Privacy Policy
Effective Date: July 1, 2026
Last Updated: July 14, 2026
1. About This Policy
Kolene Corporation (“Kolene,” “we,” “us,” or “our”) respects your privacy. Upton Industries is a Kolene company. This Privacy Policy explains how Kolene collects, uses, discloses, and protects personal information when you:
- visit https://www.kolene.com or https://uptonindustries.com (collectively, the “Websites”);
- submit a form through either Website;
- request information, products, services, equipment, literature, or a Safety Data Sheet (SDS);
- communicate with Kolene Corporation or Upton Industries; or
- otherwise interact with the Websites and related services.
For purposes of the General Data Protection Regulation (GDPR) and similar data-protection laws, Kolene Corporation is the controller of personal data described in this Policy. Kolene may route an inquiry to personnel working with Upton Industries when the inquiry concerns Upton products, equipment, services, or operations.
This Policy applies to the public Kolene Corporation and Upton Industries Websites. It does not govern employee records, customer or supplier records maintained under a separate agreement or notice, or third-party websites that we do not control.
2. Personal Information We Collect
Information You Provide
We collect information that you choose to provide, including:
- Contact and identity information: name, email address, telephone number, postal address, and company website.
- Professional information: company name, job title, and other business contact details.
- Inquiry information: the Kolene or Upton product, equipment, service, or capability in which you are interested; your cleaning, heat-treatment, or thermal-processing needs; materials or substrates involved; and the contents of messages or attachments you send us.
- SDS request information: your name, company, job title, email address, telephone number, postal address, customer or request status, and the products or documents requested.
- Communications: information contained in emails, telephone calls, text messages, correspondence, or other communications with Kolene Corporation or Upton Industries.
- Consent and acknowledgment information: choices and acknowledgments you make when submitting a form, selecting cookie preferences, or separately opting into a communication.
Please do not submit government identification numbers, financial account information, health information, precise geolocation, or other sensitive personal information through a Website’s free-text fields unless Kolene specifically requests it through an appropriate secure process.
Information Collected Automatically
When you use either Website, Kolene and its infrastructure providers may automatically process:
- IP address and approximate location derived from it;
- browser type, device type, operating system, language, and similar technical information;
- requested pages and files, referring page, date and time of a request, response status, and related network information;
- security and fraud-prevention signals, including signals used to distinguish legitimate visitors from automated traffic; and
- cookie-consent choices and related consent records.
We do not currently use Google Analytics or Google advertising tags on either Website. We do not use the Websites to build profiles for targeted or cross-context behavioral advertising.
3. How We Use Personal Information
We use personal information to:
- respond to questions, inquiries, and requests;
- provide product, equipment, service, technical, literature, and SDS information;
- route an inquiry to the appropriate Kolene Corporation or Upton Industries personnel;
- communicate about a current or prospective business relationship;
- operate, maintain, troubleshoot, secure, and improve the Websites;
- prevent spam, fraud, abuse, and other malicious activity;
- record and honor cookie and privacy choices;
- maintain business, security, and compliance records;
- establish, exercise, or defend legal claims; and
- comply with applicable laws, regulations, court orders, and lawful government requests.
Kolene does not use Website personal information for solely automated decisions that produce legal or similarly significant effects. Automated security tools may prevent or challenge a form submission when the activity appears automated or malicious.
4. GDPR Legal Bases
Where the GDPR or a similar law applies, we rely on the following legal bases:
- Consent: to load optional external media, such as YouTube, and for any communication for which consent is legally required. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
- Pre-contractual steps and contract performance: to respond to a request, prepare information or a proposal, provide an SDS, or take steps toward or perform a business relationship requested by you.
- Legitimate interests: to operate and secure the Websites, prevent abuse, communicate in a business context, improve our services, maintain appropriate records, and protect Kolene’s legal rights. We balance those interests against the rights and interests of affected individuals.
- Legal obligations: to comply with laws, regulatory requirements, recordkeeping duties, and lawful legal process.
Where information is required to respond to or fulfill a request, failure to provide it may prevent us from handling that request.
5. Cookies and Similar Technologies
The Websites use different consent-management tools because they are separately operated WordPress websites.
Kolene Website: Cookiebot Consent Management
The Kolene Website uses Cookiebot by Usercentrics to display its consent banner, store cookie-category choices, and help prevent optional services from loading before the required consent. Cookiebot uses necessary consent storage and may maintain consent records so that Kolene can honor choices and demonstrate that a choice was recorded.
