1. ThruYou Principles

ThruYou believes in enabling and empowering individuals with control, choice and flexibility to help make social responsibility a part of everyday living. The features of www.thruyou.com have been created with the following important principles around individual privacy:

1. You have control over your personal information.
   ThruYou will help you post information about the causes you believe in. You have ultimate control over what you share with whom.

2. You choose what information is shared on an opt-in basis.
   Our membership includes charitable giving organizations, socially-responsible corporations and many individuals like you. We believe sharing information with other members of our community is helpful, but the choice is yours.

ThruYou is committed to protecting your privacy and maintaining the integrity of any identifiable information we collect. This Privacy Statement outlines the identifiable information ("Personal Information") ThruYou collects, how we use that Personal Information and the steps we take to keep this information confidential. This Statement will also instruct you on what to do if you do not want your Personal Information collected or shared when you visit ThruYou sites or respond to our advertisements. It will also provide you with contact information should you have questions or concerns about our Personal Information protection practices. We may modify this Privacy Policy and you should therefore periodically visit www.thruyou.com to be sure that you have read and agree with our most current Privacy Statement.

2. Information Collection

2.1

What type of Personal Information does ThruYou collect?

ThruYou collects various types of Personal Information. Some examples of Personal Information collected may include your name, address, telephone number, e-mail address, date of birth, demographic information and personal preferences.

2.2.

How and Why does ThruYou collect your Personal Information?

Personal Information may be collected through the normal course of doing business, through this website (or other websites we may own and control), through any dispute resolution process, through our customer service representatives, and through market research. We may collect Personal Information by asking you to voluntarily respond to certain questions on our website. Specifically, Personal Information may also be collected when you subscribe to our mailing list, participate in a survey, enter a contest or attend a promotional event. If you choose to apply for certain products or services, directly or with our partner organizations, you may be asked for Personal Information. Personal Information will be collected if you apply for a job with ThruYou. Personal Information of employees and prospective employees of ThruYou are covered by our employment privacy policy. If you do not want your Personal Information collected, please do not submit it to us.

1. Registration
   In order to use this website, you must first complete the registration form and successfully become a member. During registration you are required to give contact information (including your name and email address). We use this information to contact you about services on our site in which you express an interest, and to assist in confirming your identity if you have forgotten your user name or password, etc.

2. ThruYou MasterCard®
   If you choose to apply online for the ThruYou MasterCard® credit card, you will be transferred to an application page from a website that is owned and hosted by MBNA Canada Bank, where you will be asked for certain Personal Information necessary to process your card application and to contact you. For your convenience, ThruYou may populate application forms for you to view before submitting the application. However, no information is transmitted with the pre-population of data until you consent by submitting the application. If you apply for the ThruYou MasterCard® using a paper application, we will need to contact you to ensure that you become a member of ThruYou on the site. For additional information about how MBNA safeguards your privacy please refer to www.mbna.ca/privacy.

3. Canadian Online Giving Foundation
   ThruYou utilizes certain software to facilitate donations and tax receipting for its members' donations. If you desire a tax receipt respecting your donations, you will provide certain Personal Information to ThruYou or the Canadian Online Giving Foundation or its agent for the purpose of satisfying the legal requirements of Canada Revenue Agency for issuing a tax receipt. This Personal Information will also be managed in accordance with this Privacy Policy and applicable law.

4. Other Third Parties
   You will be notified when your Personal Information is collected by any third party that is not our agent/service provider, so you can make an informed choice as to whether or not to share your information with that party.

2.3

Other types of information Collected

1. Log files
   As is true of most Web sites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp and click stream data;

2. Cookies
   A cookie is a small text file that is stored on a user's computer for record-keeping purposes. Like most websites, we use cookies on this site. We use both session ID cookies to make it easier for you to navigate our site and persistent cookies. A session ID cookie expires when you close your browser. Persistent cookies remain on your hard drive. You can remove persistent cookies by following directions provided in your Internet browser's help file. We use persistent cookies to track and target the interests of our users. For example, a cause that refers you to www.thruyou.com will use our persistent cookies to ensure we display the relevant information we need to accept their referral. You can set your browser to refuse cookies, but not all elements of our site may function seamlessly.

3. Use of Information

3.1

General

When you register in the ThruYou program and provide Personal Information to us voluntarily, ThruYou may use your Personal Information for the following reasons:

• to identify you;
• to register you in the program;
• to comply with legal requirements;
• to protect us both against fraud;
• to manage any concerns or disputes;
• to process and manage accumulation, processing and redemption of Donation Credits;
• to respond to your customer service inquiries, post your comments or statements on any blog or other online forum maintained on the Site, or take other actions in response to your inquiries or other online activities.

3.2

Use of Information for Marketing and Fundraising Purposes

ThruYou collects Personal Information and, with your consent, uses it for the following reasons:

1. Statistical:

   To understand the demographics of members interested in fund-raising and charitable giving, and to create statistics that help us to better understand your interests and improve our website's performance.

2. Research:

   To contact you to participate in voluntary surveys;

3. Customer Service:

   Based upon the Personal Information you provide us, we may send you a welcome e-mail to verify your username and password. We will also communicate with you in response to your inquiries, to provide the services you request, and to manage your account. We will send you service-related announcements and communicate with you by email or telephone in accordance with your wishes.

4. Marketing:

   To contact you, and to send you information about events, activities and opportunities to earn or match Donation Credits. We may also use information to understand your interest in eligible charities, relevant offers and events, improve our websites and promotions, provide you with information regarding other philanthropic services that may interest you, and to send you promotional offers.

5. Fundraising:

   To contact you, and to send you information about fundraising opportunities, matching programs, and the like. Charities you support may also send you information on programs and events you have requested, although we do not provide charities with the ability to contact you outside the ThruYou website unless you have requested that such contact information be provided.

