GDPR compliance
WandForm is designed with GDPR compliance in mind — as both a data controller for our own operations and a data processor for your form data.
Data Processing Agreements
We offer a Data Processing Agreement (DPA) to all customers. Contact privacy@wandform.com to request a signed DPA.
Data residency
Enterprise customers can select their data region to ensure form submission data stays within the EU.
Right to erasure
Workspace owners can delete all their data at any time. We provide tooling to delete individual submissions or entire form datasets.
Sub-processors
We maintain a list of sub-processors. You will be notified of any changes with at least 30 days notice.
Consent management
You can add consent checkboxes and privacy notices directly in your forms using WandForm field types.
Breach notification
We will notify you of any personal data breach within 72 hours of becoming aware, as required by GDPR Article 33.
For GDPR inquiries, DPA requests, or data subject rights, contact privacy@wandform.com.