Privacy Policy

Last updated: October 30, 2026.

1. Data controller and contact

Solutto Consulting LLC, incorporated in Florida, United States, with a mailing address at 7901 4th St N, STE 300, St. Petersburg, FL 33702, United States, is responsible for processing the data we receive through soluttoconsulting.com. For privacy inquiries or to exercise your rights, email us at info@soluttoconsulting.com.

2. Data we receive

When you send an enquiry or request a quote, you provide your name, email address, organisation and message. We also receive your Moodle version if you provide it. The form includes the product of interest, request type, referring page, language, privacy consent and an identifier that lets us recognise the same submission if you retry it.

If you book a consultation, Cal.com receives the details you enter on its booking page and manages the meeting date, time, time zone and status. Solutto receives those details to prepare for and hold the consultation, including cancellations and rescheduling. We may link a booking to an earlier enquiry so you do not need to provide the same context again.

If you email us directly, we receive the address from which you contact us and the information in your message. Please do not include sensitive data or information about third parties that is unnecessary to explain your inquiry.

To protect the form against repeated submissions, the site temporarily uses an identifier derived from the IP address with a keyed hash. The plugin does not store the IP address in plain text in that counter. The limit resets after 15 minutes. The hosting provider may generate technical access and security logs according to its configuration.

If you accept Statistics, Google Analytics may receive information about your interaction with the site, the page visited, browser and device data, and analytics cookie identifiers. We also measure when a request has been recorded, including its type, product and language. Those events do not include your name, email, message, request reference or commercial record identifiers.

With that permission, we store a separate measurement context on our hosting and use a first-party cookie to recognise it. The context may contain the source of a campaign link, the landing page without personal parameters, the referring domain and available analytics identifiers. It does not contain the form’s personal fields. We keep separate minimal codes to prevent the same result from being counted again.

The consent manager stores your choice to apply it on later visits. Google Consent Mode may send limited signals to Google without cookies even when you reject Statistics and Marketing; those signals may include your consent status, the page visited, and technical data sent by your browser. Please do not put personal data in site URLs.

3. How and why we use the data

We use information from the form and messages you send us to review your request, respond, prepare a quote you request, arrange meetings and, where appropriate, discuss a potential service. Processing your request is based on the consent you give when submitting it and, where applicable, on precontractual steps you request. We use technical data necessary to operate and protect the site and prevent abuse under our legitimate interest in keeping it secure and available.

We keep a record of the request and its acknowledgement status so we can respond and recover notifications that could not be sent.

With your consent for Statistics, we use Google Analytics and the measurement context to understand where visits and requests come from and improve the site. You can refuse or withdraw that consent through cookie preferences and still send requests or book consultations. Withdrawing Statistics stops new transmissions from our measurement and removes the first-party cookie and the context the browser lets us recognise, including its attribution data and analytics identifiers. The minimal codes that prevent repeated counting retain their existing expiry. Data already received by Google follows its own retention and deletion procedures.

Statistics and Marketing cookies remain denied until you choose. The limited transmission of signals without cookies through Google Consent Mode is explained in section 6.

Submitting a request or booking a consultation does not add you to marketing lists. We do not use these details for marketing campaigns. If we activate Google Ads conversion measurement, we will disclose that use and manage it under the Marketing category before using advertising cookies.

4. Recipients and location of processing

The site is hosted by Hostinger. WordPress sends forms from the server to a Google Apps Script application, which records requests in a Solutto Google Sheets spreadsheet and sends acknowledgement messages. The corporate mailbox uses Google as its email provider. If we cannot confirm the record, the form offers a retry and shows info@soluttoconsulting.com as an alternative way to contact us. It does not send an automatic backup copy that replaces recording the request in the spreadsheet.

WordPress does not store a second database of complete form submissions. The measurement context and minimal codes that prevent repeated counting are stored separately on the site’s hosting. Access to those records, the spreadsheet and the mailbox is limited to authorised people. Qualified opportunities may be added to Solutto’s internal commercial records.

To book a consultation, you open Cal.com's booking page from a link on this site. Cal.com manages the booking and synchronisation with Solutto's corporate Google calendar. Meetings use Cal Video; the invitation includes the access link. Cal.com and Google receive the data needed to manage the booking, calendar and meeting.

Google also provides Google Analytics and receives the Google Consent Mode signals described in this policy. These providers process the data needed to deliver their respective services. Data may be processed outside the country from which you visit or contact us, including in the United States. You can consult each provider's published privacy terms for information about its safeguards.

