Privacy Policy

ARCHIVED 2023-04-01, DATE APPROXIMATE · VERSION 20230401_rev01 · COMPARED WITH 20230305_rev01

Full text changes — 20230305_rev01 to 20230401_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 _Contractual obligations_. For the performance of contractual obligations between you and Jotform, including the Jotform Terms of Use and/or in our separate written contract with you.
 _Consent_. Where required by law, we may process your personal information in some cases for marketing purposes on the basis of your consent (which you may withdraw at any time after giving it, as described in this privacy policy).
 See our GDPR page at [https://www.jotform.com/gdpr-compliance/](https://www.jotform.com/gdpr-compliance/).
+### Australian Privacy Principles (APP) Privacy Policy
+#### Scope
+This policy relates to the requirements of the Australian Privacy Principles (APP) contained in the Australian Privacy Act 1988 (the Act). This policy applies to the collection of Australian residents' personal information by customers of Jotform utilising our service provision in the Australian region. In circumstances where it is construed as an APP Entity, Jotform complies with the APP and has implemented suitable controls and measures to ensure that personal information is collected, held and disclosed in a manner that is secure
+#### Collection of Personal Information
+Jotform does not actively collect personal information from Australian residents directly (solicited information). We may collect personal unsolicited information in the course of our service provision to our Australian customers. Our Australian customers use the Jotform platform and software as a service provision within their business operations to improve business practices. This may include the use of our forms and tables, and other services we offer, in the process of collecting personal information of end users. The types of personal information collected by our customers varies, and they should provide a detailed list in their own privacy policy.
+#### Disclosure (Data Sharing)
+Information that is collected by our customers may be disclosed to and stored on our servers (and backups) which are provided by Google Cloud Platform (GCP) and by Amazon Web Services (AWS). This may include overseas disclosures and Australian resident personal information may be transferred to cloud providers based in the United States of America. We work closely with our service providers to ensure a high standard of security is maintained to ensure that personal information is protected from unauthorized access. Our cloud service providers also have certifications including ISO27001 and SOC 2 which evidence high standards of information security management.
+#### Individual Rights
+As an Australian resident you have rights under the Australian Privacy Act 1988. You have the right to access your personal information, and to have your personal information corrected if it is not accurate. We will respond to your request as soon as is practicable. Ordinarily a charge will not be required for this service, unless the request is excessive or requires significant resources. To exercise these rights, contact [privacy@jotform.com](mailto:privacy@jotform.com).
+#### Making a Complaint
+As an Australian resident whose personal information we may have collected, you can make a complaint to us using the email address below, and we will deal with the issues you are reporting as swiftly as we can. If you are not satisfied with our response, you can make a complaint to the Office of the Australian Information Commissioner (OAIC) by emailing this address [https://www.oaic.gov.au/privacy/privacy-complaints](https://www.oaic.gov.au/privacy/privacy-complaints)
+Contact UsFor further information, or to make a request for access or correction of personal information, please contact us by email at [privacy@jotform.com](mailto:privacy@jotform.com).
 ### Transfer Impact Assessment
 Please see our [transfer impact assessment page](https://www.jotform.com/tia/) for information that may assist you in assessing potential transfers of data to the United States from within the EU or UK.
 ### **Your Rights**
 ### **Representation for Data Subjects in the EU**
 We value your privacy and your rights as a data subject and have therefore appointed Prighter as our privacy representative and your point of contact.
 Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative Prighter or make use of your data subject rights, please visit: https://prighter.com/q/11830216921
+Last Update: Dec 05, 2022
+Last Update: Mar 06, 2023