Privacy policy clauses for Typeform
Typeform is a cloud-based form and survey platform that enables websites to collect structured data from visitors through interactive forms. Websites use Typeform to gather customer feedback, conduct surveys, process registrations, and collect contact information efficiently.
Free scan · No signup · Results in 60 seconds
What data Typeform collects
Your privacy policy must disclose each of the following data types when you use Typeform.
When does Typeform trigger privacy obligations?
Installation triggers immediate obligations
Adding Typeform to your site or app immediately creates a data controller–processor relationship. The moment a visitor or user encounters a Typeform embed or link, you begin collecting form responses, email addresses, IP addresses, and device information. Because TYPEFORM SL (Spain, EU) is your data processor, GDPR Article 28 requires you to have a Data Processing Agreement (DPA) in place *before* data flows. This is not optional and not retroactive.
Jurisdiction thresholds
GDPR applies if: Any respondent is in the EU/EEA, or you target EU residents. Typeform's default EU data residency means GDPR Article 5 (lawfulness, fairness, transparency) and Chapter III (rights) apply automatically. No volume threshold; even one EU respondent triggers GDPR.
