Squarespace Privacy Policy

DATED 2018-05-14 · VERSION 20180701_rev01 · COMPARED WITH 20161001_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20161001_rev01 to 20180701_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+_Last updated: September 26, 2016_
+**Effective Date: May 14, 2018**
+Thanks for visiting Squarespace! This Privacy Policy describes what information we collect and how it's used and shared. Note that any capitalized terms not defined in this Privacy Policy have the meanings set forth in our [Terms of Service](https://www.squarespace.com/terms-of-service/). If you don't agree with the terms of this Privacy Policy, you may not access or use the Services. If you have any comments or questions about this Privacy Policy, feel free to contact us at [privacy@squarespace.com](mailto:privacy@squarespace.com).
+Thanks for visiting Squarespace! Squarespace ("Squarespace", "we", "us" or "our") respects your privacy. When it comes to your personal information, we believe in transparency, not surprises. That's why we've set out here what personal information we collect, what we do with it and your choices and rights.
+**1.** **Core Principles**
+By using any of Squarespace's Services, you confirm you have agreed to the [Terms of Service](https://www.squarespace.com/terms-of-service) and read and understood this Privacy Policy and our [Cookie Policy](https://www.squarespace.com/cookie-policy).
+When it comes to your personal information we believe in transparency, not surprises. So before we get into the details, we want to share with you a few of our core privacy principles. First, we don't sell your personal information to anyone. It's just not the type of business we're in. Second, we don't ask for your personal information unless we need it to provide or improve the Services for you. Third, we don't share your personal information unless you've specifically allowed it, or for the very limited purposes described below. Finally, we appreciate that when you use our Services, you trust us with your information, and we take that responsibility very seriously. This Privacy Policy holds us accountable for protecting your rights and your privacy.
+**1\. Some key terms**
+**2.** **Collection**
+In our Privacy Policy, when we refer to "Users", we mean our customers who use our Services, including visitors to our sites. We explain who we are in the "Who is Squarespace?" section below. The users, visitors and customers of, our Users' sites are "End Users". Any other capitalized terms not defined in this Privacy Policy have the meanings in our [Terms of Service](https://www.squarespace.com/terms-of-service).
+When you use the Services, we collect the following information, and use it only as described below:
+**2\. How does this Privacy Policy apply?**
+**2.1. Account Information.** This may include your name, address, email address and phone number. We use this information in the ways you would expect, such as to set up your Account or contact you.
+This Privacy Policy describes what we do with personal information that we collect and use for our own purposes (i.e., where we are a controller), such as your account information and information about how you use and interact with our Services, including information you submit to our customer support as well as certain information relating to your End Users.
+**2.2. Third Party Account Information.** If you use Third Party Services, such as social media or photo-sharing services, you may provide us with your Third Party Services account information, such as your username (note that we don't store any passwords you use to access Third Party Services). We transmit, and may store, such account information, only as needed to provide the Services, and only in accordance with the terms and policies of the Third Party Services.
+We also host and process User Content for our Users. Our Users tell us what to do with User Content, and we follow their instructions. This Privacy Policy does not describe what we do with User Content on our Users' instructions (i.e., as their processor). If you are an End User of one of our User's sites and want to know how a User handles your information, you should check its privacy policy. If you want to know about what we do for our own purposes, read on.
+**2.3. Payment Information.** When you initially provide or update your payment information, we transmit it via an encrypted connection to our Payment Processor, Stripe. Stripe uses and processes your payment information in accordance with [Stripe's Privacy Policy](https://stripe.com/privacy/). We don't store your payment information, other than your zip code and country, which we require for billing and to comply with tax and other government regulations.
+If you are a User, see our [Data Processing Addendum](https://www.squarespace.com/dpa) to learn more about how we process User Content on your instructions or with your permission.
+**2.4. Communications With Us.** When you send us emails or other communications, such as customer support inquiries, we maintain those communications and their contents so that we can resolve your inquiries or otherwise assist you.
+**3\. Personal information we collect**
+**2.5. Public Comments On The Services.** We maintain any comments, contributions to discussions or messages submitted to users of the Services, in order to provide the Services.
+We collect various personal information regarding you or your device. This includes the following:
+**2.6. Files You Provide Us.** When you use the Services, we store, process and transmit your User Content (such as your photos) and information related to your User Content (such as location tags in photos). We process and store such files and information in order to provide the Services, as described in our [Terms of Service](https://www.squarespace.com/terms-of-service/).
