Privacy Policy

Last updated: October 2026

Bricola Group is committed to safeguarding your privacy. This Privacy Policy describes how Bricola Group, LLC ("Bricola Group," "we" or "us") collects, uses and discloses your personal information through bricolagroup.com (the "Site"), and the rights you have over it. By using the Site, you acknowledge that your information will be handled as this policy describes. For the purposes of this policy, "personal information" is any information that can be related to an identifiable individual. Bricola Group, LLC is the controller of that information.

Collection

Report Download Form

When you download a report, we ask for your first name, last name and work email, and, if you choose to give it, your company or organization. Along with them we record:

• the campaign tags in the link that brought you to the page, if it had any (utm_source, utm_medium, utm_campaign, utm_content and utm_term);
• the address of the page your browser reports as having referred you, if any;
• the date and time, which report and edition you received, and the wording of the notice shown beside the form.

We don't store your IP address or browser details with these records.

Emails to Us

If you email us, we receive your name, your email address and whatever your message contains, and we use them to reply to you.

Cookies and Other Technologies

The Site sets no cookies and runs no analytics, advertising or tracking tools, so there is nothing for a "Do Not Track" signal to switch off.

Like most websites, ours logs each request it serves, through AWS CloudFront. Each entry includes the requesting IP address, the date and time, the page or file requested (including any campaign tags in the link), the referring page and your browser's user agent. The service behind the download form keeps its own logs, which record the outcome of each request and its ID, never what you typed.

Our homepage loads code libraries from cdnjs, a service run by Cloudflare, which receives your IP address and browser details when your browser fetches them. The report pages load nothing from other services.

Use

We collect and use your personal information for the following purposes:

• sending you the report you requested;
• contacting you about that report;
• responding to your inquiries;
• understanding which links bring readers to our reports, and compiling statistics about visits to the Site;
• running and securing the Site, and protecting against fraud and abuse; and
• meeting legal requirements.

We don't add you to a mailing list, we don't sell your personal information, and we don't make automated decisions about you.

Under the EU and UK General Data Protection Regulation (GDPR), we rely on our legitimate interests for the first five purposes: providing what you asked for, following up with readers of our research, understanding which channels reach them, and keeping the Site running and secure. For the last, we rely on our legal obligations. You can object at any time; see "Your Privacy Rights" below.

Disclosure

We disclose personal information only:

• to service providers who process it on our behalf: Amazon Web Services, for website hosting, data storage, email delivery and server logs; Google Workspace, for our mailbox; and Cloudflare, for the code libraries on our homepage;
• to a successor in the event of a reorganization, merger, sale or other transfer of all or part of our business; and
• where we believe it is necessary to comply with the law or legal process, to respond to requests from public authorities, or to protect our rights, safety or property, or those of others.

We don't share personal information with third parties for their own marketing.

Where Information Is Stored

Your download request is stored in a database in our Amazon Web Services (AWS) account, in AWS's US East (N. Virginia) region. Each request also sends us a notification email through Amazon Simple Email Service, which we keep in our Google Workspace mailbox. The report itself is delivered from private AWS storage through a link that expires after 10 minutes.

Your personal information is therefore stored and processed in the United States. Where EU or UK rules treat this as an international transfer, we rely on the safeguards our providers offer, such as the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

External Links

The Site links to third-party websites, including Calendly, Substack and LinkedIn. Bricola Group is not responsible for the privacy policies or practices of those websites, and we recommend that you read the privacy policy of any website you visit.

Retention of Information

We keep your download request for 24 months, after which it is deleted from our database automatically, and a retention rule on our mailbox deletes the matching notification email on the same schedule. Database backups roll off within 35 days of a deletion. Server logs are deleted after 13 months, and the download form's own logs after 30 days. Emails you send us are kept for as long as we need them to deal with your inquiry.

Reviewing, Changing or Deleting Information

You may ask to review, correct or delete the personal information we hold about you at any time by emailing contact@bricolagroup.com. We'll respond within one month and confirm by email. Deletion covers the database record and our notification email; server logs age out on the schedule above.

Your Privacy Rights

Some laws, including the GDPR and the privacy laws of several US states, give you rights over your personal information. We extend the following rights to everyone, wherever you live, and we won't treat you differently for using them.

• Right to know. You can ask what personal information we hold about you, where it came from, what we use it for and who we have disclosed it to, and ask for a copy in a portable format.
• Right to correct. You can ask us to correct information that is inaccurate.
• Right to delete. You can ask us to delete your personal information. We may keep what the law requires us to keep.
• Right to restrict or object. You can ask us to limit how we use your information, or object to our using it.
• Right to opt out. We don't sell your personal information or share it for advertising, so there is nothing to opt out of.

To use any of these rights, email contact@bricolagroup.com. You may also ask someone to act for you as your authorized agent; we may ask them to show that you authorized them. If you are in the EU or the UK, you also have the right to complain to a data protection authority, such as the one in the country where you live or work, or the Information Commissioner's Office in the UK.

Security of Information

We take reasonable steps to protect your personal information. It is encrypted in transit and at rest, and access to the systems that hold it is restricted to Bricola Group. However, no transmission over the internet is completely secure, and we cannot guarantee the security of information you send us.

Data Collection from Children

The Site is meant for professionals and is not directed at children. We don't knowingly collect personal information from anyone under the age of 16. If you believe we have collected information from a child, please contact us at contact@bricolagroup.com and we will delete it.

Contact

If you have any questions about your information, how we obtained it or how we use it, please contact contact@bricolagroup.com. You can also write to us at:

Changes to this Privacy Policy

If there is any material change to your rights under this policy, we will post a notice of it on this page at least 30 calendar days before it takes effect, and update the date at the top.