Privacy Policy

Log Files

Forma follows a standard procedure of using log files. These files log visitors when they visit websites. The information collected by log files includes internet protocol (IP) addresses, the URL visited, browser type / user agent and date and time of visit. This information is automatically purged every 7 days and is never shared with any third parties.


Forma does not use cookies to store information about the user's preferences and does not use cookies to track the pages the visitor accessed or visited. Cookies are only used by the Laravel framework for authentication purposes and remembering your authentication status.

Collection of your Personal Information

Forma may collect and store personal information, such as your name and email address.

Use of your Personal Information

Forma collects, stores and uses your personal information to operate the Service and deliver the services you have requested. This includes authentication and automated emails produced Forma.

Forma will never use your personally identifiable information to inform you of other products or services available from Forma.

Forma does not sell, rent or lease its customer lists to third parties.

Forma will never share data with third parties to help perform research and statistical analysis, to facilitate email communications or to provide customer support.

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Your Rights

Under GDPR you have the following rights in relation to Forma's processing of your personal data:-

  1. The right to be informed about how we use, share and store your personal data (This Privacy Notice);
  2. The right to see a copy of the personal information we hold about you (also known as a Subject Access Request SAR). Where a SAR is requested we will respond promptly and within one month from the date we receive your request. (In most cases this will be free of charge);
  3. The right to have personal information rectified if inaccurate or incomplete;
  4. The right of erasure of your personal information where there is no compelling reason for its continued processing and we don’t have a legitimate interest to retain it;
  5. The right to restrict processing in certain circumstances, e.g. if its accuracy is being contested;
  6. The right to data portability which, subject to certain conditions, allows you to obtain and reuse your personal data across different services;
  7. The right to object to certain processing including for the purposes of direct marketing;
  8. Rights to information in relation to automated decision making and profiling.

Children's Privacy

Forma does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Special Category Data

Forma is not suitable for "special category data". This includes the following:

Attempting to store this form of data will result in deletion of the data and instant removal of your user account.

User Submitted Data

Forma accepts and stores data from user submitted forms. Forma acts as the processor for this data but you are responsible for it's compliance under Data Protection Legislation and retain full control of any submitted data.

Forma will encrypt user submitted data before storage. Encryption is handled locally by Forma and data is never transferred to a third-party or away from the origin server.

Uploaded Files and Images

All files and images uploaded via user-submitted forms are stored inside of a Digital Oceans Spaces bucket hosted in Frankfurt.

These files are all stored in "private" mode which means they are not publicly accessible. Forma must generated a temporary signed URL for the user before providing access.

These temporary signed URLs expire after 1 hour.

For more information about Digital Ocean, please consult their Privacy Policy.

Payment Details

Forma uses Paddle for processing card payments. Forma does not store any payment details on the server, all details are handled by Paddle. For more information, please consult Paddle's Privacy Policy.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Online Privacy Policy Only

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in Forma. This policy is not applicable to any information collected offline or via channels other than this website.


By using our website, you hereby consent to our Privacy Policy and agree to its Terms and Conditions.

Contact Us

If you wish to contact Us or have any questions about this Privacy Policy, please email Us at