Privacy Policy - Canada

Last updated January 19th, 2022

Purpose and Scope

At VendorPM Inc. (“VendorPM”, “we”, “us” and “our”), we respect your privacy and data protection rights and recognize the importance of protecting the personal information we collect,
use, disclose and/or retain when providing our services.


Privacy laws in Canada generally define “personal information” as any information about an identifiable individual, which includes information that can be used on its own or with other
information to identify an individual. Business contact information (such as your name, title, business address, business telephone number and business email address) that is used for the purpose of communicating or facilitating communication with you in relation to your employment,
business or profession is generally not considered personal information.


This Privacy Policy is designed to help you to understand what personal information we collect about you and how we use, maintain, protect and share it.


This Privacy Policy applies to information we collect, use or disclose about you if you:
• interact with any of VendorPM’s websites (including www.vendorpm.com) or our social media pages on which this Privacy Policy appears (each a “Site” and collectively, the
“Sites”) (“website users”);
• visit any of VendorPM’s premises (“office visitors”);
• use VendorPM’s Quote Request management products, enterprise tools, mobile applications, and our other applications and services (collectively, the “VendorPM Services”) (“customers”);
• are a sales prospect, who is anyone whose data VendorPM processes for the purposes of assessing customer eligibility (“sales prospect”); or
• receive marketing communications from VendorPM.


Please read this Privacy Policy carefully to understand our policies and practices for collecting, using and disclosing your personal information. If you do not agree with our policies and
practices, your choice is not to use our Sites, the VendorPM Services or otherwise provide us with your personal information. By accessing or using our Sites, the VendorPM Services or by
providing us with your personal information, you indicate that you understand, accept and consent to the policies and practices described in this Privacy Policy.

Data Collected by VendorPM

The information that we collect about you falls into the categories set out below. Thisinformation is obtained either: (a) directly and voluntarily from you when using VendorPM Services or visiting our Sites or premises; (b) automatically from your device through cookies orsimilar technologies (including the device data or service data described below); or (c) from thirdparty or publicly available sources described below.

Registration, contact, and company information:

• first and last names

• business email addresses

• business phone numbers

• business avatars

• company name

• your role in your company

• property names

• property locations

• services provided

• geolocation data

Payment information*:

• credit card information

• billing and mailing addresses

• other payment-related information

*Payment information is only collected by VendorPM from our Enterprise Clients (i.e.,property management firms). Payment information for Vendors is collected and processed by Stripe, a third-party online payment provider, and is dealt with in accordance with Stripe’s privacy policy, available at https://stripe.com/en-ca/privacy

Device data:

• operating system type and version number, manufacturer and model

• browser type

• screen resolution

• IP address

• unique device identifiers

Service data:

• the website you visited before the VendorPM Sites

• how long you spent on a page or screen on the VendorPM Sites

• how you interact with our emails

• navigation paths between pages or screens

• date and time

• pages viewed

• links clicked

Third party source data:

• company information

• job titles

• avatars

• email addresses

• phone numbers

• addresses

• geolocation data

The sources of this third party personal information may include:

• publicly available information (as defined by applicable law in the case of public available personal information)

• contact enrichment and lead generation providers.

You may also provide information to be published or displayed (hereinafter, “posted”) on public areas of the Site or transmitted to other users of the Site or third parties (collectively, “UserContributions”). Your User Contributions are posted on the Site and transmitted to others at your own risk. Please be aware that no security measures are perfect. Additionally, we cannot control the actions of other users of the Site with whom you may choose to share your UserContributions. Therefore, we cannot and do not guarantee that unauthorized persons will not view your User Contributions. Please keep this in mind if you choose to include personal information in your User Contributions.

How We Use Your Data

We collect and process your information, including any personal information, for the following purposes:

Providing and Facilitating Delivery of the VendorPM Services and Sites: We process your personal information to meet our contractual obligations with you for use of VendorPM Services, and to fulfill our obligations under applicable terms of service. Where we have not entered into a service contract with you, we process any personal information we have collected about you in accordance with applicable law to create a profile account about your business, which you may claim and build on, as described in our Terms of Service.

Communicating with you about the VendorPM Services and providing customer support:We may send you service, technical and other administrative messages in order to administer the Site and provide the VendorPM Services. For example, we may send you messages about the availability of VendorPM Services or security updates to the Site. We also process your personal information to respond to your comments and questions and to provide customer care and support.

Improving the VendorPM Services and Sites: We process your personal information, in particular service data and device data, to improve and optimize the VendorPM Services andSites and to understand how you use the VendorPM Services and Sites, including to monitor usage or traffic patterns and to analyze trends and develop new products, services, features and functionality. This data generally analyzed and used on an aggregated and anonymous basis, however if we are able to use it alone or in combination with other data to identify an individual, we treat it as personal information in accordance with this Privacy Policy

Sending marketing communications: We process your personal information to send you marketing communications via email about our products, services and upcoming events that might interest you where we have your consent in accordance with applicable law. Please seethe “Your Privacy Rights and Choices” section below to learn how you can control your marketing preferences.

Registering Office Visitors: We process your personal information for security reasons and for the purpose of hosting your visit, to the extent that such processing is necessary, in order to protect our premises and confidential information against unauthorized access. As well, we do this to ensure the safety of our staff and office visitors.

