GDPR rights for respondents

If you’ve answered a typeform, who is responsible for looking after that data? This article tells you everything you need to know about your data rights as a typeform respondent.

As our Privacy Policy states, if you’ve submitted your personal data through a typeform, the creator of that typeform is responsible for this data. Typeform only processes this data on the creator’s behalf.

This means that if you want to exercise any of your GDPR rights, you should contact the person or organization that created the typeform. If this isn’t possible, we’ll do our best to put you in touch with the creator of the form.

Here’s the relevant clause from our Privacy policy:

Information we collect directly from the Respondent: typeform responses

We collect and store the typeforms responses from Respondents. The Typeform User is responsible for that data and manages it. The Typeform User is usually the same person that invited the Respondent to take the typeform and sometimes they have their own privacy policy.

When responding to a typeform you may provide personal information or data. Please note that TYPEFORM is not responsible for the content of that typeform, so if you have any questions about a typeform you are taking, please contact the Typeform User directly.

While the first thing you should do if you want to exercise your rights is contact the creator of the typeform, this doesn’t mean that we won’t help you!

If you’ve sent your personal data through a typeform, you can contact us. Give us authorisation to provide your contact information to the creator of the typeform, and we’ll forward your request to them. All you need to share is the typeform URL, or the name of the creator, so we can identify the form and creator.

If you have a Typeform account and you’ve sent your personal data through someone else’s typeform, you should also follow this process.

We can’t guarantee that the creator of the typeform will accommodate your requests, but we’ll do as much as we can.