5. Retention

The plugin does not retain submission content in WordPress. Requests in the spreadsheet, related emails and consultation booking details are retained for 12 months from the last communication about each request, unless retention is needed to meet a legal obligation or manage a contractual relationship. The temporary counter used to limit submissions expires after 15 minutes. Technical hosting logs are retained according to the provider’s configuration and the service’s security needs.

The first-party cookie and measurement context expire 90 days after creation, without automatic renewal on later visits. The minimal codes that prevent repeated counting expire 90 days after each result, even if you withdraw Statistics earlier. Expired records are no longer used and are removed through periodic cleanup. You can remove analytics data from the context earlier through cookie preferences in the same browser or request deletion through the contact channel in this policy.

Under the current Google Analytics settings, event data subject to its retention control has a two-month retention period. User data subject to its separate control has a 14-month period that resets on new activity. These settings do not set the lifetime of all aggregated Google reports or its cookies. The cookie policy covers identified cookies. We retain the consent choice for the period configured in the cookie manager or until you change your preferences.

6. Cookies, Google Analytics and consent

WordPress may use technical cookies for access and preferences of users with administrative accounts. The enquiry form does not use cookies to store your answers. If you accept Statistics, the first-party solutto_measurement_context cookie links the browser to the measurement context for up to 90 days. It stores a protected random identifier; form answers are kept out of it.

Complianz displays the cookie notice and records your choice. The optional Statistics and Marketing categories are initially disabled. You can accept, reject, or adjust your preferences in the notice and change them later using the site’s consent control.

Google Analytics measures site usage. With your consent for Statistics, its tags may store or read analytics cookies. Site Kit applies Google Consent Mode with analytics and advertising storage denied by default for visitors in the configured regions. In its advanced implementation, Google tags can load before your choice and send limited measurements without cookies to Google while consent is denied. Rejecting cookies does not necessarily stop these technical transmissions. We have not currently connected Google Ads conversion measurement through Site Kit; if we activate it, we will update this policy and the cookie policy before using it.

The cookie policy provides further information about categories, services and how to change your choice.

7. Your choices and rights

You may request access to your data, ask us to correct or delete it, object to or request restriction of certain processing, and, where applicable, request portability or withdraw your consent. Email us at info@soluttoconsulting.com and describe your request. We may ask for the minimum information needed to verify your identity. We will handle the request under applicable law; some data may be retained where a legal obligation or legitimate need to defend a claim applies. Withdrawing consent does not affect processing that was lawful before withdrawal.

If you believe that processing your data infringes your rights, you may lodge a complaint with the data protection authority competent in your jurisdiction.

8. Security and changes

The site uses HTTPS. The form validates data on the server and applies measures against automated or repeated submissions. If we materially change the purposes, providers, measurement technologies or retention periods, we will update this page and its review date.

Spam protection

When a form displays Cloudflare Turnstile verification, we use it to detect automation and protect enquiries and reply emails. Cloudflare processes technical signals such as the IP address, browser information and page origin. We do not send your name, email or message as verification fields. Cloudflare processes signals to provide protection and to improve its bot detection, with the roles explained in its Turnstile privacy notice.

This security control is managed separately from Statistics and Marketing: you can reject those categories and still submit enquiries. WordPress uses counters keyed by an HMAC of the network address, without storing the plain IP in those counters. Their usage window is fifteen minutes. To limit confirmations to the same address, the receiver uses an HMAC of the email address for twenty-four hours. Expired counters are removed during each system’s cleanup; physical removal depends on its execution. Aggregated rejection and verification totals are retained for seven days and contain no messages, email addresses or tokens. Submissions over the confirmation limit require review and do not start automatic resending.

Optional Meta advertising measurement

If you allow the Marketing category in our consent manager, we may use the Meta Pixel to measure visits to selected Solutto Consulting commercial pages and how those visits relate to our Facebook and Instagram ads. Meta may receive the PageView event, the page address and referral information validated by our configuration, permitted campaign parameters, the fbclid advertising click identifier, technical network/browser information and its advertising cookies or identifiers.

This integration does not send Meta names, email addresses, messages or other values entered into our forms. It does not configure the Conversions API or advanced contact matching. Google statistical analytics retains its separate configuration and consent. You can refuse Marketing or withdraw permission at any time through Manage consent. Withdrawal stops new events from this integration; it does not erase data Meta has already received. Meta describes its processing in its Privacy Policy and Cookies information.