Last updated August 23, 2026
Privacy notice
This notice explains what we collect through this website, why, who it reaches and what you can ask us to do with it. It covers consultto.ai — not the Consultto platform your certification body would use after signing, which is governed by its own agreement.
Who is responsible
Consultto is responsible for the personal data collected through this site. For anything in this notice — including the requests described below — you can write to us at hola@consultto.com.
What we collect
There is one place on this site where you give us data: the demo request form. Nothing else on the site asks you for anything. When you complete that form we receive:
- Your name, work email and, if you choose to give it, your phone or WhatsApp number. The phone field is optional.
- Information about your organisation: country, certification body name, accreditation body, the schemes you certify and the number of active certificates.
- What you want to solve first: where your time goes today, how many auditors are on your team, when you would like to start, and anything else you choose to write in the notes field, which is also optional.
- The language you were browsing in, so we reply in it.
Separately, we measure how the site is used: which pages are opened, roughly how long, what device type, and which country the visit came from. That measurement is anonymous and aggregate — it counts visits, not people. It does not use cookies, it does not follow you across sites, and it cannot be linked back to you or to anything you sent through the form.
Our hosting provider also records standard server logs — IP address, time of request, page requested, browser — as any web server does. We do not use them to build a profile of you.
Please do not send us confidential information about your certified clients through this form. If you want to see the agents run on a real audit file, we will agree the right way to handle it before you send anything.
Why we use it
To answer you and to prepare a demonstration that matches your operation. That is the only purpose. We do not sell your data, we do not share it for anyone else to market to you, and we do not use it to train models.
For the form, the legal basis is your own request: you fill it in to be contacted, and we contact you. If we later want to write to you about something you did not ask for, we will ask first.
For the measurement, the legal basis is our legitimate interest in knowing which pages are read and which are not, so we write about what is useful. Because it is anonymous and stores nothing on your device, it does not require your consent — which is exactly why this site has no cookie banner asking for it.
Who else sees it
Two providers process data on our behalf, each for one job and nothing else:
- Resend, which delivers the form submission to our inbox as an email.
- Vercel, which hosts the site, keeps the server logs described above and provides the anonymous measurement. There is no separate analytics company: the measurement runs on the same infrastructure that already serves you the page.
Both operate infrastructure outside your country, which may include the United States and the European Union, and both rely on the safeguards they have in place for those transfers. Beyond them, only the Consultto people who will answer you.
How long we keep it
We keep your request for as long as the conversation it started is alive, and for up to twenty-four months after our last exchange, so we recognise you if you come back. Server logs are kept for the short retention period our host applies. You can ask us to delete your data earlier at any time.
What you can ask us
You can ask us to show you the data we hold about you, correct it, delete it, or stop using it. Write to hola@consultto.com and we will answer within thirty days. You do not have to justify the request, and asking costs you nothing.
Depending on where you live you may also have the right to complain to a data protection authority. Nothing here takes that away.
Cookies
This site sets no cookies. Not ours, not anyone else’s. That is also why you are not seeing a banner asking you to accept any — there is nothing to accept.
The measurement described above works without them: it counts a visit and forgets it, instead of leaving a marker in your browser to recognise you later. It is the reason we chose it. Concretely, this site does not load Google Analytics, advertising pixels, social media widgets, third-party fonts or anything else that would identify you or follow you to other sites.
If that ever changes, you will know before it does: we would have to update this page, and a cookie notice would appear asking for your consent before anything was stored. Until you see one, nothing is being stored.
The site does link out to WhatsApp and to consultto.com. Those are other people’s sites with their own notices, and following a link takes you out of this one.
Changes to this notice
If what we collect or how we use it changes, we update this page and the date at the top before the change goes live. If the change is significant, we will ask again rather than assume your earlier answer still stands.