Information Security Policy

PCandPrinter (a wholly owned subsidiary of Allroundfix LLC)
Effective Date: January 18, 2026

1. Introduction

This Information Security Policy outlines PCandPrinter’s commitment to protecting sensitive and confidential information. It applies to all employees, contractors, and third parties who access our systems, data, or networks. All personnel must read, understand, and comply with this policy. Management will review and update this policy annually or as needed to address changes in security standards or business requirements.

PCandPrinter handles sensitive data daily and commits to maintaining safeguards to protect customer data, account information, and internal systems from unauthorized access, disclosure, alteration, or misuse.

2. Information Classification and Protection

Classification Levels

All information assets will be classified based on sensitivity:

• Confidential: Information that could cause significant harm if disclosed (e.g., customer account details, personally identifiable information).
• Internal Use: Information not intended for public release but not highly sensitive.
• Public: Information approved for release to the public.

All sensitive and confidential data must be labeled, handled, stored, transmitted, and destroyed according to classification requirements.

Data Protection

• Sensitive account data must not be stored beyond what is necessary for business purposes.
• Confidential information must be encrypted in transit and at rest.
• Passwords must be protected and managed securely.

3. Network and System Security

PCandPrinter will maintain appropriate technical controls to protect its network and critical systems:

• Maintain current network diagrams and review them at least annually.
• Conduct regular vulnerability scans and address findings promptly.
• Restrict access to systems that handle sensitive information to authorized users only.
• Ensure firewalls, intrusion detection systems, and security controls are in place.

4. Acceptable Use

Employees and authorized users must exercise good judgment and follow secure practices when using company systems:

• Do not use company resources to engage in illegal, offensive, or inappropriate activities.
• Keep passwords confidential and change them regularly.
• Lock computers when unattended and secure portable devices.
• Only use approved software and hardware.

5. Access Control

Access to PCandPrinter systems and sensitive information must be controlled and authorized:

• Users must be issued unique credentials linked to their identity.
• Access rights must be based on job roles and the principle of least privilege.
• Terminated employees’ accounts must be disabled immediately upon departure.
• Privileged access must be monitored and reviewed periodically.

6. Physical Security

Physical access to areas that store sensitive information must be restricted:

• Confidential data and media must be stored securely.
• Visitor access to secure areas must be escorted and documented.
• Devices containing sensitive information must be physically protected.

7. Protecting Data in Transit

All sensitive information transmitted electronically or physically must be protected:

• Use strong encryption when transmitting data over insecure networks.
• Do not send confidential account data via email or messaging services unless encrypted and approved.
• Physical transfer of media containing sensitive data must be logged and secured.

8. Incident Reporting and Response

Incidents involving potential security breaches must be reported immediately to the designated security contact:

• Security incidents will be investigated promptly.
• Steps must be taken to mitigate harm and preserve evidence.
• Incidents will be documented and reviewed to identify improvements.

9. Third-Party Security

PCandPrinter requires third-party providers with access to sensitive information to:

• Comply with applicable security standards.
• Enter into agreements defining responsibilities and data protection measures.
• Cooperate with security assessments and audits.

10. Security Awareness and Training

PCandPrinter will provide ongoing security education:

• All personnel receiving sensitive data must complete training.
• Security awareness programs will be reviewed regularly.
• Personnel must acknowledge understanding and compliance with this policy.

11. Media and Data Disposal

When data or media are no longer needed:

• Electronic media must be securely wiped or physically destroyed.
• Hard copies of sensitive data must be shredded or otherwise irrecoverable.
• Disposal procedures must ensure complete data destruction.

12. Policy Review and Compliance

This policy will be reviewed annually or as needed based on changing threats, technology, or business needs. Non-compliance may result in disciplinary action up to and including termination. All personnel are responsible for understanding and adhering to these security practices.

Contact for Information Security

For questions or concerns about this policy, contact:PCandPrinter
📍 670 River St, Hyde Park, MA 02136, United States
📞 +1-857-349-0162
🌐 https://pcandprinter.com/