Jotform Privacy Policy changes — 20240301_rev01

172

176

#### **Access, Update, Data Portability and Other Rights**

173

177

174

178

You may also be entitled to access your information, update your personal information which is out of date or incorrect, restrict use of your personal information in certain specific circumstances, place a data portability request (applicable only when we use your personal information on the basis of your consent or performance of a contract, and where our use of your information is carried out by automated means), and ask us to consider any valid objections which you have to our use of your personal information where we process it on the basis of our or another person's legitimate interest. Requests should be directed via [this form](https://www.jotform.com/privacyconcerns/).

175

179

176

180

We will consider all such requests and provide our response within a reasonable period (but no longer than one calendar month from our receipt of your request unless we tell you we are entitled to a longer period under applicable law). We may require you to verify your identity before we respond to any of your requests. Certain personal information may be exempt from such requests in certain circumstances, including as provided for in this privacy policy.

177

181

178

#### **Children's Privacy**

179

180

Use of our websites is intended for adults at least eighteen (18) years of age. We do not knowingly collect personally-identifying information from children under the age of thirteen (13).

181

182

#### **Complaints**

183

184

You also have the right to lodge a complaint before a supervisory data protection authority regarding our data processing. If you are in Europe, an up to date list of data protection authorities is available at [https://edpb.europa.eu/about-edpb/board/members\_en](https://edpb.europa.eu/about-edpb/board/members_en). If you are in the UK, the data protection authority is the UK Information Commissioner's Office available at [https://ico.org.uk/](https://ico.org.uk/).

185

186

### **EU-U.S. Data Privacy Framework ("DPF")**

187

188

We participate in and are committed to complying with the [DPF](https://www.dataprivacyframework.gov/s/).

189

190

See the "Information We Collect" section above for information on what personal data we collect, and the "How We Use and Disclose Your Information" section for information on how we use such data and to whom we may disclose it. Whatever personal data our user or customer (the data "controller") collects via submissions to their forms on our platform is determined by the user or customer on the one hand and by the persons who fill in and submit their forms on the other hand.

191

192

See above for information on the choices you have concerning limiting the use and disclosure of your data, and your right to access your personal data. We are subject to the investigatory and enforcement powers of the FTC. We may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. See above. We may be liable for onward transfers to third parties if and to the extent determined by law.Complaints regarding our compliance with the DPF may be subject to binding arbitration before the American Arbitration Association in the US - see our [terms of use](https://www.jotform.com/terms/). You may address any complaints directly to us using [this form](https://www.jotform.com/privacyconcerns/), free of charge, worldwide.

193

194

### **How to Contact Us Regarding Your Personal Information**

195

196

If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/).

197

198

194

### **Representation for Data Subjects in the EU**

199

195

200

196

We value your privacy and your rights as a data subject and have therefore appointed Prighter as our privacy representative and your point of contact.

201

197

202

198

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative Prighter or make use of your data subject rights, please visit: https://prighter.com/q/11830216921

203

199

204

Revision December 04, 2023

200

## BRAZIL USERS AND CUSTOMERS

201

202

In most cases where Jotform may receive personal data of and/or for our Brazilian customers, the customer is the Controller under the LGPD, rather than Jotform. For purposes where Jotform does in fact function as a Controller with respect to our customer, our Privacy Team is the designated Data Protection Officer, and may be contacted at [privacy@jotform.com](mailto:privacy@jotform.com).

203

204

## **HOW TO CONTACT US REGARDING YOUR PERSONAL INFORMATION**

205

206

If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/).