You can accept, reject, or select optional cookie categories through the Cookiebot banner. You can later change or withdraw your choices by using the cookie settings or privacy control displayed on the Kolene Website.
The Cookiebot-generated declaration displayed on the Kolene Website identifies cookies and similar technologies detected there and is updated as Cookiebot scans that Website:
[cookie_declaration]
Upton Website: Pressidium Cookie Consent
The Upton Website uses Pressidium Cookie Consent to display cookie information, store a visitor’s cookie choices, and provide access to cookie settings. The Upton Website currently uses only technologies categorized as strictly necessary for Website security, consent preferences, and operation of its contact form. These include the Pressidium consent cookie and Cloudflare security or challenge cookies that may be created depending on the visitor’s interaction with Cloudflare security services.
The Upton Website’s cookie details are available through its Cookie Details dialog and floating cookie-settings control. The Upton cookie list is maintained separately from the Cookiebot declaration because Cookiebot scans only the Kolene Website.
Necessary Cookies and Storage
Necessary technologies support Website delivery, security, consent management, form protection, and authorized administrative access. Depending on the Website and circumstances, these technologies may include:
- Cookiebot or Pressidium consent storage;
- Cloudflare security, bot-management, JavaScript-detection, and challenge technologies;
- Cloudflare Turnstile form-protection tokens or security cookies;
- WordPress authentication or preference cookies for authorized Website administrators; and
- temporary form or user-input storage when required to provide a function requested by a visitor.
These technologies are used for security and essential operation rather than advertising.
External Media and Marketing Consent
The Kolene Website displays locally hosted video thumbnails. If you choose to play a video, the Kolene Website may request an embedded player from YouTube. Cookiebot classifies YouTube as a marketing service and controls it according to your consent choices and the consent requirements that apply to you. When the player loads, YouTube may receive your IP address and device or browser information and may use cookies, local storage, or similar technologies.
Google Fonts on the Upton Website
The Upton Website currently requests the DM Sans typeface from Google Fonts. When a visitor’s browser requests a font resource, Google may receive technical information such as the visitor’s IP address and browser or device information. Google processes that information under its own privacy terms. Kolene may change the way fonts are delivered, including by hosting font files locally.
Cloudflare Traffic Analytics
Because Website traffic is routed through Cloudflare, Cloudflare provides Kolene with aggregated traffic, performance, and security information derived from those requests. Kolene uses that information to operate and protect the Websites, not for targeted advertising.
6. Website Hosting, Cloudflare, and Turnstile
WP Engine Hosting
Both Websites are hosted by WP Engine. WP Engine processes Website content, server requests, IP addresses, logs, form-related data, backups, and related technical information as necessary to host, maintain, secure, troubleshoot, and support the Websites. WP Engine acts as a service provider to Kolene under applicable contractual and legal requirements.
Cloudflare
We use Cloudflare to provide content delivery, domain name resolution, Website performance, network security, firewall, bot-management, and traffic-analysis services. Cloudflare processes network and device information, including IP addresses and request data, to deliver and secure the Websites.
Cloudflare Turnstile
Forms on the Websites use Cloudflare Turnstile to identify and block automated submissions. Turnstile analyzes browser and client-side signals and issues a short-lived token. The applicable Website sends the token to Cloudflare for verification before accepting a protected submission. Depending on the security configuration and whether a visitor completes a Cloudflare challenge, Cloudflare may use necessary security storage such as a cf_clearance cookie.
More information is available in Cloudflare’s Privacy Policy and Cloudflare’s Turnstile documentation.
7. Google and YouTube Services
YouTube
Subject to your Cookiebot choices and applicable consent requirements, the Kolene Website may load embedded videos provided by YouTube, a Google service. Loading or interacting with a YouTube video allows Google and YouTube to process information under their own terms and privacy policy. This may include online identifiers, IP address, device and browser information, interactions with the player, and information associated with a Google account if you are signed in.
You can avoid this processing by declining marketing consent and not loading the video player.
Google Fonts
As described in Section 5, the Upton Website currently obtains certain font resources from Google Fonts. Google may receive IP address and browser or device information when those resources are requested.
For more information about Google’s processing practices, see Google’s Privacy Policy.
