See how the FCCQ centralized its data with Membri. Read the case study →

Legal

Membri apps privacy policy

Le Groupe Vendere (2020) Inc.

Introduction

Groupe Vendere (2020) Inc. ("we", "us", "our") operates the Membri web platform (the “Platform”).

We are committed to protecting personal information and handling it responsibly and transparently.

This Privacy Policy explains:

  • What information we collect

  • How we use it

  • Our role in relation to client data

  • How we safeguard information

Our role

Our Platform is provided to business clients (“Clients”).

  • Our Clients determine what personal information is collected through the Platform.

  • Our Clients control how that information is used.

  • We process such information solely on behalf of our Clients.

For personal information submitted through the Platform in connection with a Client’s services, the Client acts as the data controller and is responsible for its own privacy policy and legal compliance.

If you are an end user interacting with one of our Clients through the Platform, please refer to that Client’s privacy policy for information about how your personal data is handled.

Information we collect directly

We may collect limited information necessary to operate and secure the Platform, including:

a) technical information

  • IP address

  • Date and time of access

  • Error logs and system activity logs

b) support communications

If a Client contacts us for support, we may collect:

  • Contact name

  • Business email address

  • Support request details

We do not intentionally collect or use Client business data for our own purposes.

How we use information

We use collected information strictly to:

  • Operate and maintain the Platform

  • Ensure system security and integrity

  • Monitor performance and troubleshoot errors

  • Provide technical support to Clients

  • Comply with legal obligations

We do not:

  • Sell personal information

  • Use Client data for marketing

  • Profile end users

  • Access Client databases except where necessary for technical support and only as authorized

​client data processing

When processing personal information on behalf of Clients:

  • We act solely as a service provider / data processor.

  • We process data only according to Client instructions.

  • We implement appropriate technical and organizational safeguards.

  • We limit access to authorized personnel bound by confidentiality obligations.

Clients are responsible for:

  • Determining the lawful basis for data processing

  • Providing required notices to end users

  • Responding to data access or deletion requests

Data retention

We retain technical logs and operational data only as long as necessary for:

  • Security monitoring

  • Troubleshooting

  • Legal compliance

Client data stored in Client databases is retained according to the Client’s instructions and contractual terms.

Security measures

We implement reasonable administrative, technical, and physical safeguards to protect information, including:

  • Access controls

  • Encryption (where applicable)

  • Secure hosting infrastructure

  • Monitoring and logging

  • Confidentiality agreements with personnel

While we take appropriate measures, no system can be guaranteed completely secure.

Third-party service providers

We may use trusted third-party providers for hosting, infrastructure, or technical services. These providers are contractually required to maintain appropriate security and confidentiality standards.

Data transfers

Information may be processed in jurisdictions where our service providers operate. We ensure appropriate safeguards are in place where required by applicable law.

Your rights

If you are an end user interacting with a Client through our Platform:

  • Please contact the relevant Client directly to exercise your privacy rights (access, correction, deletion, etc.).

If you are contacting us directly regarding technical data we control, you may contact us at the information below.

Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

Contact information

If you have questions about this Privacy Policy, please contact our Privacy Officer here: 
Catherine Girard
1200 McGill College Avenue, Suite 1100, Montreal, QC H3B 4G7 
confidentialite@vendere.ca 

Effective date: February 1st, 2026

Talk to a Microsoft 365 CRM expert

See how Membri adapts to your organization.

Request a demo