Privacy Policy
Last updated: August 4, 2026
01 Introduction
This Privacy Policy describes how Brec Asset, operated by Brec Asset Group Ltd. Liability Company (referred to throughout this document as Brec Asset, we, us, or our), collects, uses, stores, and protects information obtained from visitors and users of our website located at www.brecasset.hair and from clients who engage our computer systems design and integrated IT services.
Your privacy is important to us, and we have designed our information practices to comply with applicable data protection laws and regulations. By accessing or using our website and services, you acknowledge that you have read and understood the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services.
This policy applies to information collected through our website, through direct communications with our team, through service engagement processes, and through any other interaction where this policy is referenced or linked.
02 Information We Collect
We collect several categories of information to provide and improve our computer systems design and IT services. The types of information we may collect include the following:
Personal Identification Information: This includes your full name, email address, telephone number, company name, job title, and physical mailing address. We collect this information when you contact us, request a consultation, sign up for communications, or engage our services.
Technical and Usage Information: When you visit our website, our servers automatically record information that your browser sends. This includes your Internet Protocol (IP) address, browser type and version, operating system, referral source, pages visited, time and date of your visit, time spent on each page, and other diagnostic data. This information helps us understand how visitors interact with our website and enables us to improve the user experience.
Communication Records: We retain copies of correspondence when you contact us via email, telephone, or through our website contact mechanisms. This includes the content of your messages, the date and time of communication, and our responses.
Service Engagement Data: When you become a client, we may collect additional information necessary to deliver our services, including system specifications, infrastructure diagrams, project requirements, and technical documentation related to your engagement.
03 How We Collect Information
We obtain information through several lawful and transparent methods, each designed to respect your privacy while enabling us to deliver effective services:
Direct Collection: We collect information that you voluntarily provide when you fill out forms on our website, subscribe to communications, request a consultation, respond to surveys, or communicate with us through any channel. You are under no obligation to provide this information, but certain services may be unavailable without it.
Automated Collection: As you navigate our website, we use automated technologies including cookies, server logs, and analytics tools to collect technical usage data. These technologies help us understand website traffic patterns, measure the effectiveness of our content, and maintain the security of our platform.
Third-Party Sources: In limited circumstances, we may receive information about you from third-party partners, including analytics providers, advertising networks, and business partners. We require these third parties to have obtained appropriate consent for sharing your information with us.
Client Engagement: During the course of providing professional services, we collect and generate technical documentation, system specifications, and project-related materials that may contain information about your organization and its infrastructure.
04 How We Use Your Information
We use the information we collect for the following business and operational purposes, always within the boundaries of applicable law and our contractual commitments:
Service Delivery and Fulfillment: We use your information to provide, maintain, and improve our computer systems design and IT services. This includes processing your requests, delivering project deliverables, providing technical support, and managing client accounts and engagements.
Communication: We use your contact information to respond to your inquiries, send service-related notifications, provide updates about your projects, and share information about our services that may be relevant to your interests. You may opt out of marketing communications at any time.
Website Improvement: Technical usage data helps us analyze how visitors interact with our website, identify areas for improvement, test new features, and optimize the overall user experience and performance of our digital presence.
Legal Compliance and Security: We process information as necessary to comply with legal obligations, enforce our Terms of Service, protect our rights and the rights of others, detect and prevent fraud or security incidents, and maintain the integrity of our systems and services.
Business Operations: We use aggregated and anonymized data for internal business analysis, financial reporting, strategic planning, and to measure the effectiveness of our marketing initiatives.
05 Sharing and Disclosure of Information
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share information in the following limited circumstances:
Service Providers and Partners: We may engage trusted third-party companies and individuals to perform functions on our behalf, including website hosting, data analytics, email delivery, payment processing, and technical infrastructure services. These providers have access to information only as necessary to perform their functions and are contractually bound to maintain its confidentiality and security.
Legal Requirements: We may disclose information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests. We will make reasonable efforts to notify you of such disclosure unless prohibited by law.
Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
Protection of Rights: We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, to investigate fraud, or to respond to a government request.
With Your Consent: We may share your information for other purposes with your explicit consent or at your direction.
06 Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, regulatory, or reporting requirements. The specific retention period depends on the nature of the information and the context in which it was collected:
Active Client Data: Information related to active client engagements is retained throughout the duration of the client relationship and for a reasonable period thereafter to address any post-engagement matters.
Communication Records: Email correspondence and inquiry records are retained for a period of up to three years after the last interaction, unless a longer retention period is required for legal or business purposes.
Website Analytics: Anonymized and aggregated technical usage data may be retained indefinitely for analytical purposes. Raw log data is retained for a maximum of twelve months.
Legal Holds: In certain circumstances, we may be required to retain information beyond standard retention periods to comply with legal obligations, resolve disputes, or enforce our agreements.
When information is no longer needed, we take reasonable steps to securely delete or anonymize it in accordance with our data governance procedures.
07 Data Security
The security of your information is a priority for Brec Asset. We implement and maintain administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. Our security measures include the following:
We employ industry-standard encryption protocols for data transmission (TLS 1.3) and for data at rest using AES-256 encryption. Our infrastructure is hosted in SOC 2 Type II certified data center facilities with 24/7 physical security monitoring.
