Ookla rewrote its privacy policy to remove every mention of its parent company, Ziff Davis. The biggest practical change is good news: the section saying Ookla shares your data with other Ziff Davis businesses — including for targeted advertising — is gone. But the rewrite also quietly deleted several things that helped you: your listed right not to be punished for exercising privacy rights, the data protection officer contact and mailing address, a link to California consumer-rights metrics, and the list of certified companies. Ookla also now claims the EU/UK/Swiss data-transfer certifications in its own name instead of Ziff Davis's.
Ookla removed the section pointing to its California consumer rights metrics — the yearly count of how many data requests it received, granted, and denied. Losing that link makes it harder to judge whether the company actually honors privacy requests.
“Pursuant to the California privacy regulations, our consumer rights metrics can be found on our [Regulatory Information site](https://www.ziffdavis.com/regulatory-information).”
The policy used to promise you would not be discriminated against for exercising your privacy rights. That line is deleted. California and several other state laws still give you this protection no matter what the policy says, but Ookla no longer states the commitment itself, which makes it harder to point to if you have a complaint.
“- **Right to not be Discriminated Against:** You have a right to not be discriminated against by ZMG for exercising your rights.”
What you can do — If you feel your service was degraded after making a privacy request, you can still complain to your state attorney general — in California, at oag.ca.gov/report.
Your data can still be sent from Europe, the UK, and Switzerland to the U.S. Before, the safeguards rode on Ziff Davis, Inc.'s certification under the Data Privacy Framework. Now Ookla says it is certified on its own. If that certification is not actually active in Ookla's name, the promised protections could have a gap.
“Ookla and its associated affiliates and subsidiaries complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.”
What you can do — Search for "Ookla" on dataprivacyframework.gov to confirm the certification is active before relying on it.
The postal address and the dedicated data protection officer contact (registered with Ireland's data protection regulator) were removed. If you are in Europe or the UK, you no longer have a named officer or a written address to escalate to — only an email address and a web form.
“For any additional questions, you can contact us by emailing [privacy@ookla.com](mailto:privacy@ookla.com).”
What you can do — Use privacy@ookla.com or dsar.ookla.com and keep a copy of your request; if you get no reply, you can complain to your national data protection authority.
The opening line no longer says Ookla's parent company is Ziff Davis. The policy now covers only Ookla and its own affiliates and subsidiaries.
Ookla, LLC, with its parent company Ziff Davis, LLC, its other affiliates and its subsidiaries ("Ookla")
Ookla, LLC, its other affiliates and its subsidiaries ("Ookla")
The old policy said Ookla shared your information with other Ziff Davis businesses, including for targeted advertising, and gave you a way to opt out. That whole section is deleted, so this sharing is no longer described as something Ookla does. This is a win for you. Sharing with other outside parties — advertisers, business partners, ISPs and carriers — still continues as before.
We also share information with other Ziff Davis companies for the purposes of targeted advertising. If you would like to opt out of the sale or sharing of your data with other Ziff Davis companies, you can do so via our [Privacy Portal](https://dsar.ookla.com/).
Protections for sending your data from Europe, the UK, and Switzerland to the U.S. used to rest on Ziff Davis, Inc.'s certification. Now Ookla says it holds those certifications in its own name and handles the related complaints.
Ziff Davis, Inc., participates in the E.U.-U.S. Data Privacy Framework, the UK extension to the EU-U.S. DPF, the Swiss-U.S. Privacy Framework and the APEC Cross Border Privacy Rules System.
Ookla participates in the E.U.-U.S. Data Privacy Framework, the UK extension to the EU-U.S. DPF, the Swiss-U.S. Privacy Framework and the APEC Cross Border Privacy Rules System.
You can no longer click through to see which related companies also follow the same international data protection rules.
For a list of our subsidiaries and affiliates who also adhere to the DPF Principles, please click [here](https://www.ziffdavis.com/ziff-davis-inc-entities-self-certified-under-the-data-privacy-framework-dpf).
The list of your privacy rights no longer includes the promise that you won't be treated worse — for example, charged more or given a lesser service — just because you used your privacy rights.
- **Right to not be Discriminated Against:** You have a right to not be discriminated against by ZMG for exercising your rights.
The contact section used to list a New York postal address and a registered data protection officer in Ireland with their own email and address. Now the only contact route given is an email address and the online privacy portal.
We have registered our DPO with the Irish Data Protection Commission. If you have any questions or concerns about our privacy practices, we encourage you to contact our DPO at the following email address [dpo@ziffdavis.com](mailto:dpo@ziffdavis.com)
For any additional questions, you can contact us by emailing [privacy@ookla.com](mailto:privacy@ookla.com).
