Privacy Notice – Bear Creek Connection

Privacy Notice

Effective Date: January 1, 2026
Company: Bear Creek Connection
Scope: United States Operations, Texas B2B Framework, and Multi-State Compliance
Accessibility Status: Engineered for Full Section 508 Web Compliance

1. Scope of This Notice & B2B Commercial Exemption

This Privacy Notice describes how Bear Creek Connection (“we,” “our,” or “us”) collects, uses, discloses, and protects information gathered via our website, client portals, and corporate operations.

Important Commercial Exemption Notice (Texas TDPSA & Multi-State Frameworks): Under the Texas Data Privacy and Security Act (TDPSA) and related state statutes, individuals acting in a commercial (Business-to-Business / B2B) or employment context are explicitly excluded from the definition of a personal “Consumer.” Information collected from corporate clients, partner representatives, procurement contacts, and prospective business leads is processed strictly to fulfill business-level deliverables. It is governed by our primary Master Services Agreements (MSAs), Statements of Work (SOWs), and Service Level Agreements (SLAs), rather than personal consumer deletion frameworks.

2. Information We Collect & Process

Over the past 12 months, we have collected the following categories of information for critical business and technical operations:

Identifiers & Contact Details: Corporate name, representative name, business email address, physical office location, job title, and phone numbers.
Commercial & Procurement Information: Records of IT products evaluated, telecom services purchased, infrastructure deployment maps, system maintenance agreements, hardware financing data, and historical support/helpdesk tickets.
Internet, Network, & System Activity Data: Internet Protocol (IP) addresses, browser characteristics, operating system types, client portal login dates, device telemetry, and web log statistics.
Technical Operational Metadata: Network architecture diagrams, server configuration paths, hardware MAC addresses, firewall telemetry, and administrative username tracking logs.
Workforce & Contractor Onboarding Data: Tax identification metrics (W-4/W-9 data), professional background verifications, and certification trackers for our blended project delivery teams (including W-2 employees and independent 1099 contractors).

3. Sourcing of Operational Data

We acquire personal, corporate, and technical data through the following avenues:

Direct Interaction: Submitting a Request for Information (RFI), responding to a state procurement request, scheduling a system consultation, opening an emergency helpdesk ticket, or provisioning account access.
Automated System Logging: Security scanners, infrastructure management systems, and tracking tags configured on our public web portals and administrative portals.
Supply Chain Integration: Business data shared securely via wholesale distribution and manufacturing procurement ecosystems during the project validation lifecycle.

4. Business Utilization of Information

We utilize collected data strictly to sustain secure and reliable IT infrastructure operations:

Provisioning, installing, and servicing telecom, network, wireless, firewall, unified communications and audiovisual hardware.
Authenticating credentials on cloud environments, administrative portals, and client networks.
Executing network adjustments, PBX modifications, and firewall MAC (Moves, Adds, Changes) overrides, particularly during off-hours maintenance windows.
Synchronizing operational files, documentation, and client contact profiles across authorized company devices via secure Microsoft 365 and SharePoint cloud environments.
Auditing network logs to safeguard system integrity against fraudulent access, service interruptions, or active cyber threats.

5. Disclosures to Third-Party Ecosystem Channels

We do not sell your personal or corporate data for monetary profit, and we do not trade data for targeted, cross-context behavioral marketing. (NOTICE: We do not sell your sensitive data or biometric data.)

To fulfill our service commitments, we disclose data exclusively to the following business partners:

Authorized Original Equipment Manufacturers (OEMs): Technology and hardware manufacturers (such as Cisco) to register equipment configurations, maintain strict standard compliance, and validate project warranties.
Wholesale IT Distributors: Supply chain partners (such as Ingram Micro) to leverage established credit structures and arrange direct-to-site equipment dropship fulfillment.
Legal & Regulatory Authorities: Government bodies when strictly required to satisfy federal compliance mandates, valid corporate accounting rules, or formal law enforcement processes.

6. Your Rights Under State Privacy Laws (Texas, California, and Other States)

If you interact with our platforms as an individual consumer residing in Texas, California, Virginia, Colorado, Connecticut, Utah, or another state with comprehensive privacy frameworks, you possess specific legal rights:

The Right to Know & Access: Confirm if we are processing your personal data and obtain a portable copy of that information.
The Right to Correct: Request the correction of inaccuracies within your stored data profile.
The Right to Delete: Order the erasure of your personal records, subject to active business contract retention mandates, tax regulations, or legal holds.
The Right to Opt-Out: Object to targeted promotion, automated profiling, or data sales.
The Right to Non-Discrimination: We will never penalize, degrade service quality, or adjust pricing frameworks because you chose to exercise your privacy rights.

How to Exercise Your Rights & Submit Requests

To execute a verifiable request, you must utilize one of our secure communication methods. You are not required to create an active service account to file a request:

Dedicated Privacy Email: privacy@bearcreekconnection.com
Compliance Line: 210-726-2444

Texas and Multi-State Administrative Appeal Process

If we deny your data privacy request, you have the right to challenge that decision. You must submit an appeal in writing to privacy@bearcreekconnection.com within 30 days of receiving our initial rejection. We will evaluate the claim and issue our formal, written decision within 45 days.

If your appeal is rejected and you are a Texas resident, you maintain the right to escalate the matter by filing an official consumer complaint with the Texas Attorney General. Residents of other states may escalate to their respective State Attorney General.

7. California-Specific Disclosures (CCPA/CPRA)

Shine the Light: California residents may request a description of any data shared with third parties for direct marketing uses (we do not make these disclosures).
Data Retention Standards: We store data only for the duration required to complete active contract terms, satisfy state tax accounting windows, or maintain essential system change logging.
Workforce Notice: In accordance with the CPRA, workforce members (employees and independent contractors) are notified that their network activities, device logins, and system configurations on company-managed infrastructure are logged for internal security and resource monitoring.

8. Data Security and Infrastructure Safeguards

We implement rigorous technical, operational, and physical security practices aligned with standard information security benchmarks. All data transmissions, remote maintenance sessions, and multi-device cloud storage configurations via Microsoft 365/SharePoint utilize encryption protocols and strict permission boundaries to defend your information against exfiltration, unauthorized modification, or loss.

9. Cookie Notice

We use cookies and similar tracking technologies to keep our site secure, analyze performance, and understand how you interact with our services. View our cookie policy here.

10. Contact Us

For questions regarding this comprehensive privacy notice, state-specific compliance paths, or our administrative processes, please reach out to us at:

Email: privacy@bearcreekconnection.com
Phone: 210-726-2444