Legal

Privacy policy

For the wholesale and distribution enquiry pages on b2b.collalloc.com. Last updated 13 August 2026.

This policy explains how your personal data is handled when you use the distributor application form and related pages on b2b.collalloc.com. It covers only these business enquiry pages. Purchases made through the online shop at www.collalloc.com are covered by the separate terms and conditions and GDPR statement.

Who is responsible for your data

What data we collect

When you complete the distributor application form, we collect the information you enter:

• Your first and last name, and your role in the business
• Your company name and website
• Your email address and phone number
• Business details you provide: sales channel, market, registration status, timeline, how long you have been trading, what you currently sell, and how many retail clients or locations you serve

We also collect limited technical data automatically, such as your IP address, browser type, and how you reached the page (for example UTM campaign parameters), through cookies and similar technologies. See the cookie policy for details.

Why we use it and on what legal basis

Purpose	Legal basis (GDPR Art. 6)
To contact you about a wholesale or distribution partnership, review your application, and arrange a meeting	Your consent, and steps taken at your request prior to entering into a contract (Art. 6(1)(a) and (b))
To send you appointment confirmations and reminders by email and WhatsApp	Your consent (Art. 6(1)(a))
To keep our records, prevent misuse, and secure the site	Our legitimate interests (Art. 6(1)(f))
Analytics cookies to understand how the page is used	Your consent (Art. 6(1)(a))

Providing your details is voluntary. If you do not provide them, we cannot review your application or arrange a meeting.

Who processes your data on our behalf

We use trusted service providers (processors) to run the funnel. They act on our instructions and are bound by data-processing terms:

• GoHighLevel (HighLevel / LeadConnector) – our CRM, which stores your submission and manages our communication with you
• WhatsApp Business (Meta Platforms) – to send and receive messages about your enquiry, where you choose to use it
• Google (Calendar and Meet) – to schedule and hold the meeting
• Meta (Facebook and Instagram advertising) – the ads that may have brought you to the page, and related measurement

Some of these providers are based outside the European Union. Where your data is transferred outside the EU, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your application data for as long as needed to evaluate and pursue a possible partnership, and afterwards only as long as we have a legitimate reason or a legal obligation to do so. If a partnership does not proceed, we delete or anonymise your enquiry data when it is no longer needed. You can ask us to delete it sooner at any time.

Your rights

Under the GDPR you have the right to:

• Ask what personal data we hold about you and request a copy
• Have inaccurate data corrected or updated
• Request erasure of your data
• Restrict or object to processing, including processing based on our legitimate interests
• Data portability
• Withdraw your consent at any time, without affecting processing carried out before withdrawal

To exercise any of these, write to [email protected]. You also have the right to lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz).

Changes to this policy

We may update this policy from time to time. The version in force is the one published on this page, with the date shown above.

This page is a plain-language summary provided for transparency. It does not replace opio a.s.'s full legal terms. In case of any conflict, the company's formal terms and GDPR documentation prevail.