1. Who We Are

A Brighter Alternative UT LLC is a limited liability company organised in the State of Utah and engaged in computer integrated systems design and related professional, scientific and technical services. The practice compares software plans, rate cards, contract terms and renewal positions for client organisations, and it produces written comparison papers, switch guides and negotiation briefs from its desk in Cottonwood Heights. The Company is the controller of the personal information described in this policy, which means the Company decides why the information is collected and how it is used.

The technical maintainer of the website and the associated privacy configuration is identified in the introduction as BrighterAlt. The developer name is recorded here for transparency so that a visitor who reviews the site code or a policy page knows which party maintains the technical surface, while the Company remains responsible for the treatment of personal information. Together, the Company and its technical team follow the schedule set out in the sections below.

The Company operates from 6975 S Union Park Ctr Ste 600, Cottonwood Heights - 84047-4187, United States (US). Enquiries about privacy can be sent to notify@brighteralt.lol or raised by telephone on +19207806597. Postal correspondence should use the full street address shown above, because the building contains several suites and partial addresses cause delays.

2. Scope of This Policy

This policy applies to personal information processed through the publicly available website, through direct communication with the practice, and through the performance of comparison engagements. It covers information about client personnel, prospective clients, suppliers, professional contacts and visitors to the site. It also covers information about individuals who appear incidentally in documents supplied by a client during an engagement, such as a usage report that lists named employees.

The policy does not apply to information that the Company holds about its own employees in the context of employment, which is governed by separate internal notices, nor to information processed by third party software vendors that clients use independently of the Company. The policy does not create rights beyond those provided by applicable law, but it describes the practices that the Company follows in addition to legal requirements, and those practices are treated as commitments.

Where a client provides personal information to the Company under a separate written agreement, the terms of that agreement may add to this policy. In case of conflict between a signed agreement and this policy, the signed agreement governs the specific engagement, while this policy continues to apply to the website and to general business contact.

3. Information We Collect

The Company collects contact information such as names, job titles, business email addresses, business telephone numbers and the names of employing organisations. This information arrives when a person sends an enquiry, requests a scope note, arranges a comparison or is named as the contact on a contract document. The Company does not ask for personal email addresses, and business contact details are preferred for every engagement.

The Company collects correspondence content, including the text of emails, notes taken during calls and the attachments supplied by clients such as quotes, order forms, renewal letters and usage reports. Those attachments may contain personal information about third parties, for example the names of employees who hold seats on a software licence. The Company treats such attachments as client data and protects them in the same way as the client own material, following the section on client data below.

The Company collects limited technical information when a person visits the website. This includes the browser type, the approximate region derived from a network address and the pages viewed during a session. The website is deliberately simple and does not run advertising trackers, does not build behavioural profiles and does not attempt to identify a visitor from technical data. The Company uses technical information only to keep the site functional and to diagnose faults.

The Company does not collect payment card details through the website. Invoices are issued by email and settlement is arranged through normal business channels. Special category information, such as health data or information about beliefs and origins, is not requested and should not be sent to the Company unless a specific engagement requires it in writing and the client has confirmed a lawful basis for sharing it.

4. How Information Is Collected

Most information is provided directly by the person who contacts the Company. A person completes the contact form, sends an email to notify@brighteralt.lol or telephones +19207806597, and the Company records the details needed to reply. The contact form on the website prepares a message in the visitor own email program, which means the visitor sends the message from a personal mailbox and a copy remains in that mailbox. The website itself does not store submitted form content.

Information is also collected indirectly when a client supplies contract files during an engagement. Those files are usually prepared by the client, by a vendor or by an intermediary. The Company reviews the files to perform the comparison and may extract relevant clauses into working notes. The Company does not copy a whole document into an unrelated system, and extracts are kept in the engagement folder only.

A small amount of information is collected automatically by the web server in order to deliver pages and to protect the service against abuse. Server logs commonly record the time of a request, the requested page and the network address of the requester. The Company retains these logs for a short period, described in the retention section, and does not combine them with other sources to identify an individual visitor.

