Skip to main content

Canadian Privacy Policy

Which Policy Applies to You

Katapult Engineering, Inc. publishes two versions of this Privacy Policy for visitors to katapultengineering.com: a United States version and a Canadian version. This is the Canadian version, which governs your visit if you are located in Canada.

If you are visiting from the United States, please refer to katapultengineering.com/privacy-policy for the version that applies to you.

Introduction

Katapult Engineering, Inc. (“Katapult,” “we,” “our,” or “us”) respects the privacy of visitors to our marketing website at katapultengineering.com (the “Site”). This Privacy Policy explains what personal information we collect when you visit the Site, how we use it, and the choices available to you under Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy covers only the Site. If you use Katapult Pro, our software platform, a separate privacy policy governs that relationship and is available at katapultpro.com/privacy-policy.

Accountability

Katapult is accountable for the personal information in its custody or control, including personal information transferred to service providers for processing. We have designated a Privacy Officer who is responsible for our compliance with PIPEDA and for responding to privacy inquiries and complaints. Contact information for our Privacy Officer is provided at the end of this policy.

Information We Collect

Information You Provide

When you fill out a contact form, request a demo, subscribe to our newsletter, or otherwise communicate with us through the Site, you may provide information such as your name, email address, company name, phone number, and the content of your message. We collect only what you choose to submit and only what we need for the purposes identified in this policy.

Information Collected Automatically

When you visit the Site, we automatically collect certain technical information through cookies, server logs, and similar technologies. This typically includes your IP address, browser type and version, operating system, referring URL, pages visited, time spent on those pages, and the date and time of your visit.

We use Google Analytics to understand how visitors interact with the Site. Google Analytics uses cookies to collect anonymous usage data. You can learn more about how Google processes this data at google.com/policies/privacy/partners, and you can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on. We also use HubSpot for contact form management and marketing analytics.

Cookies and Similar Technologies

Cookies are small text files placed on your device when you visit a website. We use cookies for site functionality and analytics. You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being set. Disabling cookies may affect certain features of the Site.

We may also use social media pixels from platforms such as LinkedIn, Facebook, or X (formerly Twitter) to measure the effectiveness of our advertising. These pixels may collect information about your visit to the Site and associate it with your social media profile. Each platform’s privacy policy governs its use of that data.

Purposes — How We Use Your Information

We use the information we collect through the Site for the following purposes: to respond to your inquiries and provide the information you request; to send you marketing communications where we have your consent (express or implied) under Canada’s Anti-Spam Legislation; to analyze Site traffic and improve the Site’s content and user experience; to detect and prevent security threats; and to comply with legal obligations.

We do not sell your personal information. We do not use your personal information for automated decision-making or profiling that would produce legal or similarly significant effects.

If we wish to use your personal information for a new purpose not identified in this policy, we will obtain your consent before doing so.

Consent

By providing your personal information to us through the Site, you consent to our collection, use, and disclosure of that information for the purposes identified in this policy. In some cases, your consent may be implied from the circumstances (for example, when you voluntarily submit a contact form to ask us a question).

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent, contact our Privacy Officer at the address below. We will inform you of the consequences of withdrawing consent, which may include our inability to continue providing you with certain information or services.

Sharing and Service Providers

We may share your personal information with service providers who help us operate the Site and conduct our business, such as hosting providers, analytics platforms, and email delivery services. These providers are contractually required to use your information only for the purposes we specify and to protect it with safeguards comparable to those we apply ourselves.

We may also disclose personal information when required by law, in response to a valid legal process, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

We do not sell, rent, or lease your personal information to third parties for their own marketing purposes.

Cross-Border Data Transfers

Katapult is based in the United States, and the Site is hosted in the United States on Google Cloud Platform. Your personal information will be transferred to, stored, and processed in the United States on servers operated by Google and other US-based service providers.

The United States may not provide the same level of data protection as Canadian law. When personal information is in the United States, it may be subject to US law, including lawful access requests by US government authorities. By using the Site, you acknowledge and consent to this transfer.

Katapult remains accountable under PIPEDA for the protection of your personal information, including when it is in the hands of our service providers, regardless of where the data is processed. We use contractual safeguards and conduct appropriate assessments to ensure your personal information receives comparable protection.

Data Retention

We retain personal information collected through the Site only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Contact form submissions and marketing inquiries are retained for as long as reasonably necessary to respond to your inquiry and support any resulting business relationship, after which they are deleted or anonymized.

Analytics data collected through cookies is retained in accordance with our analytics provider’s standard retention settings (currently 14 months for Google Analytics).

Data Security

We use physical, organizational, and technological safeguards that are appropriate to the sensitivity of the personal information we hold. These measures include encryption of data in transit (TLS/SSL), access controls, and regular security assessments. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

Marketing Communications (CASL)

We will only send you commercial electronic messages (including marketing emails) with your express consent or where we have implied consent under Canada’s Anti-Spam Legislation (CASL). Express consent means you have affirmatively opted in to receive our communications. Implied consent may exist if you have an existing business relationship with us—for example, you purchased services within the past two years or made an inquiry within the past six months. We record the date, source, and form of each consent we obtain.

Every marketing email we send identifies Katapult as the sender, provides our contact information, and includes a clear, single-click unsubscribe mechanism. Unsubscribe requests are processed within ten business days. You may also contact our Privacy Officer directly to withdraw your consent.

Your Rights Under PIPEDA

As a resident of Canada, you have the following rights with respect to the personal information we hold about you:

Access. You have the right to request access to the personal information we hold about you and to be informed of how it has been used and to whom it has been disclosed. We will respond to your request within 30 days.

Correction. You have the right to request that we correct any personal information that is inaccurate, incomplete, or out of date. Where appropriate, we will communicate corrections to third parties with whom the information was shared.

Withdrawal of Consent. You may withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual limitations and reasonable notice.

Deletion. Where your personal information is no longer necessary for the purposes for which it was collected, or where you withdraw consent, you may request that we delete it.

Complaint. If you are not satisfied with how we handle your personal information, you may file a complaint with our Privacy Officer. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise any of these rights, contact our Privacy Officer at the address below. We will verify your identity before responding and will not charge a fee except in limited circumstances permitted by law, in which case we will notify you in advance.

Children’s Privacy

The Site is not directed at children. We do not knowingly collect personal information from children without appropriate parental consent. If we become aware that we have collected personal information from a child without that consent, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the revised policy on the Site with an updated effective date. We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

Contact Us — Privacy Officer

Katapult has designated a Privacy Officer who is accountable for our compliance with PIPEDA and for responding to privacy inquiries and complaints. To exercise any of your rights under this policy, or if you have questions or concerns about how we handle your personal information, please contact:

Quay Hoffman, Privacy Officer

Katapult Engineering, Inc.

19 N. Baltimore Street

Dillsburg, PA 17019

Email: privacy@katapultengineering.com

© 2026 Katapult Pro. All rights reserved.

  • LinkedIn
  • Youtube
  • Instagram