Privacy Statement for DRS Field Data Collection Apps

This privacy statement applies to field data collection applications ("FDCAs") developed by D.R. Systems Inc. ("DRS") for other parties, both on windows and on mobile devices. It describes the information that these applications may collect, use, share, and store.

Collection of Personal and Business Information

As defined in British Columbia's Personal Information Protection Act (PIPA), Personal Information means information about an identifiable individual, but does not include contact information; Contact information is information that would enable an individual to be contacted at a place of business, and includes name, position name or title, business telephone number, business address, business email or business fax number.

The FDCAs collect and processes information that may incidentally identify you; this information may include surveyor name, location data and photos.

The FDCAs may collect business contact information including name and business email address, and of course they also collect business data related to the application's functionality.

The collection of this data is necessary to fulfill the following purposes:

• To deliver the contracted services

Consent

Each FDCA is for use by personnel identified by the organizations for which DRS has been contracted to develop each specific application. These personnel do not enter into an agreement with DRS; rather, their use of the software is governed by agreements they may enter into with the applicable organization. By using the FDCA in conjunction with any related signed agreement, or when demoing the application as provided by DRS, you are providing consent for the applicable organization to collect and process information as described in this privacy statement.

Use and disclosure of Information

DRS will only use or disclose personal information where necessary to fulfill the functionality of, test changes to, or diagnose issue with, the FDCA and related applications. We will not use or disclose personal information for any additional purpose unless we obtain the consent to do so. DRS will not sell personal information to other parties.

Retention of Information

Some information collected by the FDCA will eventually reside in DRS information systems. DRS Retains this information collected as long as necessary to fulfill the functionality of the application in accordance with agreements between DRS and the applicable organization. Personal information collected by the FDCA by an agent of an organization (i.e. name, email address, location and photos) becomes the property of the agent's organization. Upon termination of a development contract between DRS and an organization, related data will be retained pending renewal of the contract. Any data collected as part of a demo may be retained for future demos.

Ensuring Accuracy of, Access to, and Deletion of Information

Since personal information collected by the FDCAs (name, email address, location and photos) becomes the property of the agent's organization, DRS transfers all responsibility for the accuracy of information to that organization and its agents. Access to the information is by way of authorized agents of the organization. In addition, arrangements for deletion of personal information in the FDCA can be made by contacting the appropriate authorized agent within the organization.

Securing Information

We are committed to ensuring the security of customer information in order to protect it from unauthorized access, collection, use, disclosure, copying, modification or disposal or similar risks.

DRS maintains an information security management system which implements many measures and controls to ensure that customer information is appropriately protected, including:

• Access controls (user, password, and encryption management)
• Network controls (segregation, ACLs, firewalls)
• Supplier management controls

DRS continually reviews and updates its security policies and controls as technology changes to ensure ongoing information security.

Questions and Complaints

The DRS Privacy Officer is responsible for ensuring DRS' compliance with this policy and the Personal Information Protection Act.

Application users should direct any complaints, concerns or questions regarding DRS' compliance in writing to the Privacy Officer. If the Privacy Officer is unable to resolve the concern, the customer may also write to the Information and Privacy Commissioner of British Columbia.

DRS's Privacy Officer can be contacted at: privacy@drsystemsinc.com