--- gravity_agent_document: 1 document_type: "page" page_id: "page:tips/auto-delete-form-entries-from-your-website" representation_of: "https://www.websitemanual.com.au/tips/auto-delete-form-entries-from-your-website/" canonical_html: "https://www.websitemanual.com.au/tips/auto-delete-form-entries-from-your-website/" title: "Delete form entries from your website automatically | Website Manual" summary: "Every form someone fills in on your site is also saved in its database. Set your form plugin to delete entries after a few days, so a hack has less to stea" language: "en-AU" page_role: "page" content_intents: [] source_hash: "sha256:8c4240873ca62258c201007b27f4f7bb4be9418d3165a758a797ad46e9db3c09" primary_entities: [] entity_refs: [] relationships: - subject: "page:tips/auto-delete-form-entries-from-your-website" predicate: "related_to" object: "page:tips/delete-the-themes-you-dont-use" - subject: "page:tips/auto-delete-form-entries-from-your-website" predicate: "related_to" object: "page:tips/train-a-new-team-member-with-a-saved-list" - subject: "page:tips/auto-delete-form-entries-from-your-website" predicate: "related_to" object: "page:tips/update-plugins-weekly-but-wait-on-major-releases" --- # Delete form entries from your website automatically | Website Manual **Delete form entries from your website automatically** Every form someone fills in on your site is also saved in its database. Set your form plugin to delete entries after a few days, so a hack has less to steal. - Tip · Website care - By Daniel Doherty, MerlinFX - 8 November 2026 ## TL;DR Your form emails reach your inbox, but each entry is also stored in your website's database. If the site is hacked, all of it can be stolen. In Fluent Forms, turn on the setting that deletes entries automatically, after about 7 days (1 or 2 for a busy form). Better still, use a CRM form so the data goes straight into the CRM. ### Where your form entries really go When someone fills in your contact, enquiry or quote form, you get an email. What most people don’t realise is that the form plugin also saves the entry in your website’s database. Every name, phone number, address and answer stays there, month after month. A long quote form can hold a lot of personal information. ### Why that matters if you’re hacked Forms are one more way into your site for an attacker. If your website is hacked, stealing that stored data is one of the first things that happens. If your business is covered by the [Privacy Act 1988](https://www.legislation.gov.au/C2004A03712/latest/text?utm_source=websitemanual.com.au&utm_medium=referral&utm_campaign=website-manual&utm_content=tips-auto-delete-form-entries-from-your-website), a breach like that falls under the [Notifiable Data Breaches scheme](https://www.oaic.gov.au/privacy/notifiable-data-breaches/about-the-notifiable-data-breaches-scheme?utm_source=websitemanual.com.au&utm_medium=referral&utm_campaign=website-manual&utm_content=tips-auto-delete-form-entries-from-your-website). When it’s likely to cause serious harm, you must promptly tell every person affected and the [Office of the Australian Information Commissioner (OAIC)](https://www.oaic.gov.au/privacy/notifiable-data-breaches/report-a-data-breach?utm_source=websitemanual.com.au&utm_medium=referral&utm_campaign=website-manual&utm_content=tips-auto-delete-form-entries-from-your-website). The notice gives your business name and contact details, describes the breach, lists the kinds of information involved and tells people what steps to take to protect themselves. It takes a lot of time, and it’s embarrassing. Most businesses with turnover of $3 million or less aren’t covered, but some are whatever their size: the OAIC’s [small business page](https://www.oaic.gov.au/privacy/privacy-guidance-for-organisations-and-government-agencies/organisations/small-business?utm_source=websitemanual.com.au&utm_medium=referral&utm_campaign=website-manual&utm_content=tips-auto-delete-form-entries-from-your-website) lists them. ### Delete entries automatically The less you keep, the less there is to steal. [Fluent Forms](https://fluentforms.com/?utm_source=websitemanual.com.au&utm_medium=referral&utm_campaign=website-manual&utm_content=tips-auto-delete-form-entries-from-your-website), the form plugin we prefer, has a setting that deletes entries automatically after a set number of days. We set it to 7 days. For a really busy form, make it 1 or 2. Do it on every form on the site, including the small ones like newsletter sign-ups. ### Better still: put your forms in a CRM Our preference is to keep form data off the website altogether. We use HighLevel (our white-label version is called Spark) for contact, subscribe, quote and other complex forms. The entries go straight into the CRM, which is a much bigger platform than the hosting your website sits on and usually has far more security. ### Questions **Will I lose the enquiry if the entry is deleted?** No. You still get the notification email when the form is filled in, and the entry stays on the website until the days you chose have passed. Copy anything you need to keep into your CRM or job system before then. **How many days should I keep entries?** We use 7 days. For a busy form, keep them for 1 or 2 days. The shorter it is, the less there is to steal. **Do I have to tell people if my website is hacked?** If your business is covered by the Privacy Act 1988 and the breach is likely to cause serious harm to someone, yes. The Notifiable Data Breaches scheme says you must promptly tell the people affected and the Office of the Australian Information Commissioner (OAIC). Most small businesses with turnover of $3 million or less aren't covered, but some are whatever their size, including health service providers and businesses that trade in personal information. Check the OAIC's small business page to see if yours is. **My form plugin isn't Fluent Forms. Can I still do this?** Many form plugins have a setting to delete or not store entries. Look in the plugin's settings for entries, data retention or privacy. MerlinFX client? [Ask for this done and recorded on your own site](https://www.websitemanual.com.au/request-a-recording/#request). ### More tips [Tip · WordPress Delete the WordPress themes you don't use Most major WordPress updates install the year's new default theme. If your site runs on Astra and a child theme, delete the extras so your theme list stays clean. Article](/tips/delete-the-themes-you-dont-use/) [Tip · Website Manual Teach someone your website with one link Got a new team member to show around your website? Save the videos they need, share the list, and they open one link and start watching. Article + 3 videos](/tips/train-a-new-team-member-with-a-saved-list/) [Tip · WordPress Update plugins weekly, but wait on major releases A weekly update day keeps a WordPress site safe. The exception is a big new version of a plugin: let a few fix releases come out first. Article](/tips/update-plugins-weekly-but-wait-on-major-releases/) ## Related agent resources - [Tip · WordPress Delete the WordPress themes you don't use Most major WordPress updates install the year's new default theme. If your site runs on Astra and a child theme, delete the extras so your theme list stays clean. Article](/tips/delete-the-themes-you-dont-use/index.md) - [Tip · Website Manual Teach someone your website with one link Got a new team member to show around your website? Save the videos they need, share the list, and they open one link and start watching. Article + 3 videos](/tips/train-a-new-team-member-with-a-saved-list/index.md) - [Tip · WordPress Update plugins weekly, but wait on major releases A weekly update day keeps a WordPress site safe. The exception is a big new version of a plugin: let a few fix releases come out first. Article](/tips/update-plugins-weekly-but-wait-on-major-releases/index.md)