Privacy Policy

20231104_rev01 · COMPARED WITH 20230801_rev01 · ARCHIVE SNAPSHOT, DATE APPROXIMATE

Full text changes — 20230801_rev01 to 20231104_rev01

1This Privacy Policy describes how DigitalOcean, LLC and its affiliates ("DigitalOcean," "we," "our" or "us") collect, use, and share information in connection with your use of our websites (including [www.digitalocean.com](http://www.digitalocean.com/)), services, and applications (collectively, the "Services"). This Privacy Policy (the "Privacy Policy") does not apply to information our customers may process when using our Services.
1This Privacy Policy describes how DigitalOcean, LLC and its affiliates ("DigitalOcean," "we," "our" or "us") collect, use, and share information in connection with your use of our websites (including [www.digitalocean.com](https://www.digitalocean.com/)), services, and applications (collectively, the "Services"). This Privacy Policy (the "Privacy Policy") does not apply to information our customers may process when using our Services.
22
33If you are looking for California-specific information, check out our [CCPA Privacy Notice](https://www.digitalocean.com/legal/ccpa-privacy-notice/) as well, which is incorporated into this Privacy Policy.
44
55We may collect and receive information about users of our Services ("users," "you," or "your") from various sources, including: (i) information you provide through your user account on the Services (your "Account") if you register for the Services; (ii) your use of the Services; and (iii) from third-party websites, services, and partners.
66
77We recommend that you read this Privacy Policy in full, including the Additional Disclosures referenced at the bottom of this document, to ensure you are fully informed. If you have any questions about this Privacy Policy or DigitalOcean's data collection, use, and disclosure practices, please contact us at [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
52522. **Aggregate Information.** Where legally permissible, we may use and share information about users with our partners in aggregated or de-identified form that can't reasonably be used to identify you.
53533. **Advertising.** We work with third-party advertising partners to show you ads that we think may interest you. These advertising partners may set and access their own cookies, pixel tags, and similar technologies on our Services, and they may otherwise collect or have access to information about you which they may collect over time and across different online services. Some of our advertising partners are members of the Network Advertising Initiative or the Digital Advertising Alliance. To learn more about these programs, or opt-out of personalized ads, visit the Digital Advertising Alliance's Self-Regulatory program for Online Behavioral Advertising at [www.aboutads.info](http://www.aboutads.info/), or the Network Advertising Initiative at [www.networkadvertising.org](http://www.networkadvertising.org/).
54544. **Third-Party Partners.** We also share information about users with third-party partners in order to receive additional publicly available information about you.
55555. **Information We Share When You Sign Up Through a Referral.** If you sign up for our Services through a referral from a friend, we may share information with your referrer to let them know that you used their referral to sign up for our Services.
56566. **Analytics.** We use analytics providers such as Google Analytics. Google Analytics uses cookies to collect non-identifying information. Google provides some additional privacy options regarding its Analytics cookies at [http://www.google.com/policies/privacy/partners/](http://www.google.com/policies/privacy/partners/).
57577. **Business Transfers.** Information may be disclosed and otherwise transferred to any potential acquirer, successor, or assignee as part of any proposed merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.
588. **As Required By Law and Similar Disclosures.** We may also share information to (i) satisfy any applicable law, regulation, legal process, or governmental request; (ii) enforce this Privacy Policy and our Terms of Service, including investigation of potential violations hereof; (iii) detect, prevent, or otherwise address fraud, security, or technical issues; (iv) respond to your requests; or (v) protect our rights, property or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.
588. **As Required By Law and Similar Disclosures.** We may also share information to (i) satisfy any applicable law, regulation, legal process, or governmental request including requests made by public authorities to meet national security or law enforcement requirements; (ii) enforce this Privacy Policy and our Terms of Service, including investigation of potential violations hereof; (iii) detect, prevent, or otherwise address fraud, security, or technical issues; (iv) respond to your requests; or (v) protect our rights, property or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.
59599. **With Your Consent.** We may share information with your consent.
6060
6161## [4\. Legal Basis for Processing Personal Information]()
6262
6363Our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it.
6464
9292## [8\. Access]()
9393
9494If you are a registered user, you may access certain information associated with your Account by logging into our Services or emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com). If you terminate your Account, any public activity on your Account prior to deletion may remain stored on our servers and may remain accessible to the public.
9595
9696To protect your privacy and security, we may also take reasonable steps to verify your identity before updating or removing your information. The information you provide us may be archived or stored periodically by us according to backup processes conducted in the ordinary course of business for disaster recovery purposes. Your ability to access and correct your information may be temporarily limited where access and correction could: inhibit DigitalOcean's ability to comply with a legal obligation; inhibit DigitalOcean's ability to investigate, make or defend legal claims; result in disclosure of personal data about a third party; or result in breach of a contract or disclosure of trade secrets or other proprietary business information belonging to DigitalOcean or a third party.
9797
98If you are a resident of the EEA, you have the following data protection rights:
98If you are a resident of the EEA, Switzerland, or the United Kingdom ("UK"), you have the following data protection rights:
9999
