Privacy Policy
ARCHIVED 2026-01-02, DATE APPROXIMATE · VERSION 20260102_rev01 · COMPARED WITH 20251102_rev01
Full text changes — 20251102_rev01 to 20260102_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 1 | 1 | **Page Updated:** |
| 2 | January 1, 2024 | |
| 2 | January 1, 2026 | |
| 3 | 3 | |
| 4 | WPEngine, Inc. ("WP Engine," "we," "us," "our") maintains this Privacy Policy to inform you of our practices with regard to personal data we collect from or about you in connection with our web site (the "Site") or through the provision of our services (the "Services"). We may update this Privacy Policy from time to time. We will notify you of any significant change by providing a notice on our web site or, if you are a customer, by whatever other means upon which we have mutually agreed. The current version of this Privacy Policy may be found at [https://wpengine.com/legal/privacy/](https://wpengine.com/legal/privacy/). By using the Site or the Services you acknowledge your consent to the practices described herein | |
| 4 | WPEngine, Inc. ("WP Engine," "we," "us," "our") maintains this Privacy Policy to inform you of our practices with regard to your information we collect from or about you as a data controller in connection with our websites (the "Sites"), through the provision of our products and services, or through any other means, including interactions we have with you online or offline. We may update this Privacy Policy from time to time by providing an updated version on our Sites. The current version of this Privacy Policy may be found at [https://wpengine.com/legal/privacy/](https://wpengine.com/legal/privacy/). By using a Site or our products and services you acknowledge that you have read and understand the practices described herein. | |
| 5 | 5 | |
| 6 | If you are a customer who is subject to the privacy laws of the European Union, the United Kingdom, or the United States the Data Privacy Addendum located at [https://wpengine.com/legal/dpa/](https://wpengine.com/legal/dpa/) as it may be updated from time to time governs the obligations between us with regard to personal data as defined by such laws. | |
| 6 | Please note, this Privacy Policy applies to our data processing activities as a controller of your data such as described above; it does not apply to data collected by our customers who use our products or services to create and manage their own websites, which may collect data from end-users, including personal data ("End-User Personal Data"). If End-User Personal Data is collected by our customers through our products or services, we are the processor and the customer is the controller of such data. We will only use and disclose End-User Personal Data as authorized or directed by the customer and in accordance with our agreement with that customer, or as required by law. If your End-User Personal Data is controlled by one of our customers, and you have concerns about the way that data is managed or wish to exercise your rights with respect to such data (including your rights of access, amendment, or deletion), please contact that customer directly. | |
| 7 | 7 | |
| 8 | 1. **Personal Data We Collect** | |
| 9 | 1. **Information You Give Us**. In order for you to use our Services and other features of our Site, we will ask you for some of your personal data (e.g. contact information, name, etc.). The amount and type of information that we gather depends on the nature of the interaction. For example, we ask visitors who would like to comment on our blog to provide a username. Those who purchase Services from us are asked to provide additional information including, as necessary, the personal and financial information required to process transactions. In each case, we collect such information only insofar as is necessary or appropriate to fulfill the purpose of your interaction with us. You can always refuse to supply personal data; however, doing so may prevent you from receiving our Services or engaging in other activities on the Site. In no event will we ever request sensitive personal data (e.g. health information, religious preferences, etc.) from you, and we expressly request that you not provide any such sensitive personal data to us. | |
| 10 | 2. **Activity Logs**. As is true of most websites, we gather certain information automatically through your use of our Services and other features of our Site. This information may include Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring or exit pages, the files viewed on the Site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, clickstream data to analyze trends in the aggregate and administer the site, event data regarding how the Services are used to collect and aggregate certain diagnostic and analytics information. We use analytical software to help us understand this information. This software sends information to its licensor. Other sites and companies may also use this software. As a result, the licensor may collect information that, when aggregated by them, allows them to identify you individually. We have no responsibility for this collection and use. | |
| 11 | 3. **Cookies**. We and our partners use cookies and similar technologies to analyze trends, administer the Site, track users' movements around the Site, and gather demographic information about our user base as a whole. You can control the use of cookies at the individual browser level. | |
| 12 | Ads appearing on our Site may be delivered to you by advertising partners who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This Privacy Policy covers our use of cookies and does not cover the use of cookies by any advertisers. However, data tracking files used by us may also be used by these advertisers and, when combined with other information held by them, be used to identify you personally. For more information on third party cookies and instructions on how to opt-out of those cookies set by members of the National Advertising Initiative, please click [here](http://www.networkadvertising.org/choices/). Or, if you are located in the European Union, please visit the European Interactive Digital Advertising Alliance [here](https://youronlinechoices.eu/). | |
