Summary of Principles

Accountability: Northwestel and its affiliates are responsible for personal customer information under our control and have designated the specific representatives as accountable for compliance by the Northwestel and its affiliates with the principles.

Identifying purposes for collection of customer information: Northwestel and its affiliates will identify the purposes for collecting personal information at or before the time the information is collected.

Obtaining consent for collection, use or disclosure of customer information: We require the knowledge and consent of the customer for the collection, use, or disclosure of personal information, except where inappropriate or impractical (e.g., in emergency situations).

Limiting collection of customer information: Northwestel and its affiliates will limit the collection of personal information - by fair and lawful means - to that which is necessary for the purposes identified by the Companies.

Limiting use, disclosure and retention of customer information: Northwestel and its affiliates will not use or disclose personal information for purposes other than those for which it was collected, except with the consent of the customer or as required by law. The Companies will retain personal information only as long as necessary to fulfill those purposes.

Accuracy of customer information: Personal information will be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.

Security safeguards: Northwestel and its affiliates will protect personal information by security safeguards appropriate to the sensitivity of the information.

Openness concerning policies and practices: Northwestel and its affiliates will make readily available to customers' specific information about their policies and practices relating to the management of personal information.

Customer access to customer information: Upon request, Northwestel, or one of its affiliates, as the case may be, will inform a customer of the existence, use, and disclosure of his or her personal information and will give access to that information. A customer may challenge the accuracy and completeness of the information and have it amended as appropriate.

Challenging compliance: A customer may address a challenge concerning compliance with the above principles to the appropriate representative for the company involved.