Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
The company reserves the right to change its privacy policy at any time without advance notice, requiring users to frequently check for updates. Access to personal data may be restricted by legislation, privacy of others, and business considerations (risk_flags-0002). Even after a deletion request, the company may retain personal data for legal, contractual, or business needs (data_use-0001). The company collects publicly available social media data, including handle, profile image, age, and gender (data_use-0002). Pseudonymized data, while used to minimize privacy impact, can still be re-identified by the company or third parties with reasonable effort. Data brokers and aggregators are used for marketing purposes, including reaching new shoppers and preventing duplicate marketing (data_use-0004). AI tools are used to analyze customer emails and content, such as suggesting responses and summarizing, with human review before issuance (data_use-0005). AI analytics tools may also analyze advertising effectiveness and personal preferences (data_use-0006). Initial customer support requests are handled by chatbots, and users are notified before engagement. Internal AI tools summarize phone and chat interactions for service quality, performance monitoring, and compliance, with human advisors making final decisions. Phone calls and chat interactions may be recorded and transcribed by AI, with an opt-out for calls and implied consent for chats (gotchas-0003). Automatic license plate recognition is used at some attractions to monitor car park entries (gotchas-0004). Photography services are offered at certain attractions, where users can purchase their images.
89% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
1 finding
Critical issues and red flags that could indicate a product or service is high-risk. These are non-negotiable items that should be reviewed with legal counsel before proceeding.
Not clearly stated: None
medium90% confidence
User access to personal data may be restricted
The right to access personal data may be restricted by legislation, protection of other persons’ privacy, and considerations for the business practices of the LEGO Group, including know-how, business secrets, and internal assessments.
Why it matters: Users' ability to access their personal data may be limited based on various factors, including legal restrictions, privacy of others, and internal business considerations, which could prevent them from fully understanding what information the company holds about them.
Your right to access may, however, be restricted by legislation, protection of other persons’ privacy and consideration for the business practices of the LEGO Group, know-how, business secrets and internal assessments.
Your privacy rights, paragraph 2 · Citation strength: strong
Data Use
5 findings
Policies related to the collection, processing, and sharing of user data.
Not clearly stated: None
low90% confidence
Retention of personal data after deletion request
The company may be required to retain some personal data even after a deletion request to satisfy legal or contractual obligations, or to satisfy business needs as permitted by applicable laws.
Why it matters: Even if users request deletion of their personal data, the company may still retain it for legal, contractual, or business reasons, meaning their data might not be fully erased.
Please note that, in certain circumstances, we may be required to retain some of your personal data after you have requested deletion to satisfy our legal or contractual obligations. We may also be permitted by applicable laws to retain some of your personal data to satisfy our business needs.
Your privacy rights, paragraph 9 · Citation strength: strong
medium90% confidence
Collection of publicly available social media data
The company collects details from users' publicly available social media profiles, including handle, profile image, age, and gender.
Why it matters: Information users have made public on social media, such as their handle, profile picture, age, and gender, may be collected by the company.
We also collect details from your publicly available profile on the relevant social media platform such as your handle, profile image and demographic data such as age and gender.
SECTION 2: PERSONAL DATA, paragraph 12 · Citation strength: strong
low90% confidence
Data brokers and aggregators used for marketing
The company shares data with third-party data brokers and data aggregators to reach potential new shoppers with marketing and advertising, and to prevent sending duplicate marketing materials.
Why it matters: Your information may be shared with data brokers and aggregators to target you with marketing, meaning you might receive advertisements from new sources or have your data used to find similar potential customers.
Data broker and data aggregator partners. These help us reach potential new shoppers with catalogs, magazines and other printed or online marketing and advertising. They also help us prevent that, e.g., more than one LEGO ® catalog comes your way at the same time.
Sharing information with other companies, paragraph 10 · Citation strength: strong
medium90% confidence
Use of AI to analyze customer emails and content
The company uses AI tools to analyze emails and content provided by users, such as suggesting responses to guests and summarizing emails internally. All responses are viewed by the company before being issued, and personal data is used in line with original purposes or processed per the notice.
