Squarespace Privacy Policy

20231009_rev01 · COMPARED WITH 20230701_rev01 · ARCHIVE SNAPSHOT, DATE APPROXIMATE

Full text changes — 20230701_rev01 to 20231009_rev01

1**Effective Date: June 29, 2023**
1**Effective Date: August 28, 2023**
22
3Thanks for visiting Squarespace! Squarespace ("Squarespace", "we", "us" or "our") respects your privacy. When it comes to your personal information, we believe in transparency, not surprises. That's why we've set out here what personal information we collect, what we do with it and your choices and rights.
3Squarespace ("Squarespace", "we", "us" or "our") respects your privacy. When it comes to your personal information, we believe in transparency, not surprises. That's why we've set out here what personal information we collect, what we do with it and your choices and rights.
44
55By using any of Squarespace's Services, you confirm you have agreed to the [Terms of Service](https://www.squarespace.com/terms-of-service) and read and understood this Privacy Policy and our [Cookie Policy](https://www.squarespace.com/cookie-policy).
66
77Certain jurisdictions require us to provide you with specific additional information. Please see [this page](http://squarespace.com/privacy-specific) for such additional information if you are in: (I) California; or (II) Virginia, Colorado, Connecticut or Utah.
88
99**1\. Some key terms**
1010
11In our Privacy Policy, when we refer to "Users", we mean our customers who use our Services, including visitors to our sites. We explain who we are in the "Who is Squarespace?" section below. The users, visitors and customers of, our Users' sites are "End Users". Any other capitalized terms not defined in this Privacy Policy have the meanings in our [Terms of Service](https://www.squarespace.com/terms-of-service).
11In our Privacy Policy, when we refer to "Users", we mean our customers who use our Services, including visitors to our sites. We explain who we are in the "Who is Squarespace?" section below. The users, visitors and customers of our Users' sites are "End Users". Any other capitalized terms not defined in this Privacy Policy have the meanings in our [Terms of Service](https://www.squarespace.com/terms-of-service).
1212
1313**2\. How does this Privacy Policy apply?**
1414
15This Privacy Policy describes what we do with personal information that we collect and use for our own purposes (i.e., where we are a controller), such as your account information and information about how you use and interact with our Services, including information you submit to our customer support as well as certain information relating to your End Users. This Privacy Policy does not apply to personal information of our employees or job applicants (except to the extent employees or job applicants are Users).
15This Privacy Policy describes what we do with personal information that we collect and use for our own purposes (i.e., where we are a controller), such as your account information and information about how you use and interact with our Services, including information you submit to our customer support as well as certain information relating to your End Users, such as, if applicable, End User information provided to the Squarespace Payments Services (as defined in the [Squarespace Payments Terms](http://www.squarespace.com/payments-terms)). This Privacy Policy does not apply to personal information of our employees or job applicants (except to the extent employees or job applicants are Users). This Privacy Policy also includes the right to object to certain types of processing we carry out (see Section 7 below to find out more).
1616
1717With respect to personal information in Squarespace's possession, we play a few different roles under global data privacy laws. In order to understand your and Squarespace's obligations, it's important to understand the difference between Squarespace Controlled PI and User Controlled PI.
1818
19- "Squarespace Controlled PI" means personal information for which Squarespace determines the purposes and means of processing. This Privacy Policy and [this additional information page](http://squarespace.com/privacy-specific) only address Squarespace Controlled PI.
19- "Squarespace Controlled PI" means personal information for which Squarespace determines the purposes and means of processing. This Privacy Policy and [this additional U.S. state information page](http://squarespace.com/privacy-specific) only address Squarespace Controlled PI.
2020
2121- "User Controlled PI" means personal information for which a User determines the purposes and means of processing. For User Controlled PI, Squarespace acts as a data processor, service provider or similar term under applicable law. User Controlled PI includes User Content and End Users' personal information described in Section 12 that we host and process on behalf of our Users. Our Users tell us what we do with User Controlled PI on our Users' instructions. Our Users are responsible for ensuring that their collection and processing of User Controlled PI complies with applicable law. If you are a User looking for contractual provisions about how Squarespace will treat and secure your User Controlled PI, please see our [Data Processing Addendum](http://squarespace.com/dpa).
