Privacy Policy
FORMA respects the privacy of people who contact the studio. Personal data submitted through this website is used only as reasonably necessary to receive, evaluate and respond to enquiries, prepare a requested proposal, and communicate about a potential or existing project.
1. Who is responsible for your data
This website and the FORMA independent packaging design studio are operated by Abdurauf M. (“FORMA”, “we”, “us”). For privacy-related requests, contact hello@forma-pack.com.
For the purposes of applicable data-protection law, the person operating FORMA determines the purposes and means of processing personal data submitted to the studio and acts as the data controller where that concept applies.
2. Data we may collect
When you voluntarily contact FORMA or submit the project form, we may receive information such as your name, company or brand name, email address, telephone or messaging contact, project description, information included in your message, and files or materials you choose to upload.
Technical service providers used to operate the website or transmit communications may also process limited technical information, such as IP address, browser or device information, timestamps and security or anti-spam data, where generated by their systems.
3. Why we use your information
We process information only for legitimate, limited purposes connected with your enquiry or project, including:
- receiving, reviewing and responding to your enquiry;
- understanding your packaging-design requirements and reviewing materials you voluntarily provide;
- communicating with you about the enquiry;
- preparing estimates, proposals, scope or other information you request;
- taking steps requested by you before entering into a project or agreement;
- performing and administering a project if you engage FORMA;
- protecting the website, communications and systems from spam, fraud, abuse or security incidents; and
- complying with applicable legal obligations and establishing, exercising or defending legal claims where necessary.
We do not use information submitted through the project form for unrelated purposes.
4. Legal bases
Where the GDPR or similar rules apply, processing may be based, depending on the circumstances, on taking steps at your request before entering into a contract, performance of a contract, compliance with a legal obligation, and/or FORMA’s legitimate interests in responding to genuine business enquiries, communicating with prospective or existing clients, securing its systems and protecting legal rights. Where a specific activity legally requires consent, we will request it separately.
5. No sale of data and no unsolicited marketing
FORMA does not sell or rent personal data. We do not provide contact information submitted through the project form to third parties for their own advertising or marketing purposes.
Submitting an enquiry does not subscribe you to a newsletter or promotional mailing list. We do not use a project enquiry as permission to send unrelated promotional email. If FORMA introduces optional marketing communications in the future, they will be handled separately and, where required, only after an appropriate opt-in.
6. Service providers and necessary disclosures
Although FORMA does not sell personal data, limited processing by service providers is necessary for the website and communication infrastructure to function. The website’s contact form currently uses FormSubmit to transmit form submissions and attachments to FORMA by email. Email, website-hosting, security and related infrastructure providers may also process information strictly as part of providing their services.
FormSubmit’s published documentation states that form submissions are retained by FormSubmit for 30 days and that uploaded files are not retained in its submissions archive. Third-party services operate under their own terms and privacy practices, which may change.
FORMA may also disclose information where reasonably necessary to comply with applicable law, valid legal process, or to establish, exercise or defend legal rights. We do not intentionally disclose more information than reasonably necessary for the relevant purpose.
7. Files and confidential materials
Files you upload are used only to evaluate, discuss or perform the project for which they were provided, subject to any separate agreement between you and FORMA. They are not used for advertising or unrelated purposes.
Please provide only information and files reasonably necessary for your enquiry. Do not upload passwords, payment-card data, government identification documents, medical information, or other highly sensitive personal information through the project form. If a project requires particularly confidential materials, contact FORMA first so an appropriate transfer method or confidentiality arrangement can be considered.
8. Retention
FORMA aims to keep personal data only for as long as reasonably necessary for the purpose for which it was collected. Enquiries that do not become projects are ordinarily deleted or anonymised within 12 months after the last substantive communication, unless a shorter period is appropriate or longer retention is reasonably necessary for legal, security or dispute-related reasons.
Information relating to completed or ongoing client projects may be retained for the duration of the relationship and afterwards where reasonably necessary for project records, contractual matters, intellectual-property records, accounting requirements, dispute resolution or other applicable legal obligations.
9. Security
FORMA takes reasonable technical and organisational measures appropriate to the nature of the information to reduce the risk of unauthorised access, alteration, disclosure, loss or destruction. Access to project enquiries and client materials is intended to be limited to persons and service providers who need it for the relevant purpose.
No internet transmission, email system or storage method can be guaranteed to be completely secure. Accordingly, FORMA cannot promise absolute security, but will take reasonable steps to protect information under its control.
10. International processing
FORMA serves clients internationally and uses internet-based service providers. As a result, information may be processed or transmitted in countries other than the country in which you are located. Where applicable data-protection law requires safeguards for an international transfer, FORMA will take reasonable steps to use an applicable lawful transfer mechanism or other permitted basis.
11. Your rights
Depending on the law applicable to you, you may have rights to request access to personal data, correction of inaccurate data, deletion, restriction of processing, data portability, or to object to certain processing. Where processing is based on consent, you may withdraw that consent without affecting processing that was lawful before withdrawal.
To make a privacy request, email hello@forma-pack.com. We may need to verify your identity before acting on a request. Where the GDPR applies, you may also have the right to lodge a complaint with the competent data-protection supervisory authority.
12. Cookies, analytics and advertising
FORMA does not treat use of this website or submission of the project form as consent to advertising cookies, behavioural advertising or unrelated tracking. If analytics, advertising pixels or other non-essential tracking technologies are introduced, this policy and, where required, the website’s consent mechanism will be updated accordingly.
13. Automated decisions
FORMA does not use information submitted through the project enquiry form to make decisions based solely on automated processing that produce legal or similarly significant effects on you.
14. Changes to this policy
This Privacy Policy may be updated when the website, service providers, legal requirements or FORMA’s processing practices change. The current version will be published on this page with its effective date.
15. Contact
Privacy questions and requests: hello@forma-pack.com
Website: forma-pack.com