Depending on where you live, and in accordance with applicable law, we may collect various categories of information from you when you access or use our Website and when you provide information directly to us (e.g., when you register for our events, request our services, or access various content and features on our Website).  We also automatically collect information about the devices you use to interact with our Website.  Those categories include:

• Identifiers, such as your name, alias, e-mail address, postal address, phone number, mobile number, IP address or other similar identifiers. We may provide this information to our service providers, business partners, or third parties as required by law. Internet or other electronic network activity information, such as browsing history specific to your interaction with our Website;
• Internet or other electronic network activity information, when you access our Website, including, but not limited to browsing history, search history, and information regarding your interaction with our Website.   We may collect this information through the lawful use and deployment of cookies and other tracking technologies, as set forth in our Cookie Notice.
• Geolocation data, but not your precise geolocation.  We collect location information provided by a mobile or other device interacting with this Website, or associated with your IP address or other online or device identifier. We may provide this information to our service providers, business partners, or third parties as required by law.

Your Choice to Provide Information: You may choose not to provide personal information to Alight by refraining from, among other things, submitting information directly to us. However, if you do not provide personal information when requested, we may not be able to provide you with the full range of our products and services, or with information about our products and services, promotions, and other opportunities.

Alight may use your information for a variety of business and commercial purposes, which are listed below. These uses are necessary for purposes that are in Alight's legitimate interests, provided always that such processing is fair, and balanced and that our processing does not unduly impact your rights. The business and commercial purposes for which Alight uses your information include:

• Provide the information and services requested by you;
• To perform a contract with you (or to take steps at your request prior to entering a contract)
• Determine eligibility and process applications for products and services;
• Understand and assess clients' ongoing needs;
• Conduct data analysis to understand how the Website is used and to perform other market research;
• Improve the performance and functioning of the Website;
• Prevent fraud, enforce our Terms of Use, comply with applicable laws and Alight's reporting obligations, and enforce our agreements; and
• Market products and services that may be of interest to you if further legal requirements for this are fulfilled.

We will not use personal information for automated individual decision-making, including profiling, as contemplated under Article 22 of the European Union’s General Data Protection Regulation (“GDPR”).  

Unless provided otherwise in this Statement, we will retain your information for as long as necessary for the relevant purposes of processing.   We may also retain and use your information for longer periods in case it is necessary to comply with our legal obligations, resolve disputes, and/or enforce our agreements. To the extent possible, Alight will de-identify, or take reasonable steps to delete from its records, information no longer required for the purposes identified in this Statement, other than information which we are required by law to retain.

In the past 12 months, your information may have been disclosed for a variety of business purposes, including:

• With your consent or at your direction:  We may disclose your personal information if you tell us or ask us to do so.

• With our service providers: We may disclose your information to our service providers and contractors who perform services on our behalf, but only if (a) your information is necessary for them to carry out such services and (b) those service providers and contractors are required to use any personal information they receive in accordance with Alight’s instructions and pursuant to a data processing agreement that complies with applicable privacy law(s).
• With our business partners: We may disclose your personal information to our business partners with whom we work to provide you with products and services, or to perform one or more of the business purposes identified above.
• In the event of corporate change or internal audits: We may disclose personal information to a successor to all or part of our business or in connection with a corporate merger; consolidation or restructuring; sale of substantially all of our stock and/or assets; or other corporate change, including, without limitation, during the course of any due diligence process. If necessary and legally required, we will obtain your separate consent in this regard. Disclosure may also be required for company audits or to investigate a complaint or security threat.
• To comply with legal requirements: We will disclose your information (i) if we are required to do so by law or legal process, (ii) in response to lawful law enforcement authority or other government official requests, (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, (iv) in connection with an investigation of suspected or actual illegal activity including any legal proceedings or prospective legal proceedings in order to establish, exercise or defend our or a third party’s legal rights or (v) as required for company audits or to investigate a complaint or security threat.
• To companies within our corporate family: We may disclose your personal information to our corporate affiliates for organizational purposes based on a legitimate interest. To the extent that our corporate affiliates have access to your personal information, they will follow practices that are at least as restrictive as the practices described in this Statement, will use your information solely for the purpose for which it was provided, and will not further disclose your information.

When you visit our Website, we may use cookies or similar tracking technologies. To learn more about how Alight uses cookies and related technologies, please see our Cookie Notice.

Links to Other Websites: Our Website may contain links to websites operated by other Alight entities, or to third party websites that are not governed by this Statement, but by other privacy statements posted on those websites  If you access other sites using the links provided, the operators of those sites may collect information from you which will be used by them in accordance with their own privacy statements. We encourage you to read the privacy statements on other websites you visit.  Alight is not responsible for the content or privacy practices of third-party sites or any use of those third-party sites

Do Not Track. Some browsers support a “Do Not Track” feature, which is a signal that you do not wish to be tracked across websites you visit. Our Website does not currently change the way it operates based upon detection of a “Do Not Track” or similar signal.

