Handling of personal data, compliant with PIPEDA and Quebec's Law 25.
Monexpe Inc. 204 Rue du St.-Sacrement Montreal, QC H2Y 1W8 Canada
Version: September 2026 Last updated: September 2026
Protecting personal information is a priority for Monexpe Inc. ("Monexpe", "we", "our" or "us").
Monexpe operates a SaaS technology platform that notably allows organizations to collect, centralize, measure, and analyze the voice of their clients, patients, users, employees, or citizens in order to measure and improve their experience.
This Privacy Policy ("Policy") explains how Monexpe may collect, use, disclose, retain, and protect personal information in the course of its activities.
It also explains the rights that individuals may have and how to contact Monexpe regarding the protection of personal information.
Monexpe is established in Quebec, Canada, but its Services may be used by organizations located in various jurisdictions.
As a result, different personal information protection laws may apply depending, in particular, on the location of the Client, the individual concerned, the data, and the processing.
This Policy applies notably to personal information processed in connection with:
An important distinction must be made between:
This distinction is explained below.
For certain processing, Monexpe determines why and how personal information is processed.
This may notably concern:
In these situations, Monexpe acts as the organization responsible for personal information, or according to the equivalent classification under applicable legislation.
Our Clients may use the Monexpe platform to collect and analyze information about their own customers, patients, employees, citizens, users, or other individuals.
In these situations, the Client generally determines the purposes of the processing and the information it wishes to collect.
Monexpe then generally processes this information on behalf of the Client and in accordance with the Client's authorized instructions.
Depending on applicable legislation, Monexpe may notably be classified as:
The Client generally remains responsible for determining the lawfulness of the collection and processing, as well as providing individuals with the required information.
The detailed obligations of Monexpe and the Client may be set out in the applicable Data Processing Agreement (DPA).
An individual may receive a questionnaire or feedback request using Monexpe technology without having a direct business relationship with Monexpe.
For example, a business, healthcare facility, administration, or other organization may use Monexpe to collect a person's opinion about an experience.
In this context, the organization sending the questionnaire generally determines:
Monexpe primarily provides the technology that enables this organization to collect and process the information.
If you wish to exercise a right regarding a response or information contained in a questionnaire sent by one of our Clients, we generally recommend that you first contact the organization that sent you the questionnaire.
Where necessary and in accordance with our contractual and legal obligations, Monexpe will cooperate with the Client to handle the request.
The information collected depends on your relationship with Monexpe and the Services used.
We may notably collect:
When you use the platform, we may process notably:
In connection with our relationships with Clients and prospects, we may process notably:
When you access our Services, certain technical information may be generated or collected, notably:
When you communicate with us, we may retain information necessary to process your request, notably:
Depending on the configuration chosen by our Clients, the platform may process:
The exact content of this data depends primarily on the choices made by the Client.
Some Clients may operate in sectors where sensitive information may be processed, notably healthcare, public services, or certain regulated environments.
Monexpe encourages its Clients to collect only information reasonably necessary for the purposes pursued.
Where a Client chooses to process sensitive information through the Services, it is responsible, notably, for ensuring that such processing is authorized, necessary, and appropriate, and that the additional measures required by applicable legislation are put in place.
Monexpe applies protection measures to information under its control that are proportionate notably to its sensitivity, quantity, purpose, and associated risks.
Depending on the circumstances, we may obtain information:
Depending on the context and our legal role, Monexpe may process personal information notably to:
Provide the Services — Create and administer accounts, provide platform features, process authorized instructions, and enable use of the Services.
Provide support — Respond to requests, resolve issues, and assist users.
Administer the business relationship — Manage contracts, subscriptions, renewals, orders, billing, and relationships with Clients.
Ensure security — Authenticate users, detect suspicious activity, prevent abuse, and protect accounts and the Services.
Improve the Services — Analyze the operation and use of the Services to improve their quality, performance, security, and user experience.
Communicate — Send information relating to the Services, notably operational, administrative, or security communications.
Business and marketing activities — Where permitted by law, communicate with prospects and Clients about Monexpe Services and manage their communication preferences.
Comply with our obligations — Comply with applicable legal, regulatory, accounting, tax, contractual, or security obligations.
Protect our rights — Prevent fraud, enforce our contracts, and protect the rights of Monexpe, our Clients, and third parties.
Monexpe processes personal information in accordance with the legal bases provided by applicable legislation.
Depending on the context, processing may notably rely on:
Where consent is required, Monexpe seeks to ensure it meets applicable requirements.
Where consent may legally be withdrawn, the individual concerned may request its withdrawal, subject to the consequences and exceptions provided by law.
Monexpe seeks to limit the collection of personal information to information necessary for the identified purposes.
Where Monexpe acts on behalf of a Client, the Client generally determines the information it chooses to collect through the platform.
Monexpe encourages its Clients to apply the principles of necessity, minimization, and proportionality when configuring their questionnaires and processing.
Monexpe does not disclose personal information to third parties without appropriate justification.