Maintaining Security of the VendorPM Services and Sites: We process your personal information to control unauthorized use or abuse of the VendorPM Services and Sites, or otherwise detect, investigate or prevent activities that may violate VendorPM Terms of Service or applicable laws, and in order to maintain and promote the safety and security of theVendorPM Sites and Services.

Displaying Personalized Advertisements: We may process your personal information to provide you with personalized advertising on our Sites and on third party sites that we believe would be of interest to you based on your preferences. See the section entitled “Your PersonalInformation Rights” to learn how you can opt-out of such targeted ads.

Carrying out Other Legitimate Business Purposes: We use your personal information for business purposes related to the provision of the VendorPM Services, including invoicing, audits, and fraud monitoring and prevention.

Complying with legal obligations: We process your personal information when cooperating or complying with public and government authorities, courts or regulators in accordance with our obligations under applicable laws and to protect against imminent harm to our rights, property or safety, or that of our users or the public, as required or permitted by law.

We may also use your information in any other way we may describe when you provide the information or for any other purpose with your consent.

Disclosure of Your Information

We may disclose personal information that we collect or you provide as described in this PrivacyPolicy:

• In accordance with applicable law, to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of VendorPM’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by VendorPM about our customers and users is among the assets transferred.

• To our authorized service providers in order to fulfill the purpose for which you provide it.

• For any other purpose disclosed by us when you provide the information.

• For any additional purpose, with your consent.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law.

• To enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.

• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of VendorPM, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction, in accordance with applicable law.

Security, Storage and Retention

The security of your personal information is very important to us. We use physical, technical ,and administrative measures designed to secure your personal information from accidental loss and from unauthorized or unlawful access, use, alteration and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Sites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about what personal information or other information you disclose using the chat features and message boards of the Sites, which can be collected, used and/or disclosed by other users.

While we take all appropriate steps to safeguard Personal Information under our control, there is an inherent risk involved in the exchange of information using any form of communication, such as via the Internet, email and telephone. While we employ advanced data encryption technology, you should be aware that there is a residual risk in transmitting any data electronically. Despite our efforts, no security measures are perfect or impenetrable and no method of data transmission can be guaranteed against any interception or other type of misuse. This risk is inherent in all Internet dealings.

Your personal information may be transferred to, processed and/or stored in a foreign jurisdiction outside of the jurisdiction in which it was originally collected. As a result, your personal information may be subject to the laws of such foreign jurisdiction and may be accessible without notice to you by the courts, law enforcement and national security authorities of such foreign jurisdiction.

Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Under some circumstances we may anonymize and de-identify your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous and de identified data for any legitimate business purpose without further notice to you or your consent

Personal Information of Minors

Our Sites and the VendorPM Services are intended for individuals who are age of majority or older in their jurisdiction of residence. We do not knowingly collect personal information of minors. If you are a minor, please do not use the Sites or provide any personal information to us via the Sites or otherwise. If you are aware that we have unknowingly collected or received personal information of a minor without the consent of a parent or legal guardian, please contact us at info@vendorpm.com and we will delete such information.

Your Personal Information Rights

Depending on your location and subject to applicable laws, you may have certain data protection rights. You can exercise any of these rights by submitting a request to us atinfo@vendorpm.com.

If you wish to access, correct or update your personal information, or request deletion or portability of your personal information (where applicable), please submit your request in writing to us at the contact information set out below.

You have the right to opt-out of marketing communications we send you at any time. If you no longer wish to receive our newsletter and promotional communications, you may opt-out of receiving them by clicking on the “unsubscribe” or “opt-out” link in the communications we send you. Please note, however, that it may not be possible to opt-out of certain service-related communications. You can let us know at any time if you do not wish to receive marketing messages by contacting us using the contact details below.

We and third parties such as advertising networks may use cookies to collect personal information and display advertisements, which may be based on your activities across theInternet and targeted to you for products and services in which we believe you might be interested. Most advertising networks offer you a way to opt-out of targeted advertising. You may also opt-out of receiving targeted advertising on participating sites and services by visiting http://youradchoices.ca/choices. We are not responsible for effectiveness of or compliance with any third parties’ opt-out options or programs.

Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal.

You have the right to complain to a privacy commissioner about our collection and use of your personal information. For more information, please contact your local privacy commissioner. Contact details for privacy commissioners in Canada are available here.

Changes to This Policy

We may amend this Privacy Policy from time to time in response to changing legal, technical or business developments, as indicated by the “last updated” date at the top of the Privacy Policy. We will post a notice of amendments on the home page of our Site and/or provide email notifications to registered users, consistent with the significance of the changes we make. By continuing to use our Sites, the VendorPM Services or by otherwise providing us with your personal information after such changes, you will be signifying your consent to our revisedPrivacy Policy. If you do not agree with any changes to our Privacy Policy, please do not use our Sites, the VendorPM Services or otherwise provide us with your personal information.

Contact Us

If you have any questions, comments or concerns about the way your personal information is being used or processed by VendorPM or would like more information about our use of nonCanadian service providers, please submit any questions, comments or concerns in writing to request to us at info@vendorpm.com.