Cognitive Edge will collect personal information, manage and use it, and disclose it in a way that complies with the spirit of relevant legislation. This spirit will underpin all aspects of Cognitive Edge's dealings with personal information. This policy shall apply to Cognitive Edge its controlled entities and its affiliated bodies.

The following statements are intended to communicate simply and clearly Cognitive Edge's intentions.

In collecting personal information Cognitive Edge will:

Only collect information for lawful purposes related to its function;

Only collect the information that is necessary and by lawful means;

Where possible only collect personal information that is provided by the individual to whom the information relates, collecting in a way that is not personally intrusive;

Where information is provided by someone else, ensure that collection has been authorised by the individual concerned, or by someone who is legally authorised to provide it on their behalf; and

Notify the individual concerned that personal information is being collected, either at the time of collection or as soon as practicable afterwards.

Cognitive Edge will declare to individuals from whom information is collected: The purpose for collecting the personal information; Whether or not the collection is voluntary and any consequences for not providing it; How the information is to be held and the intended recipients; The name and address of any agency used to collect information on Cognitive Edge's behalf; and How individuals can obtain access to their information, check it for accuracy and completeness, and make application to correct it. Cognitive Edge will manage personal information responsibly by:Taking reasonable steps to ensure that personal information held is relevant to the purpose for which it was collected, accurate, up to date and not misleading; Retaining personal information for no longer than necessary, then disposing of it securely in accordance with approved methods; Protecting it from loss or unauthorised access, use, disclosure, or misuse, and from unauthorised modification; Taking reasonable steps to prevent its disclosure without authorisation by external service providers; and

Only disclosing personal information outside Cognitive Edge or its affiliated bodies where:

• its disclosure has been consented to by the individual to whom it relates; or
• its disclosure is required by law and requested in an authorised written form; or
• it is reasonably believed to be necessary to prevent or lessen a serious threat to life or health of any person.