2222
23If you are an End User of one of our User's sites and want to know how a User handles your information, you should check the site's privacy policy, if applicable. If you want to know about what we do with Squarespace Controlled PI for our own purposes, read on.
23We explain below how we collect and use Squarespace Controlled PI and your rights. If you are an End User of one of our User's sites and want to know how a User handles your information, you should check the site's privacy policy.
2424
2525**3\. Personal information we collect**
2626
2727We collect various personal information regarding you or your device. This includes the following:
2828
2929- Information you provide to create an Account, specifically email address, first name and last name.
3030
3131- Information you provide if you sign up for Paid Services. For most Paid Services, this will include your billing address as well as a portion of your payment information which is provided to us from our payment processor (such as the last four digits, the country of issuance and the expiration date of the payment card).
3232
3333- The emails and other communications that you send us or otherwise contribute, such as customer support inquiries or posts to our customer message boards or forums. Please be aware that information on public parts of our sites is available to others.
3434
35- If you use the Squarespace Payments Services through the Services, in accordance with the Squarespace Payments Terms, additional information to set up, manage and provide the Squarespace Payments Services and integrate them with the Processor Services (as defined in the Squarespace Payments Terms), including information about you and your business, such as bank account details, name, address, phone number, date of birth, social security number, tax identifier (EIN), photo identification and nationality.
36
3537- Information you share with us in connection with surveys, contests or promotions.
3638
37- Information from your use of the Services or Users' sites. This includes: IP addresses, preferences, web pages you visited prior to coming to our or our Users' sites, information about your browser, network or device (such as browser type and version, operating system, internet service provider, preference settings, unique device IDs and language and other regional settings), information about how you interact with the Services and our Users' sites (such as timestamps, clicks, scrolling, browsing times, searches, transactions, referral pages, load times, and problems you may encounter, such as loading errors).
39- Information from your use of the Services or, where you are an End User, from your use of Users' sites. This includes: IP addresses, preferences, web pages you visited prior to coming to our or our Users' sites, information about your browser, network or device (such as browser type and version, operating system, internet service provider, preference settings, unique device IDs and language and other regional settings), information about how you interact with the Services and our Users' sites (such as timestamps, clicks, scrolling, browsing times, searches, transactions, referral pages, load times, and problems you may encounter, such as loading errors).
3840
3941- Information we get from our partners to support our marketing initiatives, improve our Services and better monitor, manage and measure our ad campaigns, such as details about when a partner of ours shows you one of our ads on or via its advertising platform.
4042
4143- Other information you submit to us directly or through Third Party Services if you use a Third Party Service to create an Account (based on your privacy settings with such Third Party Service).
4244
4345**4\. How we collect personal information**
5355We've described this in more detail below.
5456
5557**a. Personal information you provide**
5658
5759When you use our Services, we collect information from you in a number of ways. For instance, we ask you to provide your name and email address to register and manage your Account. We also maintain your marketing preferences and the emails and other communications that you send us or otherwise contribute, such as customer support inquiries or posts to our customer message boards or forums. You might also provide us with information in other ways, including by responding to surveys, submitting a form or participating in contests or similar promotions.
5860
59Sometimes we require you to provide us with information for contractual or legal reasons. For example: (i) when you register or transfer a domain name through the Services, in order to comply with ICANN, registry, ccTLD or registrar policies, we collect your domain registration information; or (ii) we may ask you to provide a mailing address and/or select your jurisdiction when you sign up for Paid Services to determine if, and how much, tax we need to collect from you. We'll normally let you know when information is required, and the consequences of failing to provide it. If you do not provide personal information when requested, you may not be able to use our Services if that information is necessary to provide you with the service or if we are legally required to collect it.
