Data Classification

We classify information into the following categories:

• Confidential Data – Includes personal identifiers (e.g., Social Security numbers, driver’s license numbers), health information, background checks, payroll and tax information, and other sensitive personal details.

• Internal Data – Business-related information used for internal operations such as staffing processes, candidate resumes, vendor contracts, and internal communications.

• Public Data – General company information available publicly, such as our website content, marketing materials, and published reports.

All data is handled in accordance with its classification level.

Data Handling

We implement technical, administrative, and physical safeguards to ensure the secure handling of information.

• Digital Data – Protected through access controls, encryption, firewalls, and secure communication channels. Access is limited to authorized personnel on a need-to-know basis.

• Physical Data – Paper files and physical records are stored in locked cabinets and accessible only to authorized personnel. Physical data is minimized in favor of digital storage whenever possible.

• Third-Party Systems – Where third-party services (such as background check vendors or communications systems) are used, we ensure they comply with relevant security and privacy standards.

Data Retention

We retain personal and business information only as long as necessary for:

• Contract fulfillment

• Legal and regulatory compliance

• Legitimate business purposes

Candidate and contractor data is typically retained for seven (7) years after the end of an assignment or relationship unless otherwise required by law.

Data Destruction

When data is no longer needed, we ensure secure destruction:

• Digital Data – Permanently deleted from systems using secure methods (aligned with NIST SP 800-88 guidelines).

• Physical Data – Shredded or securely destroyed to prevent unauthorized access.

• Certification – A certificate of data destruction may be provided to Clients upon request.

Data Sharing & Third-Party Disclosure

We do not sell, rent, or trade personal information to third parties for marketing purposes. Data is shared only when:

• Required by law or regulation

• Necessary to perform staffing or business services (e.g., client onboarding, background checks)

• Authorized explicitly by the candidate, employee, or client

Candidate Contact Information:
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Individual Rights

Individuals may request to:

• Access their personal data

• Correct inaccuracies

• Request deletion, where permitted by law

• Restrict or object to processing

Send all requests to team@dndstaffing.com