Privacy notice · 20 September 2026
Your information stays private.
Canada Railway & Infrastructure Hub (“Canada Hub”) is a Canadian market-development program operated by Coasia Inc. in Montréal, Québec, Canada. This notice explains how we handle information connected with the website, downloads, expressions of interest and business follow-up.
1 · Responsible organization and contact
Coasia Inc. is responsible for information processed for Canada Hub. Questions, access, correction, deletion or complaint requests may be sent to the Privacy Officer at connect@canadarailhub.com with the subject “Privacy request.”
2 · Information collected
- business contact details, title, organization, country and language;
- events considered, booth status, participation format, planning budget and timing;
- capabilities, objectives, follow-up notes and relationship source;
- consent choices, notice version and communications;
- limited technical data required for security and abuse prevention.
Required fields are identified. We do not request payment details, government identifiers or sensitive personal information in this form.
3 · Uses and legal bases
We use the information to respond, assess demand, size programs and pavilions, prepare proposals, coordinate requested services, secure the site and meet legal obligations. Where the GDPR applies, relevant bases include requested pre-contract steps, contract performance, our legitimate interests in operating a business-to-business program, separate consent for optional updates and compliance with law.
4 · Optional communications
An expression of interest does not automatically subscribe you to marketing. The updates box is optional and clear by default. Consent may be withdrawn at any time. We may still send messages needed to answer an inquiry or administer participation.
5 · Access and disclosure
Submissions are not public and do not authorize logo publication. Access is limited to authorized Canada Hub and Coasia personnel and necessary hosting, database, security, document, email and professional-service providers. Disclosure to an organizer or partner occurs only when needed for a requested service or supported by an appropriate legal basis. We do not sell personal information or lead lists.
6 · International processing
Providers may process information in Canada, the United States, the European Economic Area or elsewhere. We assess applicable transfers and use appropriate contractual, organizational and technical safeguards. Lawful-access rules may differ by jurisdiction.
7 · Retention
An unactioned submission is normally deleted or anonymized after 12 months. An active prospect is kept for no more than 24 months after the last meaningful human interaction. Contract and tax records follow applicable legal periods; security logs are normally kept for no more than 90 days; protected backups roll over within up to 30 days. A documented review is performed periodically.
8 · Security
Controls include encrypted transmission, a private database, restricted administration, authentication, server-side validation, idempotency and abuse prevention. No system can guarantee absolute security.
9 · Your rights
Subject to applicable law, you may request access, correction, deletion, portability or restriction, object to certain processing and withdraw consent. We may verify identity proportionately. You may also complain to the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada or the relevant European authority.
10 · Cookies, decisions and links
At launch, the public site uses no advertising or analytics cookies. The private administration area uses one strictly necessary session cookie. We do not make decisions with legal effects through solely automated processing. External links lead to sites with their own practices.
11 · Changes
We may update this notice as the program, technology or law changes. The current date and version will remain posted. A material change affecting existing information will receive additional notice where required.