Mandatory User Terms (Canada – Non-Doc Identity Verification)

These terms are mandatory and non-negotiable. No User may receive services unless they have entered into an agreement including these terms in full.

Agent shall ensure that no User receives any Services (as defined below) unless such User has entered into a signed agreement with Agent that includes the terms and conditions set out in this Exhibit B without modification:

1. DEFINITIONS

“Agent” shall mean Raritex Trade Ltd.

“Services” means the provision from time to time of consumer credit information, as defined in the applicable consumer reporting laws, whether in the form of a full or partial report (“Credit Reports”), and related services, from Trans Union of Canada, Inc. (“TransUnion”) through the Platform.

“User” shall mean the company that entered into an agreement with Agent, to which these Mandatory User Terms are an attachment.

2. USER DEFINITIONS

2.1. Permissible Purpose/Appointment of Agent. User warrants that it will request Services for User’s exclusive internal and one-time use only and pursuant to the procedures prescribed by [TransUnion] [Agent] from time to time. User hereby appoints Agent as its agent for the purposes of requesting Services and otherwise facilitating User’s receipt of the Services. User also warrants that inquiries for Credit Reports will be made only for the permissible purposes (as set out in the applicable consumer reporting laws) that are selected in the enablement code request form applicable to User:

a) In connection with the extension of credit to a consumer to whom the information pertains; or
b) In connection with the purchase or collection of a debt of a consumer to whom the information pertains; or
c) For the purpose of the entering into or renewal of a tenancy agreement; or
d) For employment purposes; or
e) In connection with the underwriting of insurance involving the consumer; or
f) To determine the consumer’s eligibility for any matter under a statute or a regulation where the information is relevant to a requirement prescribed by law; or
g) Where a direct business need for the information exists in connection with a business or credit transaction involving the consumer.

User warrants that it will not use any Services for investigation purposes, including but not limited to pre-litigation investigative services, without the consumer’s written consent (in accordance with section 2.6, below) or as specifically permitted by applicable law. User understands that User’s ability to request Credit Reports from TransUnion through the Agent is contingent on TransUnion membership requirements including compliance with legal or regulatory objectives in respect of Personal Information (as defined herein) or Credit Reports. In the event of a breach by User of the terms and conditions related to the permitted use of TransUnion Services, TransUnion shall have the right, without notice, to cause Agent to terminate the provision of Services to the User.

2.2. Record Retention. User will maintain copies of all consents (whether in written, tape-recorded or electronic formats) for a minimum of three (3) years from the date of the relevant inquiry and shall make copies of such consents available to Agent or TransUnion upon request. User shall ensure that all consents are in verifiable form.

2.3. Compliance and applicable laws. When requesting and/or using Services, User agrees to comply with all applicable Canadian, Provincial and local laws, including the various provincial consumer reporting acts or equivalent, the Personal Information Protection and Electronic Documents Act (Canada) or equivalent provincial privacy acts, and any applicable regulations, judicial orders and/or orders of an administrative tribunal, as are now or may in the future become effective throughout the term of these user terms (“User Terms”).

2.4. Restrictions on Services. Services shall only be requested by, and disclosed by User to, User's designated and authorized employees, agents or representatives (each a, “Representative”) on a need-to-know basis (provided such Representatives are bound by a confidentiality agreement at least as strict as the confidentiality provisions set forth herein) and only to the extent necessary to enable User to use the Services in accordance herewith. User shall ensure that such Representatives do not attempt to obtain Services as it relates to themselves, their associates, or any other person, except in the exercise of their official duties. Nothing herein is intended to allow User to receive Services for the purpose of selling or otherwise providing them, or the information contained or derived from Services, to the consumer who is the subject thereof, or to any third party. For further clarity, User is prohibited from selling Credit Reports directly to consumers hereunder. User may make disclosures to consumers only as clearly required by law. Where the User has made a legally permissible disclosure to a consumer, and such consumer has questioned information contained in such consumer’s Credit Report, User shall refer such consumer directly to TransUnion for further investigation.

