---
title: Collecting sensitive information
description: Learn more about which types of sensitive data to avoid collecting through B12 forms, including PII, financial, health, and business information, plus compliant alternatives.
---

[Skip to content](https://support.b12.io/en/v3/collecting-sensitive-information-in-websites#main-content)

![b12 logo](https://support.b12.io/hubfs/b12%20logo.svg)

- [Help Center](https://support.b12.io/)
- [B12 Website](https://www.b12.io/)
- [AI Website Prompts](https://www.b12.io/ai-website-prompt-gallery)
- [Resources](https://www.b12.io/resource-center/)
- [Pricing](https://www.b12.io/pricing/)
- [Log in](https://b12.io/dashboard/)

Open main navigation

Close main navigation

- [Help Center](https://support.b12.io/)
- [B12 Website](https://www.b12.io/)
- [AI Website Prompts](https://www.b12.io/ai-website-prompt-gallery)
- [Resources](https://www.b12.io/resource-center/)
- [Pricing](https://www.b12.io/pricing/)
- [Log in](https://b12.io/dashboard/)
- [Start for free](https://b12.io/signup/)

[Start for free](https://b12.io/signup/)

 How can we help?

- There are no suggestions because the search field is empty.

1. [B12 Help Center](https://support.b12.io/en?hsLang=en)
2. [Built-in features](https://support.b12.io/en/built-in-features?hsLang=en)
3. [Forms & submissions](https://support.b12.io/en/built-in-features?hsLang=en#forms-submissions)

# Collecting sensitive information

## B12's contact forms are not designed for collecting sensitive information. Learn more about the safest ways to collect sensitive data through your website.

| ![jay\_d2-1572877644-modified](https://support.b12.io/hs-fs/hubfs/jay_d2-1572877644-modified.png?width=60&height=60&name=jay_d2-1572877644-modified.png) Written by Jay Douglas Last updated: 11 Jul., 2026 |  |
| --- | --- |

Every industry and locale has unique requirements for what data is deemed sensitive, and there are often legal mandates and certification standards that must be met when sending or storing such data.

B12 sends and stores information submitted via forms securely, but you are ultimately responsible for compliance with any data protection and privacy laws that govern your clients’ data. As a result, we recommend that you **do not collect sensitive data via B12 forms**. Below is a list of commonly-restricted types of sensitive data.

- **Sensitive personally-identifiable information (PII)**

    - Social security number (SSN)
    - Drivers license number or State-issued Identification Card number
    - Passport information or images
    - Date and place of birth
    - Mother‘s maiden name
    - Gender identity
- **Sensitive financial information**

    - Credit card numbers and bank account information (although this can be collected through payment tools, such as [B12’s Commerce](https://support.b12.io/en/articles/4873760-getting-started-payments-and-invoicing?hsLang=en), or other third-party payment integrations)
    - Tax information
    - Credit reports
    - Loan applications or history
    - Records of financial transactions
- **Sensitive business information**

    - Accounting data
    - Trade secrets
    - Business plans
    - Login credentials
- **Personally-sensitive information**

    - Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs
    - Trade-union membership
    - Genetic data, biometric data
    - Data concerning a person’s sex life or sexual orientation
    - Protected health information (PHI): information, including demographic data, that relates to²:

          - the individual’s past, present, or future physical or mental health or condition,
          - the provision of health care to the individual, or
          - the past, present, or future payment for the provision of health care to the individual
          - and that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual.
    - Education records such as enrollment information and transcripts

### What if I need to store sensitive information?

- If you need to collect sensitive information via a form on your website, you can build a form with an external form builder that specializes in data privacy law compliance, and then [embed the form in your B12 website](https://support.b12.io/en/integrate-3rd-party-forms?hsLang=en). One third-party we recommend is[FormStack](https://www.formstack.com/products/online-forms), which is compliant with HIPAA, PCI, WCAG, and more.
  
  For more third-party options, ask B12's AI Agent for recommendations. Be sure to mention what kind of information you need to collect.
- If you need to collect payments from your clients, you can use[B12 Commerce](https://support.b12.io/en/articles/4873760-getting-started-payments-and-invoicing?hsLang=en), which is included in every B12 subscription, or a third-party payment processor such as PayPal.

The above list is not comprehensive for every industry and locale. If you’re unsure whether something constitutes sensitive data, we recommend you conduct your own research into potentially unique requirements.

| #### References 1\. [Statement of sensitive personal information according to the GDPR](https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/legal-grounds-processing-data/sensitive-data/what-personal-data-considered-sensitive_en) 2\. [Summary of the HIPAA privacy rule from US Department of Health and Human Services](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html) |
| --- |
| #### Bibliography [Statement of sensitive personal information according to the GDPR](https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/legal-grounds-processing-data/sensitive-data/what-personal-data-considered-sensitive_en) [Summary of the HIPAA privacy rule from US Department of Health and Human Services](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html) [Definition of PII from the US National Institute of Standards and Technology](https://csrc.nist.gov/glossary/term/PII) [The US Department of Education's Family Educational Rights and Privacy Act (FERPA)](https://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html) [The Federal Trade Commission's Gramm-Leach-Bliley Act for financial institutions](https://www.ftc.gov/tips-advice/business-center/guidance/how-comply-privacy-consumer-financial-information-rule-gramm) |

 

- [Getting started](https://support.b12.io/en/getting-started?hsLang=en#main-content)

    - [Introduction](https://support.b12.io/en/getting-started?hsLang=en#introduction)
    - [Detailed guides](https://support.b12.io/en/getting-started?hsLang=en#detailed-guides)
- [Working with B12's AI Agent](https://support.b12.io/en/working-with-b12s-ai-agent?hsLang=en#main-content)