We maintain strict access controls with role-based permissions, multi-factor authentication requirements, and comprehensive audit logging of all system access events. Our engineering team follows secure development practices, including regular code reviews, vulnerability assessments, and penetration testing.
We have implemented an incident response plan and conduct regular security awareness training for all personnel who handle sensitive information. In the event of a data breach involving your personal information, we will notify you and relevant authorities as required by applicable law.
Despite our efforts, no method of electronic storage or transmission is completely secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security. We encourage you to take steps to protect your own information, including using strong passwords and keeping your devices secure.
08 Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding the personal information we hold about you. These rights may include:
Right to Access: You may request a copy of the personal information we hold about you, along with details about how we process it. We will provide this information in a structured, commonly used, and machine-readable format upon verified request.
Right to Rectification: If you believe that any information we hold about you is inaccurate or incomplete, you may request that we correct or update it. We will respond to such requests within a reasonable timeframe.
Right to Deletion: In certain circumstances, you may request that we delete the personal information we hold about you. We will comply with such requests unless we have a legitimate legal or business reason to retain the information.
Right to Restrict Processing: You may request that we limit the processing of your personal information under specific conditions, such as when you contest the accuracy of the data or object to our processing activities.
Right to Data Portability: Where applicable, you may request that we transfer your personal information directly to another organization or provide it to you in a portable format.
Right to Object: You may object to the processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
To exercise any of these rights, please contact us using the information provided in the Contact Information section of this policy. We will respond to your request within the timeframe required by applicable law and may need to verify your identity before processing your request.
09 Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand where our visitors come from. Below we explain what these technologies are and how they function:
Essential Cookies: These cookies are necessary for the website to function properly. They enable core functionality such as page navigation, security features, and access to secure areas. The website cannot function properly without these cookies, and they do not require your consent under most privacy regulations.
Analytics Cookies: We use analytics cookies to collect information about how visitors use our website. These cookies help us understand which pages are most popular, how visitors move around the site, and whether they encounter errors. We use this information to improve our website and the services we offer. The data collected is aggregated and anonymized.
Preference Cookies: These cookies enable the website to remember choices you have made, such as your preferred language or the region you are in, to provide a more personalized experience.
Managing Cookies: Most web browsers allow you to control cookies through browser settings. You can configure your browser to reject cookies, delete existing cookies, or alert you when a cookie is being sent. Please note that disabling cookies may affect the functionality of our website and limit your ability to use certain features.
10 Privacy for Children
Our website and services are not directed to individuals under the age of eighteen (18). We do not knowingly collect, use, or disclose personal information from children. Brec Asset does not market its computer systems design and IT services to minors, and we have no reason to believe that our website content would appeal to or attract individuals under eighteen years of age.
If we become aware that we have inadvertently collected personal information from a child under the age of eighteen without verifiable parental consent, we will take immediate steps to delete that information from our records. We encourage parents and legal guardians to monitor the online activities of their children and to instruct them never to provide personal information through websites without parental permission.
If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us immediately using the contact details provided in this policy. We will work promptly to investigate and address the situation, including the removal of any improperly collected information from our systems.
11 International Data Transfers
Brec Asset is based in the United States, and our primary data processing operations occur within United States data center facilities. If you are accessing our website or using our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or in other countries where our service providers maintain facilities.
The data protection laws of the United States and other countries where we operate may differ from those in your jurisdiction. By using our website and services, you acknowledge and consent to this transfer of information across international borders. We take appropriate safeguards to ensure that any international data transfers comply with applicable data protection requirements.
For transfers of personal data from the European Economic Area, the United Kingdom, or other jurisdictions with data transfer restrictions, we rely on appropriate transfer mechanisms, including Standard Contractual Clauses and other legal frameworks approved by relevant regulatory authorities.
12 Third-Party Services
Our website may contain links to third-party websites, plugins, and services that are not owned or controlled by Brec Asset. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.
We may use third-party service providers for various business functions, including website hosting, email delivery, cloud infrastructure, payment processing, and analytics. These providers are carefully vetted and are contractually obligated to maintain appropriate security measures and to process data only in accordance with our instructions.
We do not control and are not responsible for the privacy practices, content, or security of any third-party websites or services. Your interactions with third-party services are governed by their respective terms and privacy policies. We recommend that you read the privacy statements of every website you visit.
13 Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our information practices, legal requirements, or the services we offer. When we make material changes, we will post the revised policy on this page and update the Last updated date at the top of the document.
For significant changes that materially affect your rights or the way we handle your personal information, we will provide additional notice through our website or by sending a notification to the email address associated with your account or inquiry. We encourage you to review this Privacy Policy periodically to stay informed about our information practices.
Your continued use of our website and services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should discontinue use of our website and services.
14 Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our information practices, please contact us using the details below. We take privacy inquiries seriously and will respond within a reasonable timeframe.
Brec Asset Group Ltd. Liability Company
3082 W Ivory Way
Taylorsville, UT 84129-6800
United States
Email: inquiry@brecasset.hair
Phone: +1 (223) 639-5546
Website: www.brecasset.hair
For data protection inquiries specific to the European Economic Area or the United Kingdom, you may also contact your local data protection supervisory authority if you believe that your data protection rights have been violated.