FormPost

FormPost Privacy Policy

Effective date: August 16, 2025 · Last updated: August 16, 2025

1. Who We Are

FormPost LLC (hereinafter “FormPost,” “we,” “us”) provides a technical platform for receiving, storing, and processing forms (the “Service”). We comply with the laws of Ukraine, including the Law of Ukraine on Personal Data Protection, and align with widely accepted international standards (GDPR/CCPA).

2. Scope

This Policy explains which data we process, the purposes and legal bases, how long we keep it, with whom we share it, and your rights as a data subject.

3. Data We Collect

  • Data you provide: name, email address, form contents, and any other information you submit voluntarily.
  • Automatically collected data: IP address, browser/device type, timestamps, referrer, cookies, technical identifiers, and event logs (for security and anti‑spam).
  • Payment data: transaction information processed by licensed payment providers; we do not store full card details.

4. Purposes of Processing

  • to provide and maintain the Service;
  • to detect and prevent fraud, spam, abuse, and security incidents;
  • to improve quality, performance, and security of the Service (minimal analytics);
  • to comply with legal obligations and respond to lawful requests by authorities;
  • to communicate with you about changes, incidents, and important notices.

6. Roles in Processing

In most cases, FormPost acts as a processor providing technical means of processing on behalf of you — the controller of the data collected through our Service. You undertake to comply with applicable law as a controller with respect to data you collect.

7. Cookies and Similar Technologies

We primarily use technical and session cookies necessary for the Service (authentication, security, preferences). You can manage cookies in your browser settings; disabling some cookies may affect functionality.

8. Sharing with Third Parties

We share data only to the extent necessary to provide the Service, with the following categories of recipients:

  • hosting, storage, and compute providers;
  • payment processors and billing partners;
  • analytics and security vendors;
  • government authorities — in cases explicitly required by law.

All engaged processors are bound by confidentiality and data protection obligations.

9. International Data Transfers

Where necessary, data may be processed on servers outside Ukraine. We implement appropriate safeguards pursuant to Art. 29 of the Ukrainian Law on Personal Data Protection and GDPR principles (contractual obligations, technical and organizational measures, and, where applicable, Standard Contractual Clauses).

10. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy or to meet legal requirements (e.g., accounting). After retention periods expire, data is deleted or anonymized.

11. Your Rights

  • to be informed about the sources, location, purpose of processing, and storage of your data;
  • to access and obtain a copy of your data; to rectify (update) it;
  • to request deletion (the “right to be forgotten”) where provided by law;
  • to object to processing or to restrict it;
  • to data portability (where applicable);
  • to withdraw consent where processing is based on consent.

To exercise your rights, contact us at formpostorg@gmail.com. To protect against unauthorized requests, we may ask you to verify your identity.

You also have the right to lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with a court.

12. Security

We apply technical and organizational measures: TLS encryption, least‑privilege access, access control, audit logs, backups, and disaster recovery planning. In the event of a security incident, we act under our internal procedure and, where required, notify authorities and users within statutory deadlines.

13. Children

The Service is not intended for individuals under 13 years old. If we become aware of unauthorized submission of a child’s data, we will delete it without undue delay.

14. Law‑Enforcement Requests

We disclose data only on the basis of properly issued and lawful requests or court orders. The scope of disclosure is limited by necessity and proportionality.

15. Changes to This Policy

We may update this Policy. The current version is always available on this page. For material changes, we will provide additional notice (e.g., by email or a site banner).

16. Contact

FormPost LLC
Email: formpostorg@gmail.com