Online Privacy Policy

Last Updated: July 21, 2026
Effective Date: July 21, 2026

Business & Professional Exchange, Inc. (BPE, we, us, or our) respects your privacy. This Online Privacy Policy (the Policy) explains how we collect, use, disclose, and protect personal information when you visit www.bpeinc.com, use a BPE web portal or other BPE online service that links to or references this Policy, submit an online inquiry or employment application, or otherwise interact with us online (collectively, the Online Services).

This Policy applies only to the Online Services that link to or reference it. A BPE online service may provide a separate privacy notice or terms that supplement or replace this Policy for that service.

By using an Online Service, you acknowledge that you have read and understood the practices described in this Policy.

1. Scope and Contact Information

This Policy applies to personal information BPE collects through the Online Services, including the public Website, online contact and inquiry forms, online employment-application features, and BPE portals that link to or reference this Policy. It does not apply to information collected offline or through websites, services, or applications that are not controlled by BPE.

We comply with applicable privacy laws, including but not limited to:

Federal Trade Commission Act (FTC Act) and related federal privacy regulations
Massachusetts General Laws Chapter 93H (Massachusetts Data Security Law)
Massachusetts General Laws Chapter 93I (Massachusetts Standards for the Protection of Personal Information)
State consumer protection laws applicable to our operations

Our Contact Information:

Business & Professional Exchange, Inc.
100 Cummings Center, Suite 344C
Beverly, MA 01915

For questions, privacy requests, or complaints concerning this Policy or BPE’s privacy practices, contact:

Compliance Office
Attn: Raymond P Shaw Jr.

Business & Professional Exchange, Inc.
100 Cummings Center, Suite 344C
Beverly, MA 01915

2. Information We Collect

2.1 Contact, Inquiry, and Other Communications Information

When you use a contact form, request information, or otherwise communicate with BPE through an Online Service, we may collect the information you choose to provide. This may include your name, email address, telephone number, company or professional affiliation, and the contents of your message or request.

2.2 Employment-Application Information

When you apply for employment through an Online Service, BPE may collect information submitted in the application, including your contact information, work availability, employment-related and professional information, qualifications, and the information contained in materials you upload, such as a résumé. BPE uses this information to receive, evaluate, communicate about, and administer employment applications and for related lawful business purposes.

Please do not provide information that is not reasonably necessary for your application. If an Online Service requests additional information for a specific employment-related purpose, BPE will provide additional information as appropriate.

2.3 Account and Portal Information

If you use a BPE portal or other authenticated Online Service that links to or references this Policy, BPE may collect account and login information, such as your user name and information used to authenticate access. We may also collect information you submit, access, or create through that portal in connection with the portal’s functions and your relationship with BPE.

2.4 Information Collected Automatically

Like most online services, the Online Services may automatically collect limited technical and usage information when you visit or use them. This may include:

Internet Protocol (IP) address and general location derived from that address;
browser type and version, operating system, device type, and other device or browser identifiers;
pages viewed, links selected, referral source, dates and times of visits, and navigation activity; and
information collected through cookies, log files, and similar technologies.

2.5 Cookies and Similar Technologies

The Online Services may use cookies and similar technologies to operate and secure the services, remember preferences, maintain a login session where applicable, understand traffic and usage, and improve functionality and content. Cookies are small text files placed on your device by your browser.

You may use your browser settings to block, delete, or limit cookies. If you disable cookies, some features, including authenticated portal functions, may not function as intended. BPE may use third-party providers for services such as hosting, security, and analytics; the particular providers and technologies used may change over time.

2.6 Sensitive Personal Information

BPE does not request sensitive personal information through the public contact form. However, information you voluntarily submit through an Online Service, including an employment application or uploaded résumé, may contain information that some laws treat as sensitive. Please do not submit sensitive personal information unless it is requested for a stated purpose or you choose to provide it as part of an application or other communication. BPE will process sensitive personal information only as permitted by applicable law and for the purposes for which it was collected or otherwise disclosed to you.

