MightyForms is now part of FormBuilder.AnnouncementMightyForms login
MightyForms is now part of FormBuilder.AnnouncementMightyForms login

GDPR Compliance

Your data protection and privacy rights under the General Data Protection Regulation

Our GDPR Commitment

FormBuilder is fully committed to GDPR compliance. We process personal data lawfully, fairly, and transparently, ensuring the highest standards of data protection for all EU residents and beyond.

Your Rights Under GDPR

Right to Access

Request a copy of your personal data we process

Right to Rectification

Request correction of inaccurate personal data

Right to Erasure

Request deletion of your personal data ("right to be forgotten")

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Restrict Processing

Request limitation of processing your personal data

Right to Object

Object to processing based on legitimate interests

Legal Basis for Processing

Consent

We process data based on your explicit, informed consent

Contract

Processing necessary for the performance of our services

Legal Obligation

Processing required to comply with legal requirements

Legitimate Interests

Processing for legitimate business interests that don't override your rights

Data Protection Measures

  • End-to-end encryption for all data in transit and at rest
  • Regular security audits and vulnerability assessments
  • Strict access controls and authentication requirements
  • Data minimization - we only collect what's necessary
  • Privacy by design and default in all our systems
  • Regular staff training on data protection
  • Incident response procedures for data breaches

International Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions for countries with sufficient data protection
  • Binding Corporate Rules for intra-group transfers
  • Your explicit consent when required

Data Retention

We retain personal data only as long as necessary for the purposes it was collected:

Account dataDuration of account + 30 days
Form responsesAs configured by form owner
Payment records7 years (legal requirement)
Support tickets2 years after resolution
Analytics data26 months

Cookie Policy

We use cookies and similar technologies in compliance with GDPR:

Essential Cookies

Required for basic site functionality (no consent needed)

Analytics Cookies

Help us understand usage patterns (consent required)

Marketing Cookies

We don't use marketing or tracking cookies

Data Processing Agreement (DPA)

For business customers processing personal data through our platform, we provide a comprehensive Data Processing Agreement that covers:

  • Roles and responsibilities
  • Technical and organizational measures
  • Sub-processor management
  • Data breach procedures
  • Audit rights
View Full DPA →

Exercise Your Rights

Data Protection Officer

To exercise any of your GDPR rights or for data protection inquiries:

Email: [email protected]

Post: Data Protection Officer, FormBuilder, [Your Address]

Response time: Within 30 days

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we haven't adequately addressed your concerns. Find your local authority at edpb.europa.eu

Last updated: August 19, 2026

We use necessary cookies to run FormBuilder and optional analytics cookies to understand site usage. You can accept analytics cookies or keep only necessary cookies.