Privacy Policy

ARCHIVED 2022-02-01, DATE APPROXIMATE · VERSION 20220201_rev01 · COMPARED WITH 20211201_rev01

Full text changes — 20211201_rev01 to 20220201_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+## Privacy Policy
+This privacy policy explains how Jotform handles your personal information and data, and applies to all of the products, services and websites offered by Jotform Inc., Jotform Ltd, Jotform Pty Ltd and their affiliates (collectively, "Jotform"), except where otherwise noted. Jotform products, services and websites are collectively referred to as the "services" in this policy. Unless otherwise noted, all services are provided by Jotform Inc., which is based in the United States.
+This privacy policy explains how Jotform handles your personal information and data, and applies to all of the products, services and websites offered by Jotform Inc., Jotform LTD and their affiliates (collectively, "Jotform"), except where otherwise noted. Jotform products, services and websites are collectively referred to as the "services" in this policy. Unless otherwise noted, all services are provided by Jotform Inc., which is based in the United States.
 In this policy, "you" refers to those who use and/or interact with any or all of our products, services, and websites, and "we", "us", and "our" refer to JotForm. "Customer"(s) refers specifically to those who use Jotform services. "Form Responders" refers to those who fill in and/or submit forms used by our Customers.
 ## INFORMATION WE COLLECT
 ### **From Our Customers**
 In some cases, the applications or user interfaces you encounter while on our sites are managed by third parties, who may require that you provide your personal information. We are not responsible for the privacy practices of these third party services or applications. We recommend carefully reviewing the user terms and privacy statement of each third party service, website, and/or application prior to use.
 ## HOW LONG WE RETAIN YOUR INFORMATION
 We generally retain your information for as long as you have an account with us, or as long as necessary to otherwise to provide services to you, to comply with our legal obligations, resolve disputes, or comply with and enforce our agreements. Data that is deleted from our servers may remain as residual copies on offsite backup media for up to approximately one month afterward.
+## REQUESTS TO DELETE, AMEND OR WITHDRAW CONSENT - NON-EEA OR UK RESIDENTS
+## REQUESTS TO DELETE, AMEND OR WITHDRAW CONSENT - NON-EEA, UK OR AUSTRALIAN RESIDENTS
+You may be entitled to request that we delete or amend your personal information. You may also be entitled to withdraw your consent, when consent is the basis for processing your personal information. We apply the same procedures, limitations and exceptions established for European Economic Area (EEA) and UK residents in this privacy policy to all who make such requests to delete or amend personal information, or withdraw consent for processing personal information, regardless of geographic location. Please read the "Your Rights" paragraph under the "ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA AND UK RESIDENTS" below for details. If you are a resident of the EEA or UK, see below for more specific details on how that applies to you.
+You may be entitled to request that we delete or amend your personal information. You may also be entitled to withdraw your consent, when consent is the basis for processing your personal information. We apply the same procedures, limitations and exceptions established for European Economic Area (EEA), UK and Australian residents in this privacy policy to all who make such requests to delete or amend personal information, or withdraw consent for processing personal information, regardless of geographic location. Please read the "Your Rights" paragraph under the "ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA, UK AND AUSTRALIA RESIDENTS" below for details. If you are a resident of the EEA, UK or Australia, see below for more specific details on how that applies to you.
+## ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA AND UK RESIDENTS
+## ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA, UK AND AUSTRALIA RESIDENTS
+If you reside within the European Economic Area or United Kingdom, the following additional terms apply.
 ### **Legal Basis for Use of Your Information**
 Personal information that we collect is processed under the following legal basis:
 _Our legitimate interests_. This includes:
 #### **Complaints**
 You also have the right to lodge a complaint before a supervisory data protection authority regarding our data processing. If you are in Europe, an up to date list of data protection authorities is available at [https://edpb.europa.eu/about-edpb/board/members\_en](https://edpb.europa.eu/about-edpb/board/members_en). If you are in the UK, the data protection authority is the UK Information Commissioner's Office available at [https://ico.org.uk/](https://ico.org.uk/).
 ## **PRIVACY SHIELD**
+Jotform complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. Jotform has certified to the U.S. Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit [https://www.privacyshield.gov/](https://www.privacyshield.gov/)
+Despite the July 12, 2016 decision of the European Commission's Decision (EU) 2016/1250 regarding Privacy Shield, Jotform continues to comply with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. Jotform has certified to the U.S. Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit [https://www.privacyshield.gov/](https://www.privacyshield.gov/)
 In compliance with the Privacy Shield Principles, Jotform commits to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Jotform via [this form](https://www.jotform.com/privacyconcerns/).
 Jotform has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please visit [https://www.jamsadr.com/eu-us-privacy-shield](https://www.jamsadr.com/eu-us-privacy-shield) for more information or to file a complaint. The services of JAMS are provided at no cost to you. You may also submit a claim for binding arbitration against Jotform with JAMS (see the above website) in the event that your concerns are not satisfactorily resolved.
 Jotform commits to cooperate with EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) and to comply with the advice given by such authorities with regard to human resources data transferred from the EU and Switzerland in the context of the employment relationship.
 ### **Representation for data subjects in the EU**
 We value your privacy and your rights as a data subject and have therefore appointed Prighter as our privacy representative and your point of contact.
 Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative Prighter or make use of your data subject rights, please visit: https://prighter.com/q/11830216921
+Last Update: June 10, 2021
+Last Update: January 21, 2022