The Company may receive information from a professional referral, for example when an accountant introduces a client or when a partner mentions a contact who needs a renewal review. In that case the Company records the referral source and uses the details only to make the initial approach described to the referring party.

5. Purposes and Legal Bases

The Company processes personal information to respond to enquiries and to provide the comparison services that the client requests. This processing rests on the performance of a contract or on steps taken at the request of a prospective client before a contract is formed. The information is used to prepare a scope note, to carry out the weigh-up, to write the comparison paper and to answer follow up questions after delivery.

The Company processes information to manage its business records, including invoices, client files and correspondence. This processing rests on legitimate interests in operating a professional practice and on legal obligations concerning accounting and tax records. The Company keeps the volume of information used for these purposes to the minimum needed to satisfy the underlying duty.

The Company processes information to maintain the security of its systems and to prevent misuse of the website. This processing rests on legitimate interests in protecting the practice, its clients and its technical infrastructure. Where the law requires a stricter basis for a particular activity, the Company will obtain consent before carrying out that activity and will explain the consequence of withholding it.

The Company processes information to send occasional updates about renewal windows and service availability. This processing rests on consent where consent is required, and on legitimate interests in communicating with existing clients where the law permits. An update email always provides a simple route to stop further messages, described in the marketing section below.

6. Cookies and Similar Technologies

The website uses a small number of essential cookies or local storage entries to support basic functions such as remembering a collapsed navigation panel. Essential entries do not track a person across other websites, and the Company does not deploy advertising cookies, cross site pixels or fingerprinting scripts. The absence of advertising technology is a deliberate design choice, not an oversight.

A browser allows a visitor to refuse or clear cookies through its settings. Refusing an essential entry may change the way a page behaves, but it will not prevent access to the published text of the site. The Company does not require a visitor to accept cookies in order to read the privacy policy, the terms or any service description.

If the Company later introduces an analytical tool that relies on cookies, the change will be described in this policy, a consent choice will be offered where the law requires one, and the tool will be configured to minimise the data it collects. The Company will not adopt a technology that builds profiles of identifiable individuals for advertising purposes.

7. Client Data in Comparison Work

Comparison work requires the Company to examine contracts, invoices and usage records that belong to the client. Those records may include personal information about employees, named contacts at vendors and individuals mentioned in correspondence. The Company treats every such record as confidential. Access is limited to the people working on the engagement and to any colleague formally assigned to review the output.

Working files are stored in a dedicated folder for each engagement. The folder is named after the client and a reference sequence, and access is restricted to the engagement team. When the engagement ends and the retention period expires, the Company deletes working notes and returns or deletes client files according to the agreement with the client. The client may request earlier deletion of working notes at any time.

The Company does not use client data for any purpose other than the agreed engagement. In particular, the Company does not sell client data, does not use client data to train advertising systems and does not disclose client data to other clients. Where a comparison paper cites a rate or a clause from the client file, the citation is limited to what is necessary to support the recommendation.

If a client supplies information that belongs to a third party, the client confirms that it has the right to share that information with the Company for the purpose of the engagement. The Company will raise a question if a file appears to contain information that is unrelated to the engagement, and will ask the client to remove the unrelated material before analysis continues.

8. Sharing and Disclosure

The Company does not sell personal information. The Company does not rent contact lists and does not disclose client data to vendors as part of a negotiation unless the client has instructed the Company to do so in writing. When a client authorises the Company to speak with a vendor, the Company shares only the facts necessary to support the negotiation and records the authorisation in the engagement file.

The Company may disclose information to professional advisers such as accountants and attorneys where the disclosure is necessary to obtain advice on a specific matter. Such advisers are bound by their own duties of confidentiality. The Company may also disclose information where required by law, by a valid court order or by a regulatory authority acting within its powers, and will limit the disclosure to what the legal requirement demands.

If the Company is involved in a merger, acquisition or transfer of the practice, information may be transferred to the successor organisation as part of the business assets. In that event the successor will be bound by this policy in respect of the transferred information, and a notice will be placed on the website describing the change and the route for exercising privacy rights.

