Build privacy-aware forms

Privacy design begins with collecting the minimum data and identifying every destination. POM Forms can display a privacy clause, but the site owner remains responsible for the wording, lawful basis, retention, and external processors.

Set the default privacy clause

Open Settings → POM Theme → Forms → Forms defaults:

1. Enable Display Privacy policy clause when forms should inherit a clause.
2. Choose Under the form or In a pop-up.
3. Complete the popup title and button label when using a popup.
4. Enter the Privacy policy clause body.
5. Save the settings.

The body can contain sanitized HTML. Link to the current public privacy information where appropriate.

Override one form

1. Open Messages/Behavior → Privacy clause.
2. Enable Override default privacy clause settings.
3. Set Display privacy clause.
4. Choose the Clause position.
5. For a multi-step form displayed under the form, decide whether to Show only on the last step.
6. Complete the popup or body fields.
7. Save and preview the public form.

Turning off the override returns the form to Forms defaults.

Add affirmative consent when required

A displayed clause informs the visitor; it is not automatically a separate consent answer. When the workflow requires an explicit acknowledgement:

1. Add a Checkbox field.
2. Give it a specific label describing the action.
3. Set a stable Name, such as privacy_consent.
4. Enable Required.
5. Avoid bundling unrelated optional marketing consent into the same checkbox.

Use separate optional choices for separate purposes.

Inventory every copy

Review whether the form sends data to:

• Administrator or client email routes
• Stored submissions and local files
• Google Drive
• A webhook
• A created WordPress post
• An external action URL

Retention in POM Forms does not delete copies held by those destinations.

Verify the visitor experience

Test the clause and consent while signed out, on mobile, and with keyboard navigation. Confirm links are readable, the popup can be operated and dismissed correctly, and a required checkbox produces a clear error.

Do not include real personal data in tests. Continue with Submission storage and File uploads.