What GDPR features does Zoho Creator offer?

Zoho Creator GDPR features help you build applications that respect the rights of the people whose data you collect. GDPR applies to any activity that collects or processes the personal data of EU residents, wherever that activity takes place, so it is worth understanding before you design a form.

When and where GDPR applies

GDPR has global reach: it does not matter whether your business or your app is based inside the EU. If you collect personal data from EU residents, it applies.

Key roles GDPR identifies

• Personal Data: any information that can identify a person, such as a name, email address or IP address.
• Data Subject: the individual whose data is collected, typically an EU resident.
• Data Controller: the party that decides why and how personal data is processed.
• Data Processor: the party that processes data on the controller’s behalf.

Your role with Zoho Creator

When you build and run an app in Zoho Creator, you are the Data Controller, since you collect and control personal data through your app, and Zoho is the Data Processor, processing it on your behalf. Separately, when you sign up for Zoho’s own services, you are the data subject and Zoho is the controller for your own account data.

How Zoho Creator helps you address GDPR rights

• Right to be informed: add a Note field to a form to explain why you are collecting data, with a link to your privacy policy.
• Right to access, erasure and be forgotten: forward user requests for data access or deletion to support@zohocreator.com, and Zoho will guide you on the next steps.
• Right to rectify: let users edit their personal data directly through report views.
• Right to object: use decision box fields to capture consent before processing data, and design workflows that respect a user’s preferences.
• Right to data portability: users can export their data from reports in formats such as PDF or Excel.