8. How We Disclose Personal Information
We may disclose personal information as reasonably necessary to:
- Kolene Corporation and Upton Industries personnel: authorized personnel who need the information to respond to a request, operate the Websites, support Kolene or Upton products and services, or perform their duties. Upton Industries is a Kolene company, so routing an inquiry between Kolene and Upton personnel is an internal use by Kolene rather than a sale of personal information.
- Infrastructure and service providers: providers supporting Website hosting, content delivery, security, consent management, email delivery, form processing, data storage, backups, and business communications. These include WP Engine, Cloudflare, and Usercentrics/Cookiebot. The Upton Website also uses Pressidium Cookie Consent and WordPress form software operating within its Website environment.
- Google/YouTube: when Google Fonts resources are requested by the Upton Website or when an embedded YouTube video is loaded from the Kolene Website following the required consent.
- Professional advisers: legal, accounting, insurance, cybersecurity, and other advisers where reasonably necessary.
- Authorities and legal recipients: courts, regulators, law enforcement, government agencies, or other parties when required by law or reasonably necessary to protect rights, safety, and security.
- Transaction participants: a prospective or actual buyer, successor, lender, adviser, or other participant in a merger, financing, reorganization, sale of assets, or similar corporate transaction, subject to appropriate confidentiality protections.
Service providers are permitted to process information for the services they provide and subject to applicable contractual and legal requirements. Kolene does not authorize its service providers to use Website personal information for their own unrelated marketing.
9. No Sale or Sharing for Behavioral Advertising
Kolene does not sell personal information. Kolene also does not share personal information for cross-context behavioral advertising, as the terms “sell” and “share” are defined by the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA).
During the preceding 12 months, Kolene has not sold personal information or shared personal information for cross-context behavioral advertising. Kolene does not knowingly sell or share the personal information of individuals under 16 years of age.
Kolene does not offer financial incentives in exchange for personal information through the Websites.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including:
- inquiry and SDS request records for the time needed to respond, support any resulting business relationship, maintain appropriate business records, and resolve follow-up questions;
- communications for the duration of the relationship and a reasonable period afterward based on the nature of the communication;
- cookie choices and consent evidence for the period needed to honor the choice and demonstrate compliance;
- security, hosting, backup, and request logs according to configured operational and security-retention periods; and
- legal, tax, contractual, warranty, dispute, and compliance records for the period required by applicable law or reasonably necessary to establish, exercise, or defend legal rights.
Retention periods may vary based on the type of record, whether a business relationship results, legal requirements, security needs, and applicable limitation periods. When information is no longer needed, we delete it, anonymize it, or securely isolate it until deletion is reasonably possible.
11. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards include access controls, encrypted transport, Website and network security controls, and service-provider security measures.
No transmission or storage system can be guaranteed to be completely secure. Please use caution when sending confidential information electronically and do not submit sensitive information through ordinary Website forms.
12. International Data Transfers
Kolene Corporation and Upton Industries are located in the United States. If you access either Website from another country, your personal information may be processed in the United States and in other countries where our service providers operate. Those countries may have data-protection laws different from the laws where you live.
Where legally required, international transfers are supported by an applicable adequacy decision, contractual safeguards, or another lawful transfer mechanism. You may contact us for additional information about safeguards relevant to your personal information.
13. Rights for Individuals in the EEA, United Kingdom, and Similar Jurisdictions
Subject to applicable law and exceptions, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain data in a portable format;
- withdraw consent at any time; and
- lodge a complaint with the data-protection authority where you live or work, or where you believe a violation occurred.
To exercise a right, contact us using Section 19. We may request information reasonably necessary to verify your identity and locate responsive records. These rights are not absolute, and applicable law may permit or require us to retain or continue processing certain information.
14. California and Other U.S. State Privacy Disclosures
This section applies to residents of California and other U.S. states to the extent an applicable comprehensive state privacy law applies to Kolene and the relevant processing.
