yes they can browse through your BPS or setup a proxy for it to go through. They can also use WiFi and use their carrier also. You can lock it down so all data must pass through corporate infrastructure.
You can also use IT Policy to control/force how they use it.
after hours gets answers in a longer time frame, even longer after I have a beer, maybe none if I have too many.