At Barry Enterprises, we are committed to the highest standards of privacy, information security, and professional conduct. This Privacy Policy outlines how we collect, manage, store, and protect personal and confidential information — especially when providing services to public sector clients including the Government of Alberta

Security is the responsibility of every Barry team member who handles sensitive information or uses our technology systems. This policy is designed to ensure full compliance with applicable privacy laws including the Freedom of Information and Protection of Privacy Act (FOIPPA).

Confidentiality Agreement
A formal agreement requiring personnel to comply with FOIPPA and related privacy laws.

Contact Information
Business-related details such as name, title, business phone, email, and address.

Personal Information
Recorded information about an identifiable individual, excluding general business contact info.

Device
Any tool used to access or store protected information (e.g., mobile phone, tablet, workstation).

Facilities
Any physical location used by Barry Enterprises to deliver services or store sensitive information.

FOIPPA
The Freedom of Information and Protection of Privacy Act — governing personal information in BC.

Protected Information
All personal or confidential data collected or accessed through contracts, especially with public sector entities.

Record
Any material (paper or digital) used to record personal or confidential information, excluding software.

Our Standard:
Before working on any government-related contract, all Barry employees must complete certified Privacy and Information Sharing Awareness Training.

Training Objectives:

• Promote a culture of privacy, security, and ethical responsibility.
• Ensure compliance with government information-sharing policies.
• Prepare employees to identify and report privacy breaches or misuse of information.

Barry Enterprises follows these six principles when handling sensitive or confidential data:

1. Right Information – Only relevant, accurate, and complete information is collected.
2. Right Person – Information access is limited strictly to those with a legitimate need.
3. Right Purpose – Data is used only for authorized and business-related purposes.
4. Right Time – Information is made available only when needed for official duties.
5. Right Way – Information is handled respectfully and confidentially at all times.
6. Right Storage – All personal data is securely stored, encrypted, and separated from third-party systems.

Note: All management and personnel handling confidential data must sign a Non-Disclosure Agreement (NDA).

Barry Enterprises enforces safeguards to minimize privacy risks:

• Data Residency Compliance – No personal data is stored or transmitted outside Canada.
• Secure Handling – Confidential files are locked, encrypted, or shredded after use.
• Labeling Protocol – Documents are clearly marked “CONFIDENTIAL” when applicable.
• Remote Work Security – Staff follow strict remote access procedures including VPN use, secure networks, and encrypted file transfers.
• Cybersecurity Awareness – Employees are trained to detect phishing, spoofing, and other digital threats.

Report. Recover. Remediate. Prevent.
Barry Enterprises follows this structured response for all data incidents:

1. Report – Notify the contract manager and relevant authority immediately.
2. Recover – Secure and retrieve compromised information, if possible.
3. Remediate – Inform affected individuals (if required) and mitigate risks.
4. Prevent – Review incident cause and implement new safeguards as needed.

Access Management:

• Formal ID verification and registration of all personnel.
• Auto-lock, password limits, and remote session control to prevent unauthorized access.

Authentication Standards:

• Minimum 8-character passwords with upper/lowercase letters, numbers, and symbols.
• Mandatory password rotation every 6 months.
• Encrypted logins for all internal systems and devices.

• All client-related records are stored exclusively in Canada.
• Personal data is retained for a minimum of one year if used to make decisions about individuals.
• Destruction of data (digital or physical) is performed to NIST 800-88 standards via shredding or secure software erasure.

You may request to:

• Access your personal data held by us.
• Correct, update, or delete personal information (subject to legal limits).
• Inquire about how your data is stored and protected.

For any questions regarding this Privacy Policy or your personal data, contact us directly at:

Barry Enterprises Protection & Security Services
📍3515 17th Ave. SW Calgary Ab. Unit 201  T3E 0B7
📧 info@barryenterprises.ca
🌐 www.barryenterprises.ca

Barry Enterprises reserves the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated date. We encourage visitors and clients to review our policies regularly.