Squarespace Privacy Policy

DATED 2020-02-24 · VERSION 20200310_rev01 · COMPARED WITH 20200201_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20200201_rev01 to 20200310_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1**Effective Date: December 23, 2019**
1**Effective Date: February 24, 2020**
22
33Thanks for visiting Squarespace! Squarespace ("Squarespace", "we", "us" or "our") respects your privacy. When it comes to your personal information, we believe in transparency, not surprises. That's why we've set out here what personal information we collect, what we do with it and your choices and rights.
44
55By using any of Squarespace's Services, you confirm you have agreed to the [Terms of Service](https://www.squarespace.com/terms-of-service) and read and understood this Privacy Policy and our [Cookie Policy](https://www.squarespace.com/cookie-policy).
66
77**1\. Some key terms**
99In our Privacy Policy, when we refer to "Users", we mean our customers who use our Services, including visitors to our sites. We explain who we are in the "Who is Squarespace?" section below. The users, visitors and customers of, our Users' sites are "End Users". Any other capitalized terms not defined in this Privacy Policy have the meanings in our [Terms of Service](https://www.squarespace.com/terms-of-service).
1010
1111**2\. How does this Privacy Policy apply?**
1212
1313This Privacy Policy describes what we do with personal information that we collect and use for our own purposes (i.e., where we are a controller), such as your account information and information about how you use and interact with our Services, including information you submit to our customer support as well as certain information relating to your End Users. This Privacy Policy does not apply to personal information of our employees or job applicants (except to the extent employees or job applicants are Users).
1414
15We also host and process User Content on behalf of our Users. Our Users tell us what to do with User Content, and we follow their instructions. This Privacy Policy does not describe what we do with User Content on our Users' instructions (i.e., as their processor or service provider). If you are an End User of one of our User's sites and want to know how a User handles your information, you should check the site's privacy policy. If you want to know about what we do for our own purposes, read on.
15We also host and process User Content on behalf of our Users. Our Users tell us what to do with User Content, and we follow their instructions. This Privacy Policy does not describe what we do with User Content on our Users' instructions (i.e., as their processor or service provider). If you are an End User of one of our User's sites and want to know how a User handles your information, you should check the site's privacy policy, if applicable. If you want to know about what we do for our own purposes, read on.
1616
1717If you are a User, see our [Data Processing Addendum](https://www.squarespace.com/dpa/) to learn more about how we process User Content or other personal information on your instructions or with your permission. Please see Section 3.7 of our Terms of Service to learn more about how we act as a "Service Provider" if you are a "Business" under the CCPA with respect to data of your "Consumers" (as defined under the CCPA) which meets the definition of "Personal Information" under the CCPA.
1818
1919**3\. Personal information we collect**
2020
2121We collect various personal information regarding you or your device. This includes the following:
194194- **Other means**. We may, in accordance with Articles 45 and 46 of the GDPR, transfer personal information to recipients that are in a country the European Commission or a European data protection supervisory authority has confirmed, by decision, offers an adequate level of data protection, pursuant to an approved certification mechanism or code of conduct, together with binding enforcement commitments from the recipient to apply the appropriate safeguards, including as regards data subjects' rights, or to processors which have committed to comply with binding corporate rules.
195195
196196You can find out more information about these transfer mechanisms [here](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en).
197197
198198**11\. Privacy Shield**
199199
200Squarespace, Inc has certified its compliance to the Privacy Shield.
200Squarespace, Inc. has certified its compliance to the Privacy Shield.
201201
202202Squarespace is committed to treating personal information received from the European Economic Area, Switzerland and the United Kingdom pursuant to the Privacy Shield Frameworks in accordance with the applicable Principles. You can find our certification [here](https://www.privacyshield.gov/participant) and you can learn more about the Frameworks and Principles by visiting [https://www.privacyshield.gov/](https://www.privacyshield.gov/).
203203
204204Our accountability for personal information we receive under the Privacy Shield and subsequently transfer to a third party is described in the Privacy Shield Principles. In particular, we may use third parties to process data on our behalf as described in this Privacy Policy, and we remain liable if they do so in a manner inconsistent with the Privacy Shield Principles, unless we prove that we are not responsible for the event giving rise to the damage.
205205
206206If you have a question or complaint you believe to be within the scope of our Privacy Shield certification, please contact us first at [privacy@squarespace.com](mailto:privacy@squarespace.com), or using the contact details in the "How to contact us" section below. We'll respond within 45 days.