Privacy Policy

Last updated: 26 September 2026

Who we are

FormHoney ("we", "us") operates FormHoney, a platform for designing forms and collecting the responses people submit to them. This policy explains what information we hold, why we hold it, and what rights you have.

Two different roles

FormHoney handles two quite different kinds of personal data, and it matters which one applies to you:

  • If you have an account with us — you design forms and view results. For your own account details we are the data controller, and this policy describes what we do with them.
  • If you have filled in someone's form — the person or organisation that designed that form decides what is asked and what happens to your answers. They are the data controller; we only store and process the responses on their behalf, as a data processor. Questions about a specific form should go to whoever sent it to you. If you cannot reach them, contact us and we will try to help.

Information we collect

  • Account details: your first name, surname, username, email address and a securely hashed password. We never store your password in a readable form.
  • Your projects and forms: the names, descriptions, settings and designs you create, along with any images or video you upload.
  • Form responses: the answers submitted to your forms, the email address a respondent supplies at the access screen when one is required, any files they attach, and the date, time and IP address of the submission. Responses are always stored, even when you have also chosen to have them emailed.
  • Technical and security data: sign-in times, the IP address and browser you signed in from, an audit record of significant actions taken in your account, and a log of emails the platform has sent.

How we use it

  • To provide the service — letting you sign in, design forms, and read your results.
  • To send transactional email: address confirmation, password resets, and the notifications you have configured for your forms.
  • To keep accounts secure — rate limiting, lockouts after repeated failed sign-ins, and the audit trail.
  • To diagnose faults and keep the platform working.

We do not sell your data, and we do not use form responses for our own purposes.

If you design forms, this part is yours

You decide what your forms ask. That makes you responsible for having a lawful basis to collect the information, for telling respondents what you will do with it, and for handling any request they make about their own data. Please only ask for what you genuinely need, and take particular care with special category information such as health, ethnicity, religious belief or biometric data — including signatures.

Cookies

We use essential cookies only. A session cookie keeps you signed in and protects forms against cross-site request forgery; a short-lived cookie records that a respondent has cleared a form's passcode and email check. There is no advertising or third-party tracking on this platform.

How long we keep data

  • Account data — for as long as your account is open.
  • Projects, forms and responses — until you delete them. Deleting a project or form removes its responses and any attached files.
  • Audit and mail logs — retained for a limited period for security and troubleshooting, then cleared.

Security

Passwords are hashed. Access to every project, form and response is checked against the signed-in account on each request. Uploaded files are stored outside the public web directory and are served only after a permission check. Forms can additionally be protected with a passcode and an email verification step.

Sharing

We share personal data only where it is necessary to run the service — for example with the email provider configured to deliver notifications, or with our hosting provider — or where the law requires it.

Your rights

You have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it deleted, and to object to or restrict how it is used. Write to support@inclusion.local and we will respond within one month. If you are unhappy with our response you can complain to your national data protection authority; in the UK, that is the Information Commissioner's Office.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and material changes will be brought to the attention of account holders.

Contact

Questions about this policy: support@inclusion.local, or use our contact form.