2.5. Audits and Investigations. User shall cooperate with Agent and/or TransUnion with regards to any investigation launched as a result of a consumer complaint or any other investigation necessary to ensure compliance with these User Terms and applicable laws. User shall re-verify disputed information and inquiries upon request by Agent, on behalf of TransUnion, and confirm such disputed items to Agent and/or TransUnion within five (5) business days. User understands and agrees that a failure to do so may result in the disputed information being deleted by TransUnion as “unverifiable”. Furthermore, during the term of these User Terms and for period of three (3) years thereafter, Agent and/or TransUnion may audit User’s policies, procedures and records to ensure compliance with these User Terms, including compliance with applicable laws, upon reasonable notice and during normal business hours.

2.6. Consent. User warrants that it will have obtained prior to requesting from TransUnion (through the Agent) any Personal Information (as defined below), including but not limited to Credit Reports, disclosed as part of the Services, the appropriate active and informed consent in accordance with applicable laws necessary for TransUnion to perform the Services. User warrants that it will use such Personal Information only as permitted by such consent. As used herein, “Personal Information” means information about an identifiable consumer. User will permit Agent and/or TransUnion to review a copy of User’s consent form(s) and/or privacy policy, and will forward any revised consent form(s) and/or privacy policy for review by Agent and/or TransUnion within a reasonable period of time after their adoption. User agrees to make changes to such documents as Agent and/or TransUnion may request from time to time that are necessary, in the sole opinion of TransUnion, for TransUnion to lawfully provide the Services.

2.7. Third Party Information. Where User requests Services to be performed by TransUnion based on information obtained from a third party, User represents and warrants that it has obtained the agreement and/or consent of such third party for the intended use and that such use is consistent with applicable law.

2.8. Configuration. Many of the Services are configurable and the configuration, delivery specifications and/or decision criteria of the User shall be as agreed upon between Agent and TransUnion. User acknowledges and agrees that it is solely responsible to determine its compliance obligations, in particular without limitation, its compliance with the provincial consumer reporting legislation, privacy legislation or the Proceeds of Crime (Money Laundering and Terrorist Financing Regulations) or other applicable law or regulation and as a result, User is solely responsible to obtain its own legal advice and to determine the configuration required from the Agent such that it meets these compliance obligations.

2.9. Fraud and ID Management Services. In the event User obtains any Fraud and ID Management Services from TransUnion in conjunction with Credit Reports or as a stand-alone service, User shall re-verify all information that triggers a potential fraud message and/or a no match, and shall not deny or otherwise take any adverse action (as defined in the applicable consumer reporting laws) against any consumer based solely on TransUnion’s Services. TransUnion does not guarantee the accuracy, completeness or reliability of the Fraud and ID Management Services, and a fraud message, a match, or lack of a match, is not intended, in itself, to guarantee reliability. Accordingly, User agrees to use the Fraud and ID Management Services at its own risk.

2.10. TransUnion Scores. In the event the User obtains scoring products (“TransUnion Scores”), the following terms shall apply: The TransUnion Scores may be delivered with a Credit Report for convenience only but the TransUnion Score does not form part of the Credit Report and does not update, enhance, modify, supplement or change the information in the Credit Report on which it is based. User agrees that the TransUnion Scores are for User’s exclusive use. User may store TransUnion Scores solely for User's own use in furtherance of User's original purpose for obtaining the TransUnion Scores and for no other purpose. User recognizes that factors other than the TransUnion Score may be considered in making a decision about a consumer. Such other factors include, but are not limited to, the Credit Report, the individual account history, application information, and economic factors. TransUnion may provide score reason codes to User. The score reason codes are designed to indicate the principal factors that contributed to the TransUnion Score, and may be disclosed to consumers as the reasons for taking adverse action, as required by applicable consumer reporting law. The TransUnion Score itself is proprietary and may not be used as the reason for adverse action and accordingly, shall not be disclosed to a credit applicant, except as clearly required by law.

