| 3.1 | Before collecting Personal Information from an individual or a third party about that individual, Quadrus shall obtain the consent from that individual for the collection, use and disclosure of such Personal Information, unless such consent is not required or permitted not to be obtained by applicable privacy legislation. |
| 3.2 | Quadrus' obtaining consent to the collection, use and disclosure of Personal Information, where required by applicable privacy legislation, can be achieved by: |
| 3.2.1 | obtaining the written or oral or (where permitted under applicable privacy legislation) implied consent of the individual from or in respect of whom such Personal Information is being collected; or |
| 3.2.2 | providing an individual, where permitted by applicable privacy legislation, with reasonably understandable notice that Quadrus intends to collect, use and disclose Personal Information about that individual for a particular purpose and: |
| | 3.2.2.1 | giving that individual a reasonable opportunity to decline or object to such collection, use or disclosure; |
| | 3.2.2.2 | not receiving within a reasonable time, a response from that individual declining or objecting to such collection, use or disclosure; and |
| | 3.2.2.3 | having regard to the level of sensitivity of such Personal Information, if any, it is reasonable for Quadrus to collect, use and disclosure such Personal Information for the particular purpose. |
| 3.3 | Consent to the collection, use and disclosure of Personal Information is deemed and thus not required to be obtained by Quadrus, where: |
| 3.3.1 | an individual voluntarily provides Personal Information to Quadrus for a particular purpose; |
| 3.3.2 | it is reasonable that such individual would voluntarily provide such Personal Information to Quadrus for that purpose; and |
| 3.3.3 | applicable privacy legislation deems such circumstances to constitute consent. |
| 3.4 | Where consent is required for the collection, use and disclosure of Personal Information, an individual may withdraw or vary such consent on giving Quadrus with reasonable notice of such withdrawal or variation and Quadrus shall: |
| 3.4.1 | advise such individual of the consequences of such withdrawal or variation unless reasonably obvious; and |
| 3.4.2 | except to the extent such withdrawal or variation would frustrate the performance of a legal obligation between Quadrus and a party to such legal obligation: |
| | 3.4.2.1 | in the case of a withdrawal of consent, stop collecting, using or disclosing such Personal Information; and |
| | 3.4.2.2 | in the case of a variation of consent, abide by such variation or stop collecting, using or disclosing such Personal Information. |
| 3.5 | Quadrus shall not, as a condition of supplying our products or services, require an individual to consent to the collection, use or disclosure of Personal Information beyond what is necessary to provide those products or services. |
| 3.6 | Quadrus shall not obtain or attempt to obtain consent for the collection, use or disclosure of Personal Information by providing false or misleading information or using deceptive or misleading practices. |
| 3.7 | There are certain circumstances identified by applicable privacy legislation in which Quadrus is not required or permitted not to obtain consent for the collection, use or disclosure of Personal Information. By way of example only, Quadrus is not required to obtain consent to the collection, use or disclosure of Personal Information where: |
| 3.7.1 | the collection of Personal Information is required by applicable legislation; |
| 3.7.2 | the collection of Personal Information is from a public body that is authorized or required by applicable legislation to disclose the Personal Information to Quadrus; |
| 3.7.3 | the Personal Information is publicly available; |
| 3.7.4 | a reasonable person would consider that the collection of the Personal Information is clearly in the interests of the individual and consent of the individual cannot be obtained in a timely way or the individual would not reasonably be expected to withhold consent; or |
| 3.7.5 | the Personal Information is Personal Employee Information. |
| 3.8 | Quadrus may collect, use and disclosure Personal Employee Information about an individual without that individual's consent where: |
| 3.8.1 | the individual is an Employee of Quadrus or the collection of Personal Employee Information is for the purpose of recruiting a potential Employee; |
| 3.8.2 | the collection is reasonable for the purposes for which the Personal Employee Information is collected; |
| 3.8.3 | the Personal Employee Information consists only of Personal Information that is related to the employment or volunteer work relationship of the individual; and |
| 3.8.4 | in the case of an Employee, Quadrus has prior to such collection provided the Employee with reasonable notification that the Personal Employee Information is going to be collected and the purposes for which the Personal Employee Information is going to be collected. |