Automattic Privacy Policy changes — 20231101_rev01

109

110

#### _How We Share Information_

111

112

We share information about you in limited circumstances, and with appropriate safeguards on your privacy. These are spelled out below, as well as in the section called [Ads and Analytics Services Provided by Others](https://automattic.com/privacy/):

113

114

- **Subsidiaries and independent contractors:** We may disclose information about you to our subsidiaries and independent contractors who need the information to help us provide our Services or process the information on our behalf. We require our subsidiaries and independent contractors to follow this Privacy Policy for any personal information that we share with them.

115

- **Third-party vendors:** We may share information about you with third-party vendors who need the information in order to provide their services to us, or to provide their services to you or your site. This includes vendors that help us provide our Services to you (like Stripe, which powers WooCommerce Payments, payment providers that process your credit and debit card information, payment providers you use for your own ecommerce operations, fraud prevention services that allow us to analyze fraudulent payment transactions, cloud storage services, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you, registrars, registries, data escrow services that allow us to provide domain registration services, and your hosting provider if your site is not hosted by Automattic); those that assist us with our marketing efforts (e.g., by providing tools for identifying a specific marketing target group or improving our marketing campaigns, and by placing ads to market our services); those that help us understand and enhance our Services (like analytics providers); those that make tools to help us run our operations (like programs that help us with task management, scheduling, word processing, email and other communications, and collaboration among our teams); other third-party tools that help us manage operations; and companies that make products available on our websites (like the extensions on WooCommerce.com), who may need information about you in order to, for example, provide technical or other support services to you. We require vendors to agree to privacy commitments in order to share information with them. Other vendors are listed in our more specific policies (e.g., our [Cookie Policy](https://automattic.com/cookies/)).

115

- **Third-party vendors:** We may share information about you with third-party vendors who need the information in order to provide their services to us, or to provide their services to you or your site. This includes vendors that help us provide our Services to you (like Stripe, which powers WooPayments, payment providers that process your credit and debit card information, payment providers you use for your own ecommerce operations, fraud prevention services that allow us to analyze fraudulent payment transactions, cloud storage services, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you, registrars, registries, data escrow services that allow us to provide domain registration services, and your hosting provider if your site is not hosted by Automattic); those that assist us with our marketing efforts (e.g., by providing tools for identifying a specific marketing target group or improving our marketing campaigns, and by placing ads to market our services); those that help us understand and enhance our Services (like analytics providers); those that make tools to help us run our operations (like programs that help us with task management, scheduling, word processing, email and other communications, and collaboration among our teams); other third-party tools that help us manage operations; and companies that make products available on our websites (like the extensions on Woo.com), who may need information about you in order to, for example, provide technical or other support services to you. We require vendors to agree to privacy commitments in order to share information with them. Other vendors are listed in our more specific policies (e.g., our [Cookie Policy](https://automattic.com/cookies/)).

116

- **Legal and regulatory requirements:** We may disclose information about you in response to a subpoena, court order, or other governmental request. For more information on how we respond to requests for information about WordPress.com users, please see our [Legal Guidelines](https://en.support.wordpress.com/report-blogs/legal-guidelines/). Additionally, if you have a domain registered with WordPress.com, we may share your information to comply with the Internet Corporation for Assigned Names and Numbers' (ICANN) regulations, rules, or policies. For example, your information relating to your domain registration may be available in the WHOIS database, or we may be required to share your information with ICANN-approved Dispute Resolution Service Providers. Please see our [Domain Registrations and Privacy support document](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/) for more details.

117

- **To protect rights, property, and others:** We may disclose information about you when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of Automattic, third parties, or the public at large. For example, if we have a good faith belief that there is an imminent danger of death or serious physical injury, we [may disclose information related to the emergency without delay](https://en.support.wordpress.com/report-blogs/legal-guidelines/).

118

- **Business transfers:** In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company, or in the unlikely event that Automattic goes out of business or enters bankruptcy, user information would likely be one of the assets that is transferred or acquired by a third party. If any of these events were to happen, this Privacy Policy would continue to apply to your information and the party receiving your information may continue to use your information, but only consistent with this Privacy Policy.

