1. Introduction & Scope

Solutio Agency operates through two registered entities: Solutio LLC, a Wyoming Limited Liability Company with registered address at 1021 E Lincolnway, Cheyenne, WY 82001, United States, and Solutio Global Ltd, a Limited Company registered in the United Kingdom. Together, operating as "Solutio Agency," "we," "us," or "our," we operate the website at joinsolutio.com and provide marketing, advertising, business formation, and consulting services (collectively, the "Services").

This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit our website, contact us, or engage our Services. It applies to all personal data processed by Solutio LLC in connection with our business operations, including information about clients, prospective clients, website visitors, and business contacts.

By accessing joinsolutio.com or submitting information through our contact forms or booking tools, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the practices described here, please do not use our website or Services.

2. Information We Collect

2.1 Personal Data Provided Voluntarily

We collect personal data that you provide directly to us, including:

• Contact information (full name, email address, phone number, WhatsApp number)
• Business information (company name, industry, business type, website URL)
• Financial information (monthly advertising budget, business revenue range — used for service qualification only)
• Communications (the content of messages, emails, or consultation notes you share with us)
• Service engagement data (contracts, project briefs, deliverables, feedback)
• Compliance documents (where required for banking or entity formation services, such as identity verification or KYC documentation)

2.2 Automatically Collected Usage Data

When you visit joinsolutio.com, our servers and analytics tools automatically collect certain technical information, including:

• IP address and general geolocation (country, region)
• Browser type and version, operating system, device type
• Pages visited, time on page, referral source, exit page
• Session identifiers and click-path data

2.3 Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies as described in our Cookie Policy. You may manage your cookie preferences at any time via the Cookie Settings link in our footer. We do not deploy advertising pixels or analytics scripts until you have provided consent (where required by applicable law).

2.4 Compliance and Verification Documents

For clients engaging our banking infrastructure or entity formation services, we may be required to collect identity documents (passport, government-issued ID), proof of address, and business documentation. This data is processed solely for compliance purposes and is handled with enhanced security measures. We collect only the minimum documentation necessary to fulfill legal obligations.

3. How We Use Information

We use the personal data we collect for the following purposes:

• Service delivery: Providing, managing, and improving the Services you have engaged, including campaign management, banking setup, entity formation, and consulting.
• Communication: Responding to inquiries, scheduling strategy calls, sending project updates, invoices, and service-related notifications.
• Business development: Evaluating whether a potential engagement is a good fit for our Services.
• Marketing: Sending promotional communications (only with your consent, where required by law). You may unsubscribe at any time.
• Legal compliance: Meeting our obligations under applicable law, including KYC/AML requirements for banking services.
• Analytics and improvement: Understanding how visitors use our website to improve content, navigation, and performance.
• Fraud prevention and security: Protecting against unauthorized access, fraudulent transactions, and abuse of our Services.

4. Legal Basis for Processing (GDPR — EU/EEA Users)

For individuals located in the European Economic Area (EEA) or the United Kingdom, we process personal data on the following legal bases under the General Data Protection Regulation (GDPR) and UK GDPR:

• Contract performance (Art. 6(1)(b)): Processing necessary to perform the services you have contracted with us.
• Legitimate interests (Art. 6(1)(f)): Processing for fraud prevention, network security, analytics, and business development where our interests do not override your fundamental rights.
• Legal obligation (Art. 6(1)(c)): Processing required to comply with applicable laws, including AML/KYC regulations where applicable.
• Consent (Art. 6(1)(a)): Processing based on your explicit, freely given consent, including for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

• Active client data: Retained for the duration of the engagement and for up to 7 years thereafter for tax and legal compliance purposes.
• Inquiry and contact data: Retained for 24 months from the date of last contact if no engagement is entered into.
• Marketing opt-in data: Retained until you unsubscribe or withdraw consent.
• KYC/compliance documents: Retained for the minimum period required by applicable AML/KYC regulations (typically 5 years from end of business relationship).
• Website analytics data: Retained in aggregated or anonymized form for up to 26 months.

