Last reviewed: [Date] — Next review due: [Date]
Scope
This policy applies to all personal data processed by Blevins Holdings — including data about employees, contractors, clients, and any third parties whose data we handle in the course of business.What data we collect
How we use data
We collect and use data only for legitimate business purposes. Data is never sold to third parties. Access is limited to those who need it to perform their role.Storage and retention
- Data is stored on company-approved systems only
- Personal data is retained for the minimum period required by law or business need
- When data is no longer needed, it is securely deleted or anonymized
Employee responsibilities
1
Use approved systems
Store company and client data only on approved platforms. Do not use personal email, personal cloud storage, or unapproved apps for business data.
2
Lock your screen
Lock your workstation when stepping away, even briefly.
3
Report incidents
If you suspect a data breach or unauthorized access, report it immediately to IT and your manager.
4
Handle requests carefully
If a client or individual requests access to or deletion of their personal data, forward the request to [designated contact] immediately — do not respond independently.
Data breaches
In the event of a suspected data breach:Policy owner: IT / Legal