Privacy Policy

NOTED

FIRST SEEN 2026-09-01 · VERSION 20260901_rev01 · COMPARED WITH 20260831_rev01

What changed, in plain language

WP Engine's privacy policy update is housekeeping plus one helpful addition. The only real change spells out how people in the EU, UK, and Switzerland can complain about how their data is handled: contact WP Engine first, and if that doesn't resolve things, escalate for free to TRUSTe (now at a trustarc.com link). The policy date was refreshed and some scrambled email links were regenerated. Nothing new was added about what data is collected, who it's shared with, or what rights you give up.

Changelog

± CHANGEDPolicy date updated
The 'Page Updated' date moved from January 1, 2026 to August 31, 2026.
January 1, 2026
August 31, 2026
+ ADDEDClear steps added for privacy complaints from the EU, UK, and Switzerland
WP Engine now promises in writing to resolve data-protection complaints and tells you exactly how to escalate: email them first, and if they don't answer in time or you're not satisfied, file a complaint with TRUSTe, an outside dispute service in the U.S. It also states plainly that this service costs you nothing. Before, the policy only pointed at the complaint form without describing the process or the company's commitment.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S. based third-party dispute resolution provider, Truste, (free of charge)
In compliance with the DPFs, we commit to resolve DPF Principles-related complaints about our collection and use of your personal information.
± CHANGEDComplaint form link and provider name corrected
The outside dispute service is now named TRUSTe with a working link at trustarc.com, replacing the older truste.com address. Same service, updated web address.
https://feedback-form.truste.com/watchdog/request
https://feedback-form.trustarc.com/watchdog/request
± CHANGEDArbitration wording reorganized, not expanded
The option to use binding arbitration for unresolved Data Privacy Framework complaints was already in the old version and still applies only after other complaint routes are used. The sentence was reworded and now links to a different page on the government's Data Privacy Framework site. This is an extra option for you, not a requirement, and it does not affect your ability to sue WP Engine.
Under certain conditions you may invoke binding arbitration when other dispute resolution procedures have been exhausted.
For complaints regarding the DPFs compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration.
± CHANGEDScrambled contact email links regenerated
Three spam-protected email links were re-encoded. The visible contact method is unchanged; this is a technical detail of how the address is hidden from spam bots.
To inquire about any of your rights, please email us at
To inquire about any of your rights, please email us at

