Data request · access, correct, delete
Ask for your data, a correction or a deletion, and get an answer within 10 days.
What we can hold about you is short: an inquiry, a chat, a log line and a cookie answer. Read what applies, then use the form at the bottom.
People find Gotto by searching for things like a ceiling microphone array for a meeting room or a Teams Rooms kit, send an inquiry, and sometimes months later want to know what we kept. This page is how you ask. It costs nothing, needs no account, and the person who answers works at the same bench that tests the hardware.
01We hold four kinds of record about visitors, and nothing about payment.What a request can reach
| Record | What it contains | Kept for |
|---|---|---|
| Inquiry | Name, phone, email, address, kind of inquiry, message, requested specification, consent tick, plus IP address, user-agent, referring URL, and when the form opened and was sent. The email copy to our inbox holds the same. | 24 months |
| Chat | The conversation, the name and optional email you gave, and a token kept in your browser. | 18 months |
| Server logs | IP address, user-agent, page requested, time. | 90 days |
| Consent choice | Allow or decline, held in your own browser under site_consent_v2. | 12 months |
No accounts, no passwords, no card numbers. Nothing is sold on this site and no payment is taken, so there is none of that to request.
02If you live in California or another US state with a privacy law, you can know, correct, delete and opt out.CCPA/CPRA and other state laws
Under the California Consumer Privacy Act as amended by the CPRA, you may ask what personal information we collected about you, where it came from, why, and who received it. You may ask for a copy, for a correction, and for deletion. You may opt out of the "sharing" of personal information for cross-context advertising, which on this site means the Google Ads, Microsoft Advertising and Meta cookies described in the cookie ledger. Pressing Decline, or browsing with Global Privacy Control switched on, already does that.
Similar rights apply in the other states whose privacy laws are in force, among them Virginia, Colorado, Connecticut, Utah, Texas and Oregon. We apply the same process to everyone in the United States, whichever state you are in. We do not sell personal information for money, and we do not treat you differently for using a right.
03If you reach the site from Europe, the GDPR rights apply to what we hold.Visitors from the EU, EEA and UK
You have the right of access, rectification, erasure, restriction, data portability, and the right to object to processing based on our legitimate interests, which covers server logs and spam checks on the form. Where we rely on your consent, such as advertising cookies or the consent tick on an inquiry, you can withdraw it at any time; doing so does not undo processing that already happened.
Inquiries are processed to answer you and to prepare a quote you asked for. That is processing at your request before a possible contract. A portable copy comes as a plain CSV or JSON file.
04A deletion reaches our records and the providers who hold them for us; ad platforms are asked separately.Who else holds data
The hosting provider that serves this site and stores the inquiry database, and the mail provider that carries the notification to our inbox, act on our instructions. When we delete an inquiry, it goes from both.
Google Ireland Ltd and Google LLC (Google Ads, gclid), Microsoft Ireland Operations Ltd (Microsoft Advertising, msclkid) and Meta Platforms Ireland Ltd (Meta Ads, fbclid, where a campaign runs there) only receive data if you allowed advertising storage. They hold it under their own policies. We tell you which of them were active on your visits, and you can ask each of them directly; Microsoft's process is set out in its privacy statement at privacy.microsoft.com/privacystatement.
05We check it is you by matching the contact detail on the record, and ask for nothing more than that.Verifying a request
If you send the request from the email or phone number on the inquiry, that is usually enough. If not, we send a short code to the contact on file and ask you to repeat it. We will not ask for an ID card for a record that is only a name and an email. An authorized agent can act for you with your signed permission, and we will confirm it with you directly.
Where we cannot find a record, we say so. Where the law requires us to keep something, for example a signed quote and its invoice for tax purposes, we tell you what we kept and why.
06You get an answer within 10 days, not the 45 the law would allow.How long it takes
A data request is answered within 10 days of reaching us. Most are done the same week, because there is not much to search. The inquiry database and our inbox cover nearly everything. If a request is complicated, the answer within 10 days says what is done, what is left and the date it will be finished.
07If our answer does not satisfy you, you can complain to a regulator.Complaints
You may complain to the Attorney General of your state. In California you may also complain to the California Privacy Protection Agency. Visitors from Europe may complain to the data protection authority where they live. Telling us first is quicker, and we would rather fix it: [email protected], +1 (652) 555-4231, or post to Go Tto, 51 Oak Lane, Austin, Texas 02304, United States.
The full account of what we collect and why is in the privacy policy. Site rules are in the terms of use, and the accessibility statement lists other formats we can answer in.
The request
Send a data request
Give the name and the email or phone you used when you contacted us, so we can find the record. One of the two is enough.