A plain-English guide to GDPR for forms

GDPR compliance for forms comes down to a handful of concrete practices, not abstract legal theory.

Know your role

If you own the form, you’re usually the data controller for the answers it collects; your form tool is the processor.

Data residency matters

Where your respondents’ data is physically stored affects your compliance obligations — EU hosting simplifies this significantly for EU audiences.

Disclose partial capture

If your tool saves answers as someone types (before they hit submit), that needs to be disclosed — not just at final submission.

Give people a way out

Respondents should be able to ask for their data to be deleted, and you should have a retention policy that doesn’t keep data forever by default.

See our full overview at /gdpr.