Legal & Support
GDPR-Compliant Contact Forms
Data protection expectations for website forms and contact submissions.
Placeholder statement
This GDPR contact form notice is a placeholder. Website forms should collect only necessary information, explain the purpose of processing, identify the lawful basis where appropriate, and provide a clear consent or acknowledgement step before submission.
Contact form submissions should not request emergency disclosures, highly sensitive medical detail, or information about another person unless there is a clear and secure process for handling that data.
Before forms go live
Before enabling form submission, add retention rules, privacy links, consent wording, anti-spam protection, secure storage, and a process for access, correction, deletion, and withdrawal requests.