An entire section that pointed to published numbers on how many privacy requests were received and honored is gone. The remaining sections were renumbered, so the final section is now 16 instead of 17.
16. ## California Consumer Rights Metrics
16. ## How this Privacy Policy May Change
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 1 | Ookla, LLC, with its parent company Ziff Davis, LLC, its other affiliates and its subsidiaries ("Ookla") provides end-to-end enterprise solutions that help transform wireless and fixed network measurement into actionable insights across a network's lifecycle, delivering a world-class network experience. Ookla values your privacy and is committed to protecting the privacy of your information. | |
| 1 | Ookla, LLC, its other affiliates and its subsidiaries ("Ookla") provides end-to-end enterprise solutions that help transform wireless and fixed network measurement into actionable insights across a network's lifecycle, delivering a world-class network experience. Ookla values your privacy and is committed to protecting the privacy of your information. | |
| 2 | 2 | |
| 3 | 3 | This Privacy Policy (or "policy") describes how Ookla uses the personal information you provide and the rights you have. We have created this Privacy Portal to help you exercise your rights. |
| 4 | 4 | |
| 5 | 5 | 1. ## Privacy Policy Overview |
| 6 | 6 | |
| 7 | 7 | Ookla owns and operates several interactive websites, mobile and connected applications, including their and other online interactive features and services (collectively "services" or "our services"). |
| 197 | 197 | Some third parties may choose to use their own cookies for the purposes of collecting information relating to the viewing of their advertising. To learn more about how we use cookies, and to manage your preferences, please see our [Cookie Policy](https://www.speedtest.net/about/cookie-policy). This policy, and our Cookie Policy, are only intended to cover the use of cookies as they relate to Ookla businesses. |
| 198 | 198 | |
| 199 | 199 | - * * |
| 200 | 200 | |
| 201 | 201 | 8. ## Information We Share with Third Parties |
| 202 | 202 | |
| 203 | **Ziff Davis Companies:** Ookla is owned by Ziff Davis Inc. We share your information with other businesses owned by Ziff Davis, Inc. ("Ziff Davis Companies") to assist us in the operation of our services, improve them, and further develop them. | |
| 204 | ||
| 205 | We also share information with other Ziff Davis companies for the purposes of targeted advertising. If you would like to opt out of the sale or sharing of your data with other Ziff Davis companies, you can do so via our [Privacy Portal](https://dsar.ookla.com/). | |
| 206 | ||
| 207 | 203 | **Other Third Parties:** We may also share your personal information with the following: |
| 208 | 204 | |
| 209 | 205 | - Relevant third party provider, where our services use third party advertising, plugins or content, subject to your privacy choices and settings, and our ToU. |
| 210 | 206 | |
| 211 | 207 | - Merchants, business partners, or advertisers where you consented and chose to participate in offers, contests, or other activities. |
| 212 | 208 | |
| 269 | 265 | Information collected through Speedtest and Sensorly may not be anonymous as follows: for some ISPs and mobile carriers, Ookla will provide full IP addresses and/or network, hardware or device identifiers for such ISP or mobile carrier's customers upon request. Ookla may also provide full IP addresses and/or network, hardware and device identifiers, to equipment manufacturers and core network, or wholesale providers on a case-by-case basis for network research purposes. Ookla may also collect GeoIP Data and/or Precise Location Data, and such data may also be licensed and/or transferred to third parties. |
| 270 | 266 | |
| 271 | 267 | - * * |
| 272 | 268 | |
| 273 | 269 | 9. ## International Transfers of Information |
| 274 | 270 | |
| 275 | We may transfer your information to recipients in other countries. Ziff Davis, Inc., participates in the E.U.-U.S. Data Privacy Framework, the UK extension to the EU-U.S. DPF, the Swiss-U.S. Privacy Framework and the APEC Cross Border Privacy Rules System. Where we transfer information from the European Economic Area ("EEA") to a recipient outside the EEA that is not in an adequate jurisdiction, we do so on the basis of standard contractual clauses. | |
| 271 | We may transfer your information to recipients in other countries. Ookla participates in the E.U.-U.S. Data Privacy Framework, the UK extension to the EU-U.S. DPF, the Swiss-U.S. Privacy Framework and the APEC Cross Border Privacy Rules System. Where we transfer information from the European Economic Area ("EEA") to a recipient outside the EEA that is not in an adequate jurisdiction, we do so on the basis of standard contractual clauses. | |
| 276 | 272 | |
| 277 | Because of the international nature of our business, we may need to transfer your information within the Ziff Davis group of companies, and to third parties as noted above, in connection with the purposes set out in this Policy. For this reason, we may transfer your information to other countries that may have different laws and data protection compliance requirements to those that apply in the country in which you are located. We remain liable under the DPF Principles if any third parties that we transfer your personal information to process it in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage. | |
