Privacy Policy

This policy applies to visitors to workform.io, people who contact Workform, prospects who request a demo or pricing, and users or administrators of a Workform workspace.

Workform is operated for real commerce teams managing products, inventory, orders, fulfilment, pricing, procurement, finance, analytics, and related operations. The personal information we process is tied to those real operational workflows.

We collect information you give us directly, information created when you use the site or product, and information we receive from connected services you choose to integrate.

• Contact details, including name, work email, company, role, phone number, and message content.
• Account and workspace details, including team membership, permissions, authentication events, support requests, and billing or commercial records.
• Operational data you enter or connect to Workform, such as product, order, inventory, shipping, supplier, customer, storefront, pricing, and finance records.
• Technical data, including IP address, device and browser information, pages viewed, timestamps, cookies, session identifiers, logs, and diagnostics.
• Communication data from email, chat, demo bookings, feedback, onboarding, and support conversations.

We use personal information to run Workform, respond to enquiries, improve the product, keep the platform secure, and support commercial relationships.

• Provide, maintain, secure, and troubleshoot the Workform platform and website.
• Process demo requests, contact forms, support conversations, newsletter signups, and commercial enquiries.
• Authenticate users, manage workspaces, enforce permissions, and maintain audit logs.
• Improve product reliability, user experience, analytics, documentation, and customer onboarding.
• Send service updates, product notices, security alerts, and relevant marketing communications where permitted.
• Meet legal, regulatory, tax, accounting, fraud prevention, and contractual obligations.

Where UK or EU data protection law applies, we rely on the legal bases that match the context: performance of a contract, legitimate interests, consent, and compliance with legal obligations.

Examples of legitimate interests include securing the service, responding to business enquiries, improving platform performance, preventing abuse, and developing features that support commerce operators.

We use cookies and similar technologies to keep the site and product working, remember preferences, understand site usage, protect sessions, and improve performance.

Some cookies are necessary for core functionality. Where required, analytics or marketing cookies are used only with the appropriate consent controls.

We do not sell personal information. We share information only where it is needed to operate Workform, support customers, comply with law, or complete a business transaction.

• Service providers that host infrastructure, process forms, deliver email, provide analytics, support security, or help operate the product.
• Connected platforms, carriers, marketplaces, storefronts, accounting systems, payment providers, or other integrations that a workspace chooses to enable.
• Professional advisers, auditors, insurers, regulators, courts, or public authorities where required.
• Successor entities if Workform is involved in a merger, acquisition, financing, restructuring, or sale of assets.

We keep personal information for as long as needed for the purposes described in this policy, including providing the product, maintaining records, resolving disputes, enforcing agreements, and meeting legal duties.

Retention periods vary by data type. Workspace data is generally retained while the workspace is active and then deleted or anonymised after closure, subject to backup, security, accounting, and legal requirements.

We use administrative, technical, and organisational controls designed to protect information against unauthorised access, loss, misuse, or alteration.

No internet service can be guaranteed to be perfectly secure. Customers should use strong authentication, manage team permissions carefully, and keep integration credentials protected.

Workform and its providers may process information in countries outside your own. Where transfer safeguards are required, we use appropriate contractual, organisational, and technical protections.

Depending on where you are located, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. You may also have the right to withdraw consent or complain to a data protection authority.

To make a privacy request, contact hello@workform.io. We may need to verify your identity and your relationship to the relevant workspace before acting on a request.

We may update this policy as Workform, the website, integrations, or legal requirements change. The updated date above shows when this page was last revised.

For privacy questions or requests, contact Workform at hello@workform.io.