Privacy Policy & Cookie Policy

Joloda Group Privacy & Cookie Notice

Last updated: August 2026

This Notice explains how the Joloda Group collects, uses, shares and protects personal data, including information collected through our websites, business relationships, recruitment activity and marketing communications.

 

1. About this Notice

Joloda is committed to protecting your privacy and handling personal data responsibly, transparently and securely.

This Privacy & Cookie Notice explains how we collect, obtain, use, disclose, store and protect personal data when you:

·         visit a Joloda website;

·         contact or enquire about Joloda products or services;

·         submit information through a website form or live-chat function;

·         purchase products or services from a Joloda Group company;

·         supply products or services to a Joloda Group company;

·         work with us as a distributor, integrator, reseller, service provider or other business partner;

·         receive marketing communications from us;

·         attend or interact with us at an event or exhibition;

·         apply for employment with a Joloda Group company;

·         interact with us through email, telephone, social media or other digital channels; or

·         otherwise have a business or professional relationship with a Joloda Group company.

This Notice applies across the Joloda Group and to the brands and business units represented through the central Joloda website. Additional or supplementary privacy information may be provided where required for a particular country, service, relationship or processing activity.

2. Who We Are

For the purposes of this Notice, “Joloda”, “Joloda Group”, “we”, “us” or “our” means Joloda Hydraroll Limited and the relevant companies within the Joloda Group.

The Group operates through the following companies and operating entities:

Joloda Hydraroll Limited
1 De Havilland Drive, Speke, Liverpool, L24 8RN, United Kingdom

Joloda BV
De Hulst 13, 5807 EW Oostrum, Venray, Netherlands

Joloda Conveyor Service Ltd
1 De Havilland Drive, Floor 2, Liverpool, L24 8RN, United Kingdom

Joloda Hydraroll SAS
1 Cour du Havre, 75008, CS50101, Paris, France

Joloda Japan K.K.
606 Eiwa Oike Building, 436 Sasaya-cho, Nakagyo-ku, 604-8187 Kyoto, Japan

Joloda Loading Automation LLC
PO Box 4820, 28406 Wilmington, North Carolina, USA

Joloda Ltda.
Rua Da Imprensa, 150-A, Jardim Terceiro Centenário, 12944-720, Atibaia - SP, Brazil

Actiw Oy
Linnatie 11-13, FI-76850 Naarajärvi, Finland

Actiw LLP
R-40 1st Floor NDSE-II, New Delhi 110049, India

Who is the Data Controller?

The data controller responsible for your personal data will depend on the nature of your relationship with Joloda.

For information collected through the main Joloda website and central Group marketing activity, Joloda Hydraroll Limited, incorporated in England and Wales, acts as the data controller unless otherwise stated.

Where you contract, correspond or otherwise deal directly with another Joloda Group legal entity, that entity may act as the controller of personal data collected and processed in connection with that relationship. In some circumstances, Joloda Group companies may jointly determine how and why personal data is processed.

Privacy contact: hello@joloda.com
Joloda Hydraroll Limited, 1 De Havilland Drive, Speke, Liverpool, L24 8RN, United Kingdom.

3. Data Protection Laws

Depending on your location, the Joloda Group entity involved and the processing activity, our handling of personal data may be governed by laws including:

·         the UK General Data Protection Regulation (UK GDPR);

·         the Data Protection Act 2018, as amended, including by the Data (Use and Access) Act 2025;

·         the Privacy and Electronic Communications Regulations 2003 (PECR);

·         the EU General Data Protection Regulation (EU GDPR);

·         the California Consumer Privacy Act (CCPA), as amended, where applicable;

·         Brazil’s Lei Geral de Proteção de Dados Pessoais (LGPD);

·         Japan’s Act on the Protection of Personal Information (APPI);

·         India’s Digital Personal Data Protection Act 2023 and Digital Personal Data Protection Rules 2025, where applicable; and

·         other applicable privacy and electronic communications laws in the countries in which we operate.

Where local law provides additional or different rights or requirements, we will apply those provisions to the extent they apply to the relevant processing.

4. Personal Data We Collect

Depending on your relationship with Joloda, we may collect and process information including:

·         name, job title, employer or organisation and professional role;

·         business address, email address, telephone number, country and location;

·         product, service or solution interests;

·         enquiry, correspondence and communication history;

·         quotation, order, contract and account information;

·         customer, supplier, distributor, integrator and partner information;

·         event and exhibition attendance;

·         marketing preferences, consent and suppression records;

·         website activity, IP address, browser, device and general geographic information;

·         form submissions and live-chat interactions;

·         campaign engagement, CRM activity, account and opportunity information;

·         service, support, warranty and project information; and

·         other information you provide when communicating with our Sales, Marketing, Service, Finance, Operations, HR or other teams.