+- Information you provide to create an Account, specifically email address, first name and last name. If you sign up for Paid Services, we receive a portion of your payment information from our payment processor (such as the last four digits, the country of issuance and the expiration date of the payment card) and we ask you to select your jurisdiction.
+**2.7. Usage Information.** This includes information about your activity on and interaction with the Services, such as your IP address, your device or browser type, the webpage you visited before coming to our sites and identifiers associated with your devices. This information enables us to analyze how the Services are being accessed and used, and to track performance of the Services.
+- Your marketing preferences.
+**2.8. Location Information.** Your devices (depending on your settings) may transmit location information to the Services. We use this information to customize, improve and protect the Services. For example, we may use your location information to determine local language preferences, or to geotag a post.
+- The emails and other communications that you send us or otherwise contribute, such as customer support inquiries or posts to our customer message boards or forums. Please be aware that information on public parts of our sites is available to others.
+**2.9. Cookies And Other Technologies.** We use these technologies to do things such as remember your preferences, keep you safe and improve and promote the Services. You can read more about how we use these technologies in our [Cookie Policy](https://www.squarespace.com/cookie-policy), which is incorporated by reference into this Privacy Policy.
+- Information you share with us in connection with surveys, contests or promotions.
+**3.** **Sharing**
+- Information from your use of the Services or Users' sites. This includes: IP addresses, preferences, web pages you visited prior to coming to our or our Users' sites, information about your browser, network or device (such as browser type and version, operating system, internet service provider, preference settings, unique device IDs and language and other regional settings), information about how you interact with the Services and our Users' sites (such as timestamps, clicks, scrolling, browsing times, searches, transactions, referral pages, load times, and problems you may encounter, such as loading errors).
+When you use the Services, we may share your information only as described below:
+- Information we get from our partners to support our marketing initiatives, improve our Services and better monitor, manage and measure our ad campaigns, such as details about when our partner shows you one of our ads on or via its advertising platform.
+**3.1. Third Parties You Authorize.** You can give third parties access to your and your End Users' information on the Services. For example, you may wish to integrate Your Sites with a third party newsletter service that requires access to the email addresses you collect from your End Users, in order for that newsletter service to send emails on your behalf and at your direction. Just remember that such third party's use of this information will be governed by the terms and privacy policies of the third party.
+- Other information you submit to us directly or through Third Party Services if you use a Third Party Service to create an Account (based on your privacy settings with such Third Party Service).
+**3.2.** **Following The Law.** We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to comply with the law, protect our rights or prevent fraud or abuse of Squarespace or our users. When we receive law enforcement or national security requests for information, we strongly believe in privacy and transparency. We scrutinize such requests carefully and challenge vague, overbroad or otherwise unlawful requests. And when legally permitted, we provide our users with notice that their information is being requested. This notice is provided so that you have the opportunity to challenge such requests.
+**4\. How we collect personal information**
+**3.3. Others Working For Squarespace.** Squarespace uses certain trusted third parties to help us provide, improve, promote and protect the Services. For example, we may use third parties to help us provide customer support, manage our ads on other sites or assist with data storage. These third parties may access, process or store your information to perform tasks only for the purposes we've authorized, and we require them to provide at least the same level of protection for your information as described in this Privacy Policy. We also may share with third parties aggregated or anonymized information that does not directly identify you.
+We obtain personal information from various sources. We do this in three main ways:
+**3.4. Business Transfers.** If we're involved in a reorganization, merger, acquisition or sale of our assets, your information may be transferred as part of that deal.
+- You provide some of it directly (such as by registering for an Account).
+**4.** **Protection**
+- We record some of it automatically when you use our Services or Users' sites (including with technologies like cookies).
+While no service is completely secure, we have a security team dedicated to keeping your information safe. We employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it) and testing for and protecting against network vulnerabilities. Payment information is transmitted using HTTPS encryption, and we maintain a PCI DSS certification.
+- We receive some of it from third parties (like when you register for an account using a Third Party Service or when you make payments to us using our payment processor).
+**5.** **Retention**
+We've described this in more detail below.