| 13 | 4. **Information Collected by Our Customers**. Our customers may collect personal data in connection with the Services we provide to them. WP Engine's customers control the personal data they collect, and WP Engine will not use or disclose that personal data except as authorized or directed by the customer in the course of our provision of the Services and as governed by our agreement with that customer. If your personal data is controlled by one of our customers, and you have concerns about the way that data is managed or wish to exercise your rights with respect to such data (including your rights of access, amendment, or deletion), please contact that customer directly | |
| 14 | 2. **How We Use Personal Data**. WP Engine will only use the personal data we collect as reasonably necessary for the following purposes: | |
| 15 | - to allow you to use and interact with the Site; | |
| 16 | - to provide the Services to you as our customer; | |
| 17 | - to inform our continued development of the Site and the Services; | |
| 8 | If you are a customer who is subject to data privacy laws, including those of the European Union, the United Kingdom, and various states throughout the United States, the Data Privacy Addendum located at [https://wpengine.com/legal/dpa/](https://wpengine.com/legal/dpa/) as it may be updated from time to time governs the obligations between us with regard to personal data as defined by such laws. | |
| 9 | ||
| 10 | 1. **Personal Data We Collect**. | |
| 11 | 1. Information You Give Us. In order for you to use our products, services, the features of our Sites, or otherwise engage with us, we will ask you for certain information (e.g. contact information, name, etc.). The amount and type of information that we gather depends on the nature of the interaction. For example, we ask visitors who would like to comment on our blog to provide a username. Those who purchase products or services from us are asked to provide additional information including, as necessary, the personal and financial information required to process transactions. In each case, we collect such information only insofar as is necessary or appropriate to fulfill the purpose of your interaction with us. You can always refuse to supply personal data; however, doing so may prevent you from receiving our products or services, or engaging in other activities on the Sites. In no event will we ever request sensitive personal data (e.g. health information, religious preferences, etc.) from you, and we expressly request that you not provide any such sensitive personal data to us. | |
| 12 | 2. Activity Logs. As is true of most websites, we gather certain information automatically through your use of our products and services, and other features of our Sites. This information may include Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring or exit pages, the files viewed on the Sites (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, clickstream data to analyze trends in the aggregate and administer the Site, and event data regarding how our products and services are used. | |
| 13 | 3. Cookies. We and our partners use cookies and similar technologies to analyze performance and trends, administer the Sites, track users' movements around the Sites, personalize users' experiences, and gather demographic information about our user bases as a whole. For more information about cookies and similar technologies, how we use them, and how you can exercise control over them, please read our Cookie Policy located at [https://wpengine.com/legal/cookies/](https://wpengine.com/legal/cookies/). | |
| 14 | ||
| 15 | 2. **How We Use Personal Data**. We will only use the personal data we collect as reasonably necessary for the following purposes: | |
| 16 | - to allow you to use and interact with the Sites; | |
| 17 | - to provide our products or services to you as a user or our customer; | |
| 18 | - to improve and troubleshoot the Sites and our products and services, including bug detection, diagnostics and error reporting; | |
| 19 | - to personalize your experience and customize the Sites, such as by delivering relevant content, saving preferences, and recommending products and features; | |
| 20 | - to understand how you as a user or our customer interact with our Sites and our products and services and advertisements; | |
| 21 | - to improve usability and effectiveness and inform our continued testing and development of the Sites and our products and services; | |
| 18 | 22 | - to communicate with you from time to time in response to your requests for information or as may be relevant to your account with us; |
| 19 | - to send marketing communications related to the services we provide; | |
| 20 | - as required by applicable law or legal requirements pertaining to records retention or for internal administrative purposes; or | |
| 21 | - as specifically authorized by you in writing | |
| 23 | - to send marketing communications related to our products and services, including updates, promotions, news, offers, and similar content; | |
| 24 | - to allow us and our third-party partners to market and advertise our products and services that may be relevant to you; | |
| 25 | - to secure the Sites, products and services, detect fraud and security incidents, and protect against malicious, deceptive, fraudulent, or illegal activity; | |
| 26 | - as required by applicable law, legal process, or legal requirements pertaining to records retention or for internal administrative purposes; or | |