We generally process business and professional information and do not routinely seek sensitive or special-category personal data through our website or sales and marketing activities. Where special-category or other sensitive personal data is processed, for example in an employment context, we will only process it where permitted by applicable law and where an appropriate legal basis and additional condition applies.

5. Where We Obtain Personal Data

We obtain personal data both directly from individuals and, in some circumstances, from other sources.

Information provided directly by you

We may obtain personal data directly from you when you:

·         complete a Joloda website form;

·         contact us by email, telephone or live chat;

·         request information, a quotation or proposal;

·         place or negotiate an order or enter into a contract with us;

·         register for or attend an event or exhibition;

·         subscribe to marketing communications;

·         communicate with a Joloda Sales, Marketing, Service or other team;

·         respond to a survey or customer-feedback request; or

·         apply for employment.

Information obtained from other sources

We may also obtain personal data from sources such as:

·         your employer, organisation, colleagues or other business contacts;

·         another Joloda Group company;

·         Joloda distributors, integrators, resellers, service partners, customers or suppliers;

·         event and exhibition organisers;

·         recruitment agencies, referees and previous employers where appropriate and permitted;

·         publicly available company websites, professional networks and business directories;

·         business information or data providers used for legitimate B2B purposes, where applicable;

·         existing or legacy Joloda business systems when information is migrated to a current system; and

·         website, analytics, advertising, security and technology providers.

Where information is obtained indirectly, it may include your name, job title, employer, business contact details, professional role, location, business interests, interaction history and information relating to an existing or potential commercial relationship.

Where required by applicable data-protection law, we will provide appropriate privacy information about personal data obtained from another source within the period required by law, including at the first communication where applicable.

6. How We Use Personal Data

6.1 Customer and Prospect Enquiries

We may use personal data to respond to enquiries, identify suitable Joloda products and services, provide technical or commercial information, prepare quotations and proposals, arrange meetings or demonstrations, manage leads and opportunities, route enquiries to the appropriate Joloda entity or partner, and support discussions before entering into a contract.

Lawful basis (where UK/EU GDPR applies): legitimate interests and/or taking steps at your request before entering into a contract.

6.2 Customers

We may use customer personal data to manage accounts, contracts and orders; provide products and services; coordinate manufacturing, installation, delivery and commissioning; provide technical support; manage service, maintenance and warranties; administer payments and commercial communications; maintain customer relationships; and provide relevant product, service and safety information.

Lawful basis (where UK/EU GDPR applies): contract, legal obligations and legitimate interests, as applicable.

6.3 Suppliers and Business Partners

We may use supplier and partner personal data to establish and manage relationships, procure products and services, manage distributors, integrators, resellers and service partners, administer contracts and payments, coordinate projects and delivery, undertake appropriate due diligence, and support joint customer and market activity.

Lawful basis (where UK/EU GDPR applies): contract, legal obligations and legitimate interests, as applicable.

6.4 Marketing

We may use business contact information to communicate with existing and prospective business customers about Joloda products, services, events, content and other relevant developments. Marketing may include email communications, newsletters, event invitations, product and solution information, offers, case studies, thought-leadership content and relevant industry information.

Where consent is required for email marketing, we obtain an appropriate opt-in. Where applicable law permits business-to-business marketing on another legal basis, we may rely on legitimate interests, subject to appropriate safeguards and the individual’s right to object. We also comply with applicable electronic marketing requirements, including PECR where relevant.

Joloda does not use SMS as a marketing channel. Every marketing email sent through our marketing systems provides a mechanism for recipients to unsubscribe or otherwise change their marketing preferences.

6.5 Segmentation and Marketing Profiling

We may use information such as location, market or industry, organisation, professional role, previous enquiries, product interests, website interactions and campaign engagement to make communications more relevant and to understand business interest in our products and services.

We do not use this activity to make solely automated decisions that produce legal or similarly significant effects on individuals.

Lawful basis (where UK/EU GDPR applies): legitimate interests and, where required, consent.

6.6 Events and Exhibitions

Where you register for or interact with Joloda at an event, we may use your information to administer attendance, arrange meetings, respond to requests, record legitimate business discussions, follow up after the event and progress relevant enquiries. Information may be obtained directly from you or, where appropriate, from the relevant event organiser or registration platform.

