And Guidelines

_____________________________________________________________________________

GENERAL:

James Toyota Ltd. and JIB Automotive Ltd.

The purpose of the Privacy Policy is to help employees and customers understand the procedures that we have implemented regarding the collection, storage, use, disclosure, protection, and accuracy of personal information that we collect and control.  This Privacy Policy balances a customers' right to privacy with our need to collect, use, and/or disclose the information for legitimate business purposes.

JIB Automotive Ltd. has a commitment to integrity, and one way to live up to this commitment is to be responsible for the protection and fair handling of personal information at all times and in dealing with third parties.   Our care in collection , using, and disclosing personal information is essential to continued customer and employee confidence and goodwill.

Personal Information - including health and financial information - is any information relating to an identified or identifiable individual that is controlled or managed by business or organizations engaged in commercial activities.

Personal information includes:

• age, name, ID numbers, income, ethnic origin, or blood type;

• opinions, evaluations, comments, social status, or disciplinary actions;

• employee files, credit records, loan records, medical records, existence of a dispute between a consumer and a merchant, intentions (for example, to acquire goods or services, to change jobs)

Personal information excludes:

• name, title, business, address, and telephone number.

Commercial activities are any particular transaction, act, or conduct or any regular course of conduct that is of a commercial character.

Collection is the act of gathering , acquiring, or obtaining personal information from any source, including third parties, by any means.

Consent is voluntary agreement with what is being done or proposed.  Consent may either be implied or express.

Express consent is given in an explicit manner, either verbally or in writing.

Implied consent arises in situations where consent may be reasonable inferred by the action or inaction of the individual.

Under PIPEDA, there are 10 principles, which our organization follows:

1. Accountability

2. Identify Purposes

3. Knowledge and Consent

4. Limiting Collection

5. Limiting Use, Disclosure and Retention

6. Accuracy

7. Safeguards

8. Openness

9. Individual Access

10. Challenging Compliance

Accountability -

All employees are responsible for personal information under their control.  Our Senior Team is accountable and responsible for compliance with this Privacy Policy.

We identify the purpose or purposes for which personal information is collected at, or before, the time the personal information is collected.  For example, we shall collect personal information for the following reasons:

• to assist customers with the purchase, lease or maintenance of a vehicle and accessories, including warranty programs and financials;

• to identify and communicate with individuals who are interested in receiving information about JIB Automotive Ltd. services and other marketing purposes;

• to comply with government regulations and legal requirements, including recall notifications;

• to participate in customer loyalty programs

• to hire and employ new employees;

• to operate websites controlled by JIB Automotive Ltd.

• to provide information regarding special events and promotions; and

• for other reasonable business purposes, which we believe may be of interest, or of benefit to our customers.

Knowledge and consent -

We obtain the consent of our customers or employees concerning the collection, use or disclosure of personal information.  We make reasonable efforts to endure that customers and employees understand how personal information will be used and disclosed.

We do not use or disclose any personal information for purposes other than those for which it is collected, except with additional consent or as required by law.

We do not sell any personal information provided by our customers.

We retain personal information only as long as it is necessary for the fulfillment of the stated purposes.

Personal information that is no longer required to fulfill the identified purposes is destroyed, erased, or made anonymous.

We use our best efforts to maintain personal information as accurately, completely, and up-to-date as necessary for the purposes for which we have received consent.

We protect personal information by security safeguards appropriate to the sensitivity of the information.  We protect personal information (regardless of the format in which it is held) against loss or theft, unauthorized access, disclosure, copying, use or modification, through appropriate safeguards.

The methods of protection we use to protect personal information include:

1. physical measures, for example, locked filing cabinets and restricted access to offices;

2. organizational measures, for example, staff training, security clearances, and limited access on a need-to-know basis; and

3. technological measures, for example, the use of passwords, encryption, firewalls, anonymizing software.

Each employee is responsible for the use of information within their job function, and our employees are aware of the importance of maintaining security and confidentiality of personal information.

Upon written request, we give customers and employees access to their personal information holding and an account of their use and disclosure.  A customer or employee is entitled to challenge the accuracy and completeness of personal information and to have it amended as appropriate.  Where a customer informs us that they require assistance in making such a written request, we will provide the customer with assistance.  We may require a customer to provide sufficient information to permit us to respond to his or her request, but such information shall only be used or disclosed for this purpose.  We will supply the information in a form that is generally understandable.

We respond to a customer's request for personal information no later than 30 days after receipt of a written request.  More than 30 days may be required when:

1. responding within 30 days would unreasonably interfere with our activities;

2. the time required to undertake any consultations necessary to respond to the request would make the 30 days impractical to meet; or

3. additional time is required in order to convert the personal information into an alternative format, which has been requested by the customer.

We respond to each such request:

1. at no cost to the customer for access; or

2. at a minimal cost to the customer for access where we provide the customer with an estimate of the approximate cost within the 30 day period.  Upon receipt of the estimate, the customer must advise us within the 30 day period that he or she wishes to continue with the request; otherwise we will deem the request withdrawn.

Our customer, prospects, and employees can challenge our organization's compliance with the privacy principles of the Privacy Commissioner of Canada.

We have procedures in place to receive and respond to customer of employee challenges or complaints about the handling of his or her personal information or this Privacy Policy and our practices relating to this policy.

1. Customer or employees who have further inquiries regarding his or her personal information, or who wish to address a challenge regarding our compliance with this Privacy Policy, may contact our Privacy Officer in writing at the address listed below:

          Privacy Officer, JIB Automotive Ltd.    1234 Riverside Dr., Timmins, ON P4R 1A4

If you have any questions about our Privacy Policy, you may contact our Privacy Officer at 705-267-7188 or

Last revised December 31, 2003.