100100- If you wish to **access, correct, update, or request deletion** of your personal information, you can do so at any time by emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
101- To exercise your rights to deletion of your personal data under the GDPR, you can deactivate and purge your account in your control panel settings ([https://cloud.digitalocean.com/settings](https://cloud.digitalocean.com/settings)). All account data will be deleted within 90 days of purging.
101- To exercise your rights to deletion of your personal data under the GDPR or other data protection laws, you can deactivate and purge your account in your control panel settings ([https://cloud.digitalocean.com/settings](https://cloud.digitalocean.com/settings)). All account data will be deleted within 90 days of purging.
102102- In addition, you can **object to the processing** of your personal data, ask us to **restrict the processing** of your personal data, or **request portability** of your personal data. Again, you can exercise these rights by emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
103103- You have the right to **opt-out of marketing communications** we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you. To opt-out of other forms of marketing, please contact us by emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
104104- Similarly, if we have collected and process your personal data with your consent, then you can **withdraw your consent** at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal data conducted in reliance on lawful processing grounds other than consent.
105105- You have the **right to complain to a data protection authority** about our collection and use of your personal data. For more information, please contact your local data protection authority.
106106
107107We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
123123This Privacy Policy may be modified from time to time, so please review it frequently. Changes to this Privacy Policy will be posted on our websites. If we materially change the ways in which we use or share personal data previously collected from you through our Services, we will notify you through our Services, on this page, by email, or other communication.
124124
125125## [13\. International Data Transfers]()
126126
127127With respect to Personal Data of Data Subjects located in the EEA, Switzerland, or the United Kingdom that Customer transfers to DigitalOcean or permits DigitalOcean to access, the parties agree that by executing the DPA they also execute the Standard Contractual Clauses, which will be incorporated by reference and form an integral part of the DPA. The parties agree that, with respect to the elements of the Standard Contractual Clauses that require the parties' input, Schedules 1-3 contain all the relevant information.
128128
129**EU-U.S. and Swiss-U.S. Privacy Shield.** For personal data we receive from the EEA and Switzerland, DigitalOcean has certified its compliance to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from such countries. To access the Privacy Shield List and to find details of our certification, please visit: [https://www.privacyshield.gov/](https://www.privacyshield.gov/).
129DigitalOcean complies with the EU-U.S. Data Privacy Framework ("EU-U.S. DPF"), the UK Extension to the EU-U.S. DPF ("UK Extension"), and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF") as set forth by the U.S. Department of Commerce. DigitalOcean has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension. DigitalOcean has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (together with the EU-U.S. Data Privacy Framework Principles, the "DPF Principles") with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles will govern. To learn more about the Data Privacy Framework ("DPF") program, and to view our certification, please visit [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/). DigitalOcean's compliance with the EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF is subject to the investigatory and enforcement powers of the Federal Trade Commission.
130130
131DigitalOcean currently utilizes [Standard Contractual Clauses](https://www-static.cdn.prismic.io/www-static/4578633e-ba6b-4c45-845c-1e69848c6e3b_DigitalOcean+SCC+Template.pdf) in connection with transfers of data from the EEA to the US insofar as the EU-US Privacy Shield is deemed invalidated and other means are not yet in place. Please also refer to our [GDPR FAQ](https://www.digitalocean.com/legal/gdpr-faq/) and [Data Processing Agreement](https://www.digitalocean.com/legal/data-processing-agreement/) for more information about data transfers.
131Please also refer to our [GDPR FAQ](https://www.digitalocean.com/legal/gdpr-faq/) and [Data Processing Agreement](https://www.digitalocean.com/legal/data-processing-agreement/) for more information about data transfers.
132132
133DigitalOcean complies with the DPF Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions.
134
135DigitalOcean commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension, and the Swiss-U.S. DPF should first contact DigitalOcean using the details provided below.
136
137DigitalOcean also commits to referring unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension, and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit [https://www.jamsadr.com/eu-us-data-privacy-framework](https://www.jamsadr.com/eu-us-data-privacy-framework) for more information or to file a complaint. The services of JAMS are provided at no cost to you.
138
139For complaints regarding DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found in Annex 1 of the DPF Principles.
140
133141If you have any questions or concerns about this Privacy Policy, please email us at [privacy@digitalocean.com](mailto:privacy@digitalocean.com) or write to us at:
134142
135143DigitalOcean
136144
137145101 6th Ave New York, NY 10013
138146
143151## [Additional Disclosures]()
144152
145153[CCPA Privacy Notice](https://www.digitalocean.com/legal/ccpa-privacy-notice/)
146154
147155## [**Prior Versions of our Privacy Policy**]()
148156
149- [June 14, 2022](https://digitalocean-legal.nyc3.digitaloceanspaces.com/DigitalOcean_Privacy_Policy_06.14.2022.pdf)
150- [July 30, 2020](https://digitalocean-legal.nyc3.digitaloceanspaces.com/DigitalOcean_Privacy_Policy_07.31.2020.pdf)
157- [July 5, 2023](https://digitalocean-legal.nyc3.cdn.digitaloceanspaces.com/DigitalOcean_Privacy_Policy_07.05.2023.pdf)
158- [June 14, 2022](https://digitalocean-legal.nyc3.cdn.digitaloceanspaces.com/DigitalOcean_Privacy_Policy_06.14.2022.pdf)
159- [July 30, 2020](https://digitalocean-legal.nyc3.cdn.digitaloceanspaces.com/DigitalOcean_Privacy_Policy_07.31.2020.pdf)