Workshop privacy

Assessment responses and your private receipt

The workshop questionnaires do not request your name or email. Your browser creates a private download key and a receipt file. A one-way reference derived from that key is filled into the Google Form; the private key itself is not entered into the form. The receipt reference links a submitted response to its private download. Responses are therefore private and receipt-linked; free-text answers can still identify you if you include identifying details.

Only Carlo reviews raw responses. Do not include children’s names, pastoral confidences, health information, personnel records or other sensitive identifying details. Written feedback is optional. Permission to use anonymous themes is a separate optional choice; these local feedback prompts are not validated scholarly scales.

Download access, retention and archives

You may download your response for 90 days after submission using your private key. Save the receipt before opening the form. The key remains in the current browser tab until you clear it or the browser session ends, subject to your browser’s storage settings. If it is lost, your response cannot be recovered by identity.

After 90 days, active participant download access closes. The retention process privately archives the response for Carlo, removes the active response and its native Google Form and response-sheet entries, and retains anonymous aggregate totals. Carlo’s private archive and anonymous totals are retained; this is not a promise of global deletion. The retained reporting workbook uses cumulative totals and separate consented qualitative themes.

Notes, registration and purchases

The interactive participant notes use your device’s local storage and let you download your own notes and mind map. Clear the notes on a shared device after saving anything you want to keep. Assessment download keys and purchase-access details use browser session storage for their respective recovery flows. Keep downloaded receipts private.

When registration is available, the form identifies the contact details, event and service-message choices it requests. A payment provider processes the payment and billing information entered in its checkout. COL verifies the transaction, product and payment state and keeps records needed for fulfillment, recovery, refund reconciliation and support. Full card details are not stored in the workshop application. A purchase or assessment response does not subscribe you to marketing.

Trainer applications

The trainer application collects your name, email and evidence you choose to submit. Carlo alone reviews the private application and approves certificates. Keep your application ID and recovery code private; they allow access to your record and any issued certificate. Records are retained for review, certification validity, support and accountability; the questionnaire’s 90-day download policy does not apply to these records. Contact Carlo to request a copy, correction or applicable deletion. Do not submit private participant responses or other people’s sensitive information. Application service messages are separate from marketing.

Service providers and access

Cloudflare hosts the website and its protected database and files. Google Forms, Sheets and Apps Script receive and process submitted questionnaire responses and reporting updates. Stripe and, where the checkout uses Managed Payments, Link process payments under their own notices. Resend delivers enabled COL service emails. These systems process the information needed for their service and ordinary security and delivery records.

Carlo’s workshop administration requires his authorized sign-in. Workshop assessment access, another product’s account permissions and marketing consent remain separate. Legal, security, accounting and provider-record obligations may require retention beyond a particular product’s access period.

Your choices and contact

Participation in optional feedback and anonymous-theme use is your choice. You can download your response during the access period, clear locally stored keys, and ask about applicable privacy rights by emailing carlo@carloorlando.com. Do not email your private response key or payment-card details. Private archive retention is explained above and is separate from removal of active responses.

The general website privacy notice explains website search, optional tools and routine hosting behavior. The product privacy directory links notices for other products. For providers, see Cloudflare, Google, Stripe, Link and Resend.