| 27 | - as specifically authorized by you in writing. | |
| 22 | 28 | |
| 23 | We will not share your phone number or consent preferences with third parties/affiliates for their marketing/promotional purposes. | |
| 29 | We will not share your phone number or consent preferences with third-parties for their marketing or promotional purposes. | |
| 24 | 30 | |
| 25 | 3. **Disclosure to Third Parties**. We will not disclose your personal data to third parties except as follows: | |
| 31 | We may de-identify or aggregate information we collect so the information cannot reasonably identify you or your device, or we may collect information that is already in de-identified form. We may use and disclose (including to third-parties) de-identified and aggregate for any purpose, without limitation. | |
| 32 | ||
| 33 | Legal Bases for Processing. The laws in certain jurisdictions (such as those in the European Union and United Kingdom), require us to inform you of the "legal bases" on which we process your information. The legal bases for using your information as set out in this Privacy Policy are as follows: | |
| 34 | ||
| 35 | - where we need to perform the contract we are about to enter into or have entered into with you for the products and services; | |
| 36 | - where it is necessary for our legitimate interests (or those of a third-party) and your interests and fundamental rights do not override those interests; | |
| 37 | - where we need to comply with a legal or regulatory obligation; | |
| 38 | - where we have your consent to process your information in a certain way. | |
| 39 | ||
| 40 | 3. **Disclosure to Third-Parties**. We may disclose your personal data to third-parties as follows: | |
| 26 | 41 | - when we believe disclosure is reasonably required to comply with any law or legal request; |
| 27 | 42 | - to enforce our legal and contractual rights, or to protect the rights and safety of others; |
| 28 | - to third parties who help us provide any part of the Site or the Services, to the limited extent required for such help, and on condition that they may not further disclose your data or use it for any other purpose; or | |
| 43 | - to third-party service providers who help us provide our Sites or products and services and operate our business, which are only permitted to access and use your information for purposes of performing services for us or to comply with applicable legal requirements; | |
| 44 | - to third-party marketing, advertising, and advertising analytics partners to help market and advertise our products and services and provide you with advertising that may be relevant to you (consistent with any consent preferences you have elected); or | |
| 29 | 45 | - as part of a sale of our assets or a merger of our company. |
| 30 | 46 | |
| 31 | We remain responsible for compliance with this Privacy Policy by third parties to whom we disclose your personal data. | |
| 47 | We remain responsible for compliance with this Privacy Policy by third-parties to whom we disclose your personal data. | |
| 32 | 48 | |
| 33 | 4. **Procedures to Protect Personal Data**. We have put in place reasonable measures and appropriate procedures for implementing these policies and for safeguarding the personal data we collect. However, we cannot guarantee that personal data we collect will never be disclosed in a manner inconsistent with this Privacy Policy. We follow generally accepted standards to protect the personal data submitted to us, both during transmission and once it is received. | |
| 34 | 5. **Your Rights over Personal Data that We Maintain**. Upon request, we will provide you with details regarding your personal data that has been collected by us or which is within our systems. If you would like to change information that we maintain about you, you may log into your account and change it or submit a support request for any information to which you don't have access or the ability to change yourself. For changes or deletion of your Personal Data please write to us at: WPEngine, Inc., Attn: Legal Department, 504 Lavaca St., Ste. 1000, Austin, Texas 78701, or email [\[email protected\]](https://wpengine.com/cdn-cgi/l/email-protection). We will respond to your request within a reasonable timeframe. You may opt-out of receiving most e-mails from us by following the "unsubscribe" instructions provided in the e-mails. Alternatively, you may contact us as described herein. Information covered by this Privacy Policy may be deleted upon your request, provided that such deletion may impact our ability to provide you with the Services. If you are our customer, you may not be able to opt out of all emails, including certain administrative or billing communications which are important to the ongoing maintenance of your account. We may keep your personal data for as long as reasonably required to meet the purposes described herein. Additionally, we will retain this information as required by law, as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements | |
| 35 | 6. **EU-U.S. Data Privacy Framework, the UK Extension to the Data Privacy Framework and Swiss-U.S. Data Privacy Frameworks**. We comply with the EU-U.S. Data Privacy Framework ("EU-U.S. DPF") and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF"), and as applicable, the UK Extension of the EU-U.S. Data Privacy Framework ("UK-U.S. DPF") (collectively, the "DPFs") as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the UK (and Gibraltar) in reliance on the UK-U.S. DPF. Further, we adhere to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. Under the DPFs, we are responsible for the processing of personal data that we collect from you and subsequently transfer to third parties acting as agents on our behalf. We comply with the DPF Principles for all onward transfers of personal data from the EU, UK (and Gibraltar), and Switzerland including the onward transfer liability provisions. The U.S. Federal Trade Commission has jurisdiction over our compliance with the DPFs. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including requests made to meet national security or law enforcement requirements. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles shall govern. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S. based third-party dispute resolution provider (free of charge) at [https://feedback-form.truste.com/watchdog/request](https://feedback-form.truste.com/watchdog/request). Under certain conditions you may invoke binding arbitration when other dispute resolution procedures have been exhausted. This is more fully described on the Data Privacy Framework website located at [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf). To learn more about the Data Privacy Framework program, and to view our certification, please visit [https://www.dataprivacyframework.gov](https://www.dataprivacyframework.gov/). | |
| 36 | 7. **California Residents.** If you are a resident of the State of California, this Section addresses your rights and our obligations under the California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2023 (collectively the "California Privacy Laws"). Terms used in this Section have the same meaning as provided in the California Privacy Laws. | |
| 49 | 4. **Procedures to Protect and Retain Personal Data**. We have put in place appropriate procedures for safeguarding the personal data we collect. However, we cannot guarantee that personal data we collect will never be disclosed in a manner inconsistent with this Privacy Policy. We aim to follow generally accepted standards to protect the personal data submitted to us, both during transmission and once it is received. We may keep your personal data for the period required to meet the purposes described herein. Additionally, we will retain this information as required by law, as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. | |
| 37 | 50 | |
| 38 | **Information We Collect** Our Site collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information"). In particular, our Site has collected the following categories of personal information from visitors within the last 12 months: | |
| 51 | 5. **Your Rights and Choices Over Personal Data that We Maintain**. | |
| 52 | If you would like to change information that we maintain about you, you may log into your account and change it or submit a support request for any information to which you don't have access or the ability to change yourself. | |
| 39 | 53 | |
| 40 | Category: Identifiers. | |
| 41 | Examples: A real name, IP address, email address, account name, or other similar identifiers. | |
| 54 | Depending on where you live, you may have certain rights with respect to your information. For example, under the laws various states-such as California, Colorado, Connecticut, Oregon, and others-you may have the right to receive general information about our processing activities, confirm that we are processing your data, request access to all the personal data we process about you, to rectify or correct your data, to receive communication of your data in an interoperable format (if technically feasible), to restrict or oppose the processing of your personal data, to request the deletion of your personal data, and to opt out of the "sale" or "share" of your personal data (or suppress the use of your data for targeted advertising). If you are a California resident, please also see the section "California Residents" below for certain information specific to California residents. Subject to the laws of where you live, if that processing is justified by your prior consent, you may have the right to withdraw your consent at any time. Finally, in the event of a dispute concerning the processing of your personal data, you may have the possibility to file a complaint with the competent supervisory authority. | |
| 42 | 55 | |
| 43 | Category: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | |
| 44 | Examples: A name, address, telephone number, and (if you are applying for a job) your current employment and employment history. | |
| 56 | Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our products or services to you. We also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and certain account information. Applicable law may also permit you to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing such an authorized agent's request. | |
| 45 | 57 | |
| 46 | Category: Internet or other similar network activity. | |
| 47 | Examples: Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. | |
| 58 | We will not discriminate against you for exercising any of your rights as provided for in applicable law. | |
| 48 | 59 | |
| 49 | Category: Geolocation data. | |
| 50 | Examples: Physical location or movements. | |
| 60 | **Email Communications**. You may opt out of receiving promotional and similar emails from us by following the "unsubscribe" instructions provided in the emails. Alternatively, you may contact us as described herein. You may not be able to opt out of all emails, including certain administrative or billing communications which are important to the ongoing maintenance of your account. | |
| 51 | 61 | |
| 52 | Personal information does not include: | |
| 62 | **SMS Communications**. If you have opted in to receiving SMS marketing messages from us, you may opt out at any time by replying with "STOP." | |
| 53 | 63 | |
| 54 | - Publicly available information from government records. | |
| 55 | - De-identified or aggregated consumer information. | |
| 56 | - Information excluded from the California Privacy Laws' scope. | |