+We'll retain your personal information for as long as we need it to provide you with the Services. You can ask for your personal information to be deleted at any time by deleting your Account or contacting us at [privacy@squarespace.com](mailto:privacy@squarespace.com). Please note that there may be latency in deleting your personal information from our servers and backup storage, and we may retain your personal information in order to comply with the law, protect our rights, resolve disputes or enforce our agreements.
+**a. Personal information you provide**
+**6.** **Location**
+When you use our Services, we collect information from you in a number of ways. For instance, we ask you to provide your name and email address to register and manage your Account. We also maintain your marketing preferences and the emails and other communications that you send us or otherwise contribute, such as customer support inquiries or posts to our customer message boards or forums. You might also provide us with information in other ways, including by responding to surveys, submitting a form or participating in contests or similar promotions.
+Information that you submit through the Services may be transferred to countries other than where you live (for example, to our servers in the US). We also may store information locally on the devices you use to access the Services. We also may transfer information to third parties outside the US for processing or to support the Services, and we require them to provide at least the same level of protection for your information as described in this Privacy Policy.
+Sometimes we require you to provide us with information for contractual or legal reasons. For example, we may ask you to select your jurisdiction when you sign up for Paid Services to determine if, and how much, tax we need to collect from you. We'll normally let you know when information is required, and the consequences of failing to provide it. If you do not provide personal information when requested, you may not be able to use our Services if that information is necessary to provide you with the service or if we are legally required to collect it.
+**7.** **Access**
+**b. Personal information obtained from your use of our Services**
+To modify or delete the personal information you have provided to us, simply log into the Services and update your profile. We may retain certain information as required by law or for necessary business purposes. On request, we'll provide you with a copy of your personal information that we maintain. This request may be subject to a fee not exceeding the prescribed fee permitted by law.
+When you use our Services, we collect information about your activity on and interaction with the Services, such as your IP address(es), your device and browser type, the web page you visited before coming to our sites, what pages on our sites you visit and for how long and identifiers associated with your devices. If you've given us permission through your device settings, we may collect your location information in our mobile apps.
+**8.** **Communications**
+If you are an End User of our Users' sites, we also get information about your interactions with their sites, though we use this in anonymous, aggregated or pseudonymized form which does not focus on you individually. We use this data to evaluate, provide, protect or improve our Services (including by developing new products and services).
+We may periodically email you service-related announcements. We'll also send you emails related to your transactions. We may also send you marketing or promotional communications, but you can opt out of receiving subsequent marketing or promotional communications by clicking the link marked unsubscribe (or a similar phrasing) that's included in those communications.
+Some of this information is collected automatically using cookies and similar technologies when you use our Services and our Users' sites. We let our Users control what cookies and similar technologies are used through their sites (except those we need to use to provide the Services properly, such as for performance or security related reasons). You can read more about our use of cookies in our [Cookie Policy](https://www.squarespace.com/cookie-policy). Some of this information is similarly collected automatically through your browser or from your device.
+**9.** **End User Information**
+**c. Personal information obtained from other sources**
+**9.1. Collection And Use Of End User Information.** You may use the Services to create or publish Your Sites, and Your Sites may have End Users. We may collect, use or delete the same types of information described in Section 2, above, from your End Users, on your behalf and at your direction, and we treat such information in accordance with this Privacy Policy. We do this in order to enable you to use the Services, and to provide, improve and protect the Services. For example, during checkout you may ask your End Users to provide name, address, email address and payment information so that you can complete their orders.
+If you use a Third Party Service (such as Google) to register for an Account, the Third Party Service may provide us with your Third Party Service account information on your behalf, such as your name and email address (we don't store passwords you use to access Third Party Services). Your privacy settings on the Third Party Service normally control what they share with us. Make sure you are comfortable with what they share by reviewing their privacy policies and, if necessary, modifying your privacy settings directly on the Third Party Service.
+**9.2. Your Relationship With End Users.** You can collect, use or delete your End Users' information at any time. However, you're solely responsible for complying with any laws and regulations that apply to your End Users' information, including without limitation the posting of your own privacy policy. We're not liable for your relationship with your End Users, and we won't provide you with any legal advice regarding such matters.
+If you sign up for Paid Services, we obtain limited information about your payment card from our payment processor, such as the last four digits, the country of issuance and the expiration date. Currently, our payment processor is Stripe. Stripe uses and processes your complete payment information in accordance with [Stripe's privacy policy](https://stripe.com/privacy/).
