Last updated: 19 April 2026
This Privacy Policy explains how FormBox ("we", "us", "our") collects, uses, stores, and protects personal data in connection with the FormBox platform (the "Service").
FormBox is a platform that allows law firms to build and manage their own databases, documents, and workflows. We are not a consumer app, which means everyone using FormBox has been personally invited by their firm administrator or by us.
Our primary point of contact for data protection matters is legal@formbox.uk
When you are invited to FormBox, we collect your name, email address, and your role at your firm. We need this to create your account and let you log in.
When you use FormBox, we store the content you create, including database records, documents, workflows, and dashboards. We also collect basic technical data automatically: things like when you logged in, which pages you visited, and any errors that occurred. We use this to keep the platform running and fix things when they break.
We do not collect anything we do not need. We do not run ads. We do not sell your data.
If your firm stores client information in FormBox such as names, matter details, or contact records, that data belongs to your firm.
We store and process that data only on your instructions. Our Data Processing Agreement, available on request, sets out exactly how that works, including our obligations, security measures, and use of sub-processors.
Your data is stored on servers in Singapore. Emails sent by FormBox (invitations, password resets, workflow notifications) are processed by our email provider in the European Union. Our error monitoring and analytics tools also operate within the EU.
We chose these locations deliberately, Singapore for proximity to primary users, EU for the data protection standards it requires of vendors.
We share data with a small number of sub-processors necessary to operate the Service, with law enforcement if required by applicable law, court order, or regulation, and with your consent for any other purpose. We do not share your data with anyone else. We do not sell it. We do not use it for advertising.
While your firm's subscription is active, we keep your data. If a database record is deleted within FormBox, it sits in a recycle bin for 30 days before being permanently removed. This acts as a safeguard, not a data grab.
If your subscription ends, we will keep your data for 30 days so you can export anything you need. After that, it will be removed permanently.
We use session cookies to keep you logged in. That is it. No advertising cookies, no cross-site tracking.
You can ask us to show you what data we hold about you, correct anything that is wrong, or delete your account. Email legal@formbox.uk and we will sort it out.
If we make any significant changes, we will let you know by email before they take effect. The "last updated" date at the top will always reflect the current version.
Our service and your experience is our top priority.