"personal information" means information about an identifiable individual, but does not include the name, title or business address or telephone number of an employee of an organization.

"MedMira" means MedMira Inc., MedMira Laboratories.

At MedMira, we recognize that as a consumer or business you may be providing us with personal information, including your name, address and related information. With this in mind, MedMira has developed this Privacy Statement in compliance with relevant privacy legislation, including the Personal Information Protection and Electronic Documents Act ("PIPEDA").

Our Privacy Officer

We have designated an individual at MedMira to be responsible for the day-to-day care of personal information that may come to be in our control and our compliance with this Privacy Statement (the "Privacy Officer"). You may contact the Privacy Officer at MedMira, in writing, at any time if you require further clarification on this Privacy Statement or to make a request for access to your personal information.

Step 1: Requests for personal information must be made in writing to the email, mailing address or fax number above.

Step 2: MedMira will respond to your inquiry within 30 days of receipt of the letter or email. MedMira may furnish you with the requested information or provide a notice of extension. MedMira reserves the right to sever information from personal information provided to you if, for example, such information may interfere with or harm MedMira or its employees, directors, officers, partners or associated businesses or in some way or reveal confidential commercial information.

Some information requested may have an associated cost for retrieval and provision. If there is a cost for the information you have requested, you will be advised within the first 30 days of such costs. Costs must be paid in full before personal information is released to you.

Step 3: Prior to releasing personal information to you, MedMira reserves the right to confirm your identity. Identification may be confirmed with either of the following;

1. photo identification – 1 piece of photo identification; or
2. a signed document – A signed document or item with the individual’s signature must be provided with a photograph.

In addition to the above, proof of residence must be provided. This may include a driver's license or similar document. Emailed digital photographs of identification will not be accepted, but MedMira will accept clear photocopies or scans of the above documents as proof of identity.

MedMiras will only use the above identity documents for the purpose of confirming your identity. By complying with the above procedures, you consent to this process.

Consent

MedMira is committed to ensuring that you are aware of why your personal information is being collected, how your personal information is being used, and for what reason your personal information may be disclosed. To this end, we will use all reasonable efforts to provide information to you on how your personal information will be used by us as well as to obtain your consent when you provide us with personal information.

As well, we may periodically request confirmation from you to ensure that the personal information collected and maintained by us is up-to-date and accurate and that we have your continuing consent for the use or attention of your personal information.

MedMira may collect, use or disclose your personal information, without notice to you, only if required to do so by law or in the good faith belief that such action is necessary to:

1. conform to obligations imposed by law or statutes;
2. meet an emergency need; and/or
3. If the purposes for collecting, using and disclosing your personal information differ from those purposes listed below, we will advise you, either by amending this Privacy Statement and notifying you of the amendment, or by seeking your further consent.

Personal Information Collected and Used by MedMira

MedMira collects the personal information for the following limited purposes:

1. to establish and maintain scientific information for test purposes;
2. to collect resumes for potential employment;
3. to provide you with services and information you have requested from MedMira;

Through our web sites, we may track length of Internet sessions, general geographic location where you have arrived from on the Internet and other related data, all in an effort to make your time on-line with us better and faster. Information tracked through our web sites is not re-sold in individually identifiable form or used in any way other than for the purpose stated herein.

Disclosure of Personal Information to Third Parties

We do not rent, sell or re-sell any of our member’s personal information in individually identifiable form to other parties, without your consent.

We disclose personal information to third parties in the following situations:

1. where you have specifically given us consent to disclose your personal information for a specific purpose;
2. who are acting on behalf of MedMira as our agents, suppliers, or services providers, solely to enable us to more efficiently provide you with information and services;
3. to determine your suitability for credit;
4. [other parties as necessary].
5. as required by law or in order to protect a legal interest; or
6. in connection with a corporate reorganization, merger or amalgamation with another entity, or a sale of all or a substantial portion of the assets of MedMira Inc., provided that the information disclosed continues to be used for the purposes stated above by the entity acquiring that personal information.

Personal information in individually identifiable form is not sold, transferred, leased or rented to a third party by MedMira. However, MedMira may, from time-to-time, sell aggregate data to a third party. MedMira identifies “aggregate data” as being information relating to 3 or more MedMira consumer customers, excluding business information and excluding names and residential addresses (geographical area may be provided).

MedMira does not accept online payment transactions.

As indicated above, MedMira may, from time-to-time, use the services of third parties, who may be required to deal with personal information collected by MedMira. In that event, we will enter into legal agreements which require these third parties to protect your personal information in a manner acceptable to us. In entering into such agreements, MedMira does not transfer any interest in your personal information to these third parties. Rather, the purpose of these agreements is to ensure that your personal information delivered to third parties is maintained at a level of security comparable to that provided by MedMira.

Retention and Destruction of Personal Information

MedMira retains all information relative to consumers who have submitted their information, including historical data such as resumes. MedMira may from time to time choose to destroy such data. When data is destroyed it is done so in a permanent, secure and private manner. MedMira will not notify an individual of the destruction of his or her personal information.

Protection of Personal Data

Personal information collected by MedMira can be in either a digital format and/or paper format and MedMira takes all reasonable measures to safeguard such information. For security reasons, MedMira does not publicly identify its security procedures.

In general, for protection of personal information in digital form, MedMira utilizes separated databases, RAID with virus and firewall protection and various levels of multiple firewalls and SSL encryption. Access to personal information in paper format is controlled.

In addition, all officers, employees, licensees or business partners of MedMira have signed Non-Disclosure Agreements and all officers and employees of MedMira are bound to keep company information confidential, including personal information of customers of MedMira.

Withdrawal of Consent to Collect Personal Information

By providing personal information or purchasing a product or service from MedMira, you agree to the terms of this Privacy Statement, and the collection, use and disclosure of your personal information for the purposes outlined above. However, you may elect to withdraw consent of use of your personal information at any time. The procedure for withdrawal is as follows:

1. Please send a written request to the Privacy Officer, marked "Confidential" to the address listed in the above.
2. Written notice must indicate why you are making such a request.
3. Please provide proof of identity as indicated above. Such withdrawal of consent may have one or all of the following implications:
   1. An individual who was a customer may have to pay a new access fee if he or she wishes to rejoin MedMira as a customer at a later date.
   2. The individual's personal information will be deleted from MedMira’s records and the individual may have to provide new information.
   3. Any credit established with MedMira will be eliminated. MedMira will notify the individual in writing of the deletion of his or her personal information.

Challenging Compliance

Our Privacy Officer will receive and respond to all information requests regarding our Privacy Policy and about personal information under our care and control. In addition, the Privacy Officer shall respond to any challenge concerning compliance with our Privacy Policy. If you have any questions about personal information that is collected and maintained by us, please contact our Privacy Officer. Where you can demonstrate that an error in the accuracy or completeness of your personal information exists, MedMira will amend your personal information appropriately. When a challenge is not resolved to your satisfaction, then we will, with your consent, destroy your personal information under our care and control. If we are unable to provide you with access to all of the personal information we hold about you, then the reasons for the denial of such access will be provided to you. Though this Privacy Statement, MedMira affirms our commitment to the protection of your personal information. For more information regarding this Privacy Statement, our personal information handling practices or to obtain access to personal information that we have collected from you, please contact our Privacy Officer, in writing, at the contacts listed above.