Depending on the circumstances, information may notably be disclosed to:
Suppliers and subcontractors — In order to provide services necessary for Monexpe's operations, notably infrastructure, hosting, communications, security, support, analytics, or certain technology features.
Authorized Partners — Where a Client uses the Services through a distributor, reseller, integrator, or other Authorized Partner, and access is necessary to provide the agreed services.
Relevant Client — Where Monexpe processes data on behalf of a Client, information is made available to that Client in accordance with the Services used.
Corporate transactions — Information may be disclosed in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to applicable requirements.
Legal obligations — Monexpe may disclose information where required or authorized by law, notably to respond to a valid legal request or to protect the rights of Monexpe or third parties.
Selling questionnaire respondents' personal information to data brokers or third parties for independent marketing purposes is not part of Monexpe's business model.
Client Data is used in accordance with the Services provided, the Client's authorized instructions, and applicable agreements.
This provision does not prevent disclosures necessary to suppliers and subcontractors used to provide the Services, nor disclosures authorized or required by law.
Monexpe may use specialized suppliers for certain functions necessary to its operations.
These suppliers may notably be involved in:
Where these suppliers process information on Monexpe's behalf, their involvement is governed in accordance with applicable legal and contractual requirements.
A List of Monexpe's subcontractors may be published separately in the Legal Center.
Monexpe Inc. is established in Quebec, Canada.
As of the date of this Policy, the hosting infrastructure used by Monexpe is provided by Hostinger, and the relevant data is hosted in the United States.
As a result, personal information processed through the Monexpe platform may be stored or processed in the United States.
Information hosted or processed in another jurisdiction may be subject to the laws of that jurisdiction and may, under the circumstances provided by law, be accessible to the competent authorities.
Monexpe assesses and governs personal information processing carried out outside Quebec in accordance with the requirements applicable to it.
The location of suppliers or infrastructure may change. Where a change significantly affects the processing of personal information, Monexpe applies the assessment, contractual, and information processes required by applicable legislation.
Where Monexpe discloses personal information outside Quebec, or entrusts a person or organization located outside Quebec with collecting, using, disclosing, or retaining such information on its behalf, Monexpe applies the requirements provided by applicable Quebec legislation.
This notably includes, where required:
A disclosure outside Quebec is made only where the legal requirements applicable to Monexpe are satisfied.
Where Monexpe processes Client Data on behalf of a Client, the terms relating to international transfers may also be set out in the Data Processing Agreement (DPA).
Where other applicable legislation requires particular mechanisms for international transfers, Monexpe puts in place appropriate measures depending on the context.
Monexpe may market its Services internationally through distributors, resellers, integrators, consultants, or other Authorized Partners.
Depending on the business model, a Partner may notably be involved in:
Where a Partner accesses personal information, its role and obligations must be determined according to the actual nature of the processing.
A Partner is not authorized to use Client Data for its own independent purposes, except where it has the necessary legal basis and authorizations.
Monexpe retains personal information only for the period reasonably necessary for the purposes for which it was collected, subject to applicable legal or contractual obligations.
Retention periods may vary depending notably on:
Where Monexpe processes Client Data on behalf of a Client, retention and deletion are also governed by the Client's authorized instructions and applicable contractual documents.
At the end of the applicable periods, information is destroyed or anonymized in accordance with applicable requirements and Monexpe's processes.
Monexpe maintains or implements internal rules regarding the retention and destruction of personal information.
Monexpe implements reasonable administrative, technical, and organizational measures designed to protect personal information under its control.
These measures are determined notably based on:
Depending on the systems concerned, these measures may notably include:
No method of electronic storage or transmission can, however, guarantee absolute security.
Additional information about Monexpe's security measures may be presented in Monexpe's Security Statement.
Monexpe maintains procedures designed to detect, analyze, document, and manage privacy and security incidents.
Where a privacy incident occurs, Monexpe assesses, notably, the risks that may result for the individuals concerned.
Where the criteria provided by applicable legislation are met, Monexpe carries out the required notifications to affected individuals and competent authorities.
Monexpe keeps a register of privacy incidents in accordance with applicable requirements.
Where Monexpe processes information on behalf of a Client, Monexpe cooperates with that Client in accordance with applicable contractual and legal obligations.
The Monexpe site and Services may use cookies and similar technologies.
These technologies may notably be used to:
Where consent or a user choice is required for certain technologies, Monexpe implements the necessary mechanisms according to applicable requirements.
Additional information may be provided in a Cookie Policy or in the preference management tool available on the site.
Where applicable legislation requires particular default privacy settings for a technology product or service offered to the public, Monexpe applies the corresponding requirements.
Monexpe takes personal information protection into account in the development and evolution of features involving personal information.
Where Monexpe collects personal information using technology that includes functions allowing a person to be identified, located, or profiled, the information and choices required by applicable legislation are provided.
Where legislation requires certain functions to be disabled by default, Monexpe applies this requirement to the relevant processing.
This provision does not mean that all such technologies are currently used by Monexpe.
Certain Monexpe features may use artificial intelligence or automated analysis technologies notably to:
Where these features involve Client Data, Monexpe processes this data in accordance with authorized purposes and applicable contractual terms.
