High Speed Rail Solutions Privacy Policy
Last updated: May 16, 2026
This Privacy Policy explains how High Speed Rail Solutions (“HSRS”, “we”, “us”, or “our”) collects, uses, discloses, stores, transfers, and protects personal information when you visit www.hsrsolutions.com, contact us, register for training, attend webinars or events, request information, engage our services, or otherwise interact with us.
This Privacy Policy is intended to address privacy and data protection requirements that may apply in Canada, the United Kingdom, the European Union / European Economic Area, the United States, Australia, and other jurisdictions where we operate or provide services.
For the purposes of applicable privacy and data protection laws, High Speed Rail Solutions is the organization responsible for the personal information described in this Privacy Policy. Where services are provided through a specific HSRS legal entity or contracting entity, that entity may be the responsible organization or data controller for the relevant processing activities.
1. Information We Collect
We may collect personal information directly from you, automatically through our website, or from service providers, business partners, event platforms, referral sources, or publicly available sources where permitted by law.
- Contact and business information, such as your name, email address, phone number, organization, job title, mailing address, and business contact details.
- Service, training, and event information, such as course registrations, webinar attendance, certificates, meeting requests, customer support requests, proposals, contracts, and related communications.
- Commercial and transaction information, such as services requested, payment status, invoice details, and customer relationship information. We do not intentionally collect full payment card details; payment information is generally handled by third-party payment processors.
- Communications information, such as emails, contact form submissions, survey responses, and information you choose to provide when communicating with us.
- Website, device, and usage information, such as IP address, browser type, device type, operating system, referring and exit pages, pages visited, dates and times of visits, clickstream information, cookie identifiers, and similar technical information.
- Marketing preferences, such as newsletter subscriptions, event interests, unsubscribe status, and consent records.
We do not intentionally collect sensitive personal information unless it is necessary for a specific purpose, you choose to provide it, and we are permitted by law to collect it. Sensitive personal information may include information such as health information, biometric information, government identifiers, precise location information, or other information treated as sensitive under applicable law.
2. How We Use Personal Information
We may use personal information for the following purposes:
- to operate, maintain, secure, and improve our website and services;
- to respond to inquiries, contact requests, support requests, and proposal requests;
- to provide consulting, training, webinars, events, and other services;
- to manage course registrations, attendance records, certificates, invoices, payments, and related administration;
- to communicate with you about services, training, events, updates, and opportunities that may be relevant to you or your organization;
- to send newsletters, marketing communications, and event invitations where permitted by law;
- to personalize and improve website content and user experience;
- to analyze website usage, traffic, performance, and effectiveness of communications;
- to protect against fraud, misuse, security incidents, unauthorized access, and other unlawful activity;
- to comply with legal, regulatory, tax, accounting, contractual, and professional obligations;
- to manage business transactions, restructuring, mergers, acquisitions, financing, due diligence, or asset sales; and
- for any other purpose disclosed to you at the time of collection or permitted by applicable law.
3. Legal Bases, Consent, and Permitted Purposes
Depending on your location and the applicable law, we may rely on one or more legal bases or permitted grounds for collecting, using, or disclosing personal information.
- Consent: where you have given consent, such as for certain marketing communications, non-essential cookies, or other processing activities that require consent.
- Contract or pre-contract steps: where processing is necessary to provide services, respond to a request, register you for training, or manage a client relationship.
- Legitimate business interests: where processing is reasonably necessary for our business operations, service improvement, security, client relationship management, or marketing to business contacts, provided those interests are not overridden by your rights and freedoms.
- Legal obligations: where processing is necessary to comply with laws, regulatory requirements, court orders, tax obligations, accounting obligations, professional duties, or lawful requests from public authorities.
- Reasonable and permitted purposes: where privacy laws such as Canadian and Australian privacy laws allow collection, use, or disclosure for purposes that are reasonable, necessary, directly related, or otherwise permitted in the circumstances.
Where we rely on consent, you may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may affect our ability to provide certain services or communications.
