# Custom field permission

In the XR Action Network system, it is possible to use forms to request information from rebels. Where possible, please use [existing questions](https://rebeltoolkit.extinctionrebellion.uk/link/655#bkmrk-page-title) in your form to match data that is already in the system. If you need to create new questions, please [contact the Data Team.](https://rebeltoolkit.extinctionrebellion.uk/books/action-network-for-xr/page/contact-the-action-network-data-team) 

When creating questions please consider [GDPR implications.](https://rebeltoolkit.extinctionrebellion.uk/books/intro-to-technical-and-data-services/page/gdpr-and-personal-data)

The best things you can do to keep both you as the collector and the people participating in direct action safe is to:

- Only collect the data absolutely necessary
- Collect and store as little personally identifying information as possible
- Share the data with as few people as possible using permissions
- Delete the data as soon as it is no longer necessary.

More guidance from the GDPR and Security team can be found in their [page here](https://rebeltoolkit.extinctionrebellion.uk/link/606#bkmrk-page-title).