119

- **With your consent:** We may share and disclose information with your consent or at your direction. For example, we may share your information with third parties when you authorize us to do so, like when you connected your site to a social media service through our Publicize feature.

120

- **Aggregated or de-identified information:** We may share information that has been aggregated or de-identified, so that it can no longer reasonably be used to identify you. For instance, we may publish aggregate statistics about the use of our Services, or share a hashed version of your email address to facilitate customized ad campaigns on other platforms.

121

- **Site owners:** If you have a WordPress.com account and interact with another site using our Services, your information may be shared with the administrators of the site. For example, if you leave a comment on a site created on WordPress.com or running Jetpack, your IP address and the email address associated with your WordPress.com account may be shared with the administrator(s) of the site where you left the comment. Or if you make a payment (like via the [Payments feature](https://en.support.wordpress.com/recurring-payments/)) to a site, your public display name, user name, and email address may be shared with the administrator(s) of the site. Or if you follow/subscribe to another WordPress.com site we will share your email address with the site owner.

 ### Who We Are and What This Policy Covers
 Howdy! We are the folks behind a variety of products and services designed to allow anyone - from bloggers, to photographers, small business owners, and enterprises - to take full advantage of the power and promise of the open web. Our mission is to democratize publishing and commerce so that anyone with a story can tell it, and anyone can turn their great idea into a livelihood. We believe in powering the open internet with code that is open source and are proud to say that the vast majority of our work is available under the General Public License ("GPL"). Unlike most other services, because our GPL code is public, you can actually download and take a look at that code to see how it works.
 This Privacy Policy applies to information that we collect about you when you use:
+- Our websites (including automattic.com, wordpress.com, jetpack.com, woocommerce.com, crowdsignal.com, gravatar.com, intensedebate.com, vaultpress.com, akismet.com, simplenote.com, simperium.com, leandomainsearch.com, cloudup.com, longreads.com, atavist.com, mailpoet.com, automatewoo.com, jetpackcrm.com, happy.tools, wpcourses.com, wpscan.com, newspack.pub, and wp.cloud);
+- Our websites (including automattic.com, wordpress.com, jetpack.com, woo.com, crowdsignal.com, gravatar.com, intensedebate.com, vaultpress.com, akismet.com, simplenote.com, simperium.com, leandomainsearch.com, cloudup.com, longreads.com, atavist.com, mailpoet.com, automatewoo.com, jetpackcrm.com, happy.tools, wpcourses.com, wpscan.com, newspack.pub, and wp.cloud);
 - Our mobile applications (including the WordPress mobile app for Android and iOS);
+- Our other Automattic products, services, and features that are available on or through our websites (for example, WordPress.com plans, the Payments feature, the Pay with PayPal block, WordPress.com, Jetpack, the WooCommerce Shipping & Tax extension, Gravatar, the IntenseDebate comment management system, Akismet plans, Simplenote, Simperium, Cloudup, Longreads, MailPoet, AutomateWoo, Jetpack CRM, Happy Tools, WordPress.com Courses, WPScan and Newspack); and
+- Our other Automattic products, services, and features that are available on or through our websites (for example, WordPress.com plans, the Payments feature, the Pay with PayPal block, WordPress.com, Jetpack, Woo Shipping, Woo Tax, Gravatar, the IntenseDebate comment management system, Akismet plans, Simplenote, Simperium, Cloudup, Longreads, MailPoet, AutomateWoo, Jetpack CRM, Happy Tools, WordPress.com Courses, WPScan and Newspack); and
 - Other users' websites that use our Services, while you are logged in to your account with us.
 This Privacy Policy also applies to information we collect when you apply for a job at Automattic or one of our subsidiaries.
 Throughout this Privacy Policy we'll refer to our websites, mobile applications, and other products and services collectively as "Services." And if you'd like to learn more about which Automattic company is the controller of information about you, take a look at the section below on [Controllers and Responsible Companies](https://automattic.com/privacy/).
 #### _Information You Provide to Us_
 It's probably no surprise that we collect information that you provide to us directly. Here are some examples:
 - **Basic account information:** We ask for basic information from you in order to set up your account. For example, we require individuals who sign up for a WordPress.com account to provide an email address and password, along with a username or name - and that's it. You may provide us with more information - like your address and other information you want to share - but we don't require that information to create a WordPress.com account.