Why it matters: AI tools will analyze emails and content you provide to the company, which could impact how your communications are handled, summarized, and responded to, although human review is in place before responses are sent.
To analyse emails/content you have provided to the LEGO Group such as suggesting responses we provide to guests and to help with managing the content internally such as providing a summary of an email. Where used, all responses are viewable by the LEGO Group prior to being issued and personal data is only used in line with the original purposes for which it was provided and/or processed in accordance with this notice.
AI tools analyze advertising effectiveness and personal preferences
The company may use AI analytics tools to analyze the effectiveness of advertisements and provide insights into personal preferences.
Why it matters: AI tools may analyze your data to understand advertising effectiveness and your personal preferences, which could lead to more targeted advertising or inferences about your interests.
To provide insights into your personal preferences, we may use AI analytics tools to analyse the effectiveness of advertisements.
Terms related to account cancellation, subscription renewal, and associated policies.
?
Not clearly stated
No cited billing terms — wording is unclear
None
Gotchas
2 findings
Potentially sneaky or consumer-unfriendly clauses that aren't necessarily privacy violations but are worth noting.
Not clearly stated: None
medium95% confidence
Calls and chats may be recorded and transcribed by AI
For phone calls, a verbal notice states the call may be recorded and transcribed using AI, with options to consent or opt out. For chat interactions, a notice is displayed, and continuing to use the chat constitutes consent to AI recording and transcription.
Why it matters: Your phone calls and chat conversations with customer service may be recorded and transcribed by AI. For calls, you have an explicit opt-out option, but for chats, continuing the conversation after the notice implies consent.
For phone calls, we provide a verbal notice at the start of each call stating that the call may be recorded and transcribed using AI. You may consent by pressing 1 or opt out by pressing 2 or remaining on the line. For chat interactions, a notice is displayed at the start of the session informing you that the conversation may be recorded and transcribed using AI; by continuing to use the chat, you consent to this processing.
Use of automatic license plate recognition at attractions
Some LEGO Discovery Centers and LEGOLAND Discovery Centers use automatic license plate recognition (ANPR) to monitor car park entries.
Why it matters: When visiting certain LEGO attractions, your vehicle's license plate may be recorded by automatic recognition systems.
Some of our LEGO ® Discovery Centers and LEGOLAND ® Discovery Centers have automatic license plate recognition in place to monitor entry to our car park facilities.
Consumer-friendly clauses that improve privacy, security, and user experience.
Not clearly stated: None
Protection95% confidence
Data Protection Officer available for privacy questions
The company has appointed a Data Protection Officer (DPO) responsible for overseeing privacy policy questions, and users can contact them via email or mail for inquiries.
Why it helps: Users have a specific point of contact for privacy questions, making it easier to address concerns about their personal data.
We have appointed a data protection officer (‘DPO’) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Policy, please contact us . You can also send a letter to the DPO at:
SECTION 1: DATA PRIVACY LAW AND YOUR DIGITAL RIGHTS, paragraph 8 · Citation strength: strong
Protection95% confidence
Right to complain to data protection agency
Users have the right to lodge a complaint with The Danish Data Protection Agency or a competent authority in their country of residence if they are dissatisfied with how their personal data is processed.
Why it helps: Users are informed of their right to file a complaint with a data protection authority if they are not satisfied with the company's data processing practices, providing an avenue for recourse.
You have the right to lodge a complaint with The Danish Data Protection Agency, if you are dissatisfied with the way we process your personal data. You will find the Danish Data Protection Agency’s contact information at www.datatilsynet.dk. If you are in a jurisdiction outside of Denmark, you have the right to lodge a complaint with a data protection or other competent authority in the country where you reside. You can contact us for more details.
Your privacy rights, paragraph 13 · Citation strength: strong
Protection95% confidence
Notice about engaging with a chatbot
The company will inform users when they are engaging with a chatbot before communication commences.
Why it helps: Users are made aware when they are interacting with a chatbot, allowing them to understand they are not communicating with a human and manage their expectations accordingly.
To direct your support requests via the initial engagement with a support chatbot – we will inform you when you are engaging with a chatbot before communication commences.