3. How We Use Information

BPE may use the information described above to:

operate, maintain, secure, and improve the Online Services;
respond to inquiries and communicate with you;
provide information or services you request;
receive, evaluate, communicate about, and administer employment applications;
authenticate users, maintain and administer portal accounts, and provide portal functions;
understand Online Service usage and improve content and functionality;
detect, investigate, and prevent security incidents, fraud, misuse, and other unlawful activity;
protect BPE’s rights, property, and safety and the rights, property, and safety of others; and
comply with applicable law, legal process, and enforceable governmental requests.

Where applicable law requires consent for a particular collection or use, BPE will seek that consent. Where BPE relies on another lawful basis, it will use the information only as permitted by applicable law.

4. How We Disclose Information

BPE may disclose personal information only as reasonably necessary for the purposes described in this Policy, including:

Service providers. Vendors that provide services for BPE, such as website or portal hosting, security, information-technology support, application processing, communications support, and analytics, may process information on BPE’s behalf and subject to contractual or other appropriate restrictions.
Legal and safety purposes. BPE may disclose information when it reasonably believes disclosure is necessary to comply with law, legal process, or an enforceable governmental request; protect the rights, property, or safety of BPE, Website users, or others; or investigate and prevent fraud, security incidents, or unlawful activity.
Business transactions. Information may be disclosed as part of a proposed or completed merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to applicable law.
With your direction or consent. BPE may disclose information when you ask or authorize us to do so.
Aggregated or de-identified information. BPE may use and disclose information that has been aggregated or de-identified so that it does not reasonably identify you.

5. Data Security and Retention

BPE uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction. No method of internet transmission or electronic storage is completely secure, and BPE cannot guarantee absolute security.

BPE retains personal information for as long as reasonably necessary for the purposes described in this Policy, including to respond to inquiries, administer applications and portal services, maintain Online Service security, comply with legal obligations, resolve disputes, and enforce agreements. BPE may retain information longer where permitted or required by law. When information is no longer needed, BPE will delete, anonymize, or otherwise dispose of it in a manner consistent with applicable law and its records-management practices.

6. Your Data Protection Rights and Choices

Depending on your location, the nature of your relationship with BPE, and applicable law, you may have the rights described below. These rights are not absolute and may be subject to legal limitations, exemptions, and verification requirements. BPE will not discriminate against an individual for exercising a privacy right available under applicable law.

6.1 General Rights

Where applicable law provides these rights, you may have the right to:

Be informed. Obtain information about the personal information BPE collects, the sources from which it is collected, the purposes for collection and use, and the categories of recipients to whom it may be disclosed.
Access. Request confirmation of whether BPE processes your personal information and, where applicable, access to or a copy of that information.
Correct or rectify. Request correction of inaccurate or incomplete personal information BPE maintains about you.
Delete or erase. Request deletion of personal information in circumstances provided by law, including where it is no longer necessary for the purpose for which it was collected.
Restrict processing. Request that BPE limit certain processing of your personal information in circumstances provided by law.
Data portability. Request a portable copy of certain personal information in a structured, commonly used, and machine-readable format, where technically feasible and required by law.
Object. Object to certain processing, including processing based on legitimate interests or processing for direct-marketing purposes, where applicable law provides that right.
Automated decision-making and profiling. Request information about, or object to, certain decisions based solely on automated processing or profiling that produce legal or similarly significant effects, where applicable law provides that right.
Withdraw consent. Withdraw consent for processing when BPE relies on consent as the legal basis for processing. Withdrawal will not affect the lawfulness of processing before the withdrawal.

6.2 Rights for Residents of Specific Regions Outside Massachusetts

California Residents

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies to BPE’s processing of your personal information, you may have the right to:

know the categories and specific pieces of personal information BPE collected about you, the sources from which it was collected, the business or commercial purposes for collection, use, sale, or sharing, and the categories of third parties to whom BPE disclosed it;
request deletion of personal information, subject to statutory exceptions;
request correction of inaccurate personal information;
opt out of the sale or sharing of personal information, as those terms are defined by the CCPA/CPRA, if BPE engages in those activities;
limit certain uses and disclosures of sensitive personal information, if applicable; and
not be discriminated against for exercising rights under the CCPA/CPRA.