 - **Public profile information:** If you have an account with us, we collect the information that you provide for your public profile. For example, if you have a WordPress.com account, your username is part of that public profile, along with any other information you put into your public profile, like a photo or an "About Me" description. Your public profile information is just that - public - so please keep that in mind when deciding what information you would like to include.
+- **Payment and contact information:** There are various ways in which you may provide us payment information and associated contact information. For example, if you buy something from us or earn revenue through your site, we'll collect information to process those payments and contact you. If you buy something from us - a subscription to a WordPress.com plan, a premium theme, a [custom domain](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/), some Longreads swag - or if you pay fees to a person or business through their WordPress.com site (for example via the Payments feature or the Pay with PayPal block), you'll provide additional personal and payment information like your name, credit card information, and contact information. We also keep a record of the purchases you've made. If you use our Ecommerce Services (including [Store on WordPress.com,](https://en.support.wordpress.com/store/) [WooCommerce Shipping & Tax](https://docs.woocommerce.com/document/woocommerce-services/), and WooCommerce Payments), you'll have to create a WordPress.com account or connect an existing account and, for some Services, provide your site URL. You may also provide us with financial details to set up a payments integration, like the email address for your Stripe or PayPal account or your bank account information. Additionally, if you use [WooPay](https://woo.app/) to make purchases on other sites, we will store the contact information and payment information you provide to that service. And if you participate in a revenue sharing opportunity for your site, like [WordAds](https://wordads.co/), you'll provide some additional information - for example, a tax ID or other identifier so we can process payments to you.
+- **Payment and contact information:** There are various ways in which you may provide us payment information and associated contact information. For example, if you buy something from us or earn revenue through your site, we'll collect information to process those payments and contact you. If you buy something from us - a subscription to a WordPress.com plan, a premium theme, a [custom domain](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/), some Longreads swag - or if you pay fees to a person or business through their WordPress.com site (for example via the Payments feature or the Pay with PayPal block), you'll provide additional personal and payment information like your name, credit card information, and contact information. We also keep a record of the purchases you've made. If you use our Ecommerce Services (including [Store on WordPress.com,](https://en.support.wordpress.com/store/) Woo Shipping, Woo Tax, and WooPayments), you'll have to create a WordPress.com account or connect an existing account and, for some Services, provide your site URL. You may also provide us with financial details to set up a payments integration, like the email address for your Stripe or PayPal account or your bank account information. Additionally, if you use [WooPay](https://woo.app/) to make purchases on other sites, we will store the contact information and payment information you provide to that service. And if you participate in a revenue sharing opportunity for your site, like [WordAds](https://wordads.co/), you'll provide some additional information - for example, a tax ID or other identifier so we can process payments to you.
 - **Business Profile:** Some of our products collect additional information from you as part of creating a user/customer profile. For example, if you are a Jetpack CRM customer we may add you to our customer relationship database (powered by Jetpack CRM!) using information you provide us including your name, your employer, your job title or role, your contact information, and your communications with us. If you are a Happy Tools user, we use information you provide us like your timezone and location information, your company and team information, and your contact information, to set up your account and power the Service's features.
 - **Content information:** You might provide us with information about you in draft and published content (a blog post or comment that includes biographic information about you, or any media or files you upload).
 - **Credentials:** Depending on the Services you use, you may provide us with credentials for your self-hosted website (like SSH, FTP, and SFTP username and password). Jetpack and VaultPress users may provide us with these credentials in order to use our one-click restore feature if there is a problem with their site, or to allow us to troubleshoot problems more quickly.
