The General Data Protection Regulation (GDPR) is a privacy law in the European Union (EU) that grants EU citizens and residents the right to access and control their personal data.
Yes. Youform’s data centers and servers are located in Ireland (EU), and we fully comply with the GDPR framework.Here’s what we’ve implemented:
- Our Privacy Policy explains what data we collect, how long we retain it, how it may be transferred, and your data protection rights.
- All form data in Youform is encrypted both in transit and at rest, and securely stored within Europe.
- You have full control over the data you collect, store, and manage through Youform.
- We offer a Data Processing Agreement (DPA) for your convenience.Please check Youform DPA here.
By creating a Youform account and accepting our Terms and Conditions, professional users also agree to the terms of our Data Processing Agreement (DPA) on behalf of their company. No separate signature is required.
Youform provides the form-building service but does not own the responses collected through forms. The form creator is responsible for the data they collect and acts as the data controller for respondent information. Youform acts as the data processor, storing data on behalf of form creators.As long as your account remains active, you (the form creator) retain full control over the data you collect and how long you choose to store it.You can delete or export form responses from your account at any time if needed.We respect all deletion requests. Any form data you delete is permanently removed from our backups within 30 days.
Youform acts as a data controller for the personal information you provide to us in order to use our service (such as registration details).We do not sell personal data to third parties, nor do we use it for marketing or advertising purposes.We only share your information with trusted service providers who assist us in operating Youform, and these providers are required to comply with the GDPR framework.
If you have any questions about how we collect, use, or protect your personal data, you can contact our Data Protection Officer (DPO):
We aim to respond to all inquiries within 3-4 business days.
Amazon Web Services (AWS)
Security, Storage and CDN
Laravel Forge and Envoyer
Server management & code deployment
For country detection from IP used in forms with phone input. (Optional and anonymous).