Privacy Policy

This Privacy Policy explains how Brightspringroad, Inc. collects, uses, shares, and protects information in connection with our advisory, diagnostics, and reporting services. We serve clients across multiple sectors and prioritize data minimization, lawful processing, and transparent handling of personal and business data. We collect data that is necessary to deliver our services, and we only retain it for as long as needed to provide the service, meet legal obligations, and operate securely.

Information We Collect

We collect information you provide directly, including contact details, company information, and messages submitted via forms or email. For diagnostics and analytics, we process business data such as sales records, SKU-level costs, order histories, and aggregated usage metrics. When you visit our website, we collect technical data (IP address, browser type, device attributes) to secure and operate the site. We do not request unnecessary sensitive personal information. If sensitive data is needed for a narrow purpose, we will request explicit consent and limit access to authorized personnel only.

How We Use Information

We use contact information to communicate about services, schedule diagnostics, and respond to inquiries. Business data is used to perform analysis, build marginal revenue and marginal cost models, recommend pilots, and produce operational playbooks. Technical information supports site security, performance, and fraud prevention. We may use anonymized, aggregated data for benchmarking and internal research; such data cannot be attributed to any individual or company. Our lawful bases for processing include contract performance, legitimate business interests, and your consent where required.

Cookies and Similar Technologies

We use minimal cookies for essential site functionality and for anonymous analytics that help us improve performance and content. Our cookie consent widget allows you to accept or reject non-essential cookies. Essential cookies are required for the site to function and are retained only for the session. Non-essential cookies (analytics) are only set if you accept them through the consent control. You may change cookie preferences via your browser settings or the consent control in the site footer and cookie modal.

Third-Party Services

We rely on trusted third-party providers for hosting, analytics, email delivery, and payment processing when applicable. These providers process data on our behalf under contractual terms that require appropriate security and limited use. We do not sell personal information. When we share data with third parties (for example, a cloud analytics provider), we limit the shared information to what is necessary to deliver the service and require contracts that safeguard data and restrict reuse.

Data Retention and Security

We retain personal and business information only for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type; diagnostic project records are typically retained according to client agreements or for a period required by law. We employ administrative, technical, and physical controls to protect information, including access controls, encryption in transit, and regular security reviews. Despite these measures, no method of transmission or storage is 100% secure; we maintain incident response procedures to address any data security events promptly and notify affected parties as required by law.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal information, and to receive a copy of your data in a commonly used format. To exercise rights, please contact us using the details below. We will verify requests to protect privacy and comply with legal requirements. If you are located in the European Economic Area, United Kingdom, or other privacy jurisdictions, we will provide any additional disclosures and mechanisms required by applicable law.

Children

Our services and website are not directed to children under 13, and we do not knowingly collect personal information from children. If we become aware that information about a child has been provided without parental consent, we will take steps to delete it.

Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be posted on this page with an updated effective date. Continued use of our services after such changes indicates acceptance of the updated policy.

Contact Us

For questions about this Privacy Policy or to exercise your rights, contact Brightspringroad, Inc. by mail, phone, or email:

Brightspringroad, Inc.
425 Market St, Suite 500
San Francisco, CA 94105
United States
Phone: +1 (415) 555-0123
Email: [email protected]

If you remain unsatisfied after contacting us, you may have the right to lodge a complaint with a supervisory authority in your jurisdiction.