Question about Data Protection

  • DavidNash
    Asked on February 25, 2019 at 4:39 PM

    Can your confirm whether or not Jotform collects any data e.g. user names, addresses and email addresses if I make use of a free contact form on website i.e. where does Jotform stand in relation to European Union Data Regulation Regulation Legislation? I note that copy of contact form is sent by Jotform to the email address provided by participant.

    David Nash

  • jherwin
    Replied on February 25, 2019 at 5:56 PM

    Can you confirm whether or not Jotform collects any data e.g. user names, addresses, and email addresses if I make use of a free contact form on website i.e

    We do not allow the collection of sensitive information such as username, password, ID etc. It is against our Terms of Use. We have a tool detector that suspends your account if you have fields that take sensitive information.

    For more information about privacy, please check it here: https://www.jotform.com/privacy/

    Where does Jotform stand in relation to European Union Data Regulation Regulation Legislation?

    JotForm is GDPR compliant. You can find more details here: https://www.jotform.com/gdpr/

    Also, we offer data processing addendums (DPAs) for our customers that operate in the EU. If you would like to sign a DPA, Feel free to send your request: https://www.jotform.com/gdpr/dpa/

    I note that a copy of the contact form is sent by Jotform to the email address provided by the participant.

    Yes, it is "if you want" to send copies of submission to the respondent of your form. What they fill in on the form is what they will also get.

    Guide: Setting up an Autoresponder Email

  • DavidNash
    Replied on April 1, 2019 at 6:43 PM
    Q1. You appear to be stating that I am not allowed to request email addresses (e.g. “username”) on a contact form! This does not make sense to me!
    David Nash

    ...
  • jherwin
    Replied on April 1, 2019 at 8:06 PM

    Sorry for the confusion. I only highlighted the "email" or your question, but I didn't mention the email address in my answer. Also, username and password data collection through our service is really not allowed. Such high-risk forms are usually being automatically suspended by our anti-phishing filter.

    However, if the username is required for your form then you can try changing the label to something else.