Alight has implemented physical, technical and administrative security standards designed  to protect personal information from loss, misuse, alteration, exfiltration or destruction, taking into account the sensitivity of the information and the purpose for which it was collected.   However, no method of data storage or transmission is 100% secure.

Among others, Alight is compliant with the EU Cloud Code of Conduct, a comprehensive code of conduct that sets out rigorous requirements for the protection of data in cloud services based on the General Data Protection Regulation (GDPR).

We provide you the ability to exercise your rights regarding our collection, use, storage, and sharing of your information. Please note that for some of these rights, we will need to verify your identity before we are able to respond to your request, including using commercially reasonable efforts to confirm your identity including by matching the information provided in your request with the information we have on file about you. Depending on the sensitivity of the information involved in the request, we may also utilize more stringent verification methods to protect against fraud and ensure your request is fulfilled in a transparent and secure manner.

To exercise your any of the rights described below, you can complete the online form , or write to us at the address provided below (see “Contact Us” below), and we will respond as soon as possible in accordance with all applicable laws and regulations.

Right to Correct: Regardless of where you live, you have a right to correct or amend the information we have about you. 

Right to Unsubscribe: If you requested or consented to electronic communications from us, such as an e-newsletter,  you will be able to unsubscribe at any time by following the instructions included at the bottom of the email communication.  

Right to Non-Discrimination: We will not discriminate against individuals for exercising any of their data rights under applicable law.  This means that if you exercise any of your rights in connection with your data, we will not deny you goods or services; charge you different prices or rates for goods or services; or provide different levels or quality of goods or services to you.

Right to Know and Data Portability: The right to know and data portability applies differently depending on where you live. If you are a California resident, you have a right to know the categories and specific pieces of personal information (as that phrase is defined under applicable law) we have collected about you in the 12 months preceding the date of your request, including a description of the categories of sources from which we have collected that information, the business or commercial purpose for collecting or sharing that information, and the categories of third parties with whom we have shared that information. You may also designate an authorized agent to submit a request on your behalf by submitting proof of written authorization along with your request. If you are living within the European Economic Area (EEA), you have the right to obtain confirmation as to whether your personal information is being processed, and if so, the right to access your personal information. If we maintain your personal information based on your consent or so that we could enter into a contract with you, you can also request that we provide you a copy of your data in a structured, commonly used, and machine­ readable format and request the transfer of certain of your personal information to another party under certain conditions.

Right to Delete / Erasure: The right to delete / erasure also applies differently depending on where you live. If you are a California resident, you have a right to ask that we delete your information subject to appropriate exceptions.  You may also designate an authorized agent to submit a request on your behalf by submitting proof of written authorization along with your request. If you live in the EEA, where the conditions provided by the applicable legislation are met, and subject to applicable law, you may request that we erase or restrict the processing of your information. You may also request that we delete certain incorrect information about you.

Right to Object to Processing: If you live in the EEA, you may object to the processing of your personal data (as that phrase is defined under applicable law) in certain circumstances when we (i) process your information for the purposes of our legitimate interests, (ii) use your personal information for direct marketing; or (iii) use your personal information for statistical purposes.

Right to Withdraw Consent: If you are located in the EEA, and when our legal basis for processing your information is your consent, you may withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

California Notice of Sale: We do not sell the personal information of California residents, nor have we sold California resident personal information in the past 12 months. We have no actual knowledge of selling the personal information of minors under the age of 16.

Notice to Residents of Nevada: We do not sell any personal information we collect to any third parties.  If we were to do so in the future, we will update this Statement, and provide Nevada residents with the opportunity to opt-out of the sale of their personal information.

Complaints: If you have concerns about the way in which we have handled your information, please contact us (see “Contact Us” below) so that we can try to resolve the issue. If you are located in the EEA, you also have the right to lodge a complaint with the supervisory authority applicable in the jurisdiction in which the user is located, and with relevant judicial authorities. If you live in Australia, you may complain to the Office of the Australian Information Commissioner. Contact details can be found at www.oaic.gov.au

Our Website is intended for a general audience and is not directed at children under the age of 16. If you are under the age of 16, please do not provide your information to us through the Website. If we obtain actual knowledge that any information we collect has been provided by a child under the age of 16, we will promptly delete the information.

Information that you provide to us may be stored on servers and with third-party service providers in the United States and other countries in which we do business and whose data protection laws may differ from the jurisdiction in which you live. When we transfer the personal information of users who are located in the EU to a location outside of the European Economic Area for processing, we use an approved transfer mechanism such as the European Commission approved standard contractual clauses. To learn more about the transfer mechanism that we use to effect such transfer, you may contact us at privacy.info@alight.com.

If you have any questions relating to this Privacy Statement, please contact us at privacy.info@alight.com. Our Data Protection Officer can also be reached using this email address.

You may also write to us at:

Alight Solutions LLC

ATTN: Chief Privacy Officer

4 Overlook Point

Lincolnshire, IL 60069