2.11. Governmental Permits. User represents and warrants that User has obtained all Governmental Permits required to be obtained and that are necessary to carry on its business in each province and that each Governmental Permit is valid, subsisting and in good standing. User shall remain in good standing with all Governmental Authorities having jurisdiction or authority over or in respect of it and to obtain and maintain in good standing throughout the term all Governmental Permits necessary in connection with the operation of its business, including those required to be obtained and/or maintained pursuant to applicable law.

For the purposes of these User Terms, ”Governmental Permit” means any license, right, permit, franchise, privilege, registration, direction, decree, consent, order, permission, approval or authority issued or provided, or to be issued or provided, by any Governmental Authority, including, where relevant to a User, directives issued by the any Canadian gaming control regulator. “Governmental Authority” means the government of Canada, or any political subdivision thereof, whether provincial, territorial, state, municipal or local, and any governmental, executive, legislative, judicial, administrative or regulatory agency, department, ministry, authority, instrumentality, commission, board, bureau or similar body, whether federal, provincial, territorial, state, municipal or local, in each case, having jurisdiction in the relevant circumstances.

3. CONFIDENTIAL INFORMATION

User agrees that User will receive information of a confidential and/or proprietary nature in connection with these User Terms, and such confidential and proprietary information will be held in strict confidence by the User and shall be disclosed only (i) upon demand to governmental regulatory agencies; or (ii) as required by law. User shall protect any such confidential or proprietary information with at least the same degree of care it uses to protect its own information of a similar nature (although not less than a reasonable degree of care) or as required under applicable laws. For greater certainty, User agrees that it shall keep all Credit Reports and their content confidential and not use any Credit Report except for the purposes set out in section 2.1 and consistent with the consent provided by the consumer under section 2.6 to whom a Credit Report relates.

4. SAFEGUARDING

User shall implement, and shall take measures to maintain, reasonable and appropriate administrative, technical, and physical security safeguards (“Safeguards”) designed to: (i) ensure the security and confidentiality of Personal Information, including Credit Reports, derived from the Services, accessible through the Platform, and/or otherwise received from TransUnion and/or Agent; (ii) protect against anticipated threats or hazards to the security or integrity of Personal Information; and, (iii) protect against unauthorized access or use of Personal Information. User shall implement and maintain reasonable security procedures and practices appropriate to the nature of the information and to protect the Personal Information from unauthorized access, destruction, use, modification, or disclosure including without limitation, ensuring any User intentional deletion, destruction and/or disposal of Personal Information (whether in paper, electronic, or any other form, and regardless of medium on which such Personal Information is stored) is performed in a manner so as to reasonably prevent its misappropriation or other unauthorized use including, but not limited to, cross-shredding printed information and pulverizing or incinerating tapes, disks and other such non-paper media. User acknowledges and agrees that the provision of Services may be dependent on User’s completion of a satisfactory security audit and questionnaire that demonstrates compliance with these terms.

User is responsible for: (i) any breaches to its Safeguards, including those emanating from its leased lines, modems or other communication devices; (ii) any failure by User to establish or maintain its Safeguards; (iii) any loss, theft or unauthorized access, disclosure, distribution, copying, modification, use or destruction of Personal Information; (iv) any unauthorized access to or use of any software, hardware or systems of Agent or TransUnion, including any authorized access or use of any account credentials or membercodes; (v) any unauthorized entry to the facilities where TransUnion Credit Reports or Services may have been accessible; (vi) any unauthorized release of or access to TransUnion Credit Reports or Services by an employee, agent, contractor or subcontractor of User resulting from a breach of its Safeguards or otherwise; or (vii) any unauthorized access to or use of the Platform (each, a “Breach”).

In the event of a Breach, User shall immediately (but in no event later than twenty-four (24) hours after the occurrence of the Breach) notify Agent or TransUnion by phone and in writing with the following information: (i) a description of the Breach (and, if known, the cause); (ii) the date on (or the period during which) the Breach occurred; (iii) details of the Personal Information impacted by the Breach; (iv) details of consumer impact, if known by User, including the number of impacted consumers; (v) a description of the steps taken to contain, mitigate and recover from the Breach; and (vi) any other information reasonably required by Agent or TransUnion in connection with such Breach.

