Use.

Any other purposes for which we wish to use your personal information will be notified to you either by updating our privacy notice or otherwise from time to time including the legal basis of such use.

Where our use of your personal information requires your consent, you can provide such consent:

at the time we collect your personal information following the instructions provided; or
by informing us by e-mail, post or phone using the contact details set out in this privacy notice.

When using third party services, you will be asked for your consent to share any personal information.

Third Party Links and Services

The Sites may include links to third party websites that are controlled and maintained by others. Any link to another website is not an endorsement by us of such website and you acknowledge and agree that we are not responsible for the content or availability of any such websites. We recommend you review those websites’ terms and conditions and privacy policies to ensure you are happy to use them.

Transfers outside the EEA

We transfer your personal data outside the UK and EEA in connection with our business or for legal reasons. We will ensure that the transfer is lawful and that there are appropriate security arrangements. By using our Sites you consent to the transfer of your information outside the EEA in the circumstances set out in this privacy notice. If you do not want your information to be transferred outside the EEA you should not use the Sites. We use an IPFS distributed storage and transfer system, which is a secure transport system where all data is encrypted either to the user or to the service. Our primary IPFS nodes will be hosted within the EEA however the data can be routed through any country.

How long we keep your personal information for

We do not keep your personal information for any specific period but we will not keep it for longer than is necessary for our purposes. In considering how long to keep it, we will take into account its relevance to our business and our legal and regulatory obligations. If your personal information is only useful for a short period e.g. for a entries in a log file we may delete it. Data retention for third party logs is subject to the third parties terms and conditions.

Confidentiality and security of your personal information

We are committed to keeping the personal information you provide us secure and we will take reasonable precautions to protect your personal information from loss, misuse or alteration.
We have implemented information security policies, rules and technical measures to protect the personal information that we have under our control from:

unauthorised access;
improper use or disclosure;
unauthorised modification; and
unlawful destruction or accidental loss.

All our employees and data processors (i.e. those who process your personal information on our behalf, for the purposes listed above), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of the personal information of all users of the Service.

How to access your information and your other rights

You have the following rights in relation to the personal information we hold about you:

Your right of access
If you ask us, we’ll confirm whether we’re processing your personal information and, if so, provide you with a copy of that personal information (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.
Your right to rectification
If the personal information we hold about you is inaccurate or incomplete, you’re entitled to have it rectified. If we’ve shared your personal information with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.
Your right to erasure
You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or you withdraw your consent (where applicable). If we’ve shared your personal information with others, we’ll let them know about the erasure where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.
Your right to restrict processing
You can ask us to ‘block’ or suppress the processing of your personal information in certain circumstances such as where you contest the accuracy of that personal information or object to us processing it. However it won’t stop us from storing your personal information. We’ll tell you before we lift any restriction. If we’ve shared your personal information with others, we’ll let them know about the restriction where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.
Your right to data portability
With effect from 25 May 2018, you have the right, in certain circumstances, to obtain personal information you’ve provided to us (in a structured, commonly used and machine readable format) and to reuse it elsewhere or ask us to transfer it to a third party of your choice.
Your right to object
You can ask us to stop processing your personal information, and we will do so, if we’re:
- relying on our own or someone else’s legitimate interests to process your personal information except if we can demonstrate compelling legal grounds for the processing;
- processing your personal information for direct marketing; or
- processing your personal information for research unless such processing is necessary for the performance of a task carried out in the public interest.
Your rights in relation to automated decision-making and profiling
You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, and it produces a legal effect or similarly significantly affects you unless such profiling is necessary for entering into, or the performance of, a contract between you and us.
Your right to withdraw consent
If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.
Your right to lodge a complaint with the supervisory authority
If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal information, you can report it to the UK Information Commissioner’s Office (ICO). You can find details about how to do this on the ICO website at https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.

Changes to this privacy notice

We may make changes to this privacy notice from time to time: to ensure that you are always aware of how we use your personal information we will update this privacy notice from time to time to reflect any changes to our use of your personal information. We may also make changes as required to comply with changes in applicable law or regulatory requirements. We may notify you by e-mail of any significant changes. However, we encourage you to review this privacy notice periodically to be informed of how we use your personal information.