Bitly Bitly Privacy Policy changes — 20220501_rev01

96

**Information Disclosed for the Protection of Bitly and Others**

97

Bitly may access, read, preserve, and disclose any information it collects when it has a good faith belief that doing so is reasonably necessary to (i) comply with a law, regulation, or compulsory legal request, including process from a governmental law enforcement or national security agency, (ii) enforce the Privacy Policy or Terms of Service, including investigation of potential violations hereof, (iii) detect, deter, prevent or otherwise address malicious, fraudulent or unlawful activity, (iv) respond to user support requests, or (v) protect the rights, property or safety of Bitly, its users and the public. This includes exchanging information with other companies and organizations for protection from malicious, fraudulent or unlawful activity.

98

99

**Information We Share With Your Consent**

100

We will share information about you when you direct or otherwise instruct us to do so, such as when you share Bitly Links or content with others through the Services, if you intentionally use or direct us or the Services to interact with third parties, or if we notify you that the information you provide will be shared in a particular manner and you provide such information (like sharing/posting it with a third-party Service).

101

102

Bitly, Inc. participates in and has certiﬁed its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. We are committed to subjecting all personal data received from European Economic Area (EEA) member countries and Switzerland, respectively, in reliance on each Privacy Shield Framework, to the Framework's applicable Principles. To learn more about the Privacy Shield Frameworks, and to view our certiﬁcation, visit the U.S. Department of Commerce's Privacy Shield List. ([https://www.privacyshield.gov/](https://www.privacyshield.gov/))

102

Depending on your location, information about you may be transferred to the United States or other countries outside the EU or European Economic Area (EEA) or may be processed there. These data transfers are necessary to provide you with the services outlined in this policy.

103

104

Bitly, Inc. is responsible for the processing of personal data it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Bitly, Inc. complies with the Privacy Shield Principles for all onward transfers of personal data from the EEA and Switzerland, including the onward transfer liability provisions.

104

To protect your personal data, we rely on appropriate legal basis for each data transfer. In particular, we use contractual safeguards such as Standard Contractual Clauses approved by the European Commission. Where applicable, we base data transfers also on [adequacy decisions](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) issued by the European Commission.

105

106

With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, Bitly, Inc. is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

106

Please feel free to contact us for further information about international data transfers.

107

108

Please direct any inquiries or complaints regarding our compliance with the Principles to the point of contact listed in the "Questions" section below. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider at [https://www.jamsadr.com/eu-us-privacy-shield](https://www.jamsadr.com/eu-us-privacy-shield). JAMS is located in the United States and their services are provided at no cost to you.

109

110

Under certain conditions, more fully described on the Privacy Shield website ([https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint](https://www.privacyshield.gov/article)), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.

111

112

The information you provide may be transferred, processed and/or accessed by us in the United States or another country where we (or our service providers) operate.

113

114

108

We retain the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulﬁll the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable legal obligations.

115

109

116

110

Your Account information is protected by a password for your privacy and security. You can help prevent unauthorized access to your Account by selecting and protecting your password appropriately, making use of two-factor authentication, and limiting access to your computer and browser by signing off after you have ﬁnished accessing your Account.

117

111

118

112

Bitly endeavors to protect the information it collects about its users using reasonable security processes and controls, however, despite these efforts, no security measure is perfect or impenetrable and Bitly does not guarantee or warrant that such measures will prevent unauthorized access to the information about you that is stored by Bitly. In the event we experience a breach of security, we will promptly notify you if your personal information has been compromised, in accordance with applicable law. If you have any questions about the security of your personal information, you can contact us at [privacy@bitly.com](mailto:privacy@bitly.com).

119

113

120

114

You don't need an Account to create Bitly Links, and you can use many of the features of the Services without registering, thereby limiting the type of information that is collected about you individually. If you have a Bitly Account, you may access, correct, or request deletion of your personal information by logging into your Account. Once logged in to your account, you will be able to view a history of the URLs you have shortened and the metrics pages for those URLs. You can request a complete copy of the personal information we store about your account by clicking the button to request a report in your Account Settings. For more information on how to request access to your information, please see our [help article](https://support.bitly.com/hc/en-us/articles/360006534152-How-to-request-a-copy-of-my-personal-data-from-Bitly-GDPR-Subject-Access-Request-).

