Squarespace Privacy Policy

DATED 2023-06-29 · VERSION 20230701_rev01 · COMPARED WITH 20230102_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20230102_rev01 to 20230701_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1		Effective Date: December 13, 2022
	1	Effective Date: June 29, 2023
2	2
3	3	Thanks for visiting Squarespace! Squarespace ("Squarespace", "we", "us" or "our") respects your privacy. When it comes to your personal information, we believe in transparency, not surprises. That's why we've set out here what personal information we collect, what we do with it and your choices and rights.
4	4
5	5	By using any of Squarespace's Services, you confirm you have agreed to the [Terms of Service](https://www.squarespace.com/terms-of-service) and read and understood this Privacy Policy and our [Cookie Policy](https://www.squarespace.com/cookie-policy).
6	6
7		Certain jurisdictions require us to provide you with specific additional information. Please see [this page](http://squarespace.com/privacy-specific) for such additional information if you are in: (I) California; or (II) Virginia
	7	Certain jurisdictions require us to provide you with specific additional information. Please see [this page](http://squarespace.com/privacy-specific) for such additional information if you are in: (I) California; or (II) Virginia, Colorado, Connecticut or Utah.
8	8
9	9	1\. Some key terms
10	10
11	11	In our Privacy Policy, when we refer to "Users", we mean our customers who use our Services, including visitors to our sites. We explain who we are in the "Who is Squarespace?" section below. The users, visitors and customers of, our Users' sites are "End Users". Any other capitalized terms not defined in this Privacy Policy have the meanings in our [Terms of Service](https://www.squarespace.com/terms-of-service).
12	12
13	13	2\. How does this Privacy Policy apply?
45	45	We obtain personal information from various sources. We do this in three main ways:
46	46
47	47	- You provide some of it directly (such as by registering for an Account).
48	48
49	49	- We record some of it automatically when you use our Services or Users' sites (including with technologies like cookies).
50	50
51		- We receive some of it from third parties (like when you register for an account using a Third Party Service or when you make payments to us using our payment processor or via a mobile app store).
	51	- We receive some of it from third parties (like when you register for an account using a Third Party Service, when you purchase our products from an authorized reseller or when you make payments to us using our payment processor or via a mobile app store).
52	52
53	53	We've described this in more detail below.
54	54
55	55	a. Personal information you provide
56	56
57	57	When you use our Services, we collect information from you in a number of ways. For instance, we ask you to provide your name and email address to register and manage your Account. We also maintain your marketing preferences and the emails and other communications that you send us or otherwise contribute, such as customer support inquiries or posts to our customer message boards or forums. You might also provide us with information in other ways, including by responding to surveys, submitting a form or participating in contests or similar promotions.
67	67	Some of this information is collected automatically using cookies and similar technologies when you use our Services and our Users' sites. We let our Users control what cookies and similar technologies are used through their sites (except those we need to use to properly provide the Services, such as for performance or security related reasons). You can read more about our use of cookies in our [Cookie Policy](https://www.squarespace.com/cookie-policy). Some of this information is similarly collected automatically through your browser or from your device.
68	68
69	69	c. Personal information obtained from other sources
70	70
71	71	If you use a Third Party Service (such as Google) to register for an Account, the Third Party Service may provide us with your Third Party Service account information on your behalf, such as your name and email address (we don't collect or store passwords you use to access Third Party Services). Your privacy settings on the Third Party Service normally control what they share with us. Make sure you are comfortable with what they share by reviewing their privacy policies and, if necessary, modifying your privacy settings directly on the Third Party Service.
72	72
73		If you sign up for Paid Services directly with us, we obtain limited information about your payment card from our payment processor, such as the last four digits, the country of issuance and the expiration date. Currently, our payment processor is Stripe. Stripe uses and processes your complete payment information in accordance with [Stripe's privacy policy](https://stripe.com/privacy/). This paragraph is not applicable if you sign up for Paid Services as an in-app purchase via a mobile app store. Please see [Google's privacy policy](https://policies.google.com/privacy) and [Apple's privacy policy](https://www.apple.com/legal/privacy/en-ww/) for information about how they use and process your payment information.
	73	If you sign up for Paid Services via a Third Party Service acting as an authorized reseller of our products, the authorized reseller may provide us with: (i) account information on your behalf, such as your name and email address; and (ii) information necessary for us to complete your Paid Services sign up, such as your domain registration information.
74	74
	75	If you sign up for Paid Services directly with us, we obtain limited information about your payment card from our payment processor, such as the last four digits, the country of issuance and the expiration date. Currently, our payment processor is Stripe. Stripe uses and processes your complete payment information in accordance with [Stripe's privacy policy](https://stripe.com/privacy/). This paragraph is not applicable if you sign up for Paid Services as an in-app purchase via a mobile app store. Please see [Google's privacy policy](https://policies.google.com/privacy) and [Apple's privacy policy](https://www.apple.com/legal/privacy/en-ww/) for information about how they use and process your payment information. This paragraph is also not applicable if you sign up for Paid Services via a Third Party Service acting as an authorized reseller of our products. Please see the authorized reseller's privacy policy for information about how they use and process your payment information.