| 64 | **Sale/Share/Targeted Advertising Opt Out Rights**. We do not sell personal information for monetary consideration. However, we may allow our third-party advertising and analytics partners to place cookies and similar tracking technologies on our Sites to help market our products and services and allow them to serve you more relevant advertisements as further described in our Cookie Policy located at [https://wpengine.com/legal/cookies/](https://wpengine.com/legal/cookies/). We may also share or use hashed contact information for this purpose. This activity is known as "sharing" or processing your personal information for targeted ads and may be considered "selling" your personal information under the laws in certain U.S. jurisdictions-such as California, Colorado, Connecticut, Oregon, and others. If you (or in applicable states, your authorized agent) would like to opt out of our use or disclosure of your information for such purposes, you can do so through the "Cookie Settings" link or "Do Not Sell or Share My Personal Information" link, in a Sites' footer and following the instructions to opt out. Even if you opt out, you will still see advertising, it just may be less relevant to you, or it may be personalized for you based only on the data that we have collected about you. Please note that you must opt out on each device and each browser where you want your choice to apply. Your preference may be lost if you clear, or your browser is set to clear, cookies. If you have enabled a legally recognized browser-based opt out preference signal (such as Global Privacy Control) on your browser, we recognize such preference in accordance with and to the extent required by applicable law. You will need to turn this on for each browser you use to access our Sites. | |
| 57 | 65 | |
| 58 | We obtain the categories of personal information listed above from the following categories of sources: | |
| 66 | As described above, if you are an end user of one of our customers and you have concerns about the way that customer is managing your personal information or wish to exercise your rights with respect to such personal information (including your rights of access, amendment, or deletion), please contact that customer directly. We will only disclose, modify, block, or take any other action with respect to personal data for which our customer is a controller at the authorization or direction of the customer in accordance with our agreement with that customer, or as required by law. | |
| 59 | 67 | |
| 60 | - Directly from you. For example, from forms you complete on our website. | |
| 61 | - Indirectly from you. For example, from observing your actions on our website or interactions with our advertisers. | |
| 68 | To inquire about any of your rights, please email us at [\[email protected\]](https://wpengine.com/cdn-cgi/l/email-protection#a4c8c1c3c5c8e4d3d4c1cac3cdcac18ac7cbc9) or submit a support request. We will respond to your request within the time period prescribed by applicable law. | |
| 62 | 69 | |
| 63 | Use of Personal Information. We may use, or disclose the personal information we collect for one or more of the following business purposes: | |
| 70 | 6. **EU-U.S. Data Privacy Framework, the UK Extension to the Data Privacy Framework and Swiss-U.S. Data Privacy Frameworks**. We comply with the EU-U.S. Data Privacy Framework ("EU-U.S. DPF"), the UK Extension of the EU-U.S. Data Privacy Framework ("UK-U.S. DPF"), and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF") (collectively, the "DPFs") as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the UK (and Gibraltar) in reliance on the UK-U.S. DPF. Further, we adhere to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. Under the DPFs, we are responsible for the processing of personal data that we collect from you and subsequently transfer to third parties acting as agents on our behalf. We comply with the DPF Principles for all onward transfers of personal data from the EU, UK (and Gibraltar), and Switzerland including the onward transfer liability provisions. The U.S. Federal Trade Commission has jurisdiction over our compliance with the DPFs. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including requests made to meet national security or law enforcement requirements. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles shall govern. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S. based third-party dispute resolution provider, Truste, (free of charge) at [https://feedback-form.truste.com/watchdog/request](https://feedback-form.truste.com/watchdog/request). Under certain conditions you may invoke binding arbitration when other dispute resolution procedures have been exhausted. This is more fully described on the Data Privacy Framework website located at [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf). To learn more about the Data Privacy Framework program, and to view our certification, please visit [https://www.dataprivacyframework.gov](https://www.dataprivacyframework.gov/). | |
| 64 | 71 | |
| 65 | - To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns. | |
| 66 | - To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. | |
| 67 | - To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations. | |
| 68 | - As described to you when collecting your personal information or as otherwise set forth in the California Privacy Laws. | |
| 69 | - We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. | |
| 72 | 7. **California Residents**. If you are a resident of the State of California, this Section addresses your rights and our obligations under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2023 (collectively the "California Privacy Laws"). If you are a resident of the State of California applying for a job with us, our Job Applicant Privacy Notice as provided during the application process through [https://wpengine.com/careers/](https://wpengine.com/careers/) also applies to you. Terms used in this Section have the same meaning as provided in the California Privacy Laws. | |
