HOW WE PROTECT YOU -- COMPLIANCE ASSURANCE CORPORATION'S
ONLINE PRIVACY PRACTICE

Protecting the Confidentiality of Our Clients' Information

Effective January 2007

Compliance Assurance Corporation Privacy Protection: Our Commitment to You.

At Compliance Assurance Corporation, we recognize the sensitive nature of your information, and we take appropriate precautions to protect your privacy. When you entrust us with this information, you can be certain it will be used only within our strict guidelines.

Compliance Assurance Corporation is a professional services company. Many of our clients are in regulated industries and are required to comply with international, national, state, and local Privacy and Security Laws. (For example: Gramm-Leach-Bliley, HIPAA, FERPA, Patriot Act, etc.)

As part of our clients' compliance obligations, service providers that have access to secure information must also maintain appropriate safeguards to protect that information.

This describes the privacy and security practices we use to protect our clients' confidential information. We hope you will read through all the details of Compliance Assurance Corporation's official position on privacy. More importantly, we want you to understand that Compliance Assurance Corporation uses information responsibly to:

• Provide you with the services you've requested.
• Offer you other products and services.
• Make doing business with Compliance Assurance Corporation more convenient for you.

Compliance Assurance Corporation will not trade, rent or sell your company information to anyone. We will not provide information to non-Compliance Assurance Corporation companies for the purpose of independent telemarketing or direct mail marketing of any products or services. This policy statement takes the place of any previous privacy policies issued by Compliance Assurance Corporation Inc., or any of its subsidiaries. If, in addition to federal law, you are protected by specific state or local regulations concerning information sharing, Compliance Assurance Corporation will fully comply with those regulations as well.

Information we collect:

We only collect information that is necessary to properly carry out our services or to deliver our products.

How we use this information:

The information we collect is used to help us deliver the services you've requested, easily and efficiently. It may also permit us to design and offer specific products and services that we believe will be useful to you and other Clients.

Who has access to this information?

Within Compliance Assurance Corporation: Compliance Assurance Corporation employees are permitted access to the information they need to perform their jobs on your behalf. We maintain strict internal policies against unauthorized disclosure or use of Client information by employees.

Outside service providers: We have arrangements with companies whose experience is essential for our own services to operate properly. For example, we work with firms that provide technical products and services. Compliance Assurance Corporation also works with companies that assist us in marketing our own products and services. For example, these firms may perform direct mail fulfillment or conduct surveys on our web site. These companies perform their functions at Compliance Assurance Corporation's direction and we only share Client information that is necessary for them to perform these functions. As with all our business partners, these companies are required to safeguard your information and only use it for authorized purposes, and within the guidelines established by Compliance Assurance Corporation for the protection of Client information.

Courts and government bodies: Certain federal and state laws may require us to share information about you. For example, if you are involved in a legal matter with a third party, we may be ordered to provide information to a court or other party. In these circumstances, only the specific information required by law, subpoena, or court order will be shared.

If you have any questions or would like to speak with our Compliance Officer, you can write to us at:

ATTN: Compliance Officer

Compliance Assurance Corporation, Inc.
622 Second Ave.
Pittsburgh, PA 15219

You can fax us with your name, company name, address and telephone number to: (412) 535-0545, Attn: Client Compliance Officer.

How we protect your privacy online:

Your privacy is as important to us in the online world as it is everywhere else within Compliance Assurance Corporation. While this policy governs Compliance Assurance Corporation's corporate data sharing activities, there may be cases where we need to treat your information differently than described here while doing business with you online. In these cases, we will provide you with a clear, plain-language disclosure and obtain your authorization before proceeding. The authorization may come in the form of "clicking" on a disclosure, replying to an e-mail or enrolling in specialized online services. While additional privacy concerns may appear in the online world. Compliance Assurance Corporation will always protect your privacy in a manner that is consistent with the principles outlined in this policy.

National Do Not Call Registry

The Federal Government's national registry makes it easier for consumers to stop receiving most telemarketing sales calls. You can register online at www.donotcall.gov if you have an active email address, or call toll-free, 1-888-382-1222 (TTY 1-866-290-4236), from the number you wish to register. Registration is free.

The National Do Not Call Registry does not apply to charities, political organizations and telephone surveyors, as well as existing business relationships. As a Compliance Assurance Corporation Client, if you place your number on the national registry, you may still receive occasional telemarketing calls from us.

Protect Yourself

The most effective privacy policy is the precautions you take to guard against the disclosure and unauthorized use of your account and personal information. Never provide personal or company information over the phone unless you have initiated the call and know with whom you are speaking.

Government Information on Privacy

For other valuable consumer information, including information on protecting yourself from identity theft, visit www.consumer.gov , a web site sponsored by the U.S. Government.

Where to find out more:

If you have questions, concerns or comments about our privacy practices or the way your information is maintained and used, we'd like to hear from you. Please email us at legal@complyfast.com.