Privacy Policy Canadian Mental Health Association Privacy Policy Canadian Mental Health Association Inc. ("Canadian Mental Health Association") recognizes that trust is the cornerstone of any cooperative effort and we are committed to protecting the privacy of our Clients and Customers. We use industry standard security technology in order to protect the information submitted to us from unauthorized disclosure and ensure that the information is used only for its intended purpose and as set forth below. The following reflects not only our Privacy Policy, but also our commitment to our Clients. NOTICE: WE ARE NOT RESPONSIBLE FOR DIFFERING OR VARYING PRIVACY POLICIES USED BY PRINTERS OR SUPPLIERS AT ITS PRIVATE LABEL SITE. THIS POLICY REFERS SOLELY TO CANADIAN MENTAL HEALTH ASSOCIATION'S POSITION ON PRIVACY AND OUR USE OF INFORMATION GATHERED BY OR SUBMITTED TO THE PRIVATE LABEL SITE WHICH WE HOST. INFORMATION GATHERING In general, we gather information about all Users of Private Label Sites collectively, such as the types, specifications, and volumes of print and related products bought and sold on each Private Label Site. We have the ability to track what areas of each Private Label Site are visited and what services Users access the most. We only use and disclose such data anonymously and in the aggregate. This information helps us determine what is most beneficial for our Customers, and how we can continually create a better overall experience for all of our Users. We may share this information with our Clients and their affiliates, but only in the aggregate, so that they too may understand how Users use their Private Label Site. PERSONAL INFORMATION Users are required to provide certain information when registering to use a Private Label Site, including their name, their company's name, mailing and business addresses, e-mail address, telephone number and facsimile number. Canadian Mental Health Association will not provide any specific information about any Clients to third parties for the purpose of soliciting business from such parties. If you choose to limit the information maintained on a Private Label Site about you or your company, the Private Label Sites have been designed to accommodate your need for privacy. GENERAL INFORMATION DISCLOSURE Canadian Mental Health Association does not disclose information about specific User interactions to a Private Label Site, or personal or corporate information that our Clients provide in connection with the use of a Private Label Site, such as name, address, e-mail address, telephone number and facsimile number, to any outside parties or other Clients for which Canadian Mental Health Association maintains Private Label Sites, except when we believe the law requires such disclosure or as specifically described elsewhere in this Privacy Policy. In addition, Canadian Mental Health Association does not release commercial information related to a specific transaction, individual or company to anyone without the prior written consent of all parties involved. We do not and will not sell any information gathered from the Private Label Sites. UPDATING REGISTRATION INFORMATION Each Private Label Site allows the Client to change or correct a User's personal or corporate information at any time. A User should contact a designated employee of the Client for which we host the Private Label Site who has access to the site manager for the Private Label Site in order to change such personal or corporate information. SECURITY Canadian Mental Health Association has implemented multiple security measures to protect the loss, misuse and alteration of information under our control. For example, all confidential commercial information entered on a Private Label Site is fully secured by multiple levels of password protection and Canadian Mental Health Association's internal processes that ensure no unauthorized individual will come into contact with any sensitive User information such as price and customer data. As previously described, Canadian Mental Health Association will, on occasion, use certain commercial data in anonymous and aggregated form. No individual, company or transaction data will be directly or indirectly identifiable or attributable to a specific person from viewing such aggregated data.

|