The Company does not publish client names in general marketing material without written permission. A client reference, if any, is agreed in writing and may be withdrawn at any time by the client. The Company prefers to describe the type of work performed without naming the client, which protects confidentiality while still demonstrating the nature of the practice.

9. Service Providers

The Company relies on a small number of service providers to operate the website and the practice. These include a hosting provider that serves the pages, an email provider that delivers and stores correspondence and a backup service that keeps encrypted copies of working files. Each provider is selected for reliability and is required to protect information by contract.

Service providers act on the instructions of the Company and do not use the information for their own purposes. Where a provider processes information outside the United States, the transfer is covered by the safeguards described in the international transfers section. The Company reviews provider arrangements from time to time and will replace a provider that does not meet the required standard.

The Company does not engage a provider to analyse client data for advertising or profiling. The purpose of every provider is functional: to host, deliver, store or protect the information that the Company needs in order to serve its clients. A list of current providers is available on request for a client who needs it for an internal review.

10. Retention Periods

Contact enquiries are kept for as long as needed to respond and to follow up on the matter raised, and then for a further twelve months so that a later message can be understood in context. After that period the enquiry record is deleted unless it has become part of an active engagement file. Visitors may ask for an enquiry to be deleted sooner, and the Company will comply where no legal duty requires longer storage.

Engagement files, including the comparison paper, supporting extracts and correspondence, are kept for seven years after the end of the engagement. The period reflects the ordinary limitation period for professional claims and the normal expectation of a client who returns for a renewal review. Working notes that are not part of the delivered paper are deleted two years after delivery.

Financial records, including invoices and receipts, are kept for the period required by accounting and tax rules in the United States. Server logs used for security are kept for ninety days and then deleted automatically. Backup copies are overwritten within the rotation cycle of the backup provider, which is currently thirty five days.

Where information is subject to a legal hold, for example because of a dispute or an investigation, the Company will keep the relevant records until the matter is resolved even if the ordinary retention period has expired. The hold is recorded in the engagement file, and access is restricted to those who need the records for the matter.

11. Security Measures

The Company protects information with a combination of technical and organisational measures. Access to engagement folders is restricted to the assigned team, and accounts are protected by strong passwords and multi factor authentication. Files are transferred over encrypted connections, and backups are encrypted at rest. The website is delivered over a secure connection so that content cannot be altered in transit.

The practice keeps a register of devices that may hold client information. Devices are encrypted and are locked when unattended. Paper documents are kept in a locked cabinet at the Cottonwood Heights office and are shredded when no longer needed. A visitor to the office is signed in at reception and is accompanied while in the working area.

Staff are briefed on confidentiality at the start of their work and are reminded of it periodically. The Company limits the number of people who can access client files and reviews access rights when a colleague leaves or changes role. Where a security incident affects personal information, the Company will investigate promptly and will notify affected parties and any relevant authority as the law requires.

No system can guarantee absolute security. The Company therefore designs its work so that a compromise would expose the minimum possible information. Data that is not needed for the engagement is not collected, files that are no longer needed are deleted, and a client who prefers to share extracts rather than full documents is always accommodated.

12. Your Privacy Rights

A person may ask the Company to confirm whether personal information about them is being processed and may request a copy of that information. A person may ask for inaccurate details to be corrected and may ask for information to be deleted where the Company no longer needs it and no legal duty requires retention. A person may also ask for processing to be restricted while a question about accuracy is resolved.

Where processing rests on consent, a person may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Where processing rests on legitimate interests, a person may object and the Company will assess the objection, explaining the outcome in writing. A person may ask for a portable copy of information provided directly to the Company in a commonly used electronic format.

Requests should be sent to notify@brighteralt.lol or by post to A Brighter Alternative UT LLC, 6975 S Union Park Ctr Ste 600, Cottonwood Heights - 84047-4187, United States (US). The Company will acknowledge a request within five business days and will normally respond within thirty days. If a request is complex the Company may extend the period and will explain the reason for the extension. The Company may ask for proof of identity so that information is not disclosed to the wrong person.