207

208

Revision February 28, 2024

 See the section above regarding information related to visitors to our websites. We use that information, including but not limited to cookies, customer data, usage data, device data, referral data and information from page tags, to manage and improve our services, to serve and support our Customers, for research purposes, and for the other various purposes described in this privacy policy.
 ### **No Sale or Leasing of Your Information**
 We will not sell or lease your personal information to any third party. We may disclose aggregate demographic and statistical information with our business partners, but this information is not specific to the identification of you as an individual.
+### Children's Privacy
+Use of our websites is intended for adults at least eighteen (18) years of age. We do not knowingly collect personally-identifying information from children under the age of thirteen (13).
 ### **Generally**
 We may disclose information with third parties, for limited purposes, as follows:
 - **Your information to our service providers.** We use service providers who help us to provide you with our services. We give some personnel of these providers access to your information, but only to the extent necessary for them to perform their services for us. Our contracts with our service providers require them to maintain technical protections to ensure the confidentiality of your personal information and data, to use it only for the provision of their services to us, and to handle it in accordance with this privacy policy. Examples of service providers include payment processors, hosting services, email service providers, and web traffic analytics tools.
 - **Your account details to your billing contact.** If your account holder details are different from the billing contact listed for your account, we may disclose your identity and account details to the billing contact upon their request. We typically will attempt to notify you of such requests. By using our services and agreeing to this privacy policy, you consent to this disclosure.
 #### **Access, Update, Data Portability and Other Rights**
 You may also be entitled to access your information, update your personal information which is out of date or incorrect, restrict use of your personal information in certain specific circumstances, place a data portability request (applicable only when we use your personal information on the basis of your consent or performance of a contract, and where our use of your information is carried out by automated means), and ask us to consider any valid objections which you have to our use of your personal information where we process it on the basis of our or another person's legitimate interest. Requests should be directed via [this form](https://www.jotform.com/privacyconcerns/).
 We will consider all such requests and provide our response within a reasonable period (but no longer than one calendar month from our receipt of your request unless we tell you we are entitled to a longer period under applicable law). We may require you to verify your identity before we respond to any of your requests. Certain personal information may be exempt from such requests in certain circumstances, including as provided for in this privacy policy.
+#### **Children's Privacy**
+Use of our websites is intended for adults at least eighteen (18) years of age. We do not knowingly collect personally-identifying information from children under the age of thirteen (13).
 #### **Complaints**
 You also have the right to lodge a complaint before a supervisory data protection authority regarding our data processing. If you are in Europe, an up to date list of data protection authorities is available at [https://edpb.europa.eu/about-edpb/board/members\_en](https://edpb.europa.eu/about-edpb/board/members_en). If you are in the UK, the data protection authority is the UK Information Commissioner's Office available at [https://ico.org.uk/](https://ico.org.uk/).
 ### **EU-U.S. Data Privacy Framework ("DPF")**
 We participate in and are committed to complying with the [DPF](https://www.dataprivacyframework.gov/s/).
 See the "Information We Collect" section above for information on what personal data we collect, and the "How We Use and Disclose Your Information" section for information on how we use such data and to whom we may disclose it. Whatever personal data our user or customer (the data "controller") collects via submissions to their forms on our platform is determined by the user or customer on the one hand and by the persons who fill in and submit their forms on the other hand.
 See above for information on the choices you have concerning limiting the use and disclosure of your data, and your right to access your personal data. We are subject to the investigatory and enforcement powers of the FTC. We may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. See above. We may be liable for onward transfers to third parties if and to the extent determined by law.Complaints regarding our compliance with the DPF may be subject to binding arbitration before the American Arbitration Association in the US - see our [terms of use](https://www.jotform.com/terms/). You may address any complaints directly to us using [this form](https://www.jotform.com/privacyconcerns/), free of charge, worldwide.
+### **How to Contact Us Regarding Your Personal Information**
+If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/).
 ### **Representation for Data Subjects in the EU**
 We value your privacy and your rights as a data subject and have therefore appointed Prighter as our privacy representative and your point of contact.
 Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative Prighter or make use of your data subject rights, please visit: https://prighter.com/q/11830216921
+Revision December 04, 2023
+## BRAZIL USERS AND CUSTOMERS
+In most cases where Jotform may receive personal data of and/or for our Brazilian customers, the customer is the Controller under the LGPD, rather than Jotform. For purposes where Jotform does in fact function as a Controller with respect to our customer, our Privacy Team is the designated Data Protection Officer, and may be contacted at [privacy@jotform.com](mailto:privacy@jotform.com).
+## **HOW TO CONTACT US REGARDING YOUR PERSONAL INFORMATION**
+If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/).
+Revision February 28, 2024

Privacy Policy

Full text changes — 20240201_rev01 to 20240301_rev01