61Sometimes we require you to provide us with information for contractual or legal reasons. For example: (i) when you register or transfer a domain name through the Services, in order to comply with ICANN, registry, ccTLD or registrar policies, we collect your domain registration information; (ii) we may ask you to provide a mailing address and/or select your jurisdiction when you sign up for Paid Services to determine if, and how much, tax we need to collect from you; or (iii) if you use the Squarespace Payments Services through the Services, in accordance with the Squarespace Payments Terms, in order to provide the Squarespace Payments Services and to comply with our contractual and legal obligations, we collect additional information related to the Squarespace Payments Services and Processor Services, including information about you and your business, such as bank account details, name, address, phone number, date of birth, social security number, tax identifier (EIN), photo identification and nationality. We'll normally let you know when information is required, and the consequences of failing to provide it. If you do not provide personal information when requested, you may not be able to use our Services if that information is necessary to provide you with the service or if we are legally required to collect it.
6062
6163**b. Personal information obtained from your use of our Services**
6264
6365When you use our Services, we collect information about your activity on and interaction with the Services, such as your IP address(es), your device and browser type, the web page you visited before coming to our sites, what pages on our sites you visit and for how long and identifiers associated with your devices. If you've given us permission through your device settings, we may collect your location information in our mobile apps.
6466
6567If you are an End User of our Users' sites, we also get information about your interactions with their sites, though we use this in anonymous, aggregated or pseudonymized form which does not identify you directly. We use this data to evaluate, provide, protect or improve our Services (including by developing new products and services).
6971**c. Personal information obtained from other sources**
7072
7173If you use a Third Party Service (such as Google) to register for an Account, the Third Party Service may provide us with your Third Party Service account information on your behalf, such as your name and email address (we don't collect or store passwords you use to access Third Party Services). Your privacy settings on the Third Party Service normally control what they share with us. Make sure you are comfortable with what they share by reviewing their privacy policies and, if necessary, modifying your privacy settings directly on the Third Party Service.
7274
7375If you sign up for Paid Services via a Third Party Service acting as an authorized reseller of our products, the authorized reseller may provide us with: (i) account information on your behalf, such as your name and email address; and (ii) information necessary for us to complete your Paid Services sign up, such as your domain registration information.
7476
75If you sign up for Paid Services directly with us, we obtain limited information about your payment card from our payment processor, such as the last four digits, the country of issuance and the expiration date. Currently, our payment processor is Stripe. Stripe uses and processes your complete payment information in accordance with [Stripe's privacy policy](https://stripe.com/privacy/). This paragraph is not applicable if you sign up for Paid Services as an in-app purchase via a mobile app store. Please see [Google's privacy policy](https://policies.google.com/privacy) and [Apple's privacy policy](https://www.apple.com/legal/privacy/en-ww/) for information about how they use and process your payment information. This paragraph is also not applicable if you sign up for Paid Services via a Third Party Service acting as an authorized reseller of our products. Please see the authorized reseller's privacy policy for information about how they use and process your payment information.
77If you sign up for Paid Services directly with us, we obtain limited information about your payment card from our payment processor, such as the last four digits, the country of issuance and the expiration date. Currently, our payment processor is Stripe. Stripe uses and processes your complete payment information in accordance with [Stripe's privacy policy](https://stripe.com/privacy/). This paragraph is not applicable if you sign up for Paid Services as an in-app purchase via a mobile app store in which case the mobile app store's privacy policy will apply. Please see [Google's privacy policy](https://policies.google.com/privacy) and [Apple's privacy policy](https://www.apple.com/legal/privacy/en-ww/) for information about how they use and process your payment information. This paragraph is also not applicable if you sign up for Paid Services via a Third Party Service acting as an authorized reseller of our products. Please see the authorized reseller's privacy policy for information about how they use and process your payment information.
7678
7779**5\. How we use your personal information**
7880
7981We use the personal information we obtain about you for the following purposes:
8082
81- **Provision of the Services.** Create and manage your Account, provide and personalize our Services, register or transfer your domain names, process payments and respond to your inquiries.
83- **Provision of the Services to Users.** Create and manage your Account, provide and personalize our Services, register or transfer your domain names, process payments and respond to your inquiries. If you use the Squarespace Payments Services through the Services, in accordance with the Squarespace Payments Terms, to set up, manage and provide the Squarespace Payments Services, integrate them with the Processor Services and to initiate Transactions (as defined in the Squarespace Payments Terms) on your behalf.