    - [Agent Skills](https://support.b12.io/en/working-with-b12s-ai-agent?hsLang=en#agent-skills)
- [Built-in features](https://support.b12.io/en/built-in-features?hsLang=en#main-content)

    - [Visual edit](https://support.b12.io/en/built-in-features?hsLang=en#visual-edit)
    - [Code editor](https://support.b12.io/en/built-in-features?hsLang=en#code-editor)
    - [Data & users (Backends)](https://support.b12.io/en/built-in-features?hsLang=en#data-users-backends)
    - [Forms & submissions](https://support.b12.io/en/built-in-features?hsLang=en#forms-submissions)
    - [Commerce](https://support.b12.io/en/built-in-features?hsLang=en#commerce)
    - [Contact manager](https://support.b12.io/en/built-in-features?hsLang=en#contact-manager)
    - [eSignatures](https://support.b12.io/en/built-in-features?hsLang=en#esignatures)
    - [Email Marketing](https://support.b12.io/en/built-in-features?hsLang=en#email-marketing)
    - [Team](https://support.b12.io/en/built-in-features?hsLang=en#team)
    - [Analytics](https://support.b12.io/en/built-in-features?hsLang=en#analytics)
    - [Website settings](https://support.b12.io/en/built-in-features?hsLang=en#website-settings)
- [Adding functionality](https://support.b12.io/en/adding-functionality?hsLang=en#main-content)

    - [Third-party integrations](https://support.b12.io/en/adding-functionality?hsLang=en#third-party-integrations)
- [Publishing & growing](https://support.b12.io/en/publishing-growing?hsLang=en#main-content)

    - [Domains](https://support.b12.io/en/publishing-growing?hsLang=en#domains)
    - [Connecting your Domain](https://support.b12.io/en/publishing-growing?hsLang=en#connecting-your-domain)
    - [Managing Your Domain](https://support.b12.io/en/publishing-growing?hsLang=en#managing-your-domain)
    - [Email Forwarding & Sending](https://support.b12.io/en/publishing-growing?hsLang=en#email-forwarding-sending)
    - [Growth & Marketing](https://support.b12.io/en/publishing-growing?hsLang=en#growth-marketing)
- [Troubleshooting](https://support.b12.io/en/troubleshooting?hsLang=en#main-content)

    - [FAQs](https://support.b12.io/en/troubleshooting?hsLang=en#faqs)
- [Account & billing](https://support.b12.io/en/account-billing?hsLang=en#main-content)

    - [Account Login & Password](https://support.b12.io/en/account-billing?hsLang=en#account-login-password)
    - [Subscription & Payment Information](https://support.b12.io/en/account-billing?hsLang=en#subscription-payment-information)
    - [Your Account](https://support.b12.io/en/account-billing?hsLang=en#your-account)
    - [Managing Multiple Websites](https://support.b12.io/en/account-billing?hsLang=en#managing-multiple-websites)
    - [Multi-user](https://support.b12.io/en/account-billing?hsLang=en#multi-user)
- [Getting support](https://support.b12.io/en/getting-support?hsLang=en#main-content)

    - [Professional & Advanced Plan Support (B12 2.0)](https://support.b12.io/en/getting-support?hsLang=en#professional-advanced-plan-support-b12-2-0)
- [B12 2.0](https://support.b12.io/en/b12-2-0?hsLang=en#main-content)

    - [Website Structure and Content](https://support.b12.io/en/b12-2-0?hsLang=en#website-structure-and-content)
    - [Website Style & Design](https://support.b12.io/en/b12-2-0?hsLang=en#website-style-design)
    - [Sitewide Settings](https://support.b12.io/en/b12-2-0?hsLang=en#sitewide-settings)
    - [Using the B12 Editor](https://support.b12.io/en/b12-2-0?hsLang=en#using-the-b12-editor)
    - [Analytics & SEO](https://support.b12.io/en/b12-2-0?hsLang=en#analytics-seo)
    - [Integrations - General](https://support.b12.io/en/b12-2-0?hsLang=en#integrations-general)
    - [Integrations - Communication](https://support.b12.io/en/b12-2-0?hsLang=en#integrations-communication)
    - [Integrations - Language](https://support.b12.io/en/b12-2-0?hsLang=en#integrations-language)
    - [Integrations - Ecommerce](https://support.b12.io/en/b12-2-0?hsLang=en#integrations-ecommerce)
    - [Professional & Advanced Plan Features](https://support.b12.io/en/b12-2-0?hsLang=en#professional-advanced-plan-features)
    - [Troubleshooting & Resources](https://support.b12.io/en/b12-2-0?hsLang=en#troubleshooting-resources)
    - [Contact Forms](https://support.b12.io/en/b12-2-0?hsLang=en#contact-forms)
    - [Online Scheduling](https://support.b12.io/en/b12-2-0?hsLang=en#online-scheduling)
    - [Advanced Editing (Experts Only)](https://support.b12.io/en/b12-2-0?hsLang=en#advanced-editing-experts-only)

[![B12\_logo\_2025](https://support.b12.io/hs-fs/hubfs/B12_logo_2025.png?width=53&height=24&name=B12_logo_2025.png "B12_logo_2025")](https://www.b12.io)

© 2025 B12. All rights reserved.

<https://twitter.com/b12> <https://www.facebook.com/B12io> <https://www.youtube.com/@b12io> <https://www.instagram.com/b12io>

×