Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
The company's privacy policy includes a statement that it can change at any time, which means terms regarding personal data use can change without notice. Additionally, your right to access your personal data may be restricted by various factors including legislation and business practices. The company also uses pseudonymized data, which can still be re-identified with reasonable effort. Furthermore, even after requesting data deletion, the company may retain your data for legal, contractual, or business needs.
92% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
Critical issues that need immediate attention and may signal a need to break the deal or product use. These findings are scored as `high` severity.
high95% confidence
Privacy Policy can change at any time without advance notice
This Privacy Policy may be updated at any time, and the company reserves the right to make changes to its practices and this Privacy Policy at any time.
Why it matters: The company states it reserves the right to make changes to its practices and this Privacy Policy at any time. This means the terms governing your personal data could change without prior warning.
If we change the way we handle your personal data, we will update this Privacy Policy. We reserve the right to make changes to our practices and this Privacy Policy at any time, so please check back frequently to see any updates or changes to our Privacy Policy.
**SECTION 1: DATA PRIVACY LAW AND YOUR DIGITAL RIGHTS**, paragraph 16 · Citation strength: strong
high90% confidence
Right to access personal data may be restricted
The right to access personal data may be restricted by legislation, protection of other persons’ privacy, business practices, know-how, business secrets, and internal assessments of the LEGO Group.
Why it matters: Your ability to access your personal data may be limited by legislation, the privacy of others, the LEGO Group's business practices, know-how, business secrets, and internal assessments.
Your right to access may, however, be restricted by legislation, protection of other persons’ privacy and consideration for the business practices of the LEGO Group, know-how, business secrets and internal assessments.
Your privacy rights, paragraph 2 · Citation strength: strong
Data Use
This section reviews how your data is collected, processed, and shared. It also examines the purposes for data use and retention policies.
medium90% confidence
Pseudonymized data can be re-identified
Pseudonymization is a method that permits a data controller or third party to re-identify personal data with reasonable effort, and it does not remove all identifying information from the data.
Why it matters: Pseudonymized data, while reducing linkability, can still be re-identified with reasonable effort by a data controller or third party. This means that while some identifying information is removed, it's not truly anonymized.
Pseudonymization is a method that replaces or removes information in the dataset that identifies an individual but permits a data controller or third party to re-identify the personal data with reasonable effort. It is important to be aware that unlike anonymization, pseudonymization does not remove all identifying information from the data but reduces the linkability of a dataset with the identity of an individual.
**SECTION 2: PERSONAL DATA**, paragraph 6 · Citation strength: strong
Cancellation & Renewal
This section examines how difficult it is to cancel a subscription or delete an account, outlines any auto-renewal clauses, and what happens to your data if you leave the service.
medium90% confidence
Data retention after deletion request
The company may be required to retain some of your personal data after you have requested deletion to satisfy legal or contractual obligations, and may also be permitted by applicable laws to retain some personal data for business needs.
Why it matters: Even after you request deletion of your personal data, the company may retain some of it due to legal or contractual obligations, or for business needs as permitted by applicable laws.
Please note that, in certain circumstances, we may be required to retain some of your personal data after you have requested deletion to satisfy our legal or contractual obligations. We may also be permitted by applicable laws to retain some of your personal data to satisfy our business needs.
Your privacy rights, paragraph 9 · Citation strength: strong
Gotchas
Unexpected clauses or hidden clauses that may be detrimental to the user.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
These are the policies and features that protect users.
Protection95% confidence
Right to correct incorrect or incomplete data
Users have the right to request the correction of incorrect or incomplete data, subject to restrictions from legislation.
Why it helps: You can ensure the accuracy of your personal data by requesting corrections if it is incorrect or incomplete.
**Request correction of incorrect or incomplete data.** If the data we have pertaining to you are incorrect or incomplete, you are entitled to have the data corrected, with the restrictions that follow from legislation.
Your privacy rights, paragraph 3 · Citation strength: strong
Protection95% confidence
Right to request erasure of data
Users have the right to request deletion of their data when the personal data is no longer necessary, consent is withdrawn without other legitimate reasons for processing, processing is objected to without justified reason, or processing is unlawful.
Why it helps: You have the ability to request the deletion of your personal data under specific conditions, helping you control your information when it's no longer needed or if processing is unjustified or unlawful.
* the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
Your privacy rights, paragraph 5 · Citation strength: strong
Protection95% confidence
Right to limit processing of personal data
Users may request to restrict the processing of their data if they contest its correctness or lawfulness, or object to processing. Processing will be restricted to storage until correctness is established or legitimate interests are checked.
Why it helps: You can limit how your personal data is processed if you dispute its accuracy or legitimacy, allowing you to pause extensive use of your data until its status is clarified.
**Limitation of processing of personal data.** If you contest the correctness of the data which we have registered about you or lawfulness of processing, or if you have objected to the processing of the data in accordance with your right to object, you may request us to restrict the processing of this data. The processing will be restricted to storage only, until the correctness of the data can be established, or it can be checked whether our legitimate interests override your interests.
Your privacy rights, paragraph 10 · Citation strength: strong
Protection95% confidence
Right to object to processing for direct marketing
Users can always object to the processing of personal data about them which is based on legitimate interest for direct marketing and profiling, and this objection will always be sustained.
Why it helps: You have an absolute right to stop the company from processing your personal data for direct marketing and profiling related to it, protecting you from unwanted marketing communications.
**Object to processing based on our legitimate interest.** You can always object to the processing of personal data about you which is based on legitimate interest. If we are processing your data for direct marketing and profiling in connection to such marketing, your objection will always be sustained.
Your privacy rights, paragraph 11 · Citation strength: strong
Protection95% confidence
Right to data portability
Users have a right to receive personal data they have provided in a machine-readable format, applicable to data processed by automated means based on consent or contract fulfillment.
Why it helps: You can obtain your personal data in a usable, electronic format, making it easier to transfer it to other services or retain a copy for your records.
**Data portability.** You have a right to receive personal data that you have provided to us in a machine-readable format. This right applies to personal data processed only by automated means and on the basis of consent or of fulfilling a contract.
Your privacy rights, paragraph 12 · Citation strength: strong
Protection95% confidence
Right to complain to a data protection authority
Users have the right to lodge a complaint with The Danish Data Protection Agency or a competent authority in their country of residence if dissatisfied with how their personal data is processed.
Why it helps: You have an avenue to formally complain to an independent authority if you believe your personal data is not being handled appropriately, providing an external oversight mechanism.
**Other rights.** You have the right to lodge a complaint with The Danish Data Protection Agency, if you are dissatisfied with the way we process your personal data. You will find the Danish Data Protection Agency’s contact information at www.datatilsynet.dk. If you are in a jurisdiction outside of Denmark, you have the right to lodge a complaint with a data protection or other competent authority in the country where you reside.
Your privacy rights, paragraph 13 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.