 - **Communications with us (hi there!):** You may also provide us with information when you respond to surveys, communicate with our Happiness Engineers about a support question, post a question in our public forums, or sign up for a newsletter like the one we send through Longreads. When you communicate with us via form, email, phone, WordPress.com comment, or otherwise, we store a copy of our communications (including any call recordings as permitted by applicable law).
 - **Job applicant information:** If you apply for a job with us - awesome! You may provide us with information like your name, contact information, resume or CV, professional or personal references, similar professional and employment-related data, and work authorization verification as part of the application process. We may also collect additional information about you during the process, like background and credit checks (in applicable jurisdictions and only for certain job roles). You may also provide us with demographic information when required by law or to support our diverse workplace initiatives, such as your gender, racial or ethnic origin, veteran status, and disability status if you voluntarily submit such information as part of your application. We collect demographic information in accordance with applicable law, and do not request demographic information in jurisdictions where it may be prohibited. We will only use this sensitive information to accommodate a disability or illness, comply with legal obligations, protect the health and safety of our employees, and facilitate our internal programs relating to diversity, inclusion, and anti-discrimination.
 #### _Information We Collect from Other Sources_
 We may also get information about you from other sources. For example:
 - **Third Party Login:** If you create or log in to your WordPress.com account through another service (like Google) we'll receive associated login information (e.g. a connection token, your username, your email address)
 - **Social Sharing Services:** If you connect your website or account to a social media service (like Twitter) through our [Publicize feature](https://en.support.wordpress.com/publicize/), we'll receive information from that service (e.g., your username, basic profile information, friends list) via the authorization procedures for that service.
+- **Financial Account Info****:** If you use WooCommerce Payments, we'll receive information relating to your Stripe account, such as your email address and phone number. If you use WooPay, we'll receive your payment information from Stripe.
+- **Financial Account Info****:** If you use WooPayments, we'll receive information relating to your Stripe account, such as your email address and phone number. If you use WooPay, we'll receive your payment information from Stripe.
 - **Google Account Information:** When you connect your Google account to your Newspack powered site, we may access certain Google user data such as your Google Ad Manager Configuration (the network code and your ad units) and your Google Analytics data to allow you to access and manage features more seamlessly. For example, you may be able to manage your Google ads and see your Google Analytics data directly within the dashboard of your Newspack powered site.
 The information we receive depends on which services you use or authorize and what options are available.
 Third-party services may also give us information, like mailing addresses for individuals who are not yet our users (but we hope will be!). We use this information for marketing purposes like postcards and other mailers advertising our Services.
 #### _How We Share Information_
 We share information about you in limited circumstances, and with appropriate safeguards on your privacy. These are spelled out below, as well as in the section called [Ads and Analytics Services Provided by Others](https://automattic.com/privacy/):
 - **Subsidiaries and independent contractors:** We may disclose information about you to our subsidiaries and independent contractors who need the information to help us provide our Services or process the information on our behalf. We require our subsidiaries and independent contractors to follow this Privacy Policy for any personal information that we share with them.
+- **Third-party vendors:** We may share information about you with third-party vendors who need the information in order to provide their services to us, or to provide their services to you or your site. This includes vendors that help us provide our Services to you (like Stripe, which powers WooCommerce Payments, payment providers that process your credit and debit card information, payment providers you use for your own ecommerce operations, fraud prevention services that allow us to analyze fraudulent payment transactions, cloud storage services, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you, registrars, registries, data escrow services that allow us to provide domain registration services, and your hosting provider if your site is not hosted by Automattic); those that assist us with our marketing efforts (e.g., by providing tools for identifying a specific marketing target group or improving our marketing campaigns, and by placing ads to market our services); those that help us understand and enhance our Services (like analytics providers); those that make tools to help us run our operations (like programs that help us with task management, scheduling, word processing, email and other communications, and collaboration among our teams); other third-party tools that help us manage operations; and companies that make products available on our websites (like the extensions on WooCommerce.com), who may need information about you in order to, for example, provide technical or other support services to you. We require vendors to agree to privacy commitments in order to share information with them. Other vendors are listed in our more specific policies (e.g., our [Cookie Policy](https://automattic.com/cookies/)).