8284
8385- **Communicating with you.** Communicate with you, including by sending you emails about your transactions and Service-related announcements.
8486
8587- **Surveys and contests.** Administer surveys, contests and other promotions.
8688
8789- **Promotion.** Promote our Services and send you tailored marketing communications about products, services, offers, programs and promotions of Squarespace and our partners and measure the success of those campaigns. For example, we may send different marketing communications to you based on your subscription plan or what we think may interest you based on other information we hold about you.
8991- **Advertising.** Analyze your interactions with our Services and third parties' online services so we can tailor our advertising to what we think will interest you. For example, we may decide not to advertise our Services to you on a social media site if you already signed up for Paid Services or we may choose to serve you a particular advertisement based on your subscription plan or what we think may interest you based on other information we hold about you.
9092
9193- **Customizing the Services.** Provide you with customized services. For example, we use your location information to determine your language preferences or display accurate date and time information. We also use cookies and similar technologies for this purpose, such as remembering which of Your Sites you most recently edited.
9294
9395- **Improving our Services.** Analyze and learn about how the Services are accessed and used, evaluate and improve our Services (including by developing new products and services and managing our communications) and monitor and measure the effectiveness of our advertising. We usually do this based on anonymous, pseudonymized or aggregated information which does not identify you directly. For example, if we learn that most Users of Paid Services use a particular integration or feature, we might wish to expand on that integration or feature.
9496
95- **Security.** Ensure the security and integrity of our Services.
97- **Security.** Ensure the security and integrity of our Services. If you use the Squarespace Payments Services through the Services, in accordance with the Squarespace Payments Terms, conduct fraud and risk monitoring, verify your identity, determine if you are eligible to use certain Squarespace Payments Services, and investigate fraud, mitigate financial loss or other harm to you, other Users or your or their End Users.
9698
9799- **Third party relationships.** Manage our vendor and partner relationships.
98100
99101- **Enforcement.** Enforce our [Terms of Service](https://www.squarespace.com/terms-of-service) and other legal terms and policies.
100102
101103- **Protection.** Protect our and others' interests, rights and property (e.g., to protect our Users from abuse).
102104
103- **Complying with law.** Comply with applicable legal requirements, such as tax and other government regulations and industry standards, contracts and law enforcement requests.
105- **Complying with law**. Comply with applicable legal requirements, such as tax and other government regulations and industry standards, contracts or law enforcement requests. If you use the Squarespace Payments Services through the Services, in accordance with the Squarespace Payments Terms, these legal requirements include know your customer, anti-money laundering or anti-terrorism laws.
104106
105107We process your personal information for the above purposes when:
106108
107109- **Consent.** You have consented to the use of your personal information in a particular way. When you consent, you can change your mind at any time.
108110
109111- **Performance of a contract.** We need your personal information to provide you with services and products requested by you, or to respond to your inquiries. In other words, so we can perform our contract with you or take steps at your request before entering into one. For example, we need your email address so you can sign in to your Squarespace account.
110112
111113- **Legal obligation.** We have a legal obligation to use your personal information, such as to comply with applicable tax and other government regulations or to comply with a court order or binding law enforcement request.
112114
113- **Legitimate interests.** We have a legitimate interest in using your personal information. In particular, we have a legitimate interest in the following cases:
115- **Legitimate interests.** We have a legitimate interest in using your personal information, but we won't process your information if your interests, or your fundamental rights and freedoms, override ours. In particular, we have a legitimate interest in the following cases:
114116
115117 - To operate the Squarespace business and provide you with tailored advertising and communications to develop and promote our business.
116118
117119 - To analyze and improve the safety and security of our Services - we do this as it is necessary to pursue our legitimate interests in ensuring Squarespace is secure, such as by implementing and enhancing security measures and protections and protecting against fraud, spam and abuse.
118120
119121 - To provide and improve the Services, including any personalized services - we do this as it is necessary to pursue our legitimate interests of providing an innovative and tailored offering to our Users on a sustained basis.
121123 - To share your personal information with other Squarespace group companies that help us provide and improve the Services.