| 70 | 73 | |
| 71 | **Sharing Personal Information**. We disclose all of the above categories of personal information to our third-party service providers subject, in each case, to a written contract that describes the business purpose of the disclosure and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. | |
| 74 | **Information We Collect**. Our Site and products and services collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information"). In particular, our Site and products and services have collected the following categories of personal information from visitors within the last 12 months: | |
| 72 | 75 | |
| 73 | **Sales of Personal Information**. We do not and will not sell your personal information. | |
| 76 | Category: Identifiers. | |
| 77 | Examples: A real name, IP address, email address, account name, or other similar identifiers. | |
| 74 | 78 | |
| 75 | **Access to Specific Information and Data Portability Rights**. You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will provide: | |
| 79 | Category: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | |
| 80 | Examples: A name, address, and telephone number. | |
| 76 | 81 | |
| 77 | - The categories of personal information we collected about you. | |
| 78 | - The categories of sources for the personal information we collected about you. | |
| 79 | - Our business or commercial purpose for collecting or selling that personal information. | |
| 80 | - The categories of third parties with whom we share that personal information. | |
| 81 | - The specific pieces of personal information we collected about you (also called a data portability request). | |
| 82 | - The categories of personal information we sold to a purchaser, and the categories of recipients. | |
| 83 | - The categories of personal information we disclosed for a business purpose, and the categories of recipients. | |
| 82 | Category: Internet or other similar network activity. | |
| 83 | Examples: Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. | |
| 84 | 84 | |
| 85 | **Deletion Request Rights**. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to: | |
| 85 | Category: Geolocation data. | |
| 86 | Examples: Physical location or movements. | |
| 86 | 87 | |
| 87 | - Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you. | |
| 88 | - Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities. | |
| 89 | - Debug products to identify and repair errors that impair existing intended functionality. | |
| 90 | - Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law. | |
| 91 | - Comply with the California Electronic Communications Privacy Act (Cal. Penal Code §1546 et. seq.). | |
| 92 | - Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent. | |
| 93 | - Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us. | |
| 94 | - Comply with a legal obligation. | |
| 95 | - Make other internal and lawful uses of that information that are compatible with the context in which you provided it. | |
| 88 | Category: Commercial information. | |
| 89 | Examples: Information about your transactions with us, such as products or services you have purchased. | |
| 96 | 90 | |
| 97 | **Exercising Access, Data Portability, and Deletion Rights**. To exercise the access, data portability, and deletion rights described above, you can contact us by email at [\[email protected\]](https://wpengine.com/cdn-cgi/l/email-protection) or by phone at (877) 973-6446. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must: | |
| 91 | Category: Financial information. | |
| 92 | Examples: Payment information stored by our payment processors on our behalf. | |
| 98 | 93 | |
| 99 | - Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. | |
| 100 | - Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. | |
| 101 | - We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request. | |
| 94 | Category: Audio/visual information. | |
| 95 | Examples: Recording customer service or sales calls and interactions. | |
| 102 | 96 | |
| 103 | **Response Timing and Format**. We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically by electronic mail communication. | |
| 97 | Personal information does not include: | |
| 104 | 98 | |
| 105 | - We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. | |
| 99 | - Publicly available information from government records. | |
| 100 | - De-identified or aggregated consumer information. | |
| 101 | - Information excluded from the scope of the California Privacy Laws. | |
| 106 | 102 | |
| 107 | **Non-Discrimination**. We will not discriminate against you for exercising any of your California Privacy Laws rights. Unless permitted by the California Privacy Laws, we will not: | |
| 103 | We obtain the categories of personal information listed above from the following categories of sources: | |
| 108 | 104 | |
| 109 | - Deny you goods or services. | |
| 110 | - Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties. | |
| 111 | - Provide you a different level or quality of goods or services. | |
| 112 | - Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. | |
| 105 | - Directly from you. For example, from forms you complete on our website. | |
| 106 | - Indirectly from you. For example, from observing your actions on our website or interactions with our advertisers. | |
| 113 | 107 | |
| 114 | However, we may offer you certain financial incentives permitted by the California Privacy Laws that can result in different prices, rates, or quality levels. Any California Privacy Laws-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time. | |
| 108 | Use and Disclosure of Personal Information. We may use or disclose the personal information we collect for our business purposes, as further described in the main Privacy Policy above. | |
| 115 | 109 | |
| 116 | California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send us an electronic message through our website or write us at our address listed on our webpage. | |