User shall fully cooperate with TransUnion and Agent in mitigating any damages due to any Breach. Such cooperation shall include, but not necessarily be limited to, allowing TransUnion and/or Agent to participate in the investigation of the cause and extent of such Breach. Such cooperation shall not relieve User of any liability it may have as a result of such Breach.

TransUnion or Agent reserve the right to suspend or terminate User’s access to all or part of the Services if User fails to comply with its obligations in this Section 4.0 (Safeguarding) or TransUnion or Agent reasonably suspect that User is experiencing or has experienced a Breach. In addition, TransUnion or Agent may require User to modify its account credentials, undergo a security assessment or agree to additional security controls in order to regain access to Services, in their sole discretion. Upon request by TransUnion or Agent, User shall provide a certificate signed by User’s forensic auditor or Chief Information Officer (or equivalent) to confirm that the Breach has been fully remediated and that there is no further risk to Personal Information.

User shall ensure that all of its employees, agents, contractor and subcontractors comply with the requirements set out in this Section 4.0 (Safeguarding) and other obligations of User in these User Terms.

5. SYSTEM AND ACCESS

User acknowledges that TransUnion is not responsible for the availability, performance, or security of Agent’s Platform, or for User’s inability to obtain access to the Services. User is responsible for all Breaches emanating from any of User’s password or code misuse or any Breaches using such User’s password or code. TransUnion shall have no liability in relation thereto and User acknowledges that TransUnion shall assume that the individual(s) logging into or accessing the Platform using the specific code(s) and password(s) assigned to User are in fact authorized to do so by User.

6. OWNERSHIP

User agrees that the Services provided hereunder are confidential and proprietary to TransUnion and except as explicitly set forth herein, and subject to the licenses granted to User hereunder, the entire right, title and interest in and to the Services and all copyrights, patents, trade secrets, trademarks, trade names, and all other intellectual property rights associated with any and all ideas, concepts, techniques, inventions, processes, or works of authorship including, but not limited to, all materials in written or other tangible form developed or created by TransUnion in its performance of the Services, shall at all times vest exclusively in TransUnion.

TransUnion reserves all rights not explicitly granted to User hereunder. User shall not attempt, directly or indirectly, to reverse engineer, decompile, or disassemble the Services or any confidential or proprietary criteria developed or used by TransUnion relating to the Services provided hereunder.

Subject to User’s compliance with all the terms and conditions herein, Agent grants to User, on behalf of TransUnion: (a) a worldwide, paid-up, non-transferable, revocable and non-exclusive license to all Services provided hereunder for use by User, within User’s internal business operations; and (b) a worldwide, paid-up, limited, revocable and non-exclusive license to use any and all TransUnion-owned intellectual property rights that are integrated into such Services to the extent necessary for User to exercise, unencumbered, its rights set forth herein. Such licenses shall not be deemed to include sublicensing rights or any rights to third party works including, but not limited to, any TransUnion subcontractor intellectual property rights, unless TransUnion explicitly otherwise grants such rights to User in writing.