122124
123125 - To comply with a court order or binding law enforcement request.
124126
125127 - To anonymize and subsequently use anonymized information.
126128
127- **Protecting you and others**. To protect your vital interests, or those of others.
129- **Protecting you and others.** To protect your vital interests, or those of others.
128130
129131- **Others' legitimate interests.** Where necessary for the purposes of a third party's legitimate interests, such as our partners who have a legitimate interest in delivering tailored advertising to you and monitoring and measuring its effectiveness or our Users who have a legitimate interest in having their sites function properly and securely and analyzing the usage of their sites so they can understand trends and improve their services.
130132
131133**6\. How we share your personal information**
132134
133135We share personal information in the following ways:
134136
135137- **Affiliates.** We share personal information with our affiliates when it is reasonably necessary or desirable, such as to help provide services to you or analyze and improve the services we or they provide.
136138
137139- **Users.** We share with our Users data regarding usage by End Users of their sites. For example, we provide a User with information about what web page the End User visited before coming to their site and how their End Users interacted with their site. This is so Users can analyze the usage of their sites and improve their services.
138140
141- **Payments Services third party service providers.** If you use the Squarespace Payments Services through the Services, in accordance with the Squarespace Payments Terms, we may use certain third party service providers (including [Stripe](https://stripe.com/privacy), [Sift](https://sift.com/service-privacy) and [Plaid)](https://plaid.com/legal/) to: (i) operate and provide the Squarespace Payments Services, (ii) provide Processing Services, (iii) perform administrative payment functions, (iv) perform individual identity or bank verification, and (v) prevent or investigate suspected risk, fraud, security threats, illegal and malicious activity or violations of the Squarespace Payments Terms.
142
139143- **Domain registration partners.** If required to comply with ICANN, registry, ccTLD or registrar policies, we share your domain registration information with such domain registration partners.
140144
141145- **Business partners.** We may share personal information with business partners. For example, we may share your personal information when our Services are integrated with their Third Party Services, but only when you have been informed or would otherwise expect such sharing.
142146
143- **Third Party Plugins and Social Networks.** We may share personal information with website plugins, social media platforms or similar Third Party Services to improve your experience, at your direction, or when you intentionally interact with the plug-in. For example, when you use a Third Party Service to create or log in to your Account, we may share your personal information with that Third Party Service.
147- **Third party plugins and social networks.** We may share personal information with website plugins, social media platforms or similar Third Party Services to improve your experience, at your direction, or when you intentionally interact with the plug-in. For example, when you use a Third Party Service to create or log in to your Account, we may share your personal information with that Third Party Service.
144148
145149- **Service providers.** We share personal information with our service providers that perform services on our behalf. For example, we may use third parties to help us provide customer support, manage our advertisements on other sites, send marketing and other communications on our behalf or assist with data storage.
146150
147151- **Process payments.** We transmit some of your personal information via an encrypted connection to our payment processor.
148152
149153- **Following the law or protecting rights and interests.** We disclose your personal information if we determine that such disclosure is reasonably necessary to comply with the law, protect our or others' rights, property or interests (such as enforcing our [Terms of Service](https://www.squarespace.com/terms-of-service)) or prevent fraud or abuse of Squarespace or our Users or End Users. In particular, we may disclose your personal information in response to lawful requests by public authorities, such as to meet national security or law enforcement requirements.
176180Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF United Kingdom, Phone 0303 123 1113, [Live Chat](https://ico.org.uk/global/contact-us/live-chat/)
177181
178182Additionally, if we rely on consent for the processing of your personal information, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.
179183
180184Our [Cookie Policy](https://www.squarespace.com/cookie-policy) explains how you can manage cookies and similar technologies.
181185
182If you are an End User of one of our User's sites, you should contact them to exercise your rights with respect to any information they hold about you.
186If you are an End User of one of our User's sites, you should contact them to exercise your rights with respect to any information they hold about you which they control.
183187
184188**8\. How we protect your personal information**
185189
186190While no service is completely secure, we have a security team dedicated to keeping personal information safe. We maintain administrative, technical and physical safeguards that are intended to appropriately protect against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any other unlawful form of processing, of the personal information in our possession. We employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it) and testing for and protecting against network vulnerabilities.