Full text changes — 20260831_rev01 to 20260901_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 **Page Updated:**
+January 1, 2026
+August 31, 2026
 WPEngine, Inc. ("WP Engine," "we," "us," "our") maintains this Privacy Policy to inform you of our practices with regard to your information we collect from or about you as a data controller in connection with our websites (the "Sites"), through the provision of our products and services, or through any other means, including interactions we have with you online or offline. We may update this Privacy Policy from time to time by providing an updated version on our Sites. The current version of this Privacy Policy may be found at [https://wpengine.com/legal/privacy/](https://wpengine.com/legal/privacy/). By using a Site or our products and services you acknowledge that you have read and understand the practices described herein.
 Please note, this Privacy Policy applies to our data processing activities as a controller of your data such as described above; it does not apply to data collected by our customers who use our products or services to create and manage their own websites, which may collect data from end-users, including personal data ("End-User Personal Data"). If End-User Personal Data is collected by our customers through our products or services, we are the processor and the customer is the controller of such data. We will only use and disclose End-User Personal Data as authorized or directed by the customer and in accordance with our agreement with that customer, or as required by law. If your End-User Personal Data is controlled by one of our customers, and you have concerns about the way that data is managed or wish to exercise your rights with respect to such data (including your rights of access, amendment, or deletion), please contact that customer directly.
 If you are a customer who is subject to data privacy laws, including those of the European Union, the United Kingdom, and various states throughout the United States, the Data Privacy Addendum located at [https://wpengine.com/legal/dpa/](https://wpengine.com/legal/dpa/) as it may be updated from time to time governs the obligations between us with regard to personal data as defined by such laws.
     **SMS Communications**. If you have opted in to receiving SMS marketing messages from us, you may opt out at any time by replying with "STOP."
     **Sale/Share/Targeted Advertising Opt Out Rights**. We do not sell personal information for monetary consideration. However, we may allow our third-party advertising and analytics partners to place cookies and similar tracking technologies on our Sites to help market our products and services and allow them to serve you more relevant advertisements as further described in our Cookie Policy located at [https://wpengine.com/legal/cookies/](https://wpengine.com/legal/cookies/). We may also share or use hashed contact information for this purpose. This activity is known as "sharing" or processing your personal information for targeted ads and may be considered "selling" your personal information under the laws in certain U.S. jurisdictions-such as California, Colorado, Connecticut, Oregon, and others. If you (or in applicable states, your authorized agent) would like to opt out of our use or disclosure of your information for such purposes, you can do so through the "Cookie Settings" link or "Do Not Sell or Share My Personal Information" link, in a Sites' footer and following the instructions to opt out. Even if you opt out, you will still see advertising, it just may be less relevant to you, or it may be personalized for you based only on the data that we have collected about you. Please note that you must opt out on each device and each browser where you want your choice to apply. Your preference may be lost if you clear, or your browser is set to clear, cookies. If you have enabled a legally recognized browser-based opt out preference signal (such as Global Privacy Control) on your browser, we recognize such preference in accordance with and to the extent required by applicable law. You will need to turn this on for each browser you use to access our Sites.
     As described above, if you are an end user of one of our customers and you have concerns about the way that customer is managing your personal information or wish to exercise your rights with respect to such personal information (including your rights of access, amendment, or deletion), please contact that customer directly. We will only disclose, modify, block, or take any other action with respect to personal data for which our customer is a controller at the authorization or direction of the customer in accordance with our agreement with that customer, or as required by law.
+    To inquire about any of your rights, please email us at [\[email protected\]](https://wpengine.com/cdn-cgi/l/email-protection#573b3230363b1720273239303e39327934383a) or submit a support request. We will respond to your request within the time period prescribed by applicable law.
+    To inquire about any of your rights, please email us at [\[email protected\]](https://wpengine.com/cdn-cgi/l/email-protection#761a1311171a3601061318111f18135815191b) or submit a support request. We will respond to your request within the time period prescribed by applicable law.
+. **EU-U.S. Data Privacy Framework, the UK Extension to the Data Privacy Framework and Swiss-U.S. Data Privacy Frameworks**. We comply with the EU-U.S. Data Privacy Framework ("EU-U.S. DPF"), the UK Extension of the EU-U.S. Data Privacy Framework ("UK-U.S. DPF"), and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF") (collectively, the "DPFs") as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the UK (and Gibraltar) in reliance on the UK-U.S. DPF. Further, we adhere to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. Under the DPFs, we are responsible for the processing of personal data that we collect from you and subsequently transfer to third parties acting as agents on our behalf. We comply with the DPF Principles for all onward transfers of personal data from the EU, UK (and Gibraltar), and Switzerland including the onward transfer liability provisions. The U.S. Federal Trade Commission has jurisdiction over our compliance with the DPFs. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including requests made to meet national security or law enforcement requirements. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles shall govern. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S. based third-party dispute resolution provider, Truste, (free of charge) at [https://feedback-form.truste.com/watchdog/request](https://feedback-form.truste.com/watchdog/request). Under certain conditions you may invoke binding arbitration when other dispute resolution procedures have been exhausted. This is more fully described on the Data Privacy Framework website located at [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf). To learn more about the Data Privacy Framework program, and to view our certification, please visit [https://www.dataprivacyframework.gov](https://www.dataprivacyframework.gov/).
+. **EU-U.S. Data Privacy Framework, the UK Extension to the Data Privacy Framework and Swiss-U.S. Data Privacy Frameworks**. We comply with the EU-U.S. Data Privacy Framework ("EU-U.S. DPF"), the UK Extension of the EU-U.S. Data Privacy Framework ("UK-U.S. DPF"), and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF") (collectively, the "DPFs") as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the UK (and Gibraltar) in reliance on the UK-U.S. DPF. Further, we adhere to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. Under the DPFs, we are responsible for the processing of personal data that we collect from you and subsequently transfer to third parties acting as agents on our behalf. We comply with the DPF Principles for all onward transfers of personal data from the EU, UK (and Gibraltar), and Switzerland including the onward transfer liability provisions. The U.S. Federal Trade Commission has jurisdiction over our compliance with the DPFs. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including requests made to meet national security or law enforcement requirements. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles shall govern. In compliance with the DPFs, we commit to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the DPFs should first contact us via email at [\[email protected\]](https://wpengine.com/cdn-cgi/l/email-protection#b1ddd4d6d0ddf1c6c1d4dfd6d8dfd49fd2dedc). We commit to refer unresolved complaints concerning our handling of personal data received in reliance on the DPFs to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit [https://feedback-form.trustarc.com/watchdog/request](https://feedback-form.trustarc.com/watchdog/request) for more information or to file a complaint. These dispute resolution services are provided at no cost to you. For complaints regarding the DPFs compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. This is more fully described on the Data Privacy Framework website located at [https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction](https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction). To learn more about the Data Privacy Framework program, and to view our certification, please visit [https://www.dataprivacyframework.gov](https://www.dataprivacyframework.gov/).
 . **California Residents**. If you are a resident of the State of California, this Section addresses your rights and our obligations under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2023 (collectively the "California Privacy Laws"). If you are a resident of the State of California applying for a job with us, our Job Applicant Privacy Notice as provided during the application process through [https://wpengine.com/careers/](https://wpengine.com/careers/) also applies to you. Terms used in this Section have the same meaning as provided in the California Privacy Laws.
     **Information We Collect**. Our Site and products and services collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information"). In particular, our Site and products and services have collected the following categories of personal information from visitors within the last 12 months:
 Category: Identifiers.
 **Sensitive Personal Information**. California Privacy Laws also allow you to limit the use or disclosure of your "sensitive personal information" (as defined in the California Privacy Laws) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for business purposes for which you cannot opt out under the California Privacy Laws.
 **Financial Incentives**. We may offer you certain financial incentives permitted by the California Privacy Laws that can result in different prices, rates, or quality levels. Any California Privacy Laws-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.
 **Exercising Your Rights**.
+To exercise the rights described above, you can contact us by email at [\[email protected\]](https://wpengine.com/cdn-cgi/l/email-protection#5d31383a3c311d2a2d38333a343338733e3230) or submit a support request. Only you, or a business registered with the California Secretary of State that you authorize to act on your behalf, or a person you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access twice within a 12-month period. Your consumer request must:
+To exercise the rights described above, you can contact us by email at [\[email protected\]](https://wpengine.com/cdn-cgi/l/email-protection#355950525459754245505b525c5b501b565a58) or submit a support request. Only you, or a business registered with the California Secretary of State that you authorize to act on your behalf, or a person you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access twice within a 12-month period. Your consumer request must:
 - Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
 - Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
 We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.