At Squarespace, we believe that privacy is a fundamental right. We are committed to protecting the personal information of our users, their customers, and visitors to our sites. This Privacy Policy describes how Squarespace (collectively, "Squarespace," "we," "us," or "our") collects, uses, processes, and shares your personal information when you visit our websites, use our mobile applications, or interact with our platform (collectively, the "Services"). We are committed to being transparent about our data practices and ensuring that you have control over your information.

By using our Services, you acknowledge that you have read and understood this Privacy Policy. This policy applies to all users, including site visitors, registered users, and customers of our users ("End Users"). If you do not agree with our policies and practices, your choice is not to use our Services. We strive to process your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect information about you in three primary ways: directly from you, automatically through your use of our Services, and from third parties. The types of information we collect depend on how you interact with us.

1.1 Information You Provide to Us

When you create an account, purchase a subscription, or contact support, you voluntarily provide us with information. This may include:

• Account Information: When you sign up for a Squarespace account, we collect your name, email address, password, and phone number. If you sign up using a third-party service, we may receive information from that service as well.
• Billing Information: To process payments for our Services, we collect billing details such as your credit card number, billing address, and transaction history. Please note that sensitive payment data is processed securely by our third-party payment processors and is not stored directly on our servers.
• Profile Information: You may choose to provide additional information for your public profile, such as a biography, profile picture, social media links, or business details.
• User Content: We collect the content you create, upload, or store on our platform, including text, images, videos, audio files, and product listings. This includes content you post on your websites or in our community forums.
• Communications: If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
• Applicant Information: If you apply for a job with us, we collect the information you provide in your application, such as your resume, cover letter, and employment history.

1.2 Information Collected Automatically

When you access our Services, we automatically collect certain technical information about your device and usage patterns. This helps us improve our platform and ensure security. This includes:

• Log Data: Our servers automatically record information ("log data") created by your use of the Services. Log data may include information such as your Internet Protocol (IP) address, browser type, operating system, referral/exit pages, visited pages, device ID, and search terms.
• Usage Data: We collect information about how you interact with our Services, such as the features you use, the actions you take, and the time, frequency, and duration of your activities. This helps us understand user behavior and improve the user experience.
• Device Information: We collect information about the device you use to access our Services, including the hardware model, operating system and version, unique device identifiers, and mobile network information.
• Location Information: We may determine your approximate location based on your IP address to provide localized content and comply with local laws.
• Cookies and Tracking Technologies: We use cookies, beacons, pixels, tags, and scripts to analyze trends, administer the site, track users' movements around the site, and to gather demographic information about our user base as a whole. For more details, please refer to our Cookie Policy section below.

1.3 Information from Third Parties

We may receive information about you from third-party partners, such as:

• Social Media Platforms: If you register or log in using a social media account (e.g., Google or Facebook), we receive basic profile information from that service, such as your name and email address, in accordance with your privacy settings on that platform.
• Payment Processors: We receive information from payment processors regarding the status of transactions and payment methods to confirm purchases and prevent fraud.
• Marketing Partners: We may receive data from marketing partners to help us optimize our advertising campaigns, measure their effectiveness, and better understand user demographics.
• Publicly Available Sources: We may collect information from publicly available sources to verify information provided by you or to enhance our data.

2. How We Use Your Information

We use the collected information for various business and operational purposes, including but not limited to:

2.1 Providing and Improving Services

We use your information to create and manage your account, process payments, host your website, and provide customer support. We analyze usage trends to troubleshoot issues, develop new features, and enhance the performance, speed, and reliability of our platform. This includes using AI and machine learning technologies to improve our design intelligence and automated tools.

2.2 Communication

We use your contact information to send you administrative notifications, such as order confirmations, invoice receipts, password reset instructions, and expiration notices. We also use your information to send newsletters, promotional offers, surveys, and updates about Squarespace products and services, provided you have opted into such communications. You can opt out of marketing communications at any time.

2.3 Security and Fraud Prevention

We use your information to monitor and verify identity, detect and prevent fraudulent activities, unauthorized access, spam, and other illegal activities. We use data to maintain the integrity of our platform, protect the safety of our users, and enforce our Terms of Service.

