Biometric Information Policy
Last Updated: February 1, 2026
This Biometric Information Policy ("Policy") describes how StaffrWorks, Inc. ("we", "us", "our") collects, uses, stores, and retains biometric data. This policy is designed to comply with applicable laws, including the Illinois Biometric Information Privacy Act (BIPA).
1. Definition of Biometric Data
"Biometric Data" includes "biometric identifiers" and "biometric information" as defined by applicable law. This may include a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry.
2. Purpose of Collection
We, or our third-party vendors, may collect, store, and use Biometric Data solely for the purpose of employee identity verification and fraud prevention in connection with our Time Clock and attendance features. Specifically, we may verify that the person clocking in is indeed the authorized employee.
3. Consent
Before collecting any Biometric Data, your employer (our Customer) is required to:
- Inform you in writing that Biometric Data is being collected, stored, and used.
- Indicate the specific purpose and length of term for which Biometric Data is being collected, stored, and used.
- Obtain your written release (consent) authorizing the collection, storage, and use of your Biometric Data.
By using the Time Clock feature with photo verification or facial recognition enabled, you acknowledge that you have provided such consent to your employer.
4. Disclosure and Sharing
We will not disclose, redisclose, or otherwise disseminate your Biometric Data unless:
- You or your authorized representative have consented to the disclosure.
- The disclosure is required by state or federal law or municipal ordinance.
- The disclosure is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.
- The disclosure is necessary to complete the transaction (verification) for which the Biometric Data was collected (e.g., sending to our secure cloud processor).
We do not sell, lease, trade, or otherwise profit from your Biometric Data.
5. Retention and Destruction Schedule
We will retain Biometric Data only until the first of the following occurs:
- The initial purpose for collecting or obtaining such Biometric Data has been satisfied (e.g., identity verified).
- Three (3) years following your last interaction with the StaffrWorks platform.
- Or, in accordance with your employer's specific retention policy, if shorter.
Upon the occurrence of any of the above, we will permanently destroy your Biometric Data from our systems.
6. Data Storage
We use a reasonable standard of care to store, transmit, and protect from disclosure any paper or electronic biometric data collected. Such storage, transmission, and protection from disclosure shall be performed in a manner that is the same as or more protective than the manner in which we store, transmit, and protect other confidential and sensitive information.
7. Contact
If you have questions about our Biometric Information Policy, please contact our Legal Department at legal@staffrworks.com.