187191
188192**9\. How we retain your personal information**
200204**10\. Data transfers**
201205
202206Personal information that you submit through the Services may be transferred to countries other than where you live, such as, for example, to our servers in the U.S. We also store personal information locally on the devices you use to access the Services.
203207
204208Your personal information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information. For example, data we store may be accessible to law enforcement and national security authorities under certain circumstances.
205209
206We rely upon a number of means to transfer personal information which is subject to: (a) the European General Data Protection Regulation ("GDPR") in accordance with Chapter V of the GDPR; or (b) applicable UK data privacy laws in accordance therewith. These include:
210We rely upon a number of means to transfer personal information which is subject to: (a) the European General Data Protection Regulation ("GDPR") in accordance with Chapter V of the GDPR; or (b) applicable UK data privacy laws in accordance therewith. References to GDPR and its provisions include the GDPR as amended and/or incorporated into UK law. These include:
207211
208- **Standard data protection clauses.** We transfer, in accordance with Article 46 of the GDPR, personal information to recipients that have entered into the European Commission approved contract for the transfer of personal data outside the European Economic Area. We transfer, in accordance with UK law, personal information to recipients that have entered into the UK Information Commissioner's Office approved international data transfer agreement and the UK addendum to such European Commission approved contract.
212- **Standard data protection clauses**. We transfer, in accordance with Article 46 of the GDPR, personal information to recipients that have entered into the European Commission approved contract for the transfer of personal data outside the European Economic Area ("EEA"). We transfer, in accordance with UK law, personal information to recipients that have entered into the UK Information Commissioner's Office approved international data transfer agreement and the UK addendum to such European Commission approved contract.
209213
210- **Other means**. We may, in accordance with Articles 45 and 46 of the GDPR, transfer personal information to recipients that are in a country the European Commission or a European data protection supervisory authority has confirmed, by decision, offers an adequate level of data protection, pursuant to an approved certification mechanism or code of conduct, together with binding, enforceable commitments from the recipient to apply the appropriate safeguards, including as regards data subjects' rights, or to processors which have committed to comply with binding corporate rules.
214- **Other means.** We may, in accordance with Articles 45 and 46 of the GDPR, transfer personal information to recipients that are in a country the European Commission or a European or UK data protection supervisory authority has confirmed, by decision, offers an adequate level of data protection, pursuant to an approved certification mechanism or code of conduct, together with binding, enforceable commitments from the recipient to apply the appropriate safeguards, including as regards data subjects' rights, or to processors which have committed to comply with binding corporate rules.
211215
216 - Data Privacy Frameworks. We transfer personal data to Squarespace, Inc. in the US from, as applicable, the EEA, Switzerland and the UK pursuant to the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Frameworks (each individually and jointly, the "Data Privacy Frameworks"). In accordance with Article 45 of the GDPR, an adequacy decision was adopted for the EU-U.S., Swiss-US and UK Extension to the EU-US Data Privacy Frameworks.
217
212218You can find out more information about these transfer mechanisms [here](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en) or you can request a copy from us.
213219
214**11\. Privacy Shield**
220**11. Data Privacy Frameworks**
215221
216While Squarespace no longer relies upon the EU-U.S. or Swiss-U.S. Privacy Shield Frameworks (each individually and jointly, the "Privacy Shield") to provide a legal basis for transfers to the US, Squarespace, Inc. has certified its compliance to the Privacy Shield, which continues to apply.
222Squarespace, Inc. complies with the Data Privacy Frameworks to provide a legal basis for transfers of personal data to Squarespace, Inc. in the US from, as applicable, the EEA, Switzerland and the UK. Squarespace, Inc. has certified its compliance to the Data Privacy Frameworks.
217223
218Squarespace is committed to treating personal information received from the European Economic Area, Switzerland and the United Kingdom pursuant to the Privacy Shield in accordance with the applicable Principles. You can find our certification [here](https://www.privacyshield.gov/participant) and you can learn more about the Privacy Shield and Principles by visiting [https://www.privacyshield.gov/](https://www.privacyshield.gov/).
