Normerica

Normerica Building Systems Inc. - PRIVACY CODE

THE PURPOSE OF THE CODE

Normerica is committed to keeping personal information accurate, confidential, secure, and private. Our Corporate Privacy Code builds on this commitment.

This Corporate Privacy Code provides guidelines that Normerica uses to protect the privacy of personal information, no matter how the information is collected or stored.

The Corporate Privacy Code consists of ten principles. Normerica's corporate privacy policy follows the ten principles as they may apply to our business. In addition, each each department within Normerica may:
- define how it subscribes to each principle
- modify details to provide specific examples
- include additional measures for the protection of personal information

Normerica's' Privacy Code is based on the Canadian Standards Association (CSA) Model Code for the Protection of Personal Information (CAN/CSA-Q830-96).

As part of our mandate, Normerica will continue to review its Privacy Code every two years to ensure it is relevant and up to date.

THE TEN PRIVACY PRINCIPLES

Principle 1 Accountability
Principle 2 Identifying Purposes for which Personal Information is Collected
Principle 3 Getting Consent
Principle 4 Limits on Collecting Personal Information
Principle 5 Limits for Using, Disclosing, and Keeping Personal Information
Principle 6 Keeping Personal Information Accurate
Principle 7 Safeguarding Personal Information
Principle 8 Making Information About Policies and Procedures Available Principle 9 Individual Access to Personal Information
Principle 10 Handling Complaints and Questions

1. ACCOUNTABILITY

Normerica is accountable for all information in its control. The Chief Privacy Officer is accountable for Normericas' compliance with the ten privacy principles.

Normerica recognizes that it is responsible for personal information in its possession or custody, including information that has been transferred to a third party for processing.

Normerica abides by the provisions of the federal law, and assumes responsibility for doing so.

2. IDENTIFYING PURPOSES

Normerica makes all reasonable efforts to ensure that we specify the nature of the intended use of the data at or before the time the information is collected.

3. CONSENT

Normerica makes all reasonable efforts to ensure that organizations providing personal information to us or to our clients have obtained consent from the consumer before disclosing this personal information.

Normerica ensures that all list and other media owners have provided their consumers with a meaningful opportunity to decline to have their name or other information used for any further marketing purposes by a third party. Normerica does not release (give, share or sell) personal information to companies or individuals outside of Normerica.

4. LIMITING COLLECTION

Normerica makes all reasonable efforts to ensure that we limit the collection of the personal information on our lists to that which is necessary for the intended use as identified under Principle 2, Identifying Purposes.

5. LIMITING USE, DISCLOSURE, AND RETENTION

Normerica agrees to keep personal information only as long as necessary for the identified purposes. Formal guidelines and procedures to ensure the safe destruction or disposal of personal information no longer required are established and have been implemented.

6. ACCURACY

Normerica keeps personal information on consumers as up to date as possible for the defined need.

7. SAFEGUARDS

Normerica takes responsibility for the protection of list data. This includes, but is not limited to, restricting physical access to data, organizational restrictions through security clearances on a "need-to-know" basis, and technological measure such as passwords and encryption. Care is also used in the disposal or destruction of personal information so as to prevent unauthorized parties from gaining access to this information.

8. OPENNESS

Normerica is open and forthcoming about the policies and procedures it uses to manage personal information. Consumers have ready access to information about these policies and procedures. Normerica makes every effort to ensure that the consumer easily understands personal information handling practices and procedures.

The Chief Privacy Officer, accountable for Normerica policies and practices relating to privacy, and to whom complaints or inquiries can be forwarded is as follows:

Chief Privacy Officer
Normerica Building Systems Inc.
150 Ram Forest Road
Gormley, ON L0H 1G0

A copy of any information that explains Normericas' privacy policies, standards, and practices is available upon written request to the Chief Privacy Officer at the above address and in addition, it is posted on our website under Privacy at www.normerica.com.

9. INDIVIDUAL ACCESS

Normerica will work with consumers, list, and other media owners to fulfill the right of the consumer to know of the existence, use, and disclosure of his or her personal information and to provide access to that information.

Normerica will make all reasonable efforts to provide this information to the consumer upon request. The procedure for responding to consumers' requests for access is available from the Chief Privacy Officer. When a consumer asks, Normerica will make these procedures known to the consumer.

The consumer must recognize that they are required to provide Normerica with sufficient personal information that will allow us to determine whether we do hold a personal information file pertaining to them. The provision of this information shall not be used for any other purpose.

Normerica will respond to a consumer's request within a reasonable time and at minimal or no cost to the individual. In some cases, where Normerica may have to incur significant and unreasonable costs to fulfill a consumer's request, the consumer will be advised of this cost. Agreement will be obtained for payment by the consumer prior to Normerica undertaking the work if the consumer is still interested in pursuing his or her request.

If Normerica denies a consumer's request for access to personal information, we will tell the consumer why. The consumer may then opt to challenge Normerica's' decision (see Principle 10).

10. CHALLENGING COMPLIANCE

Consumers may challenge Normericas' compliance with its own privacy code. Normerica has policies and procedures in place to receive, investigate and respond to consumers' complaints and inquiries. Information regarding these procedures and the complaint escalation process is available through Normericas' Chief Privacy Officer.

Dated: May 2, 2006

Normerica Building Systems Inc. - TERMS OF USE

All drawings, designs, photos and specifications on this site are for viewing only, and no licence to reproduce, copy or modify them in any way is granted. Any person making such reproductions, copies or modifications without Normerica's consent will be prosecuted.