Lawful basis (where UK/EU GDPR applies): legitimate interests, contract or consent depending on the circumstances.

6.7 Customer Feedback and Research

We may contact customers for feedback, including customer satisfaction surveys and Net Promoter Score (NPS) research. We use this information to improve our products, services, customer experience and business processes.

Lawful basis (where UK/EU GDPR applies): legitimate interests.

6.8 Job Applicants and Recruitment

If you apply for a position with a Joloda Group company, we may process your name and contact details, CV and employment history, qualifications and professional experience, application and interview information, remuneration expectations where relevant, references, right-to-work or eligibility information, recruitment correspondence and other information you choose to provide as part of your application.

We may obtain recruitment information directly from you and, where appropriate, from recruitment agencies, referees, previous employers and publicly available professional sources. We use this information to assess your suitability for a role, communicate with you about your application, arrange interviews and assessments, verify information where appropriate, comply with employment and immigration requirements, make recruitment decisions and maintain appropriate recruitment records.

Where UK/EU GDPR applies, our legal bases may include taking steps before entering into an employment contract, compliance with legal obligations and our legitimate interests in recruiting and managing our workforce. Where sensitive personal data is required for recruitment or employment purposes, it will only be processed where legally permitted.

If a separate applicant privacy notice is provided for a particular recruitment process or location, that notice will supplement this Notice.

6.9 Legal, Compliance and Security

We may process personal data where necessary to comply with legal or regulatory requirements, establish or defend legal claims, prevent fraud or misuse, protect our systems, employees, customers and property, investigate security incidents, enforce contractual rights and respond to lawful requests from regulators, courts or public authorities.

7. Our Legitimate Interests

Where we rely on legitimate interests, these may include operating and improving our business; managing B2B customer, supplier and partner relationships; responding to enquiries; developing customer relationships; promoting relevant Joloda products and services; understanding customer and market needs; improving sales and marketing effectiveness; measuring business and marketing performance; improving our websites and digital services; securing our systems and infrastructure; and managing the Joloda Group.

Where required, we assess and balance these interests against the rights, freedoms and reasonable expectations of the individuals whose personal data we process.

8. Sharing Personal Data Within the Joloda Group

Joloda operates internationally and personal data may be shared between Joloda Group companies where necessary for legitimate business purposes. This may include sharing information to respond to enquiries, route enquiries to the appropriate country or business, identify the appropriate Sales or Service contact, support international customers, provide technical or commercial support, manage contracts and projects, provide aftersales services, coordinate marketing activity, maintain Group CRM and reporting systems, and administer Group business operations.

Only information reasonably required for the relevant purpose will be shared. Where required, appropriate intercompany data-protection and international-transfer arrangements are maintained.

9. Service Providers and Other Recipients

We use third-party service providers to support our business activities. These may include providers of CRM systems, marketing automation, website hosting and content management, cybersecurity and content-delivery services, cookie consent management, analytics, tag management, email services, digital advertising, video and embedded-content services, social-media and professional-networking services, IT support and professional advisory services.

Current systems and services used in connection with our website, marketing and customer-management activities may include:

·         SugarCRM – customer relationship management.

·         Mautic – marketing automation and email communications.

·         Umbraco CMS – website content management.

·         Cloudflare – website security, performance and content delivery.

·         Cookiebot CMP (Usercentrics) – cookie consent management, preference recording and live cookie declaration.

·         Google Tag Manager – management and deployment of website tags.

·         Google Analytics – website analytics and performance measurement.

·         Google Ads – campaign and conversion measurement and advertising.

·         Google Search Console – search performance analysis.

·         YouTube – embedded video content.

·         LinkedIn – professional networking, marketing and campaign measurement.

Where suppliers process personal data on our behalf, we require appropriate contractual, confidentiality, security and data-protection controls. We may also disclose personal data to professional advisers, insurers, financial institutions and auditors; in connection with a corporate transaction; or where required by law, regulation, a court, regulator, law-enforcement body or other competent authority.

10. International Transfers

Joloda operates internationally and uses Group companies and service providers located in different countries. Personal data may therefore be transferred to, accessed from or processed in countries outside the country in which it was originally collected.

Where UK or EEA personal data is transferred internationally, we use an appropriate transfer mechanism where required. Depending on the circumstances, safeguards may include adequacy regulations or decisions, recognised data privacy frameworks, Standard Contractual Clauses, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another mechanism permitted by applicable law.

Some technology providers may permit authorised personnel or subprocessors in other countries to access information for support, maintenance, security or service-delivery purposes even where primary hosting remains in the UK or EEA. Further information about applicable safeguards can be requested from hello@joloda.com.

11. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, regulatory, contractual, accounting, tax, warranty, service, dispute and legitimate operational requirements. Retention periods vary depending on the type of information and relationship involved.

For marketing information, we normally retain relevant business contact information while there remains an appropriate business or marketing purpose. Where you unsubscribe or object to marketing, we may retain limited information on a suppression list so that your preference continues to be respected. Recruitment records are retained in accordance with applicable recruitment and employment retention requirements.

Information that is no longer required will be securely deleted, anonymised or otherwise disposed of in accordance with our applicable retention processes.

12. Your Data Protection Rights

Depending on your location, the circumstances and applicable law, you may have rights including the right to:

·         be informed about the processing of your personal data;

·         request confirmation that we process your personal data and request access to it;

·         request correction of inaccurate or incomplete information;

·         request deletion or erasure in applicable circumstances;

·         request restriction of processing;

·         object to certain processing, including direct marketing;

·         withdraw consent where processing is based on consent;

·         request portability of certain personal data;

·         request information about certain disclosures or sharing;

·         request review of certain automated decisions where applicable; and

·         complain to an appropriate supervisory or data-protection authority.

Not every right applies in every circumstance. To exercise a privacy right, contact hello@joloda.com. We may need to verify your identity and request sufficient information to locate the relevant records. We will respond within the timeframe required by applicable law.

13. Additional Rights Depending on Your Location

13.1 United Kingdom and European Economic Area

Where the UK GDPR or EU GDPR applies, you may have rights including access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You have the right to object to processing of your personal data for direct marketing purposes. You may also complain to the relevant supervisory authority. For Joloda Hydraroll Limited in the UK, the relevant authority is the Information Commissioner’s Office (ICO).

13.2 California

Where the California Consumer Privacy Act (CCPA), as amended, applies to our processing, California residents may have rights to know about personal information collected and how it is used or disclosed; request access, deletion or correction; opt out of the sale or sharing of personal information where applicable; limit certain uses or disclosures of sensitive personal information where applicable; and receive equal treatment when exercising applicable privacy rights.

The categories of personal information we may collect are described in Section 4, sources are described in Section 5, purposes are described in Section 6, and categories of recipients are described in Sections 8 and 9. Where California-specific opt-out controls are legally required in connection with website technologies, we will make an appropriate privacy-choice mechanism available. Requests may also be submitted to hello@joloda.com.

13.3 Brazil

Where Brazil’s LGPD applies, individuals may have rights including confirmation of processing, access, correction, anonymisation or blocking in applicable circumstances, deletion, portability where available, information about sharing, withdrawal of consent, objection in applicable circumstances and review of certain automated decisions. Requests relating to Joloda Ltda. may be submitted to hello@joloda.com. Individuals may also have the right to raise concerns with Brazil’s Autoridade Nacional de Proteção de Dados (ANPD).

13.4 Japan

Where Japan’s APPI applies, individuals may have rights in relation to retained personal data, including disclosure, correction, addition or deletion, and cessation of use or certain third-party provision where applicable. Requests relating to Joloda Japan K.K. may be submitted to hello@joloda.com. Individuals may also contact Japan’s Personal Information Protection Commission (PPC) where appropriate.

13.5 India

Where India’s Digital Personal Data Protection Act 2023 and applicable rules apply, individuals may have rights including access to information about personal data processing, correction and erasure in applicable circumstances, withdrawal of consent, grievance redressal and nomination rights provided by law. Requests relating to Actiw LLP may be submitted to hello@joloda.com. Individuals may also have rights to raise a grievance with the relevant Indian data-protection authority or board in accordance with applicable law.

14. Marketing Preferences

You may opt out of Joloda marketing communications at any time by using the unsubscribe link in a marketing email or contacting hello@joloda.com. Where marketing is based on consent, withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

Opting out of marketing does not prevent us from sending necessary contractual, transactional, service, technical, warranty, safety or other non-marketing communications.

15. Website Privacy and Umbraco CMS

The Joloda website represents Joloda Group brands and businesses through a central web platform. The website currently uses Umbraco CMS as its content-management platform.

When you use the website, information may be collected about pages viewed, content accessed, referring websites, IP address, browser and device information, general geographic information, interactions with website forms and calls to action, campaign source, website performance and website usage.

Where you submit information through a website form, the information may be transferred into Joloda’s CRM and marketing systems to enable us to respond to your enquiry and manage the relationship.

