ONFORM / Legal
Privacypolicy.
A clear view of what we collect, why we use it and the choices you have.
Last updated: 8 October 2026
Who we are
ONFORM is a Dutch design and development studio. We are responsible for the personal information described in this policy. For privacy questions or requests, email Hello@onform.studio. Our registration and business contact details are listed on our Terms of Service page.
Information you share
If you contact us, we may receive your name, email address, company or brand name, website, project description, budget, preferred timing and anything else you include in your message. If we work together, we also process the contact, project and billing information needed for that relationship.
Please avoid including sensitive personal information or information about other people that is unnecessary for your enquiry.
How the contact form works
The questionnaire prepares a draft in your own email application. Your answers are held in the page while you complete it. Choosing “Send enquiry” submits them to ONFORM through our server and Resend, our transactional email provider. We receive your enquiry at hello@onform.studio and send a confirmation to the email address you provide. The website does not store enquiry answers in a separate form database.
Resend processes the enquiry and delivery information needed to send these emails. Our server uses a short-lived form token, a hidden spam check and temporary rate limits to help prevent abuse. Your browser and email provider may retain autofill, correspondence or browsing history according to your own settings.
Why we use information
- Enquiries and project preparation: to answer you, understand your requirements and take steps towards a contract at your request.
- Client work: to communicate, deliver agreed services and administer our relationship.
- Business contacts and website security: our legitimate interests in communicating with business representatives and keeping the website reliable and secure.
- Legal administration: to meet applicable accounting, tax and other legal obligations.
We do not sell your personal information or use enquiry answers for automated decisions that produce legal or similarly significant effects.
Browser storage and technical data
The current website does not include advertising trackers or analytics scripts. It uses temporary session storage to remember whether the introduction has played and to coordinate page and image transitions. This storage contains interface state, image references and animation geometry—not your questionnaire answers.
The production website is hosted on Vercel. Delivering pages and protecting the service can involve technical information such as IP addresses, requested URLs, timestamps, browser details and security logs. More information about the provider’s practices is available in Vercel’s Privacy Notice.
Providers and external links
Information may be handled by providers needed to operate our business, including website hosting, email, professional collaboration and accounting services. We limit sharing to what is needed for the service, a legal obligation or the establishment or defence of legal claims.
Contact-form emails are delivered through Resend. See Resend’s Privacy Policy for information about its service.
Where information is transferred outside the European Economic Area, the transfer must have the safeguards required by applicable data protection law, such as an adequacy decision or approved contractual safeguards. Contact us for information about transfers relevant to your data.
External project, social media and WhatsApp links take you to other services. Their own privacy policies apply when you use them.
How long we keep information
We retain enquiries while responding to them and for necessary follow-up. Project correspondence and deliverables are retained for the duration of the relationship and as needed for support, contractual obligations or legal claims. Financial records are kept for applicable statutory retention periods.
We review information when its purpose ends and delete or anonymise it when it is no longer needed. Technical-log retention depends on the hosting service and the security purpose. Temporary session storage normally ends when the browser session closes.
Your choices and rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information. You can object to processing based on legitimate interests. If processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Email Hello@onform.studio to make a request. We normally respond within one month; if a lawful extension is necessary, we will explain why. We may ask for proportionate information to verify your identity.
You can complain to the Dutch Autoriteit Persoonsgegevens or your local data protection authority. The European Commission explains these rights.
Security and updates
We use reasonable organisational and technical measures to protect personal information. No online service can guarantee absolute security. This policy may be updated when the website or our practices change; the revision date is shown above. Please contact us if anything is unclear.