+- **Third-party vendors:** We may share information about you with third-party vendors who need the information in order to provide their services to us, or to provide their services to you or your site. This includes vendors that help us provide our Services to you (like Stripe, which powers WooPayments, payment providers that process your credit and debit card information, payment providers you use for your own ecommerce operations, fraud prevention services that allow us to analyze fraudulent payment transactions, cloud storage services, postal and email delivery services that help us stay in touch with you, customer chat and email support services that help us communicate with you, registrars, registries, data escrow services that allow us to provide domain registration services, and your hosting provider if your site is not hosted by Automattic); those that assist us with our marketing efforts (e.g., by providing tools for identifying a specific marketing target group or improving our marketing campaigns, and by placing ads to market our services); those that help us understand and enhance our Services (like analytics providers); those that make tools to help us run our operations (like programs that help us with task management, scheduling, word processing, email and other communications, and collaboration among our teams); other third-party tools that help us manage operations; and companies that make products available on our websites (like the extensions on Woo.com), who may need information about you in order to, for example, provide technical or other support services to you. We require vendors to agree to privacy commitments in order to share information with them. Other vendors are listed in our more specific policies (e.g., our [Cookie Policy](https://automattic.com/cookies/)).
 - **Legal and regulatory requirements:** We may disclose information about you in response to a subpoena, court order, or other governmental request. For more information on how we respond to requests for information about WordPress.com users, please see our [Legal Guidelines](https://en.support.wordpress.com/report-blogs/legal-guidelines/). Additionally, if you have a domain registered with WordPress.com, we may share your information to comply with the Internet Corporation for Assigned Names and Numbers' (ICANN) regulations, rules, or policies. For example, your information relating to your domain registration may be available in the WHOIS database, or we may be required to share your information with ICANN-approved Dispute Resolution Service Providers. Please see our [Domain Registrations and Privacy support document](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/) for more details.
 - **To protect rights, property, and others:** We may disclose information about you when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of Automattic, third parties, or the public at large. For example, if we have a good faith belief that there is an imminent danger of death or serious physical injury, we [may disclose information related to the emergency without delay](https://en.support.wordpress.com/report-blogs/legal-guidelines/).
 - **Business transfers:** In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company, or in the unlikely event that Automattic goes out of business or enters bankruptcy, user information would likely be one of the assets that is transferred or acquired by a third party. If any of these events were to happen, this Privacy Policy would continue to apply to your information and the party receiving your information may continue to use your information, but only consistent with this Privacy Policy.
 - **With your consent:** We may share and disclose information with your consent or at your direction. For example, we may share your information with third parties when you authorize us to do so, like when you connected your site to a social media service through our Publicize feature.
 - **Aggregated or de-identified information:** We may share information that has been aggregated or de-identified, so that it can no longer reasonably be used to identify you. For instance, we may publish aggregate statistics about the use of our Services, or share a hashed version of your email address to facilitate customized ad campaigns on other platforms.