+**9.3. End User Payment Information.** Your End Users' payment information may be processed via third party eCommerce Payment Processors with which you integrate your Account, in accordance with such eCommerce Payment Processors' terms and policies. We transmit your End Users' complete payment information when they initially provide or update it, only so that we can pass it along to the eCommerce Payment Processors you agree to use. We don't collect or store your End Users' payment information.
+**5\. How we use your personal information**
+**9.4. A Message To The End Users.** Hello, End User! We hope you [create your own site](https://www.squarespace.com/) on Squarespace some day! However, Squarespace has no direct relationship with you. If you'd like to make any requests regarding your personal information, please contact the owner of the site you've visited or used, as they control your data. They may then submit any such information requests to us, and we'll respond to them. We retain your information in accordance with this Privacy Policy.
+We use the personal information we obtain about you to:
+**10.** **Privacy Shield**
+- **Provision of the Services.** Create and manage your Account, provide and personalize our Services, process payments and respond to your inquiries.
+**10.1. Compliance.** Squarespace complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal information transferred from the European Union to the United States ("EU Personal Data"). We've certified to the Department of Commerce that we adhere to the Privacy Shield Principles and, assuming our certification is approved, you'll be able to find it [here](https://www.privacyshield.gov/list). You can learn more about Privacy Shield by visiting [https://www.privacyshield.gov/](https://www.privacyshield.gov/).
+- **Communicating with you.** Communicate with you, including by sending you emails about your transactions and Service-related announcements.
+**10.2. Accountability.** Our accountability for EU Personal Data we receive under the Privacy Shield and subsequently transfer to a third party is described in the Privacy Shield Principles. In particular, we may use third parties to process data on our behalf as described in this Privacy Policy, and we remain liable if they do so in a manner inconsistent with the Privacy Shield Principles and we're responsible for the event giving rise to the damage.
+- **Surveys and contests.** Administer surveys, contests and other promotions.
+**10.3. Inquiries And Disputes.** If you have questions you believe to be within the scope of our Privacy Shield certification, please contact us first at [privacy@squarespace.com](mailto:privacy@squarespace.com) and we'll respond within 45 days. For any complaints that we can't resolve directly, JAMS is the independent organization responsible for reviewing and resolving complaints about our Privacy Shield compliance, and you can contact JAMS at [https://www.jamsadr.com/eu-us-privacy-shield](https://www.jamsadr.com/eu-us-privacy-shield). In the event your concern still isn't addressed by JAMS, you may be entitled to a binding arbitration under the Privacy Shield Principles. For purposes of enforcing compliance with the Privacy Shield, Squarespace is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission.
+- **Promotion.** Promote our Services and send you tailored marketing communications about products, services, offers, programs and promotions of Squarespace and our partners and measure the success of those campaigns. For example, we may send different marketing communications to you based on your subscription plan or what we think may interest you based on other information we hold about you.
+**11.** **Modifications**
+- **Advertising.** Analyze your interactions with our Services and third parties' online services so we can tailor our advertising to what we think will interest you. For example, we may decide not to advertise our Services to you on a social media site if you already signed up for Paid Services or we may choose to serve you a particular advertisement based on your subscription plan or what we think may interest you based on other information we hold about you.
+We may modify this Privacy Policy from time to time, and will post the most current version on our site. If a modification meaningfully reduces your rights, we'll notify you in accordance with the procedures set forth in our [Terms of Service](https://www.squarespace.com/terms-of-service/).
+- **Customizing the Services.** Provide you with customized services. For example, we use your location information to determine your language preferences or display accurate date and time information. We also use cookies and similar technologies for this purpose, such as remembering which of Your Sites you most recently edited.
+- **Improving our Services.** Analyze and learn about how the Services are accessed and used, evaluate and improve our Services (including by developing new products and services and managing our communications) and monitor and measure the effectiveness of our advertising. We usually do this based on anonymous, pseudonymized or aggregated information which does not focus on you individually. For example, if we learn that most Users of Paid Services use a particular integration or feature, we might wish to expand on that integration or feature.
+- **Security.** Ensure the security and integrity of our Services.
+- **Third party relationships.** Manage our vendor and partner relationships.