6. International Data Transfers

Solutio LLC is a US entity; Solutio Global Ltd is a UK-registered entity. If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, your personal data may be transferred to the United States and processed there. We take appropriate safeguards to protect transferred data, including relying on adequacy decisions, Standard Contractual Clauses (SCCs), and other legally recognized transfer mechanisms.

Our service providers may be located in various countries. We require all processors to maintain appropriate security standards and, where applicable, to enter into data processing agreements consistent with GDPR requirements.

7. Disclosure of Information

7.1 Service Providers and Partners

We share personal data with trusted third-party service providers who assist in delivering our Services, including email and communication platforms, scheduling tools (Calendly), payment processors, banking partners (Slash Financial, Incard, Airwallex), analytics providers, and cloud hosting services. These parties process data only on our instructions and are bound by confidentiality obligations.

7.2 Legal Requirements

We may disclose personal data when required by law, court order, regulatory directive, or lawful governmental request. We will notify you of such requests to the extent permitted by law.

7.3 Business Transactions

In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data may be transferred as part of that transaction. We will notify affected individuals in advance of any such transfer.

7.4 With Your Consent

We may share personal data with third parties when you have given us explicit consent to do so, such as for participation in joint case studies or promotional materials (which require separate written authorization).

8. Data Security

We implement industry-standard technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data storage and transmission, access controls, regular security reviews, and secure session management on our internal systems. However, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and avoid sharing account credentials.

9. Your Rights Under GDPR (EU/EEA Users)

If you are located in the EEA or the UK, you have the following rights regarding your personal data:

• Right of access (Art. 15): The right to obtain confirmation of whether we process your data and to receive a copy.
• Right to rectification (Art. 16): The right to have inaccurate or incomplete data corrected.
• Right to erasure (Art. 17): The right to request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
• Right to restriction (Art. 18): The right to request that we restrict processing in certain circumstances.
• Right to data portability (Art. 20): The right to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): The right to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us at mouhcine@joinsolutio.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your national data protection authority.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to know: The right to request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell.
• Right to delete: The right to request deletion of personal information we hold about you, subject to certain exceptions.
• Right to correct: The right to request correction of inaccurate personal information.
• Right to opt-out: We do not sell personal information. You have the right to opt out of sharing of personal information for cross-context behavioral advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at mouhcine@joinsolutio.com with the subject line "California Privacy Request."

11. Third-Party Services

Our Services involve the use of third-party platforms including Meta (Facebook, Instagram), Google, TikTok, PayPal, Wise, Mercury Bank, Shopify, Calendly, Trustpilot, and others. These platforms have their own privacy policies and data practices for which we are not responsible. We encourage you to review the privacy policies of any third-party services you access through our recommendations or on our platform.

Trustpilot — We use Trustpilot to collect and display customer reviews on our website. When you interact with Trustpilot widgets embedded on joinsolutio.com, Trustpilot may collect information about your visit and interactions, including your IP address and browser information, to display aggregated review data and facilitate review submissions. Trustpilot widgets are loaded only after you have provided functional cookie consent. For more information, see Trustpilot's Privacy Policy.

12. Marketing & Retargeting

Where permitted by applicable law, we may use contact information to send you marketing communications about our Services. We will always provide an unsubscribe mechanism in marketing emails. For EU/EEA residents, we will only send marketing communications with your explicit prior consent. We may use retargeting pixels (subject to cookie consent) to display advertising on third-party platforms to individuals who have previously visited our website.

13. Payment Processing

We do not store credit card or payment account information on our servers. All payment processing is handled through third-party processors (Wise, PayPal, bank transfer). These processors handle payment data under their own security and privacy standards, which are subject to PCI DSS compliance where applicable.

14. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit through links on joinsolutio.com.

15. Children's Privacy

Our Services are intended for business operators and individuals who are at least 18 years of age. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from a minor without verifiable parental consent, we will take steps to delete that information promptly. If you believe we may have inadvertently collected information from a minor, please contact us immediately.

16. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will update the "Last updated" date at the top of this policy and, where required by law, notify you by email or prominent website notice. Your continued use of our website or Services after the effective date of any changes constitutes your acceptance of the updated policy.

17. Contact Information