Privacy and Cookie Policy

Updated October 4, 2026

Purpose of this policy

Catapulte is committed to protecting your personal information, to being transparent about the information it holds about you and to complying with applicable Québec and Canadian laws, including the Act respecting the protection of personal information in the private sector.

This policy explains what information we collect, why, how we protect it and which cookies our website uses. Your personal information is never used without your consent, or for purposes other than those for which it was collected, unless permitted by law.

Consent

We obtain your clear, free and informed consent before collecting, using or retaining your personal information. You may withdraw your consent at any time by writing to us using the contact details at the end of this policy.

Information we collect

Personal information is any information that relates to a person and allows them to be identified. Anonymized data is not included. Depending on your interactions with us, we may collect:

Identity and contact data: name, email address, organization, position and phone number;
Content of your messages: the subject and text you send us through the contact form or by email;
Communication preferences: your newsletter subscription and your choices about the communications you receive from us;
Application data: the information you submit with a job or internship application;
Technical data: IP address, browser type and version, operating system and connection data, collected automatically when you visit our website;
Browsing data: pages viewed, visit duration, device type and approximate region, only if you accept audience measurement cookies.

We do not ask for any sensitive information, such as health, financial or ethnic origin data.

How we collect information

Information you give us

When you fill out the contact form, subscribe to the newsletter, apply for a position or reach us by email, phone or in person, we keep the information you provide.

Automated technologies

When you browse our website, technical data is collected automatically to keep it running and secure. The section on cookies below provides the details.

Our website contains links to other websites. When you follow them, the privacy policies of those websites apply.

How we use information

Catapulte collects personal information by fair and lawful means, and only what is necessary for the following purposes:

responding to your requests and following up on our exchanges;
sending you our newsletter, if you subscribed;
building and maintaining our professional relationship with you;
assessing applications we receive;
measuring traffic to our website to improve it, if you consent;
keeping our website secure and protecting it against automated submissions and abuse;
meeting our legal and regulatory obligations.

Catapulte does not trade, rent or sell any personal information to third parties.

Cookies and similar technologies

A cookie is a small file that a website stores in your browser. Our website uses no advertising cookies. Cookies that measure your browsing are off by default and are only activated with your consent.

Our website uses the following:

Security cookies (strictly necessary): our host, Cloudflare, may set technical cookies that tell human visitors apart from bots and protect the website against attacks. The contact and newsletter forms use Cloudflare Turnstile to block automated submissions. None of this is used to track you across websites;
Anonymous audience measurement (Cloudflare Web Analytics): our host counts visits in aggregate, without cookies and without keeping your IP address. This data cannot be used to identify you;
Audience measurement cookies (with your consent): if you accept them, Google Analytics sets the _ga and _ga_* cookies, kept for up to 13 months. They tell us which pages are viewed, for how long, from which type of device and approximate region. We use them only to improve our website, never for advertising;
Browser local storage (preferences): your cookie choice (kept for 13 months), your light or dark display choice and a note that the opening animation has already played during your visit. This data stays on your device and is never sent to us.

On your first visit, a banner lets you accept or decline audience measurement cookies. Declining has no effect on your use of the website. You can change your mind at any time with the “Manage cookies” link at the bottom of every page, or delete cookies in your browser settings.

Service providers and transfers outside Québec

To run our website and communications, we rely on service providers that process some information on our behalf:

Cloudflare: website hosting, delivery and security, bot protection for forms, anonymous traffic statistics;
Resend: delivery of messages sent through the contact form;
Mailchimp: subscriber list management and newsletter delivery;
Google: website audience measurement (Google Analytics), if you consent.

These providers’ servers may be located outside Québec and Canada, including in the United States. Before entrusting them with information, we assess that it will be adequately protected. These providers must keep it confidential and use it only for the services they provide to us.

Retention

We keep your personal information for as long as necessary for the purposes for which it was collected and to meet our legal obligations. To set this period, we consider the nature and sensitivity of the information, the risk of harm from unauthorized use or disclosure and applicable legal requirements. At the end of this period, the information is securely destroyed or anonymized.

Security of your information

We have put appropriate safeguards in place, in both our procedures and the technology we use, to keep your personal information as secure as possible. We make sure the third parties we work with do the same and process your information only on our instructions.

Catapulte staff access personal information only when they need it, and only for the purposes for which it was collected. All employees commit in writing to keeping it confidential, and particular care is taken when destroying it so that no unauthorized person can access it.

Confidentiality incidents

When a confidentiality incident occurs, Catapulte will:

record it in its register of confidentiality incidents;
promptly take reasonable measures to reduce the risk of harm;
notify the Commission d’accès à l’information and the people concerned when the incident presents a risk of serious harm;
review and improve its safeguards.

Your rights

You may request access to your personal information, its correction or its deletion, and withdraw your consent to its use. We may be unable to act on a deletion request for specific legal reasons, which we will share with you.

You can unsubscribe from the newsletter at any time using the link in each email.

We respond to requests within 30 days of receipt. Requests are free of charge. If you are not satisfied with our response, you may contact the Commission d’accès à l’information du Québec.

Changes to this policy

We may update this policy, in particular if our practices or tools change. The date of the latest update appears at the top of the page. If we wish to use your information for new purposes, we will inform you and obtain your consent first.

Contact us

For any question about this policy, to exercise your rights or to change your communication preferences, write to the person in charge of the protection of personal information at Catapulte:

Martin Choquette-Scott, Web Developer
info@catapultecommunication.com
418 545-1208