| 273 | Because of the international nature of our business, we may need to transfer your information within the Ookla group of companies, and to third parties as noted above, in connection with the purposes set out in this Policy. For this reason, we may transfer your information to other countries that may have different laws and data protection compliance requirements to those that apply in the country in which you are located. We remain liable under the DPF Principles if any third parties that we transfer your personal information to process it in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage. | |
| 278 | 274 | |
| 279 | Ziff Davis, Inc. and its associated affiliates and subsidiaries complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Ziff Davis, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.Ziff Davis, Inc. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov](https://www.dataprivacyframework.gov/). | |
| 275 | Ookla and its associated affiliates and subsidiaries complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Ookla has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Ookla has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov](https://www.dataprivacyframework.gov/). | |
| 280 | 276 | |
| 281 | 277 | We are committed to staying current with developments related to the Data Privacy Framework and may update our transfer mechanisms and safeguards as necessary to remain compliant. Any updates will be reflected in this Privacy Policy. |
| 282 | 278 | |
| 283 | If you are a European individual with a privacy related complaint, concern or question about Ziff Davis, Inc.'s privacy practices, please contact us through our [privacy portal](https://dsar.speedtest.net/). Under certain conditions, more fully described on the Data Privacy Framework website, European individuals may invoke binding arbitration when other dispute resolution procedures have been exhausted. | |
| 279 | If you are a European individual with a privacy related complaint, concern or question about Ookla's privacy practices, please contact us through our [privacy portal](https://dsar.speedtest.net/). Under certain conditions, more fully described on the Data Privacy Framework website, European individuals may invoke binding arbitration when other dispute resolution procedures have been exhausted. | |
| 284 | 280 | |
| 285 | 281 | Where we transfer your personal information from the EEA to recipients located outside the EEA who are not in a jurisdiction that has been formally designated by the European Commission as providing an adequate level of protection for information, we do so on the basis of standard contractual clauses. You may request a copy of the relevant standard contractual clauses using our [privacy portal](https://dsar.speedtest.net/). Please note that when you transfer any personal information directly to an entity established outside the EEA, we are not responsible for that transfer of your information. We will nevertheless process your information, from the point at which we receive the data, in accordance with the provisions of this policy. |
| 286 | 282 | |
| 287 | 283 | **Enforcement Authority** |
| 288 | 284 | |
| 289 | 285 | The Federal Trade Commission has jurisdiction over our compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). |
| 290 | 286 | |
| 291 | 287 | **Complaints Mechanism** |
| 292 | 288 | |
| 293 | In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ziff Davis, Inc. commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Ziff Davis, Inc. at [privacy@ookla.com](mailto:privacy@ookla.com). | |
| 289 | In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ookla commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Ookla at [privacy@ookla.com](mailto:privacy@ookla.com). | |
| 294 | 290 | |
| 295 | In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ziff Davis, Inc. commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to TrustArc, an alternative dispute resolution provider. The services of Trustarc are provided at no cost to you. For further information please visit [https://trustarc.com/dispute-resolution/](https://trustarc.com/dispute-resolution/%3E). | |
| 291 | In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ookla commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to TrustArc, an alternative dispute resolution provider. The services of Trustarc are provided at no cost to you. For further information please visit [https://trustarc.com/dispute-resolution/](https://trustarc.com/dispute-resolution/%3E). | |
| 296 | 292 | |
| 297 | 293 | Under certain conditions, a binding arbitration option may be available to you in order to address complaints not resolved by any other means. For further information, please see Annex I of the EU-U.S. Data Privacy Framework Principles at: [https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction](https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction). |
| 298 | 294 | |
| 299 | In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ziff Davis, Inc. commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner's Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF in the context of the employment relationship. | |
| 295 | In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ookla commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner's Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF in the context of the employment relationship. | |
| 300 | 296 | |
| 301 | For a list of our subsidiaries and affiliates who also adhere to the DPF Principles, please click [here](https://www.ziffdavis.com/ziff-davis-inc-entities-self-certified-under-the-data-privacy-framework-dpf). | |
| 302 | ||
