Effective 23 August 2026. This notice covers personal data handled by an editorial desk that writes about a kid-led hour at LEGOLAND Windsor: enquiry mail, the form, and ordinary web serving. Venues named in the notes publish their own documents, and those govern any visit you arrange with them.
Who is the controller
The controller for personal data collected through these pages is the brickbrief editorial desk, reachable at privacy@brickbrief.pro and at 9 Claremont Road, Windsor SL4 3AA, United Kingdom. Telephone: +44 1753 518 220. We are an independent notes desk, not the resort operator and not an admissions agent. The postal address is a town house on Claremont Road (SL4 3AA), not the park postcode.
The law that applies
We handle personal data under the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. The supervisory authority is the Information Commissioner's Office (ICO). These pages are written for readers in the United Kingdom. If you write from elsewhere, the same standards apply unless a mandatory local rule says otherwise. Disputes about this notice are heard in the courts of England and Wales.
What we collect when you enquire
The enquiry form asks for a name, a telephone number, an email address, visit notes and, on the contact page, a short message. We also see ordinary server logs if a host is serving the files: IP address, user agent and the page requested. We do not ask for payment details, passport numbers or the names of children. Do not send special-category data; if you do, we will delete it unless we must keep it to answer a safety question you raised.
Drafts while you type
As you type, the browser stores a draft of the form fields in local storage under a key named {brand}_form_draft, where {brand} is the second-level hostname (on a local preview that key is brickbrief_form_draft). The draft never leaves your device. It exists so a half-written enquiry survives a refresh. Clearing site data in the browser removes it. We cannot read that draft from Claremont Road.
The copy after you send
On a successful send the script removes the draft and writes a local copy of the submitted fields under {brand}_form_contact (preview: brickbrief_form_contact). That copy stays on your device so you can see what you sent. There is no server behind this static form. The on-screen card confirms we received the enquiry in the browser; if you also want a human reply, call or write using the addresses on this page. The local copy is not a transfer to a processor.
Lawful bases
Answering an enquiry is legitimate interests: you asked a question about a Windsor morning and we need your contact details to reply. The privacy checkbox records that you have read this notice. Consent for the consent banner covers non-essential local storage and the font request. You may withdraw consent for those extras without affecting a reply already in progress. We do not rely on consent to keep a phone number you asked us to call.
What we do not do
We do not run advertising pixels, remarketing tags or cross-site trackers on these pages. Mailing lists are not offered to others. We do not pass enquiry fields to the resort, to Thorpe Park, to Chessington or to Windsor Castle. If you later arrange a visit with a venue, that arrangement is under that venue's notice, not this one.
Retention
Email and telephone notes we actually receive are kept long enough to answer and for a short audit trail, usually under twelve months, unless a complaint or a legal hold requires longer. Browser drafts and submitted copies last until you clear them. Server logs, where a host keeps them, follow that host's ordinary rotation.
Your rights
You may request access, rectification, erasure, restriction, portability and objection, and you may complain to the ICO. Write to privacy@brickbrief.pro and say which right you want to use. We will need enough detail to find your message. The ICO's website explains how to raise a concern if you are unhappy with our reply.
Children
These pages are written for adults planning a visit. We do not knowingly collect data from children through the form. If a parent believes a child submitted details, write to the privacy address and we will delete what we hold.
International transfers
If email is hosted outside the United Kingdom, we use a provider that offers an appropriate safeguard recognised under UK GDPR, such as the UK International Data Transfer Addendum where that is the tool in force. Fonts may be requested from Google Fonts; see the cookie policy. We do not upload enquiry contents to a font vendor.
Changes
This notice is effective 23 August 2026. If we change the form, the local-storage keys or the way we reply, we will update this page and the effective date. Continued use after a change is not a substitute for reading the new text if you send another enquiry.