Privacy Policy

Last updated: 23 September 2026

Who we are

Form Advertising Ltd, trading as Form Agency, is a creative and marketing agency based in the UK.

This Privacy Policy explains what personal information we collect through our website, why we collect it, how we use it and the choices you have.

If you have any questions about your personal information, contact us:

Email: hello@form.agency
Telephone: 01843 310177

Information you give us

When you contact Form through the website, we may collect information including:

• your name
• email address
• telephone number, where provided
• company or organisation
• the contents of your enquiry
• information you provide through our Start a Project brief
• project requirements, challenges and other answers you choose to provide

We use this information to understand your enquiry, respond to you and, where relevant, discuss or prepare work for you.

Information collected when you use the website

We may also collect limited technical information when you use the website, including:

• the page you arrived on
• pages or content relevant to an enquiry
• browser and device information
• submission timestamps
• limited IP-derived information used for security, spam prevention and rate limiting
• analytics information where you have consented to analytics cookies

We do not use this information to make automated decisions about you.

How we use your information

We use personal information where necessary to:

• respond to enquiries
• prepare for or discuss potential projects
• manage ongoing client or supplier relationships
• operate and secure the website
• prevent spam, abuse and fraudulent submissions
• understand how people use the website and improve it, where analytics consent has been given
• meet legal, regulatory or accounting obligations

Depending on the circumstances, we process information because it is necessary to take steps towards a contract, because we have a legitimate business interest in responding to enquiries and operating our business, because we have a legal obligation, or because you have given consent.

We do not add someone to an unrelated marketing list simply because they have submitted an enquiry through the website.

Contact and Start a Project forms

Information submitted through our Contact and Start a Project forms is stored securely within our WordPress website as an enquiry so that the Form team can review and respond to it.

Form submissions may also generate an email notification to the appropriate member of our team.

Form retains website enquiries and Starting Brief submissions for 12 months. After that period, the enquiry record and its associated metadata are automatically deleted unless there is a legitimate reason to retain the information for longer, for example where it forms part of an active client relationship or where retention is required for legal, accounting or contractual purposes.

Email delivery

We may use Postmark to send transactional emails generated by the website, such as notifications and acknowledgements relating to enquiries.

Where Postmark is used, it may process information required to deliver those emails, including email addresses, message content and associated delivery metadata, on our behalf.

Website security and spam prevention

We use security measures designed to protect our website and forms from automated abuse and spam.

The website is designed to use Cloudflare Turnstile for additional spam and abuse protection once configured. Where active, Turnstile may process limited technical information in order to distinguish legitimate visitors from automated or malicious activity.

We also use technical measures such as honeypot fields, submission timing checks and rate limiting.

Analytics

We intend to use Google Analytics 4 (GA4) to understand how visitors use the website.

Analytics will only be activated in accordance with the choices you make through our cookie and consent controls.

Analytics information may include pages viewed, approximate location, device and browser information and interactions with the website.

We use this information to understand website performance and improve the experience, not to identify individual visitors ourselves.

Cookies and similar technologies

The website uses essential technologies required for it to operate securely and correctly.

Accessibility preferences. We store your chosen viewing preferences, such as higher contrast, larger text and reduced motion, on your device (in your browser’s local storage, as a single item named formAccessibility) so they remain in place as you move around the site and when you return. It contains no personal information, is not used for analytics or marketing, and is required only to remember the visitor’s chosen experience. You can clear it at any time with Reset viewing options, or by clearing your browser’s site data.

We may also use non-essential technologies for analytics or embedded services. Where consent is required, these will not be activated until you make a choice through our cookie banner.

You will be able to accept, reject or manage non-essential cookies and change your preferences later.

A separate Cookie Policy will provide more detail about the cookies and services used on the website.

Embedded content and video

Some pages may include embedded content from third-party services such as Vimeo.

Embedded services may process technical information or use cookies when they are enabled or when you interact with them.

Where required, these services will be controlled through the website’s consent settings.

Who we may share information with

We do not sell personal information.

We may share information with trusted suppliers where necessary to operate the website and our business, including providers of:

• website hosting
• email delivery
• website security and spam protection
• analytics
• embedded video or other digital services
• technical support

We may also disclose information where required by law, to professional advisers, or where necessary to protect Form Agency, our clients or others.

Our suppliers are only given the information required to provide their service.

International data transfers

Some of the technology providers we use may process information outside the UK.

Where this happens, we take reasonable steps to use providers and safeguards appropriate for the protection of personal information and applicable UK data protection law.

Your rights

Depending on the circumstances, UK data protection law may give you rights to:

• ask what personal information we hold about you
• receive a copy of your personal information
• ask us to correct inaccurate information
• ask us to delete information
• ask us to restrict how information is used
• object to certain uses of your information
• withdraw consent where processing is based on consent
• request transfer of information in certain circumstances

To exercise any of these rights, email hello@form.agency.

We may need to confirm your identity before acting on a request.

Complaints

If you have a concern about how we use your personal information, please contact us first so we can try to resolve it.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Changes to this policy

We may update this Privacy Policy if our website, services or legal obligations change.

The latest version will always be published on this page, with the date it was last updated shown at the top.