16. Google Tag Manager and Consent Controls

We use Google Tag Manager (GTM) to manage and deploy website tags and technologies. Google Tag Manager is primarily a tag-management system; the technologies deployed through GTM may support website analytics, conversion measurement, campaign attribution, advertising, remarketing and website performance measurement.

We use Cookiebot CMP, provided by Usercentrics, as our website consent-management platform. Where a tag or technology requires consent, it is intended to operate in accordance with the preferences recorded through Cookiebot. We periodically review our GTM and Cookiebot configurations to help ensure that the technologies deployed are reflected appropriately in this Notice and the website’s cookie settings.

17. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small files or technologies placed on or accessed from a device when a website is used. We use the following broad categories.

Strictly Necessary

These technologies are required for the website to operate securely and effectively. They may support website security, traffic management, network performance, website forms, session functionality and cookie-preference management. They may include technologies associated with Umbraco, Cloudflare and Cookiebot.

Analytics

These technologies help us understand how visitors use the website and allow us to measure and improve performance. They may include Google Analytics where enabled in accordance with your consent preferences.

Marketing

These technologies may help us measure marketing campaigns, understand engagement or provide more relevant advertising. They may include technologies associated with Google Ads and LinkedIn where enabled in accordance with your consent preferences.

Functional and Media

These technologies support enhanced website functionality and embedded content. They may include technologies associated with YouTube where video content is embedded on the website.

Cookie Consent and Preference Management

We use Cookiebot CMP as our cookie consent-management platform. Cookiebot enables website visitors to accept or reject non-essential technologies, select preferences by category, change or withdraw their choices, and view information about the cookies and similar technologies currently used on the Joloda website.

Except where cookies or similar technologies are strictly necessary, we seek consent before placing or accessing them where required by applicable law. Your preferences can be reviewed or changed through the Cookie Settings facility available on the Joloda website.

Current Cookie Declaration

Because website technologies, individual cookies and their durations can change, the Cookiebot Cookie Declaration available through the website’s Cookie Settings facility is the current source of information about cookies and similar technologies detected on the Joloda website. The declaration provides information including, where applicable, cookie or storage name, provider, purpose, category and expiry or duration.

18. Website Technology Providers

The principal website-related technologies currently identified are summarised below. The exact cookies and similar technologies active at any given time are shown through the Cookiebot Cookie Declaration.

19. Children

The Joloda website, products and services are intended for business and professional users and are not directed at children. We do not knowingly seek to collect children’s personal data through the Joloda website.

20. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration, unauthorised disclosure and destruction. Measures may include access controls, user authentication, appropriate system permissions, security monitoring, supplier controls, staff awareness and training, backup and recovery processes, and contractual confidentiality and security obligations.

Access to personal data is limited to employees, contractors, Group companies and service providers who require access for legitimate purposes. No electronic transmission or storage system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the data and relevant risks.

21. Privacy Governance, Data Protection Contact and Representatives

Joloda coordinates privacy matters through a central Joloda Group Privacy Contact at hello@joloda.com. Individuals may use this contact regardless of which Joloda Group entity is responsible for the relevant processing.

Where applicable law requires a particular Joloda Group entity to appoint a Data Protection Officer, local privacy officer, representative or other statutory contact, the relevant entity will comply with those requirements and make the appropriate contact details available.

22. Complaints

If you have concerns about how Joloda handles your personal data, please contact us first at hello@joloda.com so that we can investigate. Depending on your location, you may also have the right to complain to the relevant privacy or data-protection authority, including the Information Commissioner’s Office (ICO) in the United Kingdom, the relevant EU/EEA supervisory authority, the California Privacy Protection Agency where applicable, the Autoridade Nacional de Proteção de Dados (ANPD) in Brazil, the Personal Information Protection Commission (PPC) in Japan, or the relevant Indian data-protection authority or board in accordance with applicable law.

23. Links to Other Websites and Services

The Joloda website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices, security or content of independent third-party websites. We recommend reviewing the privacy information provided by the relevant third party before providing personal information to it.

24. Changes to this Notice

We may update this Privacy & Cookie Notice periodically to reflect changes within the Joloda Group; changes to our systems, suppliers or processing activities; changes to our websites and digital services; changes to applicable law or regulatory guidance; or changes to the ways in which we collect or use personal data. The latest version will be published on the Joloda website together with its effective date.

25. Contact Us

Joloda Group Privacy Contact
Joloda Hydraroll Limited
1 De Havilland Drive
Speke
Liverpool
L24 8RN
United Kingdom

Email: hello@joloda.com