 - **Site owners:** If you have a WordPress.com account and interact with another site using our Services, your information may be shared with the administrators of the site. For example, if you leave a comment on a site created on WordPress.com or running Jetpack, your IP address and the email address associated with your WordPress.com account may be shared with the administrator(s) of the site where you left the comment. Or if you make a payment (like via the [Payments feature](https://en.support.wordpress.com/recurring-payments/)) to a site, your public display name, user name, and email address may be shared with the administrator(s) of the site. Or if you follow/subscribe to another WordPress.com site we will share your email address with the site owner.
 Automattic's Services are worldwide. Different Automattic companies are the controller (or co-controller) of personal information, which means that they are the company responsible for processing that information, based on the particular service and the location of the individual using our Services.
 Depending on the Services you use, more than one company may be the controller of your personal data. Generally, the "controller" is the Automattic company that entered into the contract with you under the Terms of Service for the product or service you use. In addition, Automattic Inc., our US-based company, is the controller for some of the processing activities across all of our Services worldwide.
 The chart below explains the current controllers for processing your personal information. We use the term "Designated Countries" to refer to Australia, Canada, Japan, Mexico, New Zealand, Russia, and all countries located in Europe (including the UK and ROI).
+_**All Automattic Services (except WooCommerce)**_
+_**Automattic Services (except Woo)**_
+<table><tbody><tr><td>If you reside outside of the Designated Countries:</td><td><strong>Automattic Inc.</strong><br>60 29th Street #343<br>San Francisco, CA 94110</td></tr><tr><td>If you reside in the Designated Countries:</td><td><strong>Aut O'Mattic A8C Ireland Ltd.</strong><br>Grand Canal Dock, 25 Herbert Pl<br>Dublin, D02 AY86<br>Ireland<p>Automattic Inc. is also the controller for some of the processing activities related to Services provided by Aut O'Mattic A8C Ireland Ltd.</p></td></tr></tbody></table>
+<table><tbody><tr><td>If you reside outside of the Designated Countries:</td><td><strong>Automattic Inc.</strong><br>60 29th Street #343<br>San Francisco, CA 94110</td></tr><tr><td>If you reside in the Designated Countries:</td><td><strong>Aut O'Mattic A8C Ireland Ltd.</strong><br>Grand Canal Dock, 25 Herbert Pl<br>Dublin, D02 AY86<br>IrelandAutomattic Inc. is also the controller for some of the processing activities related to Services provided by Aut O'Mattic A8C Ireland Ltd.</td></tr></tbody></table>
+_**WooCommerce Services
+_**Woo Services
 **_
+_WooCommerce Services includes WooCommerce, WooCommerce Payments, WooCommerce Shipping and Tax, MailPoet, and any products purchased from WooCommerce.com._
+_Woo services includes WooCommerce, WooPayments, Woo Shipping, Woo Tax, MailPoet, and other products and services available at Woo.com._
+<table><tbody><tr><td>If you reside outside of the Designated Countries:</td><td><strong>WooCommerce, Inc.</strong><br>60 29th Street #343<br>San Francisco, CA 94110<p>Automattic Inc. is also the controller for some of the processing activities related to Services provided by WooCommerce, Inc.</p></td></tr><tr><td>If you reside in the Designated Countries:</td><td><strong>WooCommerce Ireland Ltd.</strong><br>Grand Canal Dock, 25 Herbert Pl<br>Dublin, D02 AY86<br>Ireland<p>Automattic Inc and WooCommerce, Inc are also the joint controllers for some of the processing activities related to Services provided by WooCommerce Ireland Ltd.</p></td></tr></tbody></table>
+<table><tbody><tr><td>If you reside outside of the Designated Countries:</td><td><strong>WooCommerce, Inc.</strong><br>60 29th Street #343<br>San Francisco, CA 94110Automattic Inc. is also the controller for some of the processing activities related to Services provided by WooCommerce, Inc.</td></tr><tr><td>If you reside in the Designated Countries:</td><td><strong>WooCommerce Ireland Ltd.</strong><br>Grand Canal Dock, 25 Herbert Pl<br>Dublin, D02 AY86<br>IrelandAutomattic Inc and WooCommerce, Inc are also the joint controllers for some of the processing activities related to Services provided by WooCommerce Ireland Ltd.</td></tr></tbody></table>
 ### How to Reach Us
 If you have a question about this Privacy Policy, or you would like to contact us about any of the rights mentioned in the [Your Rights section](https://automattic.com/privacy/) above, please contact us through our [web form](https://wordpress.com/help/contact) or via [email](mailto:privacypolicyupdates@automattic.com). These are the fastest ways to get a response to your inquiry, but you can also contact us by telephone at 1-877-273-3049.
 ### Other Things You Should Know (Keep Reading!)
 #### _Ads and Analytics Services Provided by Others_
 Ads appearing on any of our Services may be delivered by advertising networks. Other parties may also provide analytics services via our Services. These ad networks and analytics providers may set tracking technologies (like cookies) to collect information about your use of our Services and across other websites and online services. These technologies allow these third parties to recognize your device to compile information about you or others who use your device. This information allows us and other companies to, among other things, analyze and track usage, determine the popularity of certain content, and deliver ads that may be more targeted to your interests. Please note this Privacy Policy only covers the collection of information by Automattic and does not cover the collection of information by any third-party advertisers or analytics providers.