6. Profile:

   We store information that we collect through cookies, log files to create a "profile" of your preferences. We may tie your personally identifiable information, or your activity history, to information in the profile in order to provide tailored content, promotions and marketing offers, and to improve the relevance of the site for you. We do not share information in your profile that you have indicated is private with other third parties.

3.3

Use of Information to administer the ThruYou MasterCard® credit card program:

As indicated in the MBNA card program terms and conditions, you consent to and authorize MBNA and ThruYou, their subsidiaries and affiliates and any non-affiliated third parties with whom any of the foregoing contract in order to manage the Card Donation Program, to share only that information about you, your ThruYou Credit Card account and the Card Donation Program as is necessary to effect, administer, enforce, service or fulfill the terms of the Card Donation Program. MBNA will set out its privacy policy at the time you apply for your card.

4. Your Consent/Opt-in

ThruYou only collects Personal Information that you voluntarily share with us. Providing your Personal Information, either in person, by telephone, written application or online, constitutes your consent to the collection, use and disclosure of such Personal Information by ThruYou for the purposes outlined above or explained to you at the time information is collected. We only collect information by lawful means and do not collect any information in a manner that is unreasonably intrusive. If you do not want ThruYou to use Personal Information collected about you for marketing purposes, please use the facilities of the website or contact emails provided to tell us at the time the information is collected.

5. Choice/Opt-Out

If you have previously chosen to opt-in, we provide you the opportunity to 'opt-out' of having your Personal Information used for selected purposes. You can 'opt-out' by changing your profile settings, clicking on unsubscribe on any email generated by ThruYou or a ThruYou member, by sending an email to us at info@thruyou.com, or by calling 1-866-701-2757.

6. The Disclosure of Personal Information

ThruYou does not sell your Personal Information to third parties. However, ThruYou may, on occasion, share some or all of your Personal Information with third parties for the purposes set out below and otherwise described in this Privacy Policy. For example, Personal Information may be shared:

1. With Program Originators, the Canadian Online Giving Foundation and their affiliates or agents for purposes of managing the donation program including the collection and processing of Donation Credits and the issuance of tax receipts and donation reports;

2. With legal representatives and appropriate governmental and law enforcement representatives for security, health and safety and legal or regulatory compliance reasons;

3. With third parties that provide ThruYou with services, such as processing and marketing.

Some of these third parties may be located in the United States. Therefore, your information may be processed and stored in the United States and, as a result, the United States governments, courts, or law enforcement or regulatory agencies may be able to obtain disclosure of your information through the laws of the United States. In addition, ThruYou may disclose your Personal Information where and when required or permitted by law to do so. Only designated individuals and service providers within ThruYou have access to Personal Information collected.

Your Personal Information will be transferred in the context of a reorganization or sale of the business or its assets to a party agreeing to use your Personal Information for the same purposes set out in this Privacy Policy.

7. How ThruYou Protects Your Privacy

ThruYou keeps the Personal Information it collects about you confidential. The security of your Personal Information is important to us. When you enter sensitive information (such as a credit card number and/or social insurance number) on our registration or order forms, we encrypt that information using secure socket layer technology (SSL). To learn more about SSL, follow this link http://www.verisign.com/ssl/ssl-information-center/how-ssl-security-works

We follow generally accepted industry standards to protect the Personal Information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

If you have any questions about security on our Web site, you can send e-mail to us at info@thruyou.com. Security measures adopted by ThruYou include limiting the number of individuals with access to your Personal Information. Any affiliate, supplier, agent, employee or other party performing services on ThruYou's behalf who gain access or view Personal Information are bound to maintain the confidentiality of all Personal Information and may not use the information for any unauthorized purpose.

8. Verifying and Amending your Personal Information

You can access and review Personal Information held by ThruYou and make corrections to it at any time by logging into www.thruyou.com and either updating or amending your member profile.

9. Children

The ThruYou website is not directed at children and most of the online services that we offer are designed for individuals who are 18 years of age or older. ThruYou does not knowingly collect the Personal Information of minors. If you are a minor please do not submit any information or register for this program. ThruYou may post volunteer opportunities for children or youth under the age of 18. To pursue these opportunities, we will either provide direct contact information for the hiring organization or request contact information from an adult for any follow up activities.

10. Links

Links from this site may take you to other websites. Please be aware that we are not responsible for the privacy practices of such other sites. We advise you to check their privacy policies yourself before submitting any Personal Information.

11. Resolving Your Concerns

If you would like more information about ThruYou's Personal Information collection, use and disclosure practices or you would like to better understand and verify what Personal Information we have collected about you, please contact us. We can assist you in correcting any inaccurate information. Please let us know about your questions or concerns by emailing info@thruyou.com or calling 1-866-701-2757.

12. Changes to this Privacy Policy

ThruYou may add, modify or remove portions of this Privacy Policy, as and when it deems necessary or appropriate. You will be able to determine when this Privacy Policy was most recently modified by referring to the "last update" date appearing at the end of this document. Please visit privacy for the most recent version of this Privacy Policy.

13. Contacting ThruYou About Privacy

If you are not satisfied with the access to Personal Information with which we have provided you or you have other questions or concerns please contact us at:

Email: info@thruyou.com
Telephone: 1-866-701-2757

This site is intended for Canadian audiences only

Last Updated: November 16, 2009

This Privacy Policy contemplates certain functionality on the ThruYou site that may not yet be live (such as the ability to subscribe to our mailing list or customize "opt-in" settings in your account profile). Please return to the site frequently, as we will be adding significant features and functionality over the next 60-90 days. Any terms used in this Privacy Policy as defined terms that are not defined in this Privacy Policy, have the respective meanings specified in the Member Agreement.