Privacy Policy

ARCHIVED 2024-10-01, DATE APPROXIMATE · VERSION 20241001_rev01 · COMPARED WITH 20240601_rev01

Full text changes — 20240601_rev01 to 20241001_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+This Privacy Policy describes how DigitalOcean, LLC and its affiliates ("DigitalOcean," "we," "our" or "us") collect, use, and share information in connection with your use of our websites (including www.digitalocean.com), services, and applications (collectively, the "Services"). This Privacy Policy (the "Privacy Policy") does not apply to information our customers may process when using our Services.
+This Privacy Policy describes how DigitalOcean, LLC and its affiliates ("DigitalOcean," "we," "our" or "us") collect, use, and share information in connection with your use of our websites (including [www.digitalocean.com](https://digitalocean.com/)), services, and applications (collectively, the "Services"). This Privacy Policy (the "Privacy Policy") does not apply to information our customers may process when using our Services.
+If you are looking for California-specific information, check out our [CCPA Privacy Notice](https://digitalocean.com/legal/ccpa-privacy-notice/) as well, which is incorporated into this Privacy Policy.
+If you are looking for California-specific information, check out our [CCPA Privacy Notice](https://digitalocean.com/legal/ccpa-privacy-notice) as well, which is incorporated into this Privacy Policy.
 We may collect and receive information about users of our Services ("users," "you," or "your") from various sources, including: (i) information you provide through your user account on the Services (your "Account") if you register for the Services; (ii) your use of the Services; and (iii) from third-party websites, services, and partners.
 We recommend that you read this Privacy Policy in full, including the Additional Disclosures referenced at the bottom of this document, to ensure you are fully informed. If you have any questions about this Privacy Policy or DigitalOcean's data collection, use, and disclosure practices, please contact us at [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
 ## [1\. Information We Collect]()
 ## [6\. Security]()
 DigitalOcean is committed to protecting your information. To do so, we employ a variety of security technologies and measures designed to protect information from unauthorized access, use, or disclosure. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data. Please note that no service is completely secure. While we strive to protect your data, we cannot guarantee that unauthorized access, hacking, data loss or a data breach will never occur.
 For more information on DigitalOcean's security controls, please see the following resources:
+- [Data Processing Agreement (DPA)](https://digitalocean.com/legal/data-processing-agreement/)
+- [Certification Reports](https://digitalocean.com/trust/certification-reports/)
+- [Data Processing Agreement (DPA)](https://digitalocean.com/legal/data-processing-agreement)
+- [Certification Reports](https://digitalocean.com/trust/certification-reports)
 - SOC 2 Type II (upon request to [privacy@digitalocean.com](mailto:privacy@digitalocean.com))
 - [SOC 3 Type II](https://www-static.cdn.prismic.io/www-static/62aae0a4-619c-4b87-9e91-deca34e0c07c_DigitalOcean+-+2021+Type+2+SOC+3+-+Report.pdf)
 ## [7\. Data Retention]()
 We retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).
 ## [13\. International Data Transfers]()
 With respect to Personal Data of Data Subjects located in the EEA, Switzerland, or the United Kingdom that Customer transfers to DigitalOcean or permits DigitalOcean to access, the parties agree that by executing the DPA they also execute the Standard Contractual Clauses, which will be incorporated by reference and form an integral part of the DPA. The parties agree that, with respect to the elements of the Standard Contractual Clauses that require the parties' input, Schedules 1-3 contain all the relevant information.
 DigitalOcean, LLC complies with the EU-U.S. Data Privacy Framework ("EU-U.S. DPF"), the UK Extension to the EU-U.S. DPF ("UK Extension"), and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF") as set forth by the U.S. Department of Commerce. DigitalOcean has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension. DigitalOcean has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (together with the EU-U.S. Data Privacy Framework Principles, the "DPF Principles") with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles will govern. To learn more about the Data Privacy Framework ("DPF") program, and to view our certification, please visit [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/). DigitalOcean's compliance with the EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF is subject to the investigatory and enforcement powers of the Federal Trade Commission.
+Please also refer to our [GDPR FAQ](https://digitalocean.com/legal/gdpr-faq/) and [Data Processing Agreement](https://digitalocean.com/legal/data-processing-agreement/) for more information about data transfers.
+Please also refer to our [GDPR FAQ](https://digitalocean.com/legal/gdpr-faq) and [Data Processing Agreement](https://digitalocean.com/legal/data-processing-agreement) for more information about data transfers.
 DigitalOcean complies with the DPF Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions.
 DigitalOcean commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension, and the Swiss-U.S. DPF should first contact DigitalOcean using the details provided below.
 In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, DigitalOcean LLC commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to the American Arbitration Association ("AAA"), an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit [https://go.adr.org/dpf\_irm.html](https://go.adr.org/dpf_irm.html) for more information or to file a complaint. The services of AAA are provided at no cost to you.
 ATTN: Legal
 The data controller of your personal information is DigitalOcean, LLC.
 ## [Additional Disclosures]()
+[CCPA Privacy Notice](https://digitalocean.com/legal/ccpa-privacy-notice/)
+[CCPA Privacy Notice](https://digitalocean.com/legal/ccpa-privacy-notice)
 ## [**Prior Versions of our Privacy Policy**]()
 - [October 6, 2023](https://digitalocean-legal.nyc3.cdn.digitaloceanspaces.com/DigitalOcean_Privacy_Policy_10.06.2023.pdf)
 - [July 5, 2023](https://digitalocean-legal.nyc3.cdn.digitaloceanspaces.com/DigitalOcean_Privacy_Policy_07.05.2023.pdf)
 - [June 14, 2022](https://digitalocean-legal.nyc3.cdn.digitaloceanspaces.com/DigitalOcean_Privacy_Policy_06.14.2022.pdf)