121

115

122

You can delete your Account at any time through your Account settings page. If you delete your Account, you will no longer be able to access or use the Services. If you have an Account but are unable to access it, you can contact us at [privacy@bitly.com](mailto:privacy@bitly.com). We will respond to your request within a reasonable timeframe. If you are a resident of the EEA or Switzerland, you have the right to ask that your personal data be corrected, updated, or erased. You may also have the right to object to, or request that we restrict, certain processing.

116

You can delete your Account at any time through your Account settings page. If you delete your Account, you will no longer be able to access or use the Services. If you have an Account but are unable to access it, you can contact us at [privacy@bitly.com](mailto:privacy@bitly.com). We will respond to your request within a reasonable timeframe. If you are a resident of the EEA or Switzerland, you have the right to ask that your personal data be corrected, updated, or erased. Additionally, you may have the right to access your personal data and receive a copy of your personal data undergoing processing. You may also have the right to object to, or request that we restrict, certain processing.

123

117

124

118

For all other requests to exercise any of your rights, you may contact us as indicated in the "Questions" section below. Once we receive your request, we will ask that you verify your identity such as by authenticating through your account. If you do not have a Bitly account, Bitly has no way of identifying you or verifying that you created or clicked on a Bitly link.

125

119

126

120

You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise your rights and choices on your behalf, please provide a written attestation, declaration, or permission that has either been physically signed or provided electronically per applicable law. In certain circumstances, we may be required by law to retain your personal information.

127

121

128

122

Please note that in the interest of ensuring that existing Bitly Links continue to function for all of our users, the Bitly Links that you have created and shared cannot be deleted or disabled (even if your Account is deleted), and any shortening and sharing activity that has already occurred on your Account also cannot be deleted. If you have concerns about any unauthorized use of your Account, you can delete your account within your Account settings.

