Data Security Policy

Purpose 

The purpose of this policy is to establish guidelines and procedures for handling, storing, and protecting personal and sensitive information. This policy applies to all employees, contractors, and third-party service providers who have access to our data. 

Data Collection and Use 

1. Types of Data Collected: 
   • Personal Information: Includes names, addresses, phone numbers, email  addresses, and payment information. 
   • Service Information: Details related to the moving services we provide, such as  inventory lists, schedules, and delivery addresses. 
2. Purpose of Data Collection: 
   • We collect and use personal information to provide our moving services, process  payments, communicate with customers, and improve our services. 

Data Protection Measures 

1. Access Control: 
   • Only authorized personnel have access to personal and sensitive information.  Access is granted based on the principle of least privilege, ensuring that  
     individuals only have access to the data necessary for their role. 
2. Encryption: 
   • We use encryption technologies to protect data during transmission and storage.  Sensitive information, such as payment details, is encrypted using industry standard protocols. 
3. Secure Storage: 
   • Personal information is stored securely in our systems, protected by firewalls,  anti-virus software, and regular security updates. 
4. Data Minimization: 
   • We collect only the necessary data required to provide our services. Unnecessary or redundant information is securely disposed of. 
5. Regular Audits:
   • We conduct regular audits of our data security practices to identify and address potential vulnerabilities. 

Employee Training 

1. Security Awareness: 
   • All employees receive training on data security best practices and are required to adhere to our data security policy. 
2. Ongoing Education: 
   • We provide ongoing education and updates on emerging security threats and the latest security measures. 

Data Breach Response 

1. Incident Response Plan: 
   • We have a comprehensive incident response plan in place to address data breaches. This plan includes immediate containment, investigation, and remediation steps. 
2. Notification: 
   • In the event of a data breach, affected individuals will be notified promptly, and appropriate authorities will be informed as required by law. 

Third-Party Service Providers 

1. Vendor Management: 
   • We carefully select third-party service providers who adhere to our data security standards. Contracts with these providers include data protection clauses to ensure the security of shared information. 
2. Regular Assessments: 
   • We regularly assess the security practices of third-party service providers to ensure ongoing compliance with our data security requirements. 

Compliance 

1. Legal Requirements: 
   • Our data security practices comply with applicable local, provincial, and federal laws and regulations. 
2. Privacy Policies: 
   • We maintain and update our privacy policies to reflect current data protection laws and practices. 

Customer Rights

1. Access and Correction: 
   • Customers have the right to access and correct their personal information.  Requests for access or correction can be made by contacting our customer service team. 
2. Data Deletion: 
   • Customers may request the deletion of their personal information, subject to certain legal and contractual obligations. 

Contact Us 

If you have any questions or concerns about our data security policy, please contact us. We are committed to protecting your privacy and ensuring the security of your personal information. 

• Email: copyright@calgarymoverspro.ca
• Phone: (587) 741-9000
• Address: 330 5 Ave SW, Calgary, AB T2P 0L4

Thank you for trusting Calgary Movers Pro with your personal information. We take data security seriously and are committed to maintaining the highest standards of protection for your data.