Forms with layered data protection information
If you collect client data in a form, you have to explain who processes it, why and what rights people have, and not keep it longer than needed. Peachform does not do that for you, but it gives you the pieces to do it properly without fighting the tool.
The first layer, next to the box
The legal acceptance question shows the basic information it is recommended to give in the form itself: controller, purpose, legal basis, recipients, rights and a link to your full policy. It comes with model texts you adapt to your case, and the box is never ticked in advance.
Retention period with automatic deletion
Each form has its own retention period: 6 months by default, and from 30 days to 2 years depending on your plan. When it is reached, the responses and their files are deleted automatically every day. It no longer depends on you remembering to clean up.
Data stored in the EU
The database and uploaded files are in Cloudflare’s European Union jurisdiction. If you turn on email notifications, each response reaches your inbox through Resend, which is based in the US; every provider is listed in the data processing agreement.
What is still yours to do
- Decide what data you ask for and why: ask only for what you will use.
- Write your name or company name and review the purpose of each form.
- Have a full privacy policy to link to.
- Handle access and deletion requests: you can search, export and delete responses from the dashboard.
Templates to start with
- Client onboarding for accountantsFor accounting and tax firms: tax details, the services needed and the first documents.
- Job applicationFor small businesses that are hiring: the applicant's details, role, CV and availability.
- Academy enrolmentFor academies and training centres: student, course, schedule and, for minors, the guardian's details.
Frequently asked questions
- Does this make my forms GDPR compliant?
- It helps, but it cannot guarantee it on its own. You are the controller and decide what you ask, why and for how long. Have your texts reviewed if in doubt.
- Do you sign a data processing agreement?
- Yes. The data processing agreement is part of the terms of service and is published on the website, with the list of subprocessors.
- Do you store respondents’ IP addresses?
- No. We do not store respondents’ IP address or browser, and forms use no cookies or trackers.
Create your form for free
1,000 responses a month, no card. Sign in with Google or your email.
Start for free