4. Cookies, Analytics, and Similar Technologies
We use cookies, log files, web beacons, tags, pixels, scripts, analytics tools, and similar technologies to operate our website, remember preferences, understand how visitors use our website, improve performance, and support marketing or analytics activities where applicable.
A cookie is a small file stored on your device when you visit a website. Cookies may be session cookies, which are deleted when your browser closes, or persistent cookies, which remain on your device for a defined period unless deleted earlier. Some cookies are set by HSRS, and some may be set by third-party service providers.
We may use the following types of cookies and similar technologies:
- Strictly necessary cookies, which are required for the website to function properly.
- Preference cookies, which remember choices such as display or browser preferences.
- Analytics cookies, which help us understand website traffic, usage patterns, and performance.
- Marketing or advertising cookies, which may be used to measure campaigns or deliver relevant content where applicable.
Where required by law, we will request your consent before placing non-essential cookies or similar technologies on your device. You can also manage cookies through your browser settings. If you disable cookies, some website features may not function properly.
We use, or may use, a tool based on Snowplow Analytics technology to collect information about use of the website, such as how often users access the website, which pages they visit, traffic sources, browser and device information, timestamps, and other usage data. We use this information to understand website performance and improve the website and services. Snowplow is not used by us to intentionally collect names, email addresses, phone numbers, or other contact details, but technical data such as IP addresses, cookie identifiers, or device identifiers may be treated as personal information under some privacy laws. Where required, we will use Snowplow or other non-essential analytics technologies only with appropriate notice and consent.
Google Web Fonts and script libraries. We may use Google Web Fonts, including fonts such as Titillium Web, or similar font and script libraries to present website content consistently across browsers and devices. When your browser loads a font or script from a third-party provider, the provider may receive technical information such as your IP address, browser information, and the page being accessed. If your browser does not support or blocks web fonts, website content may display in a default font.
5. Marketing Communications
We may send you marketing communications, newsletters, training updates, event invitations, and service updates where permitted by law. This may include communications to business contacts where we have a lawful basis or permission to do so.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us. We may still send non-marketing communications, such as course confirmations, service notices, invoices, security notices, or legally required notices.
6. How We Share Personal Information
We may share personal information with the following categories of recipients:
- Service providers and processors that support our website, IT systems, analytics, CRM, email delivery, marketing, training registration, payment processing, hosting, security, communications, and administration.
- Business partners, consultants, instructors, contractors, or subcontractors where necessary to provide services, training, events, or project support.
- Professional advisers, such as lawyers, accountants, auditors, insurers, and other advisers.
- Public authorities, regulators, courts, law enforcement, or government agencies where required or permitted by law.
- Parties involved in a business transaction, such as a merger, acquisition, financing, restructuring, sale of assets, or similar transaction.
- Other parties where you direct us to share information, where you provide consent, or where disclosure is otherwise permitted by law.
We require service providers to use personal information only as needed to provide services to us or as otherwise permitted by law, and to apply appropriate confidentiality, security, and data protection measures.
7. Third-Party Websites and Services
Our website may include links to third-party websites, platforms, social media pages, event platforms, payment processors, or external resources. This Privacy Policy does not apply to websites, services, or organizations that we do not own or control. We encourage you to review the privacy policies and terms of any third-party websites or services you choose to use.
8. International Transfers and Cross-Border Processing
We and our service providers may store, process, or access personal information in Canada, the United Kingdom, the European Union / European Economic Area, the United States, Australia, and other jurisdictions where we or our service providers operate. These jurisdictions may have privacy and data protection laws that differ from those in your location.
Where required by applicable law, we use appropriate safeguards for cross-border transfers. These may include contractual protections, data processing agreements, standard contractual clauses, the UK International Data Transfer Agreement or Addendum, adequacy decisions, transfer impact assessments, vendor due diligence, or other legally recognized transfer mechanisms.