+- **Enforcement.** Enforce our Terms of Service and other legal terms and policies.
+- **Protection.** Protect our and others' interests, rights and property (e.g., to protect our Users from abuse).
+- **Complying with law.** Comply with applicable legal requirements, such as tax and other government regulations and industry standards, contracts and law enforcement requests.
+We process your personal information for the above purposes when:
+- **Consent.** You have consented to the use of your personal information in a particular way. When you consent, you can change your mind at any time.
+- **Performance of a contract.** We need your personal information to provide you with services and products requested by you, or to respond to your inquiries. In other words, so we can perform our contract with you or take steps at your request before entering into one. For example, we need your email address so you can sign in to your Squarespace account.
+- **Legal obligation.** We have a legal obligation to use your personal information, such as to comply with applicable tax and other government regulations or to comply with a court order or binding law enforcement request.
+- **Legitimate interests.** We have a legitimate interest in using your personal information. In particular, we have a legitimate interest in the following cases:
+    - To operate the Squarespace business and provide you with tailored advertising and communications to develop and promote our business.
+    - To analyze and improve the safety and security of our Services - we do this as it is necessary to pursue our legitimate interests in ensuring Squarespace is secure, such as by implementing and enhancing security measures and protections and protecting against fraud, spam and abuse.
+    - To provide and improve the Services, including any personalized services - we do this as it is necessary to pursue our legitimate interests of providing an innovative and tailored offering to our Users on a sustained basis.
+    - To share your personal information with other Squarespace group companies that help us provide and improve the Services.
+    - To anonymize and subsequently use anonymized information.
+- **Protecting you and others**. To protect your vital interests, or those of others.
+- **Others' legitimate interests.** Where necessary for the purposes of a third party's legitimate interests, such as our partners who have a legitimate interest in delivering tailored advertising to you and monitoring and measuring its effectiveness or our Users who have a legitimate interest in having their sites function properly and securely and analyzing the usage of their sites so they can understand trends and improve their services.
+**6\. How we share your personal information**
+We share personal information in the following ways:
+- **Affiliates.** We share personal information with our affiliates when it is reasonably necessary or desirable, such as to help provide services to you or analyze and improve the services we or they provide.
+- **Users.** We share with our Users data regarding usage by End Users of their sites. For example, we provide a User with information about what web page the End User visited before coming to their site and how their End Users interacted with their site. This is so Users can analyze the usage of their sites and improve their services.
+- **Business partners.** We may share personal information with business partners. For example, we may share your personal information when our Services are integrated with their Third Party Services, but only when you have been informed or would otherwise expect such sharing.
+- **Service providers.** We share personal information with our service providers that perform services on our behalf. For example, we may use third parties to help us provide customer support, manage our advertisements on other sites, send marketing and other communications on our behalf or assist with data storage.
+- **Process payments.** We transmit your personal information via an encrypted connection to our payment processor.
+- **Following the law or protecting rights and interests.** We disclose your personal information if we determine that such disclosure is reasonably necessary to comply with the law, protect our or others' rights, property or interests (such as enforcing our [Terms of Service](https://www.squarespace.com/terms-of-service)) or prevent fraud or abuse of Squarespace or our Users or End Users. In particular, we may disclose your personal information in response to lawful requests by public authorities, such as to meet national security or law enforcement requirements.
+- **Advertising.** We share personal information with third parties so they and we can provide you with tailored advertising and measure and monitor its effectiveness. For example, we may share your pseudonymized email address with a third party social media platform on which we advertise to avoid serving Squarespace ads to people who already use Squarespace.
+- **Business transfers.** If we're involved in a reorganization, merger, acquisition or sale of some or all of our assets, your personal information may be transferred as part of that deal.
+**7\. Your rights and choices**
+Where applicable law requires (and subject to any relevant exceptions under law), you may have the right to access, update, change or delete personal information.
+You can access, update, change or delete personal information (or that of your End Users) either directly in your Account or by contacting us at [privacy@squarespace.com](mailto:privacy@squarespace.com) to request the required changes. You can exercise your other rights (including deleting your Account) by contacting us at the same email address.
+You can also elect not to receive marketing communications by changing your preferences in your Account or by following the unsubscribe instruction in such communications.