A person who is not satisfied with the response may raise the matter with the supervisory authority that covers the Company or, where applicable, with the privacy regulator in the person own jurisdiction. The Company would appreciate the opportunity to resolve a concern directly before a formal complaint is made, and the contact details above are the fastest route to a review.

13. Marketing and Opt Out

The Company sends occasional updates about renewal savings windows, service availability and new comparison offerings. Updates are sent to business contacts who have asked to receive them or who have an existing client relationship, and every update includes a clear instruction for stopping further messages. A request to stop is honoured promptly and is recorded so that the preference is respected in future campaigns.

Stopping marketing messages does not affect transactional messages, such as a reply to an enquiry, a scope note, an invoice or a notification about an active engagement. Those messages are part of the service and are sent under the contractual basis described earlier. A person may still ask the Company to delete the underlying contact record once the transactional purpose has ended.

The Company does not operate a telephone marketing programme and does not use automated calling. A telephone conversation with the Cottonwood Heights desk is initiated by the client or by the Company in direct response to an enquiry. The Company does not share contact details with third parties for their own marketing.

14. Privacy for Children

The services of the Company are intended for businesses and professional clients. The website is not directed at children, and the Company does not knowingly collect personal information from a child. If a child sends an enquiry, the Company will not use the details for any purpose beyond replying once and will delete the record when the matter is closed.

A parent or guardian who believes that a child has provided information to the Company may contact notify@brighteralt.lol and request deletion. The Company will act on the request promptly. Because the practice does not operate a consumer service, the Company does not maintain any account structure that a child could register, and no age verification process is offered for the same reason.

Where a client file supplied during an engagement incidentally contains information about a dependent, for example in an expense report, the Company treats the information as client data and keeps it only for the engagement period. The Company does not use such information for any purpose unrelated to the comparison work.

15. International Transfers

The Company operates from the United States. Where a client or contact is located in another country, information may be transferred to the United States for processing. The Company takes steps to ensure that the transfer is lawful, using contractual safeguards with providers and limiting the information transferred to what the engagement requires.

A client who needs a particular safeguard for a transfer should raise the point during intake so that the arrangement can be recorded in the scope note. The Company can supply standard contractual terms on request and can describe the technical measures applied to files that cross borders. The Company will not proceed with a transfer that it cannot protect adequately.

The Company reviews transfer arrangements when a provider changes its data location or when the applicable rules change. A material change will be reflected in this policy and, where a client relationship is affected, will be communicated directly so that the client can consider the effect on its own obligations.

16. Changes to This Policy

The Company may update this policy to reflect a change in practice, a new legal requirement or an improvement in the way information is described. The current version is always available on the website, and the date of the most recent revision appears at the foot of the page. Where a change materially affects the way personal information is used, the Company will provide a prominent notice and, where required, will ask for consent before the change takes effect.

A previous version of the policy can be requested by email. The Company keeps prior versions for the same period as engagement files so that a person can see what was in force when a decision about their information was made. Questions about a change should be sent to notify@brighteralt.lol and will be answered in plain language.

Continued use of the website after a revision indicates acceptance of the updated policy for website-related processing. Continued performance of an engagement after a revision is governed by the engagement agreement, which may require a separate acknowledgement before the change applies to that engagement.

17. How to Contact Us

Privacy questions, requests and complaints should be directed to A Brighter Alternative UT LLC at notify@brighteralt.lol or by telephone on +19207806597. Postal correspondence should be addressed to A Brighter Alternative UT LLC, 6975 S Union Park Ctr Ste 600, Cottonwood Heights - 84047-4187, United States (US). Business hours are Monday to Friday, 8:30 to 17:30 Mountain Time.

The Company aims to answer every privacy enquiry within five business days. A request that requires a formal response under applicable law will be acknowledged in writing and tracked to completion. The person who handles the request will explain each step and will confirm the outcome in a final written reply.

This policy is published by A Brighter Alternative UT LLC and maintained with the assistance of the developer named in the introduction. The Company thanks every visitor and client who reads the policy in full and who raises a question when something is unclear. Clear privacy terms are part of the same discipline that the practice applies to every comparison it produces.