Privacy Policy
Bizier Electric Corp.
Privacy and Information Security Policy
​
Effective Date: October 2nd, 2025
​
1. Purpose and Scope
​
This Privacy and Information Security Policy (“Policy”) establishes the procedures, safeguards, and responsibilities of Bizier Electric Corp. (“Company,” “we,” “our,” or “us”) regarding the collection, use, storage, disclosure, and protection of personal information (“PI”) of its clients, employees, contractors, tenants, and partners in accordance with Massachusetts General Laws Chapter 93H and 201 CMR 17.00.
​
This Policy applies to all forms of PI maintained by the Company, whether stored electronically, physically, or communicated verbally, and applies to all operations within the Commonwealth of Massachusetts.
​
2. Definitions
​
For purposes of this Policy:
​
a. “Personal Information” (PI) means any information that can be used to identify an individual, including:
-
Full name or first initial and last name in combination with:
-
Social Security number;
-
Driver’s license or state-issued identification number; or
-
Financial account number, credit/debit card number (with or without security codes).
-
-
Employment and contractor records, including W2s, 1099s, payroll information, and employment history.
-
Tenant and property-related information, including owner contact, occupancy details, and property records.
b. “Data Security Coordinator” refers to the individual designated by the Company to oversee implementation and enforcement of this Policy.
​
3. Data Security Coordinator
​
The Company designates Anna Ferrick-Davis, Managing Partner and Privacy Officer, as the Data Security Coordinator. Responsibilities include, but are not limited to:
-
Implementation, monitoring, and enforcement of this Policy;
-
Employee and contractor training on data security and privacy practices;
-
Investigating actual or suspected data breaches;
-
Serving as the primary point of contact for regulatory authorities regarding data privacy matters.
​
4. Information Collection
​
The Company may collect PI from the following sources:
-
Directly from clients, tenants, or contractors during service inquiries, contracts, scheduling, or transactions;
-
Through accounting and invoicing platforms, including QuickBooks;
-
Via the Company’s website, newsletters, and social media channels;
-
From property owners, landlords, and managers in connection with service provision.
PI collected is limited to that necessary for the purposes described in this Policy and shall not include website visitor data such as IP addresses, except as automatically processed by Wix.
5. Use of Information
​
PI collected by the Company shall be used solely for:
-
Providing electrical services and maintaining service records;
-
Billing, invoicing, and tax compliance;
-
Communications regarding services, scheduling, or updates;
-
Internal recordkeeping, training, and compliance with legal obligations;
-
Marketing communications, including newsletters and promotions, unless an individual opts out.
​
PI shall not be sold or rented under any circumstances.
​
6. Information Sharing
​
The Company shall not disclose PI to third parties except:
-
With the explicit consent of the individual;
-
When required by law, regulation, or legal process; or
-
When necessary for subcontracted work with client approval.
​
7. Safeguards
​
7.1 Administrative Safeguards
-
Management holds primary access to all PI; employee access is limited to job-specific needs.
-
Employees receive annual training regarding confidentiality and data security.
-
Access permissions are reviewed quarterly and revoked upon employee termination.
-
Vendors and subcontractors accessing PI are required to sign confidentiality agreements.
7.2 Technical Safeguards
-
Password-protected systems with multi-factor authentication where supported.
-
Firewalls, antivirus software, and intrusion detection mechanisms.
-
Encryption and access controls for QuickBooks, website, and cloud storage.
-
Secure backups on hard drives rotated regularly.
7.3 Physical Safeguards
-
Paper records are stored in locked filing cabinets.
-
Office computers are secured with login credentials and restricted access.
-
Visitors and contractors are prohibited from accessing sensitive files.
-
Paper records exceeding seven (7) years are securely shredded.
8. Data Retention and Disposal
​
-
PI shall be retained for a period of seven (7) years for legal and tax purposes.
-
Following this period, PI shall be securely destroyed via digital erasure or physical shredding.
-
Contact information may be retained indefinitely for legitimate business purposes unless a deletion request is received.
9. Employee and Contractor Access
-
Management shall have unrestricted access to PI.
-
Employees may access PI solely as necessary for job performance or service coordination.
-
Access is monitored and restricted according to assigned roles.
10. Risk Assessment
​
The Company recognizes potential risks to PI, including:
​
-
Unauthorized access to digital or physical records;
-
Theft, loss, or improper disposal of PI;
-
Phishing, malware, or social engineering attacks;
-
Accidental or intentional employee exposure of sensitive information.
​
11. Data Breach Response
​
In the event of a data breach:
-
The Data Security Coordinator shall promptly investigate and contain the breach.
-
Affected individuals shall be notified in accordance with Massachusetts law.
-
Notifications shall be made to the Massachusetts Attorney General and the Office of Consumer Affairs and Business Regulation where required.
-
A post-incident review shall be conducted and corrective actions implemented.
​
12. Client, Employee, and Contractor Rights
​
Individuals may:
​
-
Request access to the PI maintained by the Company;
-
Request correction of inaccurate or incomplete PI;
-
Request deletion of PI, subject to legal retention requirements;
-
Opt out of marketing communications at any time.
​
13. Monitoring, Enforcement, and Compliance
​
-
The Company shall review this Policy at least annually or sooner as required by law or changes to business practices or technology.
-
Employees who violate this Policy may be subject to disciplinary action, up to and including termination.
-
Contractors who violate this Policy may face contract termination and legal remedies.
14. Policy Review and Updates
​
The Company reserves the right to modify this Policy at any time to comply with legal, regulatory, or operational requirements. Updated versions shall be posted on the Company website with the effective date.
​
15. Contact Information
​
Questions regarding this Policy should be directed to:
Anna Ferrick-Davis
Privacy Officer & Managing Partner
Bizier Electric Corp.
Email: office@bizierelectric.com
​
Acknowledgment of Receipt
All employees and contractors are required to acknowledge that they have received, read, and understood this Policy, and agree to comply with its terms as part of onboarding and annual compliance training.