DRAFTnot legal advice
Data processing agreement
When your website visitors send an enquiry, you are the controller and we process it for you. This agreement sets the terms UK GDPR Article 28 asks for. It forms part of the terms of service.
DRAFT, not legal advice. Written as a starting point for a solicitor to check before Enquiry opens to the public. It isn’t in force, and nothing here is a promise yet. Marks like [To decide: this] are things still to be decided.
Last changed 26 Oct 2026. Earlier versions: none.
The parties
You (the customer, the controller) and [To decide: the legal entity that sells Enquiry (Bromputers is a trading name), its registered address and number] (the processor). It applies for as long as we process personal data for you under the terms of service.
What we process
| Subject matter | Receiving the submissions your website forms send, storing them, emailing them to the recipients you choose, and showing them in your dashboard |
|---|---|
| Duration | Until each submission’s retention period ends (set per form, up to 365 days on Pro), or the account is deleted |
| Data subjects | The people who fill in your forms; the people whose addresses you add as recipients |
| Personal data | Whatever your forms collect (typically name, email, phone, message), uploaded files, the page address and browser user agent of the post, and a salted hash of the visitor’s IP address (the address itself isn’t stored) |
| Special category data | Not intended. You must not use Enquiry to collect it unless you have a lawful basis and have told us [To decide: whether to allow it at all] |
Our commitments
- We process the data only on your documented instructions: these terms, your form settings and what you do in the dashboard. If we think an instruction breaks the law, we tell you.
- Everyone at Bromputers who can reach the data is bound to keep it confidential.
- We keep the security measures below, and improve them over time without weakening them.
- We use only the sub-processors listed, under written terms that protect the data at least as well as these.
- We help you answer your visitors’ requests (export by form as CSV or the whole account as JSON, release or delete submissions) and with breach notices and impact assessments, where it is about our part.
- We tell you without undue delay, [To decide: a fixed number of hours, e.g. 48], after we become aware of a personal data breach affecting your data, with what we know.
- At the end, we delete the data: see “Deletion” below.
- We give you the information needed to show these commitments are met, and answer reasonable audit questions in writing [To decide: on-site audits: whether, and how often].
Security measures
- Everything travels over HTTPS. Uploaded files are stored in Cloudflare’s EU region and only downloadable through links that are signed and expire, from a separate host, as attachments.
- Captcha secrets are encrypted at rest. Visitors’ IP addresses are kept only as a salted hash. Sign-in links and session ids are stored as hashes; there are no passwords.
- Each account sees only its own forms and submissions; members have owner, admin or viewer roles. Changes are written to the account’s audit trail.
- Recipients are only addresses that confirmed by clicking a link, so a form can’t be made to email strangers.
- Submissions and their files are deleted each night once past the form’s retention period.
- Nightly backups, encrypted before they leave our server, kept up to 90 days, with a restore drill.
Sub-processors
You give general authorisation for the providers on the sub-processor list. We email account owners at least 30 days before adding or replacing one [To decide: notice period]; you can object, and if we can’t meet the objection you can end the subscription and be refunded for the unused part.
Transfers
Where a sub-processor handles the data outside the UK, the transfer is covered by [To decide: the mechanism: UK IDTA or the UK addendum to the EU SCCs, or the UK-US data bridge where the provider is certified].
Deletion
Submissions and files are deleted when the form’s retention period ends. When you delete the account, its forms stop at once and after 7 days every row and file of the account is deleted; backup copies age out within 90 days. You can export everything before then.
Your part
You make sure you have a lawful basis for what your forms collect, tell your visitors about it (the customer privacy wording helps), set a retention period no longer than you need, and send only addresses you are allowed to email to Enquiry.