Who this covers
This policy is about the data we control: your account, billing, support, and website-visit data. When you build forms and collect responses, the personal data your respondents submit belongs to you — you are the controller and we only process it on your instructions. See “Your form data” below.
Who we are
Formabi is operated by [LEGAL ENTITY NAME], registered in England & Wales (company no. [COMPANY NO.]), registered office [REGISTERED ADDRESS]. We’re the data controller for the data described here. Contact us about privacy at help@formabi.com.
Our representative in the EU for GDPR purposes is [EU REPRESENTATIVE (Art. 27)]. If we’re registered with the UK Information Commissioner’s Office, our registration number is [ICO REGISTRATION NO.].
What we collect and why
- Account data — your name, email, password (stored hashed), and workspace details. We need this to create and run your account. Legal basis: performance of our contract with you.
- Billing data — your plan, and payment records. Card details are handled by our payment provider, not stored by us. Legal basis: contract, and our legal obligation to keep tax records.
- Usage and security data — sign-ins, audit events, and technical logs (such as IP address and browser) used to keep accounts secure and the service working. Legal basis: our legitimate interest in a secure, reliable service.
- Support data — the messages and details you send us when you ask for help. Legal basis: contract and legitimate interest.
- Enquiry data — if you contact us through a form on this site, the name, email, company and message you give us. We keep it in our own customer-relationship system, self-hosted in the EU, so we can answer you and follow up. Legal basis: our legitimate interest in responding to enquiries and in selling our service; you can ask us to erase it at any time.
- Website analytics — aggregate, privacy-friendly visit statistics via Plausible, which we self-host in the EU. No cookies, no cross-site tracking, no personal profiles — so we don’t show a cookie banner. Legal basis: legitimate interest in understanding site usage.
We don’t use your data for advertising and we don’t sell it.
Your form data
The responses collected through your forms are processed on your behalf under our Terms and, where you need one, a data processing agreement (available at help@formabi.com). We don’t decide what you collect or why — you do. If you’re a respondent filling in someone’s form, the organisation running that form is the controller; please contact them about your data.
Who we share it with
We share data only with the service providers we need to run Formabi — our hosting and payment providers. They act on our instructions under contract. The current list is on our sub-processors page. We may also disclose data if the law requires it, or to protect our rights and users.
Where your data is kept
Your data is hosted in the European Union (Germany). If any transfer outside the UK/EEA happens, we rely on appropriate safeguards such as the UK IDTA or EU Standard Contractual Clauses.
How long we keep it
We keep account data while your account is active. After you close your account we delete it after a short grace period, including uploaded files, except where we must keep some records longer (for example billing records for tax law). You can set retention rules for your form submissions so older records are purged automatically.
Your rights
Under the UK GDPR and EU GDPR you can ask us to: access a copy of your data; correct it; delete it; restrict or object to certain processing; and receive it in a portable format. To exercise any of these, email help@formabi.com and we will respond within the statutory time limit. You can also complain to a data protection authority — in the UK, the ICO; in the EU, your local authority.
Security
We protect your data with encryption in transit and at rest, strong authentication, and an immutable audit log, among other measures. Read the detail on our security page.
Children
Formabi isn’t intended for children, and we don’t knowingly collect their data through our own service.
Changes
We may update this policy. If a change is significant we’ll tell you before it takes effect. The “last updated” date above always shows the current version.
Contact
Privacy questions or requests: help@formabi.com. Company details are on our legal notice page.