| 303 | 297 | Our privacy practices described in this Policy comply with the Asia-Pacific Economic Cooperation ("**APEC**") Cross Border Privacy Rules System. To learn more about this program, please click [here](https://cbprs.org/). |
| 304 | 298 | |
| 305 | 299 | - * * |
| 306 | 300 | |
| 307 | 301 | 10. ## Data Security and Breach Handling |
| 308 | 302 | |
| 339 | 333 | - **Right to Object to the Processing:** You can object to our processing of your personal information via our privacy portal, under certain circumstances. By objecting to processing, you may not be able to access some or all of our services. This right is limited to personal data processed for commercial purposes. |
| 340 | 334 | |
| 341 | 335 | - **Right to Object to the Use of Sensitive Personal Information:** You have the right to object to our use of your sensitive personal information. Sensitive personal information is information about your health, race, religion, sexual orientation, gender identity, political opinions or philosophical beliefs. You should always be mindful about the personal information you share online, especially when it is sensitive in nature. |
| 342 | 336 | |
| 343 | 337 | - **Right to Object to Automated Processing:** You have a right to object to the processing of your data for the purposes of automated decision making about you. |
| 344 | 338 | |
| 345 | - **Right to not be Discriminated Against:** You have a right to not be discriminated against by ZMG for exercising your rights. | |
| 346 | ||
| 347 | 339 | - **Right to Withdraw Consent:** Where you are requested to consent to the processing of your personal information by IeL, you have the right to withdraw your consent at any time. |
| 348 | 340 | |
| 349 | 341 | In order to make privacy requests please visit our [Privacy Portal](https://dsar.ookla.com/) and fill out the form. You can also email us at [privacy@ookla.com](mailto:privacy@ookla.com). Our contact information can be found in the "Contact Details" section below. |
| 350 | 342 | |
| 351 | 343 | You may be required to verify your identity before we can give effect to these rights. If you are making a request on behalf of a user, we require a signed authorization letter from the consumer. |
| 352 | 344 | |
| 367 | 359 | _California Residents._ In accordance with the California Online Privacy Protection Act, we may collect Personal Information about your online activities when you use our services. California's "Shine the Light" law permits our users who are California residents to request and obtain certain information about any Personal Information disclosed to third parties for direct marketing purposes. If you are a California resident and wish to make such a request or if you wish for us to refrain from gathering your Personal Information, please submit your request in writing to us using the contact details in Section 14. |
| 368 | 360 | |
| 369 | 361 | - * * |
| 370 | 362 | |
| 371 | 363 | 14. You can submit privacy related inquiries to our [Privacy Portal](https://dsar.ookla.com/). |
| 372 | 364 | |
| 373 | For any additional questions, you can contact us by emailing privacy@ookla.com or at the following address: | |
| 365 | For any additional questions, you can contact us by emailing [privacy@ookla.com](mailto:privacy@ookla.com). | |
| 374 | 366 | |
| 375 | Ziff Davis, LLC | |
| 376 | Attention: Legal Department | |
| 377 | 360 Park Avenue South, 17th Floor | |
| 378 | New York, New York 10010 | |
| 379 | ||
| 380 | We have registered our DPO with the Irish Data Protection Commission. If you have any questions or concerns about our privacy practices, we encourage you to contact our DPO at the following email address [dpo@ziffdavis.com](mailto:dpo@ziffdavis.com) or at the following address: | |
| 381 | ||
| 382 | Ziff Davis | |
| 383 | Attention: Legal Department | |
| 384 | Unit. 3.1, Woodford Business Park | |
| 385 | Santry, | |
| 386 | Dublin 17 | |
| 387 | Ireland | |
| 388 | ||
| 389 | 367 | - * * |
| 390 | 368 | |
| 391 | 369 | 15. ## Children |
| 392 | 370 | |
| 393 | 371 | These services are not intended for use by children, especially those under 18. We reserve the right to remove a user's account at any time, when necessary, if we discover that a user is under the required age limit for the service. If you have reason to believe we have collected personal information from someone under 18, please report it to us so we can take appropriate steps to rectify this. |
| 394 | 372 | |
| 395 | 373 | - * * |
| 396 | 374 | |
| 397 | 16. ## California Consumer Rights Metrics | |
| 375 | 16. ## How this Privacy Policy May Change | |
| 398 | 376 | |
| 399 | Pursuant to the California privacy regulations, our consumer rights metrics can be found on our [Regulatory Information site](https://www.ziffdavis.com/regulatory-information). | |
| 400 | ||
| 401 | - * * | |
| 402 | ||
| 403 | 17. ## How this Privacy Policy May Change | |
| 404 | ||
| 405 | 377 | This policy may be amended or updated from time to time at our discretion. Any updates will be effective at the time of publication, unless specified otherwise. Your continued use of our services after the publication of a policy update constitutes your consent to the changes. We will notify you prior to making policy updates that materially change the way we treat your personal data, and will not use your data in a materially different manner without your consent. |
| 406 | 378 | |
| 407 | 379 | A Simplified Chinese translation of this Privacy Policy is located [here](https://www.speedtest.net/about/privacy). Ookla's China Supplemental Privacy Policy is located [here](https://www.ookla.com/privacy-supplement-zh-Hans). |