Categories Collected During the Preceding 12 Months
| Category | Examples Collected | Sources | Business Purposes | Categories of Recipients |
|---|---|---|---|---|
| Identifiers | Name, postal address, email address, telephone number, IP address, consent identifiers | You; your browser or device; service providers | Respond to requests, operate forms, maintain security, communicate, and record consent | Kolene and Upton personnel; WP Engine; hosting, security, consent, email, and form-service providers |
| California customer-record information | Name, address, telephone number, employment or company information | You | Respond to inquiries and SDS requests; maintain business records | Kolene and Upton personnel; business-system and communications providers |
| Commercial information | Products, services, equipment, documents, or capabilities requested or discussed | You | Respond to and fulfill requests; support prospective and existing business relationships | Kolene and Upton personnel; communications and business-system providers |
| Internet or electronic network activity | Pages and files requested, referring page, browser and device information, request times, security events, consent interactions, and interactions with consent-gated media | Your browser or device; WP Engine; Cloudflare; Cookiebot; Pressidium consent software; YouTube after consent | Deliver, secure, troubleshoot, and understand operation of the Websites; honor consent; provide requested media | WP Engine; Cloudflare; Cookiebot/Usercentrics; other hosting and security providers; Google/YouTube as described in this Policy |
| Approximate geolocation | General location inferred from IP address, such as country or region; not precise geolocation | IP-derived service-provider data | Security, fraud prevention, localization, and aggregate traffic reporting | Cloudflare and relevant infrastructure providers |
| Professional or employment-related information | Employer, company name, job title, business contact information | You | Route and respond to business and SDS requests | Kolene and Upton personnel; communications and business-system providers |
| Communications and inquiry content | Messages, cleaning or thermal-processing requirements, materials, requested SDS documents, form acknowledgments, and correspondence | You | Respond to requests, provide support, maintain records, and protect legal rights | Kolene and Upton personnel; communications and business-system providers |
Kolene does not intentionally collect sensitive personal information through the public Websites for purposes that require a right to limit under the CCPA/CPRA. Do not provide sensitive personal information in free-text fields unless specifically requested through a suitable process.
California and State Privacy Rights
Depending on applicable law, you may have the right to:
- know or confirm whether we process your personal information;
- access the categories or specific pieces of personal information we maintain;
- correct inaccurate personal information;
- request deletion of personal information, subject to exceptions;
- obtain a portable copy of certain information;
- opt out of sale, sharing for cross-context behavioral advertising, targeted advertising, or qualifying profiling;
- limit certain uses or disclosures of sensitive personal information; and
- receive equal service and not be discriminated against for exercising a privacy right.
Kolene does not currently sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising or qualifying profiling. We will process legally recognized opt-out preference signals, such as Global Privacy Control, where required. Because our current practice is not to sell or share personal information, an opt-out signal does not change that practice.
Submitting and Verifying a Request
You may submit a privacy request using the email, postal address, or telephone number in Section 19. Describe the right you wish to exercise and provide enough information for us to identify relevant records. We will use information supplied with the request only to verify identity, evaluate the request, and respond.
We may need to verify control of an email address, ask for information that matches our records, or use another reasonable verification method. If we cannot verify a request to the degree required by law, we may be unable to fulfill it. An authorized agent may submit a request where permitted by law, but we may require evidence of the agent’s authority and direct verification with the consumer.
You may appeal a refusal to act on a request where applicable law provides an appeal right by replying to our decision or contacting us using Section 19 with the subject “Privacy Appeal.”
15. Children’s Privacy
The Websites are intended for business and industrial audiences and are not directed to children under 16. We do not knowingly collect personal information from children through the Websites. If you believe a child has provided personal information, contact us so that we can investigate and take appropriate action.
16. SMS and Telephone Communications
Providing a telephone number through a Website form allows Kolene Corporation or Upton Industries personnel to call you in response to your inquiry. Kolene does not use Website form submissions to enroll visitors in recurring SMS marketing.
17. External Links
The Websites may link to websites and services that Kolene does not control. This Policy does not govern those third parties. Review their privacy notices before providing information or using their services.
18. Changes to This Policy
We may update this Policy to reflect changes in either Website, our services, vendors, corporate operations, or legal obligations. We will post the revised Policy and update the effective or last-updated date. If a change materially affects how we use information already collected, we will provide any additional notice or choice required by applicable law.
19. Contact Us
Questions, privacy requests, and complaints concerning either Website or Upton Industries may be directed to:
Kolene Corporation
12890 Westwood Street
Detroit, Michigan 48223
United States
Email: [email protected]
Telephone: +1 313-273-9220
Website: https://www.kolene.com
Upton Industries business inquiries may also be directed to:
Upton Industries, a Kolene company
30435 Groesbeck Highway
Roseville, Michigan 48066
United States
Email: [email protected]
Telephone: +1 586-771-1200
Website: https://uptonindustries.com
Please include “Privacy Request” in the subject line of an email or written request. Kolene Corporation coordinates responses to privacy requests concerning both Websites and will respond within the period required by applicable law.