| 110 | **Sales and Sharing of Personal Information**. California residents have the right to opt out of the "sale" of their personal information and the "sharing" of their personal information for cross-context behavioral advertising purposes. We do not sell personal information for monetary consideration. However, we may allow our third-party advertising and analytics partners to place cookies and similar tracking technologies on our Sites to help market our products and services and allow them to serve you more relevant advertisements as further described in our Cookie Policy located at [https://wpengine.com/legal/cookies/](https://wpengine.com/legal/cookies/). We may also share or use hashed contact information for this purpose. This activity is known as "sharing" your personal information and may be considered "selling" your personal information under California law. If you or your authorized agent would like to opt out of our use or disclosure of your information for such purposes, you can do so through the "Do Not Sell or Share My Personal Information" link in a Sites' footer and following the instructions to opt out. Even if you opt out, you will still see advertising, it just may be less relevant to you, or it may be personalized for you based only on the data that we have collected about you. Please note that you must opt out on each device and each browser where you want your choice to apply. Your preference may be lost if you clear, or your browser is set to clear, cookies. If you have enabled a legally recognized browser-based opt out preference signal (such as Global Privacy Control) on your browser, we recognize such preference in accordance and to the extent required by applicable law. You will need to turn this on for each browser you use to access our Sites. | |
| 111 | ||
| 112 | **Rights Regarding Your Information**. If you are a California resident, you have the following rights with respect to your personal information: | |
| 113 | ||
| 114 | - request that we disclose certain information to you about our collection and use of your personal information over the past 12 months, including: the categories of personal information we collected about you, the categories of sources for the personal information we collected about you, our business or commercial purpose for collecting or selling that personal information, and the categories of third parties with whom we sell or share that personal information. This information is provided in the Privacy Policy above. You also have the right to request the specific pieces of personal information we collected about you; | |
| 115 | - request that we correct any inaccurate information we hold about you, subject to certain limitations under applicable law; | |
| 116 | - request deletion of certain information we hold about you; and/or | |
| 117 | - provide information about the financial incentives we offer you, if any. | |
| 118 | ||
| 119 | Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide products and services to you. We also need to take reasonable steps to verify your identity before responding to a request; please see the "Exercising Your Rights" section. | |
| 120 | ||
| 121 | You may designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent's request. | |
| 122 | ||
| 123 | **Sensitive Personal Information**. California Privacy Laws also allow you to limit the use or disclosure of your "sensitive personal information" (as defined in the California Privacy Laws) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for business purposes for which you cannot opt out under the California Privacy Laws. | |
| 124 | ||
| 125 | **Financial Incentives**. We may offer you certain financial incentives permitted by the California Privacy Laws that can result in different prices, rates, or quality levels. Any California Privacy Laws-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time. | |
| 126 | ||
| 127 | **Exercising Your Rights**. | |
| 128 | To exercise the rights described above, you can contact us by email at [\[email protected\]](https://wpengine.com/cdn-cgi/l/email-protection#761a1311171a3601061318111f18135815191b) or submit a support request. Only you, or a business registered with the California Secretary of State that you authorize to act on your behalf, or a person you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access twice within a 12-month period. Your consumer request must: | |
| 129 | ||
| 130 | - Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. | |
| 131 | - Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. | |
| 132 | ||
| 133 | We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request. | |
| 134 | ||
| 135 | As described above, if you are an end user of one of our customers and you have concerns about the way that customer is managing your personal information or wish to exercise your rights with respect to such personal information (including your rights of access, amendment, or deletion), please contact that customer directly. We will only disclose, modify, block, or take any other action with respect to personal data for which our customer is a controller at the authorization or direction of the customer in accordance with our agreement with that customer, or as required by law. | |
| 136 | ||
| 137 | **Non-Discrimination**. We will not discriminate against you for exercising any of your California Privacy Laws rights. | |
| 138 | ||
| 139 | **Retention of Your Personal Information**. Please see the "Procedures to Protect and Retain Personal Data" section above. | |
| 140 | ||
| 141 | **Shine the Light**. California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Sites or products and services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please see the "Exercising Your Rights" section for more information. |