> How Globo Form Builder collects form data, what cookies it uses, where data is processed, and how to stay GDPR compliant when capturing personal data. > > Canonical: https://www.flowconsent.com/en/services/ecommerce/globo-form-builder E-commerce # Globo Form Builder Preferences · [Official website](https://apps.shopify.com/form-builder-contact-form) Globo Form Builder is an app for online stores, most often Shopify, that lets merchants build custom forms such as contact, registration, survey, and file upload forms without coding. The main privacy consideration is the personal data that visitors submit through these forms, which can range from a name and email to free text and uploaded files. The form widget uses strictly necessary cookies to function, while the data it collects needs a clear lawful basis. [Block Globo Form Builder until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [E-commerce](https://www.flowconsent.com/en/services/ecommerce) - Consent Preferences - Prior consent Not required - Documented cookies 2 - Third-party domains 2 - Servers Outside the European Economic Area, confirm with the vendor Overview ## What does Globo Form Builder do? ## What Globo Form Builder is Globo Form Builder is a form building app for online stores, used mainly on Shopify. Merchants use it to create custom forms for contact, registration, surveys, bookings, and file uploads, with conditional logic and integrations. The forms collect whatever data the merchant chooses to ask for, which is where the privacy considerations begin. ## What data and cookies it collects The personal data comes from form submissions and can include names, email addresses, phone numbers, free text, and uploaded files. The form widget uses cookies to keep the form state and to support spam protection, which are generally strictly necessary. It also processes the visitor IP address when a form is submitted. ## GDPR implications Form submissions are personal data under the GDPR, and the merchant is the controller for them while the app vendor is a processor. Free text and file upload fields are a particular risk because users may enter more than intended, including special category data, so the form should be designed to ask only for what is needed. ## Consent and lawful basis The cookies that make the form work are strictly necessary and do not need consent. The data the form collects needs its own lawful basis, usually consent or the steps to enter a contract, and the purpose should be stated next to the form. If you use the data for marketing, collect a separate clear consent. ## Data transfers outside the EU The app vendor may process and store form data outside the European Economic Area. Confirm where submissions are stored, and if they leave the EEA, ensure the transfer is covered by Standard Contractual Clauses or another valid mechanism, with encryption to protect the data in transit and at rest. ## Practical compliance steps Minimise the fields you collect, avoid asking for sensitive data unless necessary, state the purpose and lawful basis next to the form, and sign a data processing agreement with the vendor. Set retention for submissions, restrict who can access them, confirm the data location, and describe the form in your privacy notice. Compliance ## Globo Form Builder and the GDPR - Legal basis Consent or contract for form data (Art. 6(1)(a) or (b)), strictly necessary cookies - Risk level medium - Applicable regulations GDPR, ePrivacy Directive ### Impact assessment (DPIA) The risk lies in the personal data captured by forms, including possible free text and file uploads that may contain more than expected. Assess data minimisation, the lawful basis, retention, who can access submissions, and any transfer outside the EEA. ### Sample text for your banner > This form is built with Globo Form Builder. We use the information you provide only for the purpose stated next to the form, and the form uses strictly necessary cookies to work. Cookies and trackers ## What Globo Form Builder sets and contacts - Tracking method JavaScript form widget, cookies, form submission storage - Server location Outside the European Economic Area, confirm with the vendor - Data transferred outside the EU Globo Form Builder is provided by an app vendor whose infrastructure may be outside the European Economic Area. Where form data is processed outside the EEA, transfers must rely on Standard Contractual Clauses or another valid mechanism. ### Cookies set (2) | Name | Type | Duration | Purpose | | -------------------- | ---------- | -------- | ---------------------------------------------------------------------------------------------------- | | globo\_form\_session | Functional | Session | Maintains the form state while a visitor completes the form. | | globo\_form\_csrf | Functional | Session | Strictly necessary security token that protects form submissions against cross site request forgery. | ### Third-party domains contacted (2) - `globo.io` - `apps.globo.io` Questions ## Frequently asked questions about Globo Form Builder Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Globo Form Builder set? It sets cookies to keep the form state while a visitor fills it in and to support spam protection. These are generally strictly necessary, so they do not require consent, unlike any analytics a store adds separately. ### Do I need consent for the forms? You do not need consent for the strictly necessary form cookies, but you do need a lawful basis for the data the form collects. Tell users why you are collecting it, and get a separate consent if you plan to use it for marketing. ### What is the legal basis for form data? Often consent or the steps to enter into a contract under Article 6 of the GDPR, depending on the form. A contact or order form supports the requested service, while a newsletter signup needs explicit consent. ### Does form data leave the EU? It can, depending on where the app vendor stores submissions. Confirm the storage location, and if data is processed outside the EEA, ensure Standard Contractual Clauses or another mechanism is in place. ### Is a DPIA needed? A DPIA may be needed if forms collect sensitive data or large volumes of personal data. The main risks are free text and file upload fields, so assess what is realistically submitted and how it is protected. ### How do I use the forms compliantly? Collect only the fields you need, state the purpose and basis next to the form, avoid sensitive data unless justified, and sign a data processing agreement. Set retention, restrict access to submissions, and confirm the data location. ### Are there alternatives to Globo Form Builder? Alternatives include other Shopify form apps, native platform forms, and EU based form tools. Choosing an EU hosted form tool can simplify the transfer analysis for the data you collect. ### How do I reflect the forms in my privacy notice? Describe what each form collects, why, the lawful basis, how long you keep it, and who processes it, including the app vendor. The strictly necessary form cookies can be noted in your cookie policy as essential. Same category ## More services: E-commerce [See the whole category](https://www.flowconsent.com/en/services/ecommerce) ### [GrocerKey](https://www.flowconsent.com/en/services/ecommerce/grocerkey) [GrocerKey is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. GrocerKey integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, GrocerKey helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/grocerkey) [Preferences](https://www.flowconsent.com/en/services/ecommerce/grocerkey) · ### [Shoplo](https://www.flowconsent.com/en/services/ecommerce/shoplo) [Shoplo is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Shoplo integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Shoplo helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/shoplo) [Preferences](https://www.flowconsent.com/en/services/ecommerce/shoplo) · ### [Tashi](https://www.flowconsent.com/en/services/ecommerce/tashi) [Tashi is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Tashi enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Tashi empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/ecommerce/tashi) [Preferences](https://www.flowconsent.com/en/services/ecommerce/tashi) · ### [Shift4Shop](https://www.flowconsent.com/en/services/ecommerce/shift4shop) [Shift4Shop is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Shift4Shop supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Shift4Shop ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/shift4shop) [E-commerce](https://www.flowconsent.com/en/services/ecommerce/shift4shop) · ### [Darwin Pricing](https://www.flowconsent.com/en/services/ecommerce/darwin-pricing) [Darwin Pricing is a pricing optimization platform that helps businesses set competitive prices and manage pricing strategies across products and markets. It provides dynamic pricing algorithms, competitor monitoring, and price elasticity analysis. Darwin Pricing supports A/B price testing, markdown optimization, and promotional pricing management. With real-time market data and predictive analytics, Darwin Pricing helps businesses maximize revenue and margins through intelligent pricing.](https://www.flowconsent.com/en/services/ecommerce/darwin-pricing) [Preferences](https://www.flowconsent.com/en/services/ecommerce/darwin-pricing) · ### [GEODIS](https://www.flowconsent.com/en/services/ecommerce/geodis) [GEODIS is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. GEODIS integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, GEODIS helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/geodis) [Preferences](https://www.flowconsent.com/en/services/ecommerce/geodis) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)