+#### Effective Date: December 9th, 2021
+#### Effective Date: April 22, 2022
 Welcome to Bitly. This Privacy Policy describes the policies and procedures of Bitly, Inc. ("Bitly", "we" or "us") for the collection, use, security and disclosure of personal information about you. It also describes your choices regarding use, access, deletion, and correction of your personal information.
 This Privacy Policy explains how Bitly treats the personal information it gathers when you use or access [https://bitly.com](https://bitly.com/) (the "Site") or the services, features, content or applications offered by Bitly (collectively with the Site, the "Services"), or when you view or interact with a Bitly link (either our bit.ly links or one of our branded domains). This Privacy Policy also covers Bitly's treatment of any information about you that Bitly's customers share with Bitly.
 This Privacy Policy does not apply to the practices of other businesses that Bitly does not own or control, including other companies' websites, services and applications ("Third Party Services") that you can access through the Services or to individuals that Bitly does not manage or employ. We cannot take responsibility for the content or privacy policies of Third Party Services. We encourage you to review the privacy policies of any Third Party Services you access or use.
 **Information Disclosed for the Protection of Bitly and Others**
 Bitly may access, read, preserve, and disclose any information it collects when it has a good faith belief that doing so is reasonably necessary to (i) comply with a law, regulation, or compulsory legal request, including process from a governmental law enforcement or national security agency, (ii) enforce the Privacy Policy or Terms of Service, including investigation of potential violations hereof, (iii) detect, deter, prevent or otherwise address malicious, fraudulent or unlawful activity, (iv) respond to user support requests, or (v) protect the rights, property or safety of Bitly, its users and the public. This includes exchanging information with other companies and organizations for protection from malicious, fraudulent or unlawful activity.
 **Information We Share With Your Consent**
 We will share information about you when you direct or otherwise instruct us to do so, such as when you share Bitly Links or content with others through the Services, if you intentionally use or direct us or the Services to interact with third parties, or if we notify you that the information you provide will be shared in a particular manner and you provide such information (like sharing/posting it with a third-party Service).
+Bitly, Inc. participates in and has certiﬁed its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. We are committed to subjecting all personal data received from European Economic Area (EEA) member countries and Switzerland, respectively, in reliance on each Privacy Shield Framework, to the Framework's applicable Principles. To learn more about the Privacy Shield Frameworks, and to view our certiﬁcation, visit the U.S. Department of Commerce's Privacy Shield List. ([https://www.privacyshield.gov/](https://www.privacyshield.gov/))
+Depending on your location, information about you may be transferred to the United States or other countries outside the EU or European Economic Area (EEA) or may be processed there. These data transfers are necessary to provide you with the services outlined in this policy.
+Bitly, Inc. is responsible for the processing of personal data it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Bitly, Inc. complies with the Privacy Shield Principles for all onward transfers of personal data from the EEA and Switzerland, including the onward transfer liability provisions.
+To protect your personal data, we rely on appropriate legal basis for each data transfer. In particular, we use contractual safeguards such as Standard Contractual Clauses approved by the European Commission. Where applicable, we base data transfers also on [adequacy decisions](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) issued by the European Commission.
+With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, Bitly, Inc. is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
+Please feel free to contact us for further information about international data transfers.
+Please direct any inquiries or complaints regarding our compliance with the Principles to the point of contact listed in the "Questions" section below. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider at [https://www.jamsadr.com/eu-us-privacy-shield](https://www.jamsadr.com/eu-us-privacy-shield). JAMS is located in the United States and their services are provided at no cost to you.
+Under certain conditions, more fully described on the Privacy Shield website ([https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint](https://www.privacyshield.gov/article)), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
+The information you provide may be transferred, processed and/or accessed by us in the United States or another country where we (or our service providers) operate.
 We retain the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulﬁll the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable legal obligations.
 Your Account information is protected by a password for your privacy and security. You can help prevent unauthorized access to your Account by selecting and protecting your password appropriately, making use of two-factor authentication, and limiting access to your computer and browser by signing off after you have ﬁnished accessing your Account.
 Bitly endeavors to protect the information it collects about its users using reasonable security processes and controls, however, despite these efforts, no security measure is perfect or impenetrable and Bitly does not guarantee or warrant that such measures will prevent unauthorized access to the information about you that is stored by Bitly. In the event we experience a breach of security, we will promptly notify you if your personal information has been compromised, in accordance with applicable law. If you have any questions about the security of your personal information, you can contact us at [privacy@bitly.com](mailto:privacy@bitly.com).
 You don't need an Account to create Bitly Links, and you can use many of the features of the Services without registering, thereby limiting the type of information that is collected about you individually. If you have a Bitly Account, you may access, correct, or request deletion of your personal information by logging into your Account. Once logged in to your account, you will be able to view a history of the URLs you have shortened and the metrics pages for those URLs. You can request a complete copy of the personal information we store about your account by clicking the button to request a report in your Account Settings. For more information on how to request access to your information, please see our [help article](https://support.bitly.com/hc/en-us/articles/360006534152-How-to-request-a-copy-of-my-personal-data-from-Bitly-GDPR-Subject-Access-Request-).
+You can delete your Account at any time through your Account settings page. If you delete your Account, you will no longer be able to access or use the Services. If you have an Account but are unable to access it, you can contact us at [privacy@bitly.com](mailto:privacy@bitly.com). We will respond to your request within a reasonable timeframe. If you are a resident of the EEA or Switzerland, you have the right to ask that your personal data be corrected, updated, or erased. You may also have the right to object to, or request that we restrict, certain processing.
+You can delete your Account at any time through your Account settings page. If you delete your Account, you will no longer be able to access or use the Services. If you have an Account but are unable to access it, you can contact us at [privacy@bitly.com](mailto:privacy@bitly.com). We will respond to your request within a reasonable timeframe. If you are a resident of the EEA or Switzerland, you have the right to ask that your personal data be corrected, updated, or erased. Additionally, you may have the right to access your personal data and receive a copy of your personal data undergoing processing. You may also have the right to object to, or request that we restrict, certain processing.
 For all other requests to exercise any of your rights, you may contact us as indicated in the "Questions" section below. Once we receive your request, we will ask that you verify your identity such as by authenticating through your account. If you do not have a Bitly account, Bitly has no way of identifying you or verifying that you created or clicked on a Bitly link.
 You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise your rights and choices on your behalf, please provide a written attestation, declaration, or permission that has either been physically signed or provided electronically per applicable law. In certain circumstances, we may be required by law to retain your personal information.
 Please note that in the interest of ensuring that existing Bitly Links continue to function for all of our users, the Bitly Links that you have created and shared cannot be deleted or disabled (even if your Account is deleted), and any shortening and sharing activity that has already occurred on your Account also cannot be deleted. If you have concerns about any unauthorized use of your Account, you can delete your account within your Account settings.

Bitly Privacy Policy

Full text changes — 20220101_rev01 to 20220501_rev01