BPE will honor applicable opt-out preference signals to the extent required by law. If BPE is required to provide a specific opt-out or limitation mechanism, it will make that mechanism available through the applicable Online Service or by another method required by law.

Residents of Other U.S. States

Residents of states with applicable comprehensive privacy laws may have rights to confirm processing; access, correct, delete, or obtain a portable copy of personal information; opt out of certain processing for targeted advertising, sales, or certain profiling; and appeal a decision concerning a privacy request. BPE will provide the rights and appeal procedures required by applicable law.

Residents of the European Economic Area, United Kingdom, and Switzerland

If BPE’s processing of your personal information is subject to applicable data-protection law in the European Economic Area, United Kingdom, or Switzerland, you may have the general rights described in Section 6.1, including rights of access, correction, erasure, restriction, portability, objection, and withdrawal of consent. You may also have the right to lodge a complaint with your local data-protection supervisory authority.

Residents of Brazil, Canada, Japan, and Australia

If applicable law applies to BPE’s processing of your personal information, residents of Brazil, Canada, Japan, and Australia may have rights concerning access, correction, deletion or cessation of use, information about processing and disclosures, withdrawal of consent, and complaints or recourse. The availability and scope of these rights depend on the applicable law and the circumstances of BPE’s processing.

6.3 How to Exercise Your Rights

To exercise a privacy right, submit a written request to the Compliance Office at the address in Section 1. Please identify the Online Service involved, the right you seek to exercise, and enough information for BPE to locate and evaluate the request.

BPE may take reasonable steps to verify your identity and, where applicable, your authority to act on another person’s behalf before responding to a request. BPE will respond within the time required by applicable law. If BPE cannot fulfill a request, it will explain the basis for its decision to the extent required by law. Where a right to appeal is required by law, BPE will provide information about how to appeal the decision.

You may also opt out of marketing communications by following any unsubscribe instructions in a marketing message, if provided. Opting out of marketing communications does not prevent BPE from sending non-promotional communications, such as responses to an inquiry, security notices, or notices concerning this Policy.

7. Children’s Privacy

The Online Services are not directed to children under 13 years of age, and BPE does not knowingly collect personal information from children under 13 through the Online Services. If BPE learns that it collected personal information from a child under 13 without the required parental consent, BPE will take reasonable steps to delete that information. A parent or guardian who believes a child has provided personal information to BPE may contact the Compliance Office using the information in Section 1.

8. Third-Party Links and Services

The Online Services may contain links to third-party websites or services. In addition, certain BPE Online Services may be hosted, supported, or made available through third-party infrastructure or providers. BPE does not control and is not responsible for the content, privacy practices, or security of independent third-party websites and services. You should review the privacy policy of each third party before providing personal information to it. This Policy applies only when an Online Service links to or references it.

9. Changes to This Policy

BPE may update this Policy from time to time. BPE will post the updated Policy through the applicable Online Service and revise the Last Updated date above. Changes are effective when posted unless a different effective date is stated. Your continued use of an Online Service after an updated Policy is posted signifies your acknowledgment of the updated Policy to the extent permitted by law.

10. Questions, Complaints, and Supervisory Authorities

If you have questions, concerns, or complaints about this Policy or BPE’s privacy practices, please contact the Compliance Office at the address in Section 1. BPE encourages you to contact us first so that we can attempt to resolve your concern.

Depending on your location and applicable law, you may also have the right to lodge a complaint with the relevant privacy or data-protection supervisory authority. For example, individuals in the European Economic Area may contact the data-protection authority in their Member State; individuals in the United Kingdom may contact the Information Commissioner’s Office; and California residents may contact the California Privacy Protection Agency or the California Attorney General. For matters involving Massachusetts consumer protection laws, you may contact: Massachusetts Attorney General’s Office, Consumer Advocacy and Response Division, One Ashburton Place, Boston, MA 02108, Phone: (617) 727-8400. Nothing in this Policy limits any rights you may have under applicable law.