+Please note that, for technical reasons, there is likely to be a delay in deleting your personal Information from our systems when you ask us to delete it. We also will retain personal Information in order to comply with the law, protect our and others' rights, resolve disputes or enforce our legal terms or policies, to the extent permitted under applicable law.
+You may have the right to restrict or object to the processing of your personal information or to exercise a right to data portability under applicable law. You also may have the right to lodge a complaint with a competent supervisory authority, subject to applicable law. If you are subject to EU data protection laws, we suggest you lodge any such complaints with our lead supervisory authority:
+Irish Data Protection Commissioner
+Office of the Data Protection Commissioner
+Canal House, Station Road, Portarlington, Co. Laois, R32 AP23, Ireland
+Phone +353 57 868 4757
+Fax: +353 57 868 4757
+Email: [info@dataprotection.ie](mailto:info@dataprotection.ie)
+Additionally, if we rely on consent for the processing of your personal information, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.
+Our [Cookie Policy](https://www.squarespace.com/cookie-policy) explains how you can manage cookies and similar technologies.
+If you are an End User of one of our User's sites, you should contact them to exercise your rights with respect to any information they hold about you.
+**8\. How we protect your personal information**
+While no service is completely secure, we have a security team dedicated to keeping personal information safe. We maintain administrative, technical and physical safeguards that are intended to appropriately protect against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any other unlawful form of processing of, the personal information in our possession. We employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it) and testing for and protecting against network vulnerabilities.
+**9\. How we retain your personal information**
+We retain personal information regarding you or your use of the Services for as long as your Account is active or for as long as needed to provide you or our Users with the Services. We also retain personal information for as long as necessary to achieve the purposes described in this Privacy Policy, for example, to comply with our legal obligations, to protect us in the event of disputes and to enforce our agreements and to protect our and others' interests.
+The precise periods for which we keep your personal information vary depending on the nature of the information and why we need it. Factors we consider in determining these periods include the minimum required retention period prescribed by law or recommended as best practice, the period during which a claim can be made with respect to an agreement or other matter, whether the personal information has been aggregated or pseudonymized, and other relevant criteria. For example, the period we keep your email address is connected to how long your Account is active, while the period for which we keep a support message is based on how long has passed since the last submission in the thread.
+As Users may have a seasonal site or come back to us after an Account becomes inactive, we don't immediately delete your personal information when your trial expires or you cancel all Paid Services. Instead, we keep your personal information for a reasonable period of time, so it will be there for you if you come back.
+You may delete your Account by contacting us at [privacy@squarespace.com](mailto:privacy@squarespace.com) and Squarespace will delete the personal information it holds about you (unless we need to retain it for the purposes set out in this Privacy Policy).
+Please note that in the course of providing the Services, we collect and maintain aggregated, anonymized or de-personalized information which we may retain indefinitely.
+**10\. Data transfers**
+Personal information that you submit through the Services may be transferred to countries other than where you live, such as, for example, to our servers in the U.S. We also store personal information locally on the devices you use to access the Services.
+Your personal information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information.
+We rely upon a number of means to transfer personal information which is subject to the European General Data Protection Regulation ("GDPR") in accordance with Chapter V of the GDPR. These include:
+- **Privacy Shield.** We transfer, in accordance with Article 45 of the GDPR, personal information to companies that have certified their compliance with the EU-U.S. or Swiss-U.S. Privacy Shield Frameworks (each individually and jointly, the "Privacy Shield"), including Squarespace, Inc.
+- **Standard data protection clauses.** We may, in accordance with Article 46 of the GDPR, transfer personal information to recipients that have entered into the European Commission approved contract for the transfer of personal data outside the European Economic Area.
+- **Other means**. We may, in accordance with Articles 45 and 46 of the GDPR, transfer personal information to recipients that are in a country the European Commission or a European data protection supervisory authority has confirmed, by decision, offers an adequate level of data protection, pursuant to an approved certification mechanism or code of conduct, together with binding enforcement commitments from the recipient to apply the appropriate safeguards, including as regards data subjects' rights, or to processors which have committed to comply with binding corporate rules.
+You can find out more information about these transfer mechanisms [here](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en).
+**11\. Privacy Shield**
+Squarespace, Inc has certified its compliance to the Privacy Shield.