7. WARRANTY

The User recognizes that the Services furnished to User through the Platform are based upon data obtained from sources considered to be reliable. However, due to the possibilities of errors inherent in the procurement and compilation of statistical data involving a large number of individuals, the accuracy, reliability or completeness of the information provided as part of the Services by TransUnion is not warranted and the Services are provided “AS IS” and User shall use the Services at its own risk. In addition, TransUnion makes no representations or warranties that the use of the Services or any particular configuration of such Services requested by User via Agent will enable User to meet its compliance obligations. OTHER THAN AS SET FORTH IN THIS SECTION 7.0, TRANSUNION MAKES NO OTHER WARRANTIES AND HEREBY DISCLAIMS ALL OTHER WARRANTIES, REPRESENTATIONS, OR CONDITIONS, WHETHER STATUTORY, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, WARRANTIES OR CONDITIONS AS TO QUALITY OR FITNESS FOR A PARTICULAR PURPOSE OR THAT THE SERVICES WILL BE OF MERCHANTABLE QUALITY. FURTHERMORE, TRANSUNION’S SOLE LIABILITY, AND USER’S SOLE REMEDY, FOR BREACH OF THIS WARRANTY BY TRANSUNION SHALL BE THE CORRECTION OF ANY DEFECTIVE SERVICE (PROVIDED THAT, TRANSUNION RECEIVES A WRITTEN NOTICE WITH A REASONABLY DETAILED DESCRIPTION OF THE DEFECT WITHIN TEN (10) DAYS AFTER THE PERFORMANCE OF THE SERVICE) AND/OR THE REFUND OF FEES PAID FOR SAME AT TRANSUNION’S DISCRETION. USER ACKNOWLEDGES AND AGREES THAT THESE USER TERMS SHALL NOT GIVE RISE TO ANY THIRD PARTY RIGHTS AGAINST TRANSUNION’S DATA SUPPLIERS AND/OR LICENSORS AND THAT, TO THE MAXIMUM EXTENT PERMITTED BY LAW, ALL RIGHTS AND OBLIGATIONS UNDER THESE USERS AND ANY LIABILITY RESULTING THEREFROM ARE SOLELY BETWEEN THE PARTIES HERETO.

8. INDEMNIFICATION

User shall indemnify and hold harmless TransUnion and its directors, officers, employees, representatives and agents from any and all claims, losses, liabilities or damages, including consequential damages, and costs (including reasonable attorney’s fees) arising directly or indirectly from, but not limited to: (i) the failure or alleged failure of User to perform any of its obligations described in these User Terms, and the failure by User to comply with any provision of the User Terms including but not limited to, any breach which results in the non-permissible use of the Services provided hereunder; (ii) the negligence or intentional wrongful conduct of User, and/or its directors, officers, employees, agents, contractor or subcontractors; (iii) the use or misuse of Services by the User; (iv) a violation by User of any applicable laws, including but not limited to the failure of User to obtain and/or maintain in good standing any relevant Governmental Permits; (v) any claims by individuals relating to the use, retention or disclosure of Personal Information, including, without limitation, Credit Reports or information included in the Services; (vi) any claims arising out of actions or omissions of User, or its employees, agents, subcontractors; or (vii) any breach of Section 3.0 (Confidential Information) or Section 4.0 (Safeguarding).

9. LIMITED LIABILITY

IN NO EVENT SHALL TRANSUNION BE LIABLE FOR ANY CONSEQUENTIAL, INCIDENTAL, INDIRECT, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES INCURRED BY USER ARISING OUT OF THE DELIVERY OF CREDIT REPORTS TO THE PLATFORM OR PROVISION OF SERVICES, INCLUDING BUT NOT LIMITED TO LOSS OF GOODWILL, LOSS OF DATA AND LOST PROFITS OR REVENUE, WHETHER OR NOT SUCH LOSS OR DAMAGE IS BASED IN CONTRACT, WARRANTY, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE, EVEN IF TRANSUNION HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. FURTHERMORE, IN NO EVENT SHALL TRANSUNION’S TOTAL AGGREGATE LIABILITY TO USER, OR ANY THIRD PARTY ARISING IN RESPECT OF THE SERVICES UNDER THESE USER TERMS AND/OR IN RESPECT OF THE SERVICES EXCEED THE TOTAL AMOUNT OF FEES PAID BY THE USER FOR THE SERVICES DURING THE THREE (3) MONTH PERIOD IMMEDIATELY PRECEDING THE FIRST EVENT GIVING RISE TO A CLAIM FOR LIABILITY, WHETHER SUCH CLAIM IS BASED IN CONTRACT, TORT, WARRANTY, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE. THESE LIMITATIONS SHALL SURVIVE AND APPLY NOTWITHSTANDING THE VALIDITY OF THE LIMITED REMEDIES PROVIDED HEREUNDER. IN NO EVENT WILL TRANSUNION BE LIABLE FOR ANY DISPUTE THAT ARISES BETWEEN USER AND AGENT.

10. THIRD PARTY BENEFICIARY

TransUnion is an intended third party beneficiary of these User Terms.