Privacy Policy

Last updated: June 2025

1. Who we are

Fillable ("we", "us", "our") is a form-building service operated by Err Nerr, based in the United Kingdom. Our service is available at fillable.dev. You can contact us at [email protected].

2. What data we collect

We collect the following personal data when you use Fillable:

  • Account data: name, email address, and password (hashed) when you register.
  • Billing data: payment details are processed by Stripe. We store only your billing email and transaction history — we never store card numbers.
  • Form data: the forms you create and any submissions you receive through your forms.
  • Usage data: pages visited, features used, and aggregated analytics via Betterlytics (a privacy-friendly analytics tool that does not use cookies or track individuals).
  • Support data: messages you send us via our Help Scout support widget.

3. How we use your data

We use your personal data to:

  • Provide and maintain the Fillable service.
  • Process payments and manage your subscription or credits.
  • Send you transactional emails (e.g. account verification, password resets, purchase receipts).
  • Respond to your support requests.
  • Improve our service through aggregated, anonymised usage analytics.

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Legal basis for processing (UK GDPR)

We process your data on the following legal bases:

  • Contract performance: to fulfil our service to you as a registered user.
  • Legitimate interests: to improve and secure our service, and to prevent fraud.
  • Legal obligation: to comply with applicable laws and regulations.

5. Data storage and security

All data is hosted on servers located in the United Kingdom, operated on renewable energy. We use industry-standard encryption (TLS in transit, encrypted at rest) to protect your data. Access to personal data is restricted to authorised personnel only.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. transaction records retained for 7 years under UK tax law).

7. Third-party services

We use the following third-party services to operate Fillable:

8. Cookies

Fillable uses only essential cookies required for session management and authentication. We do not use tracking cookies or advertising cookies. Our analytics tool (Betterlytics) is cookieless.

9. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erase your personal data ("right to be forgotten").
  • Object to processing based on legitimate interests.
  • Portability — receive your data in a machine-readable format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The "Last updated" date at the top of this page will always reflect the most recent revision.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].