 #### _Third-Party Software and Services_
+If you'd like to use third-party plugins or embeds, WooCommerce Payments (powered by Stripe), WooCommerce extensions that enable services provided by third parties, or other third-party software or services, please keep in mind that interacting with them may mean providing information about yourself (or your site visitors) to those third parties. For example, some third-party services may request or require access to your (yours, your visitors', or customers') data via a pixel or cookie. Please note that if you use the third-party service or grant access, your data will be handled in accordance with the third party's privacy policy and practices. We don't own or control these third parties, and they have their own rules about information collection, use, and sharing, which you should review before using the software or services.
+If you'd like to use third-party plugins or embeds, WooPayments (powered by Stripe), Woo extensions that enable services provided by third parties, or other third-party software or services, please keep in mind that interacting with them may mean providing information about yourself (or your site visitors) to those third parties. For example, some third-party services may request or require access to your (yours, your visitors', or customers') data via a pixel or cookie. Please note that if you use the third-party service or grant access, your data will be handled in accordance with the third party's privacy policy and practices. We don't own or control these third parties, and they have their own rules about information collection, use, and sharing, which you should review before using the software or services.
 #### _Visitors to Our Users' Websites_
 We also process information about visitors to our users' websites, on behalf of our users and in accordance with our user agreements. Please note that our processing of that information on behalf of our users for their websites isn't covered by this Privacy Policy. We encourage our users to post a privacy policy that accurately describes their practices on data collection, use, and sharing of personal information. If you'd like, you can also read more about the data we collect on behalf of our users in our [Privacy Notice](https://automattic.com/privacy-notice).
 Users control the content posted on their sites, so any disputes regarding content on a user's site should be made directly to the site owner, through their "contact us" page, at an email address they provide, or by leaving a comment on the site.
 Although most changes are likely to be minor, Automattic may change its Privacy Policy from time to time. Automattic encourages visitors to frequently check this page for any changes to its Privacy Policy. If we make changes, we will notify you by revising the change log below, and, in some cases, we may provide additional notice (like adding a statement to our homepage or the [WordPress.com Blog,](https://en.blog.wordpress.com/) or sending you a notification through email or your dashboard). Your further use of the Services after a change to our Privacy Policy will be subject to the updated policy.
 ### Other Information and Resources
 [Jetpack Privacy Center](https://jetpack.com/support/privacy/)
+[WooCommerce and the GDPR](https://woocommerce.com/gdpr/)
+[Woo and the GDPR](https://woocommerce.com/gdpr/)
 ### Translation
 Our Privacy Policy was originally written in English (US). We may translate it into other languages. For example:
 French: [https://automattic.com/fr/privacy](https://automattic.com/fr/privacy)
 In the event of a conflict between a translated version of our Privacy Policy and the English version, the English version will control.
 That's it! Thanks for reading.
 ### Change log
+- _July 12, 2023:_ Add new example of information shared with site owners.
+- _March 17, 2023:_ Remove references to WPVIP.
+- _October 31, 2023:_ Changed instances of "WooCommerce" to "Woo."
+- _July 12, 2023:_ Added new example of information shared with site owners.
+- _March 17, 2023:_ Removed references to WPVIP.
 - _December 30, 2022:_ Updated the California rights section to apply to additional US states.
 - _October 18, 2022_: Added wp.cloud to the list of our websites.
 - _April 26, 2022:_ Included information regarding WooPay.
 - _November 22, 2021:_ Included information for WPScan.
 - _October 8, 2021:_ Included information for WordPress.com Courses and Newspack. Updated the "Information we Collect from Other Sources" section with new examples.
 - _January 1, 2021_: Included information for AutomateWoo and Jetpack CRM. Updated the "Controllers and Responsible Companies" section to reflect changes affecting WooCommerce users.

Privacy Policy

Full text changes — 20230901_rev01 to 20231101_rev01