+Squarespace is committed to treating personal information received from the European Economic Area and Switzerland pursuant to the Privacy Shield Frameworks in accordance with the applicable Principles. You can find our certification [here](https://www.privacyshield.gov/participant) and you can learn more about the Frameworks and Principles by visiting [https://www.privacyshield.gov/](https://www.privacyshield.gov/).
+Our accountability for personal information we receive under the Privacy Shield and subsequently transfer to a third party is described in the Privacy Shield Principles. In particular, we may use third parties to process data on our behalf as described in this Privacy Policy, and we remain liable if they do so in a manner inconsistent with the Privacy Shield Principles, unless we prove that we are not responsible for the event giving rise to the damage.
+If you have a question or complaint you believe to be within the scope of our Privacy Shield certification, please contact us first at [privacy@squarespace.com](mailto:privacy@squarespace.com), or using the contact details in the "How to contact us" section below. We'll respond within 45 days.
+For any complaints that we can't resolve directly, JAMS is the independent organization responsible for reviewing and resolving complaints about our Privacy Shield compliance. You can contact JAMS free of charge at [https://www.jamsadr.com/eu-us-privacy-shield](https://www.jamsadr.com/eu-us-privacy-shield). JAMS is an alternative dispute resolution provider based in the U.S.
+If your concern still isn't addressed by JAMS, you may be entitled to a binding arbitration under the Privacy Shield Principles. For purposes of enforcing compliance with the Privacy Shield, Squarespace, Inc. is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission.
+**12\. End Users' personal information**
+Our customers who have created a site using Squarespace are responsible for what they do with the personal information they collect, directly or through Squarespace, about their End Users. This section is directed to such customers.
+**a. Your relationship with End Users**
+If you're one of our Users, you will collect personal information about your End Users. For example, during checkout you may ask your End Users to provide their name, address, email address and payment information so that you can complete their orders. You may also use cookies and similar technologies to analyze usage and other trends.
+You're solely responsible for complying with any laws and regulations that apply to your collection and use of your End Users' information, including personal information you collect about them from us or using Squarespace functionality or cookies or similar technologies.
+You must publish your own privacy and cookie policy and comply with them.
+We're not liable for your relationship with your End Users or how you collect and use personal information about them (even if you collect it from us or using Squarespace functionality or cookies or similar technologies) and we won't provide you with any legal advice regarding such matters.
+**b. End User payment information**
+Your End Users' payment information may be processed via third party eCommerce Payment Processors with which you integrate your Account, in accordance with such eCommerce Payment Processors' terms and policies. We transmit your End Users' complete payment information when they initially provide or update it only so that we can pass it along to the eCommerce Payment Processors you agree to use. We don't collect or store your End Users' payment information.
+**13\. Updates to this Privacy Policy**
+We'll update this Privacy Policy from time to time to reflect changes in technology, law, our business operations or any other reason we determine is necessary or appropriate. When we make changes, we'll update the "Effective Date" at the top of the Privacy Policy and post it on our sites. If we make material changes to it or the ways we process personal information, we'll notify you (by, for example, prominently posting a notice of the changes on our sites before they take effect or directly sending you a notification).
+We encourage you to check back periodically to review this Privacy Policy for any changes since your last visit. This will help ensure you better understand your relationship with us, including the ways we process your personal information.
+**14\. Who is Squarespace?**
+When we say "Squarespace" (or "we", "us" or "our"), we mean: (a) Squarespace, Inc. if you are a resident of or have your principal place of business in the United States of America or any of its territories or possessions (the "US"); or (b) Squarespace Ireland Limited, in any other case.
+If your place of residence or principal place of business changes, the Squarespace entity that controls your personal information will be determined by your new residence or principal place of business from the date it changes.
+**15\. How to contact us**
+If you have questions, comments or complaints about this Privacy Policy or our privacy practices or if you would like to exercise your rights and choices, please email us at [privacy@squarespace.com](mailto:privacy@squarespace.com), or write to us at the addresses below:
+If you are a resident of or have your principal place of business in the US:
+Squarespace, Inc.
+Attention: Legal - Privacy
+Varick Street, 12th Floor
+New York, NY 10014 United States
+If you are a resident of or have your principal place of business anywhere other than the US:
+Squarespace Ireland Ltd.
+Attention: Legal - Privacy
+Le Pole House, 1st Floor
+Ship Street Great
+Dublin 8 Ireland