Privacy Policy

This Privacy Policy applies to information collected through our website at katena.ca, through our quote request and contact forms, over email, and during the ordinary course of doing business with Katena Railings.

We comply with Canadian federal privacy law (the Personal Information Protection and Electronic Documents Act, or PIPEDA) and, because we are headquartered in Quebec, with the Act respecting the protection of personal information in the private sector(Quebec's Law 25, formerly Bill 64).

Katena Railings is a commercial railing manufacturer and installer headquartered at:

For the purposes of Quebec's Law 25, our privacy contact is our President, Gerry Catena. Contact details are in Section 15 below.

We only collect information that helps us respond to you or deliver a project. Specifically:

a. Information you give us directly

• Contact details — name, company name, email address, phone number.
• Project information — building type, location, quantity, timelines, drawings, specifications, and any files you attach to a quote request.
• Correspondence — the content of emails and messages you send us.
• Career applications — resume, work history, and any information you provide when applying for a role.

b. Information collected automatically

• Technical data — IP address, browser type, device type, operating system, referring URL, and pages you view on our site.
• Usage data — how long you stay on a page, which sections you interact with, and how you arrived at our site (search engine, direct, social).

We do not collect banking information, credit card numbers, or government identifiers through this website. Any payment information for a project is handled separately, directly with our accounting team.

We use the information you provide for the following purposes:

• To prepare and send project quotes and proposals.
• To respond to your inquiries, follow up on a request, or provide technical support.
• To manage active projects — engineering, fabrication, delivery, and installation.
• To send project updates, invoices, and warranty documentation.
• To improve our website, understand which content is useful, and fix issues.
• To meet our legal, regulatory, and record-keeping obligations.

We do not sell, rent, or trade your personal information — ever. We do not send marketing emails to people who haven't asked to receive them.

We process personal information on one of the following legal bases, as required by Canadian and Quebec law:

• Your consent — when you fill out a quote form, contact us, or apply for a job, you're consenting to us using that information for the stated purpose.
• Performance of a contract — once we're working together on a project, we process information as needed to deliver on our commitments.
• Legal obligations — for tax records, warranty enforcement, and safety compliance documentation.
• Legitimate business interests — for standard site analytics, security, and fraud prevention, weighed against your privacy rights.

We share information only with people and companies who need it to do their job for us, and only to the extent required:

• Our team — estimators, engineers, project managers, and installers on your project.
• Service providers — email hosting (Microsoft 365), website hosting (Vercel), and analytics providers, all bound by contractual confidentiality obligations.
• Structural engineers — when a stamped drawing is required for a specific project.
• Government authorities — where required by a valid court order, subpoena, or legal obligation.

We do not share your information with advertisers, data brokers, or any third party for their own marketing purposes.

Our website uses a small number of cookies and similar technologies to make the site work properly and to understand how visitors use it.

• Strictly necessary cookies — required for the site to function (e.g., remembering your language preference).
• Analytics cookies — help us count visitors and understand which pages are most useful. Data is aggregated and does not identify you personally.

You can disable cookies in your browser settings at any time. Doing so may affect how the site functions.

We keep personal information only as long as we need it for the purpose it was collected, or as required by law:

• Quote inquiries that don't become projects — up to 2 years, so we can follow up if you re-engage.
• Active project files — for the duration of the project and the warranty period, plus any period required for tax, accounting, or safety records (typically 7 years under Canadian law).
• Career applications — up to 1 year after the position is filled or closed, unless you ask us to keep your resume on file longer.
• Website analytics — up to 26 months in aggregated form.

We use industry-standard safeguards to protect your information, including:

• Encrypted connections (HTTPS/TLS) for all data transmitted to our website.
• Access controls — only team members who need your data can see it.
• Secure email hosting and multi-factor authentication on business accounts.
• Regular review of our security practices.

No system is perfectly secure, and we cannot guarantee absolute security of information transmitted over the internet. If we ever become aware of a security incident that materially affects your personal information, we will notify you as required by law.

Under Canadian privacy law, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correct — ask us to fix information that's inaccurate or out of date.
• Delete — request that we delete your information, subject to legal retention obligations.
• Withdraw consent — withdraw your consent to us using your information at any time.
• Complain — if you're not satisfied with our response, file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or, for Quebec residents, the Commission d'accès à l'information (CAI).

To exercise any of these rights, email us at info@katena.ca. We will respond within 30 days.

If you are a resident of Quebec, additional rights apply under Quebec's Act respecting the protection of personal information in the private sector (Law 25):

• Right to data portability — receive your data in a structured, commonly used, technological format.
• Right to de-indexation — request that information be de-indexed if certain conditions are met.
• Notice of automated decisions — we do not use fully automated decision-making systems; a human is always involved in decisions that affect you.
• Notice of cross-border transfers — see Section 13 for details on where your data may be processed.

Our person in charge of the protection of personal information for Law 25 purposes is our President, Gerry Catena. See Section 15 for contact information.

Our website and services are directed at commercial customers — architects, developers, contractors, and building owners. We do not knowingly collect personal information from children under the age of 14. If you believe a child has provided us with information, please contact us and we will delete it.

Our website is hosted on Vercel (with edge nodes worldwide) and our email is hosted on Microsoft 365. This means that some of your personal information may be stored or processed outside of Canada, including in the United States.

In all cases, we require our service providers to protect your information with safeguards at least equivalent to those required by Canadian and Quebec law.

We may update this policy from time to time to reflect changes in our practices or in the law. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you directly.

Continued use of our website after a policy update means you accept the updated version.

Questions, requests, or complaints about this policy or our privacy practices should be directed to:

If you are not satisfied with our response, you may contact:

• Office of the Privacy Commissioner of Canada — priv.gc.ca
• Commission d'accès à l'information du Québec — cai.gouv.qc.ca