Monexpe does not use Client Data for independent purposes incompatible with the Client's instructions or without another appropriate legal basis.
Certain artificial intelligence features may rely on technology suppliers acting as subcontractors.
Where relevant, these suppliers are identified in the applicable List of subcontractors.
Results generated by artificial intelligence may be inaccurate or incomplete and must be evaluated with an appropriate level of human oversight.
Terms relating to artificial intelligence may supplement this Policy.
Certain features may produce automated scores, classifications, analyses, or recommendations.
These features do not necessarily mean that a decision producing significant effects on a person is made automatically by Monexpe.
Where Monexpe itself makes a decision based exclusively on automated processing and applicable legislation imposes particular obligations, Monexpe provides the information and options provided for by that legislation.
Where a Client uses Monexpe's results to make its own decisions, the Client remains responsible for assessing the obligations applicable to that use.
To the extent permitted by applicable laws and agreements, Monexpe may create or use aggregated or de-identified information notably to:
Where information is anonymized within the meaning of applicable legislation, Monexpe applies the legal requirements applicable to that anonymization and to the subsequent use of the information.
Monexpe does not publish a benchmark that could reasonably identify a Client as the source of the data without appropriate authorization.
Depending on applicable legislation and the circumstances, an individual may have various rights regarding their personal information.
These rights may notably include:
These rights are not absolute and may be subject to exceptions provided by applicable legislation.
Where your information was collected by an organization using Monexpe, that organization is generally your primary point of contact for exercising your rights.
For example, if you responded to a questionnaire sent by a healthcare facility, a business, an administration, or another organization using Monexpe, your request regarding that response should generally be addressed to that organization.
Where we receive such a request directly, we may, where appropriate, forward it to the relevant Client or assist in handling it in accordance with our obligations.
Requests regarding information for which Monexpe is responsible may be addressed to:
Nouhad Amimy Privacy Officer
Monexpe Inc. 204 Rue du St.-Sacrement Montreal, QC H2Y 1W8 Canada
Email: info@monexpe.ca
In order to protect personal information, Monexpe may request information reasonably necessary to verify the identity of the person making a request.
Monexpe processes requests in accordance with the timeframes and terms provided by applicable legislation.
Anyone who believes that Monexpe has not processed their personal information in accordance with its obligations may contact our Privacy Officer.
Monexpe reviews complaints received in accordance with its procedures and applicable obligations.
Where legislation provides for it, an individual may also file a complaint with the competent personal information protection authority in their jurisdiction.
Where permitted by law, Monexpe may send communications regarding its products, Services, events, content, or activities.
Individuals may unsubscribe from promotional communications using the mechanism provided in them or by contacting Monexpe.
Certain administrative, contractual, transactional, or security communications necessary to provide the Services may nonetheless continue to be sent.
Monexpe Services are primarily intended for organizations and professionals and are not designed as a service directly aimed at children.
Where a Client uses Monexpe in a context involving minors, it is responsible for determining the applicable legal requirements and obtaining the necessary authorizations or consents.
Monexpe may impose additional restrictions or measures where processing presents particular risks to minors.
Our Services may contain links to, or allow integrations with, services operated by third parties.
The privacy practices of these third parties may be governed by their own policies.
Where a Client chooses to activate a third-party integration, it is also responsible for assessing the consequences of that integration on the processing of personal information.
In connection with a merger, acquisition, financing, reorganization, sale of assets, or other corporate transaction, certain information may be disclosed where necessary and permitted by applicable legislation.
Monexpe takes appropriate reasonable measures to protect the relevant information during such a transaction.
Monexpe maintains or implements policies and practices designed to govern the protection of personal information throughout its lifecycle.
These measures may notably cover:
These policies and practices are adapted to the nature and scale of Monexpe's activities.
Monexpe carries out privacy impact assessments ("PIAs") in situations where they are required by applicable legislation.
This may notably concern:
The Privacy Officer participates in the required processes in accordance with applicable obligations.
Monexpe may amend this Policy notably to reflect:
The date of the last update is indicated at the beginning of the Policy.
Where the nature of a change or applicable legislation requires it, Monexpe takes appropriate steps to inform affected individuals.
Monexpe is established in Quebec, Canada, but its Services may be used in several jurisdictions.
Depending on the circumstances, different laws may therefore apply, notably Canadian and Quebec laws relating to the protection of personal information, as well as certain foreign legislation where its criteria for application are met.
This Policy describes Monexpe's general practices.
Where particular requirements apply to a jurisdiction or a Client, these may be set out in the DPA, a territorial addendum, or another contractual document.
The person designated as Privacy Officer at Monexpe is:
Nouhad Amimy Privacy Officer
Monexpe Inc. 204 Rue du St.-Sacrement Montreal, QC H2Y 1W8 Canada
Email: info@monexpe.ca
She may be contacted notably regarding:
Monexpe Inc. 204 Rue du St.-Sacrement Montreal, QC H2Y 1W8 Canada
Email: info@monexpe.ca
© 2026 Monexpe Inc. All rights reserved.