The Privacy Undertaking Agreement (this "Agreement") forms part of the agreement it is attached to (the “Agreement”) as Schedule “C”. This agreement is made effective as of the date setout in Schedule "A" BETWEEN TRENDCRAFTERS, LLC the signee of this form (Thereafter referred to as "consultant".
For the purposes of Section 8 of the Agreement, the Consultant hereby agrees as follows: WHEREAS the Consultant (which terms includes any employee, independent contractor, officer, or agent of the Consultant, including the Representative) may be exposed to Personal Information (“Personal Information”), which must be protected and held in strict confidence pursuant to the Privacy Act. As a result, the Consultant agrees that:

1. DEFINITION
   In this Privacy Undertaking:
   1. “Act” means the Privacy Act, (R.S., 1985, c. P-21), as amended from time to time; and
   2. “Personal Information” means personal information as defined in the Act, which is disclosed to or collected by the Consultant in the course of the performance of the Agreement


2. PURPOSE
   The purpose of this Privacy Undertaking is:
   1. to enable TRENDCRAFTERS, LLC to comply with its statutory obligations under the Act with respect to Personal Information;
   2. to ensure that, as a service provider to TRENDCRAFTERS, LLC, the Consultant is aware of and complies with the requirements of the Act
      with respect to Personal Information; and
      
   3. if applicable, to enable TRENDCRAFTERS, LLC, to ensure protection of the Personal Information in light of the potential application
      of domestic and foreign legislation.


3. ONWERSHIP OF PERSONAL INFORMATION
   1. Unless TRENDCRAFTERS, LLC otherwise specifies, the Consultant is merely the custodian of the Personal Information and has no ownership
      or control of any such Personal Information, TRENDCRAFTERS remaining the sole owner thereof.


4. COLLECTION OF PERSONAL INFORMATION
   Unless TRENDCRAFTERS, LLC otherwise specifies, in the course of performing its obligations under the Agreement, the Consultant shall:
   1. collect and use Personal Information only as necessary for the performance of the Consultant’s obligations under the Agreement;
   2. subject to Paragraph (c) below, collect Personal Information from the individual to whom the Personal Information pertains and inform the individual of:
      1. the purpose of the collection, and
      2. the title, business address, and business telephone number of the person designated by TRENDCRAFTERS, LLC to answer questions about the Consultant's collection of the Personal Information; and
      3. obtain prior written authorization from TRENDCRAFTERS, LLC if information is to be collected otherwise than from the individual.


5. MEANS OF ELECTRONIC COMMUNICATION
   1. Personal Information may only be communicated by means of properly addressed e-mails, fax, or voice mail. Use of any other means of communication, including text, social media, etc. is subject to the prior written authorization of TRENDCRAFTERS.


6. USE OF PERSONAL INFORMATION
   1. The Consultant may only use the Personal Information for the use for which it is collected and in the performance of the Consultant’s obligations under the Agreement. Without limiting the generality of the foregoing, the Consultant shall not make any use of the Personal Information under Subsection 8(2) of the Act unless the prior written authorization of TRENDCRAFTERS is obtained.


7. DISCLOSURE, ACCESSAND LOCATION OF PERSONAL INFORMATION
   In addition to the terms included in this Schedule “C”, the Consultant shall maintain and treat and shall ensure that any subcontractor shall maintain and treat Personal Information as confidential at all times in accordance with Schedule “B” attached to the Agreement. In the event of a conflict between the terms of Schedule “B” and the terms of this Schedule “C”, the terms of this Schedule “C” shall prevail. The Consultant shall not:
   1. Transmit, disclose, or permit disclosure of or access to Personal Information, except to those of its employees and officers who have a need to know for the performance of the Consultant’s obligations under the Agreement; and transmit, disclose, permit disclosure, use or access, or store Personal Information outside the boundaries of the jurisdiction(s) identified in Schedule “A” (if such jurisdiction(s) has/have been determined
   2. Acceptable to TRENDCRAFTERS, LLC. The Consultant shall ensure that no person outside the jurisdiction(s) identified in Schedule “A” (including any affiliate of the Consultant) has access to the Personal Information (if such jurisdiction(s) has/have been determined acceptable to TRENDCRAFTERS, LLC.


8. REQUESTS FOR ACCESS TO PERSONAL INFORMATION
   If the Consultant receives a written or verbal request for access to Personal Information, the Consultant must within five (5) days of such request being made advise the requestor to make the request to TRENDCRAFTERS’s Compliance & Ethics / Privacy and Access to Information Team and provide the following information or information provided by TRENDCRAFTERS, LLC:
   
   Compliance & Ethics / Privacy & Access to Information
   TrendCrafters, LLC
   8442 Fieldstone Way
   Hyattsville MD 20785


9. PROTECTION OF PERSONAL INFORMATION
   The Consultant must protect the Personal Information by making appropriate security arrangements, acceptable to TRENDCRAFTERS, LLCagainst risks such as unauthorized access, collection, use, disclosure or disposal, including keeping the Personal Information in a secure location.
   


10. RETENTION OF PERSONAL INFORMATION
    The Consultant shall only retain the Personal Information until the earlier of:
    1. Completion or termination of the Agreement; and
    2. Receipt of a direction in writing from TRENDCRAFTERS to return or, at TRENDCRAFTERS’s option, destroy, the Personal Information, at which time the Consultant will immediately return or destroy, as applicable, all Personal Information including all copies thereof, whether in paper or electronic form. If the Personal Information is destroyed at the direction of
       TRENDCRAFTERS, LLC the
       Consultant will provide TRENDCRAFTERS, LLC,upon request with written confirmation of such destruction.


11. ACCURACY AND CORRECTION OF PERSONAL INFORMATION
    The Consultant must make every reasonable effort to ensure the accuracy and completeness of any Personal Information collected by the Consultant. The Consultant must correct or annotate any Personal Information in accordance with any written direction from TRENDCRAFTERS to do so, within the time period set out in the request. The Consultant shall send TRENDCRAFTERS the corrected or annotated Personal Information within five (5) business days of correcting or annotating any Personal Information under this Section C11. If the Consultant receives a Correction Request from a person other than TRENDCRAFTERS, LLC, the Consultant must within five (5) days of any such request advise such person to make the request to the Privacy Coordinator.


12. COMPLIANCE WITH THE ACT AND DIRECTIONS
    The Consultant must comply with the:
    1. Any requirements of the Act applicable to the Consultant as a result of entering into the Agreement, including any applicable order of the commissioner (as defined in the Act) under the Act; and
    2. Any direction given by TRENDCRAFTERS, LLC under this Privacy Undertaking.


13. SURVIVAL
    The obligations of the Consultant under this Privacy Undertaking shall survive for as long as the Consultant retains any personal information


14. CONFLICT
    The Consultant must comply with the provisions of this Privacy Undertaking despite any conflicting provision of the Agreement or the law of any jurisdiction in or outside the United States of America (USA).

The Consultant has read and executed this Privacy Undertaking Agreement by its initialing and dating below