Privacy Policy

ARCHIVED 2025-07-01, DATE APPROXIMATE · VERSION 20250701_rev01 · COMPARED WITH 20250401_rev01

Full text changes — 20250401_rev01 to 20250701_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

192192You also have the right to lodge a complaint before a supervisory data protection authority regarding our data processing. If you are in Europe, an up to date list of data protection authorities is available at [https://edpb.europa.eu/about-edpb/board/members\_en](https://edpb.europa.eu/about-edpb/board/members_en). If you are in the UK, the data protection authority is the UK Information Commissioner's Office available at [https://ico.org.uk/](https://ico.org.uk/).
193193
194194### **EU-U.S. and Swiss** **Data Privacy Frameworks ("DPF")**
195195
196196Jotform complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Jotform has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Jotform has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/)
197197
198In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Jotform commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS (www.jamsadr.com), an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit [www.jamsadr.com](http://www.jamsadr.com/) for more information or to file a complaint. The services of JAMS are provided at no cost to you.
198In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Jotform commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS ([www.jamsadr.com/DPF-Dispute-Resolution](https://www.jamsadr.com/DPF-Dispute-Resolution)), an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit [www.jamsadr.com/DPF-Dispute-Resolution](https://www.jamsadr.com/DPF-Dispute-Resolution) for more information or to file a complaint. The services of JAMS are provided at no cost to you.
199199
200200See the "Information We Collect" section above for information on what personal data we collect, and the "How We Use and Disclose Your Information" section for information on how we use such data and to whom we may disclose it. Whatever personal data our user or customer (the data "controller") collects via submissions to their forms on our platform is determined by the user or customer on the one hand and by the persons who fill in and submit their forms on the other hand.
201201
202202See above for information on the choices you have concerning limiting the use and disclosure of your data, and your right to access your personal data. We are subject to the investigatory and enforcement powers of the FTC. We may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. See above. We may be liable for onward transfers to third parties if and to the extent determined by law. Complaints regarding our compliance with the DPF may be subject to binding arbitration before the American Arbitration Association in the US - see our [terms of use](https://www.jotform.com/terms/). You may address any complaints directly to us using [this form](https://www.jotform.com/privacyconcerns/), free of charge, worldwide.
203203
204204### **Representation for Data Subjects in the EU**
210210## BRAZIL USERS AND CUSTOMERS
211211
212212In most cases where Jotform may receive personal data of and/or for our Brazilian customers, the customer is the Controller under the LGPD, rather than Jotform. For purposes where Jotform does in fact function as a Controller with respect to our customer, our Privacy Team is the designated Data Protection Officer, and may be contacted at [privacy@jotform.com](mailto:privacy@jotform.com).
213213
214214If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/).
215215
216Revision March 03, 2025
216Revision June 24, 2025