Investor Privacy Notice Catherine Craig is committed to respecting the privacy of individuals and recognizes the need of people with whom we do business and employees for the appropriate management and protection of any Personal Information that you agree to provide to us. Our Privacy Management Plan includes guidelines on the collection, storage, use and retention of your Personal Information as follows: Collection: The organization collects personal information about individuals (clients, suppliers, employees, etc) in order to better manage its business. The organization will make all reasonable efforts to fully inform such individuals about the planned use/disclosure. The organization will limit the collection and use of personal information to that required for valid business purposes or to comply with legislation. Accuracy: The organization will make every reasonable effort to ensure that the personal information it collects and uses is accurate and complete. Individuals providing personal information will have the opportunity to review and correct their personal information, and on written request by an individual to whom the information relates, the organization will modify the information as required. Storage: The organization will store personal information using hard copy and/or electronic means in such a way as to prevent unauthorized collection, access, use, disclosure or disposal of the personal information. Retention: The organization will establish a retention period for all personal information collected. This period may be related to legislation other than PIPEDA (Employment Standards for example). Disclosure: The organization will not disclose personal information unnecessarily to employees or any third party, unless the effected individual consents. Access: The organization promotes individual’s right of access to personal information about themselves. The organization will provide access to information upon request. Access will be provided according to established procedures. Note: access to a record may be subject to the payment of a fee should one be levied to the organization. In addition to the care that Catherine Craig takes directly, we are also working with all of our partner organizations that may at some point handle personal information gathered by us in the course of their relationship with and service to us. Each third party partner has agreed to meet our standards of privacy, confidentiality and security. All Employees and third party staff who in any way handle or manage Personal Information have acknowledged and agreed to adhere to our Privacy Code and the procedures that support that code. For further information contact: Privacy Officer (PO): Catherine Craig Phone: (905) 765-7132 Email: catherine@rbcraig.com You can also contact the Office of the Privacy Commissioner of Canada for assistance between the hours of 9 am and 5 pm, at: Toll-free: 1-800-282-1376 Phone: (613) 995-8210 Fax: (613) 947-6850 or by mail at: 112 Kent Street Place de Ville Tower B, 3rd Floor Ottawa, Ontario K1A 1H3 or on the Web at: http://www.privcom.gc.ca/