	76
75	77	5\. How we use your personal information
76	78
77	79	We use the personal information we obtain about you for the following purposes:
78	80
79	81	- Provision of the Services. Create and manage your Account, provide and personalize our Services, register or transfer your domain names, process payments and respond to your inquiries.
80	82
151	153	- Business transfers. If we're involved in a reorganization, merger, acquisition or sale of some or all of our assets, your personal information may be transferred as part of that deal or the negotiation of contemplated deals.
152	154
153	155	7\. Your rights and choices
154	156
155	157	Where applicable law requires (and subject to any relevant exceptions under law), you may have the right to access, update, change or delete personal information.
156	158
157		You can access, update, change or delete personal information (or that of your End Users) either directly in your Account or by contacting us at [privacy@squarespace.com](mailto:privacy@squarespace.com) to submit your request. You can also delete your account by following the instructions in [this support guide](https://support.squarespace.com/hc/en-us/articles/228036268-Deleting-your-account). Please note that we may need to verify your identity in connection with your requests, and such verification process may, if you do not have access to your Account, require you to provide us with additional information we maintain about you to verify your identity. Even if you have access to your Account, we may request additional information if we believe it's necessary to verify your identity. If we are unable to verify your identity or request, we may not, in accordance with applicable law, be able to fulfill your request.
	159	You can access, update, change or delete personal information (or that of your End Users) in your Account. You can also delete your account by following the instructions in [this support guide](https://support.squarespace.com/hc/en-us/articles/228036268-Deleting-your-account). Please note that we may need to verify your identity in connection with your requests, and such verification process may, if you do not have access to your Account, require you to provide us with additional information we maintain about you to verify your identity. Even if you have access to your Account, we may request additional information if we believe it's necessary to verify your identity. If we are unable to verify your identity or request, we may not, in accordance with applicable law, be able to fulfill your request. You may also contact us by email at [privacy@squarespace.com](mailto:privacy@squarespace.com) to submit an access, update, change or deletion request.
158	160
159	161	You can also elect not to receive marketing communications by changing your preferences in your Account or by following the unsubscribe instructions in such communications.
160	162
161	163	Please note that, for technical reasons, there is likely to be a delay in deleting your personal information from our systems when you ask us to delete it. We also will retain personal information in order to comply with the law, protect our and others' rights, resolve disputes or enforce our legal terms or policies, to the extent permitted under applicable law.
162	164
163	165	You may have the right to restrict or object to the processing of your personal information or to exercise a right to data portability under applicable law. You also may have the right to lodge a complaint with a competent supervisory authority, subject to applicable law. If you are subject to EU data protection laws, we suggest you lodge any such complaints with our lead supervisory authority:
208	210	- Other means. We may, in accordance with Articles 45 and 46 of the GDPR, transfer personal information to recipients that are in a country the European Commission or a European data protection supervisory authority has confirmed, by decision, offers an adequate level of data protection, pursuant to an approved certification mechanism or code of conduct, together with binding, enforceable commitments from the recipient to apply the appropriate safeguards, including as regards data subjects' rights, or to processors which have committed to comply with binding corporate rules.
209	211
210	212	You can find out more information about these transfer mechanisms [here](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en) or you can request a copy from us.
211	213
212	214	11\. Privacy Shield
213	215
214		While Squarespace no longer relies upon the EU-U.S. or Swiss-U.S. Privacy Shield Frameworks (each individually and jointly, the "Privacy Shield") to provide a legal basis for transfers to the US, Squarespace, Inc. has certified its compliance to the Privacy Shield, which continues to apply. Squarespace, Inc.
	216	While Squarespace no longer relies upon the EU-U.S. or Swiss-U.S. Privacy Shield Frameworks (each individually and jointly, the "Privacy Shield") to provide a legal basis for transfers to the US, Squarespace, Inc. has certified its compliance to the Privacy Shield, which continues to apply.
215	217
216	218	Squarespace is committed to treating personal information received from the European Economic Area, Switzerland and the United Kingdom pursuant to the Privacy Shield in accordance with the applicable Principles. You can find our certification [here](https://www.privacyshield.gov/participant) and you can learn more about the Privacy Shield and Principles by visiting [https://www.privacyshield.gov/](https://www.privacyshield.gov/).
217	219
218	220	Our accountability for personal information we receive and subsequently transfer to a third party is described in the Privacy Shield Principles. In particular, we may use third parties to process data on our behalf as described in this Privacy Policy, and we remain liable if they do so in a manner inconsistent with the Privacy Shield Principles, unless we prove that we are not responsible for the event giving rise to the damage.
219	221
220	222	If you have a question or complaint you believe to be within the scope of our Privacy Shield certification, please contact us first at [privacy@squarespace.com](mailto:privacy@squarespace.com), or using the contact details in the "How to contact us" section below. We'll respond within 45 days.