2.4 Personalization

We use your information to tailor your experience on our platform. This includes recommending website templates, design features, or content that may be relevant to your specific industry, interests, and business needs.

2.5 Legal Compliance

We may use your information to comply with applicable laws, regulations, legal processes, or governmental requests. This includes responding to subpoenas, court orders, or other legal demands, as well as enforcing our legal agreements and policies.

3. Sharing and Disclosure of Information

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

• Service Providers: We engage trusted third-party companies and individuals to perform functions on our behalf, such as web hosting, data analysis, payment processing, email delivery, customer service, and marketing assistance. These providers have access to personal information only as needed to perform their specific functions and are obligated to maintain its confidentiality and security.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, user information may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
• Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation, process, or request; (b) protect and defend the rights, property, or safety of Squarespace, our users, or the public; (c) prevent or investigate possible wrongdoing in connection with the Services; or (d) protect against legal liability.
• With Your Consent: We may share your information with third parties when we have your explicit consent to do so. For example, if you choose to integrate a third-party extension or app with your Squarespace site, we may share necessary data with that third party.
• Aggregated and De-Identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you with our partners or for public reports on industry trends.

4. Cookies and Tracking Technologies

Squarespace uses cookies and similar technologies (such as web beacons, pixels, and local storage) to enhance your experience, gather information about usage, and deliver targeted advertising.

We use the following types of cookies:

• Essential Cookies: These cookies are necessary for the website to function correctly (e.g., keeping you logged in, remembering items in your cart). You cannot opt out of these cookies.
• Performance/Analytics Cookies: These cookies help us understand how visitors interact with our site by collecting and reporting information anonymously. They allow us to measure and improve the performance of our site.
• Functional Cookies: These cookies allow the website to remember choices you make (such as your user name, language, or region) and provide enhanced, more personal features.
• Targeting/Advertising Cookies: These cookies are used to deliver relevant advertisements to you and track the effectiveness of our marketing campaigns. They track your browsing habits and may share this information with third parties.

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling certain cookies may impact the functionality of our Services and your ability to use certain features.

5. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your account is terminated, we may retain certain information for legitimate business purposes, such as complying with legal obligations (e.g., tax and accounting records), resolving disputes, preventing fraud, and enforcing our agreements.

Once the retention period expires or data is no longer needed, it is securely deleted, anonymized, or isolated from further processing.

6. Security of Your Information

We take the security of your data seriously and implement industry-standard technical, administrative, and organizational measures to protect it. These measures include:

• Encryption: We use encryption (TLS/SSL) for data in transit and encryption at rest for sensitive data.
• Access Controls: We enforce strict access controls, ensuring that only authorized personnel have access to personal information.
• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential risks.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security measures.

However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for keeping your account credentials confidential and for choosing a strong password.

7. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information. Squarespace is committed to facilitating the exercise of these rights, which may include:

• Right to Access: You have the right to request copies of your personal information that we hold.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal information, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information, under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your personal information, under certain conditions, including for direct marketing purposes.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or through our Help Center. We will respond to your request within a reasonable timeframe and in accordance with applicable data protection laws. We may require you to verify your identity before processing your request.

8. International Data Transfers

Squarespace operates globally, and your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that are different from those of your country.

When we transfer personal information from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of protection, we rely on appropriate safeguards such as the Standard Contractual Clauses (SCCs) approved by the European Commission. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information without parental consent, we will take steps to delete such information from our servers. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected].

10. Third-Party Links

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. This Privacy Policy applies solely to information collected by Squarespace.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy. In some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you an email notification).

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Services after the posting of changes constitutes your acceptance of such changes.

12. Contact Us

If you have any questions about this Privacy Policy, our data practices, or your dealings with our Services, or if you wish to exercise your privacy rights, please contact us:

• By email: [email protected]
• By visiting this page on our website: Squarespace Help Center
• By mail: Squarespace Inc., Attention: Legal - Privacy, 8 Clarkson St, New York, NY 10014, USA

For users in the EEA or UK, you may also contact our designated representative or lodge a complaint with a supervisory authority if you believe we have not adequately addressed your privacy concerns.