GDPR-compliant integration of Google reCAPTCHA in Enfold contact form

Hi Enfold Support Team,

I’m using the latest version of the Enfold Theme, including the built-in contact form element and the native cookie consent system.

Unfortunately, I’ve noticed that Google reCAPTCHA v3 is being loaded immediately on the first page load, even before the visitor has given consent via the cookie banner.
Using browser dev tools (Network tab → filter for “recaptcha”), I can clearly see multiple requests to Google services being triggered without user interaction.

As you are aware, GDPR (and the German TTDSG) require an explicit opt-in before any non-essential services like reCAPTCHA are activated.

My question:
How can I integrate Google reCAPTCHA into the built-in Enfold contact form so that it only loads after user consent – and remains blocked until then?

Here’s what I’ve done so far:

Set cookie behavior to “Essential cookies only – user must opt-in”

No Borlabs or other cookie plugins used – just Enfold’s native cookie management

Tried WP Armour as an alternative spam protection, but it’s insufficient

If this is not currently possible within Enfold:

Is there a recommended workaround or best practice to achieve GDPR compliance?

Or is a fix or native support for deferred reCAPTCHA loading planned in your roadmap?

Thank you very much in advance for your help!