Privacy Policy

Last updated: July 2026

1. Information We Collect

We collect information necessary to deliver IT services, including:

• Business contact information (name, email, phone, company)
• System and device data accessed during remote administration
• Service usage logs for billing and support purposes
• Credentials and tokens required for SaaS and identity management (stored encrypted, never logged)

2. How We Use Data

Your data is used exclusively to provide, maintain, and improve our services. We do not sell, rent, or share client data with third parties except as required to deliver the services you engaged us for (e.g., Microsoft 365, Azure, MDM vendors).

3. Data Security

We follow industry-standard security practices:

• Encryption at rest and in transit for all managed credentials
• Role-based access controls on all admin systems
• Audit logging on administrative actions
• No plaintext storage of passwords, secrets, or API tokens

4. Third-Party Services

We integrate with and manage platforms including Microsoft Entra ID, Intune, Azure, Jamf/Kandji, SentinelOne, Duo, and others. Each vendor maintains its own privacy policy and data handling practices.

5. Data Retention

Client records and associated job/invoice data are retained for the duration of the engagement plus seven (7) years for tax and compliance purposes. Upon written request, we will delete identifiable data except where retention is legally required.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting privacy@bctek.com. We will respond within 30 days.