For Australian users, where Australian privacy law applies to us, we will take reasonable steps before disclosing personal information overseas to ensure that overseas recipients handle the information in a manner consistent with applicable Australian privacy requirements, unless an exception applies.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, manage client relationships, maintain training and attendance records, comply with legal, tax, accounting, contractual, regulatory, and professional obligations, resolve disputes, maintain security, and enforce agreements.
When personal information is no longer required, we will delete, anonymize, or securely dispose of it, unless we are required or permitted by law to retain it for a longer period.
10. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, misuse, or destruction. These safeguards may include access controls, confidentiality obligations, secure systems, vendor controls, and other protective measures appropriate to the nature of the information and the risks involved.
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. If we become aware of a privacy or security incident that requires notification, we will notify affected individuals, regulators, or other parties as required by applicable law.
11. Your Privacy Rights
Depending on your location and the laws that apply, you may have rights in relation to your personal information. These rights may include the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete personal information;
- request deletion of personal information;
- withdraw consent where processing is based on consent;
- object to or restrict certain processing;
- request portability of personal information in a structured, commonly used format;
- opt out of marketing communications;
- opt out of certain targeted advertising, sale, sharing, or profiling activities where applicable;
- request information about how we collect, use, disclose, and transfer personal information; and
- make a complaint to us or to an applicable privacy regulator.
To exercise your rights, contact us using the details in the “Contact Us” section below. We may need to verify your identity before responding. We will respond within the time required by applicable law. Some rights may be subject to legal limits or exceptions.
12. Canada
If you are located in Canada, we handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. We collect, use, and disclose personal information for purposes that a reasonable person would consider appropriate in the circumstances.
Where consent is required, we will seek meaningful consent and explain the purposes for collection, use, or disclosure in a clear and understandable manner. You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. Canadian users may request access to, or correction of, their personal information and may contact the Office of the Privacy Commissioner of Canada or an applicable provincial privacy regulator if they have unresolved concerns.
13. United Kingdom, European Union, and European Economic Area
If you are located in the UK, EU, or EEA, we may process your personal data under applicable data protection laws, including the UK GDPR, the EU GDPR, and related national laws. Depending on the processing activity, our legal basis may include consent, contract performance, legitimate interests, legal obligations, or another lawful basis permitted by law.
You may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, and lodge a complaint with a supervisory authority. If we are required by law to appoint a UK or EU representative, we will make those representative details available.
14. United States
If you are located in the United States, certain state privacy laws may provide additional rights depending on where you live and whether those laws apply to us. These rights may include the right to know or access personal information, correct inaccurate personal information, delete personal information, obtain a portable copy of personal information, and opt out of certain processing activities such as targeted advertising, sale, sharing, or profiling where applicable.
We do not sell personal information for money. If we use advertising, analytics, or tracking technologies in a way that is considered “sale”, “sharing”, or “targeted advertising” under applicable U.S. state privacy laws, we will provide appropriate notices and opt-out mechanisms where required. We do not knowingly sell or share personal information of individuals under 16 years of age.
15. Australia
If you are located in Australia, and the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles apply to our handling of your personal information, we will handle personal information in accordance with those requirements.
This includes taking reasonable steps to be open and transparent about how we handle personal information, collecting personal information only where reasonably necessary for our functions or activities, using and disclosing personal information for permitted purposes, taking reasonable steps to keep personal information accurate and secure, and providing access to and correction of personal information where required by law.
If you have a privacy concern, you should contact us first so we can try to resolve it. If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.
16. Children’s Privacy
Our website and services are intended for business users and are not directed to children. We do not knowingly collect personal information from children under the age of 13, or a higher age where applicable law requires parental consent. If we become aware that we have collected personal information from a child without appropriate consent, we will take reasonable steps to delete it.
17. Automated Decision-Making
We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements, or services. The “Last updated” date at the top of this Privacy Policy indicates when it was last revised. Material changes will be posted on our website or otherwise communicated where required by law.
19. Contact Us
If you have questions, requests, or concerns about this Privacy Policy or how we handle personal information, contact us at:
High Speed Rail Solutions
Email: contact@hsrsolutions.com
Website: www.hsrsolutions.com


