Legal

Privacy Policy

How we handle your personal data, in plain English.

Last updated: June 2026.

Who controls your data

TrueBrick Ltd (company number 17175011), registered in England & Wales, is the data controller. We are registered with the Information Commissioner's Office (ICO). For any privacy question, email hello@truebrick.co.uk.

What we collect

How we use it

We use your details to generate and deliver your report, to give you access to your past reports through your account, to provide support, and to meet our legal and accounting obligations. We do not sell your personal data.

Accounts and login

TrueBrick accounts are optional — you can buy a report without one. If you create an account, we use passwordless “magic link” sign-in: we email you a secure one-time link rather than storing a password. Your account lets you view and re-download the reports you've purchased. You can ask us to delete your account and its data at any time.

Marketing

We only send marketing emails if you have explicitly opted in, and you can unsubscribe at any time. Service emails about a report you've bought (such as delivery and receipts) are not marketing and are sent as part of providing the service.

Who else processes your data

We use a small number of trusted providers who process data on our behalf under contract: Paddle (payments and, as merchant of record, billing and VAT), Supabase (account database and login, hosted in the EU/UK region), Resend (email delivery), Vercel (website hosting) and Anthropic (to help write the plain-English report text). Where you choose to be introduced to a mortgage broker, we share the details you provide with that broker so they can contact you.

The data flywheel — your choice

TrueBrick may, with your explicit opt-in consent, use anonymised outcome data (such as whether an offer was made or accepted) to improve future reports. This is optional, never required to receive your report, and you can withdraw consent at any time.

Mortgage documents you choose to upload

If you use our mortgage service, you can optionally create an account and upload supporting documents — such as photo ID, proof of address and income, bank statements and evidence of your deposit — so we can hold them securely and pass them to the mortgage broker we introduce you to. This is entirely optional: you can use the mortgage service, and be introduced to a broker, without uploading anything to us.

We process these documents only on the basis of your explicit consent, which you give at the point of upload and can withdraw at any time. They are held in encrypted, access-controlled storage and are private to your account — only you, when signed in, and our authorised systems can access them. With your consent, we share them with the FCA-authorised broker we introduce you to so they can carry out their own checks. We do not use these documents for any other purpose, and we never sell them.

You can delete any uploaded document, or your entire account, at any time from your account or by emailing hello@truebrick.co.uk. If you withdraw consent, or your mortgage enquiry does not proceed, we delete the documents within 30 days unless we are required to keep them for a legal or regulatory reason. Because these are sensitive identity and financial documents, we keep them only for as long as necessary for the purpose above.

Retention

We keep your report and order record for as long as needed to provide the service and meet legal obligations, then delete or anonymise it.

Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, and you can object to certain processing. Email hello@truebrick.co.uk and we'll respond. You also have the right to complain to the ICO.