224Squarespace, Inc.'s certification extends to its processing of personal information (received from the EEA, UK and Switzerland under the Data Privacy Frameworks) of the type and for the purposes described in this Privacy Policy. This Privacy Policy also describes the types of third parties to which personal information is disclosed (and the purposes for such), individual's right of access, the choice and means offered to limit the use and disclosure of personal information and that personal information is disclosed in response to legal requests by public authorities where necessary, including to meet national security or law enforcement requirements.
219225
220Our accountability for personal information we receive and subsequently transfer to a third party is described in the Privacy Shield Principles. In particular, we may use third parties to process data on our behalf as described in this Privacy Policy, and we remain liable if they do so in a manner inconsistent with the Privacy Shield Principles, unless we prove that we are not responsible for the event giving rise to the damage.
226Squarespace, Inc. is committed to treating personal information received from the EEA, Switzerland and the UK pursuant to the applicable Data Privacy Framework in accordance with the principles thereof (the "DPF Principles"). You can find our certification [here](https://www.dataprivacyframework.gov/s/participant-search/participant-detail) and you can learn more about the Data Privacy Frameworks (as determined based upon the country from which the personal information was received) and DPF Principles by visiting [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/).
221227
222If you have a question or complaint you believe to be within the scope of our Privacy Shield certification, please contact us first at [privacy@squarespace.com](mailto:privacy@squarespace.com), or using the contact details in the "How to contact us" section below. We'll respond within 45 days.
228Our accountability for personal information we receive and subsequently transfer to a third party is described in the DPF Principles. In particular, we may use third parties to process data on our behalf as described in this Privacy Policy, and we remain liable if they do so in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage.
223229
224For any complaints that we can't resolve directly, JAMS is the independent organization responsible for reviewing and resolving complaints about our Privacy Shield compliance. You can contact JAMS free of charge at [https://www.jamsadr.com/eu-us-privacy-shield](https://www.jamsadr.com/eu-us-privacy-shield). JAMS is an alternative dispute resolution provider based in the U.S.
230If you have a question or complaint you believe to be within the scope of our Data Privacy Frameworks certification, please contact us first at [privacy@squarespace.com](mailto:privacy@squarespace.com), or using the contact details in the "How to contact us" section below. We'll respond within 45 days.
225231
226If your concern still isn't addressed by JAMS, you may be entitled to a binding arbitration under the Privacy Shield Principles. For purposes of enforcing compliance with the Privacy Shield, Squarespace, Inc. is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission.
232For any complaints that we can't resolve directly, JAMS is the independent organization responsible for reviewing and resolving complaints about our Data Privacy Frameworks compliance. You can contact JAMS free of charge at [https://www.jamsadr.com/eu-us-data-privacy-framework](https://www.jamsadr.com/eu-us-data-privacy-framework). JAMS is an alternative dispute resolution provider based in the US.
227233
228Nothing in Privacy Shield affects your rights as a data subject under any European Commission approved standard data protection clauses we use for transfers to the US.
234If your concern still isn't addressed by JAMS, you may be entitled to a binding arbitration under the DPF Principles. For purposes of enforcing compliance with the Data Privacy Frameworks, Squarespace, Inc. is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission.
229235
236Nothing in the Data Privacy Frameworks affects your rights as a data subject to the extent we use any European Commission approved standard data protection clauses for transfers to the US. If there is any conflict between the terms in this Privacy Policy and applicable DPF Principles, the applicable DPF Principles shall govern.
237
230238**12\. End Users' personal information**
231239
232Our Users who have created a site using Squarespace are responsible for what they do with the personal information they collect, directly or through Squarespace, about their End Users. This Section 12 is directed to such Users.
240Our Users who have created a site using Squarespace are responsible for what they do with the personal information they collect, directly or through Squarespace, about their End Users where they are a controller for such processing. This Section 12 is directed to such Users.
233241
234242**a. Your relationship with End Users**
235243
236244If you're one of our Users, you will collect personal information about your End Users. For example, during checkout you may ask your End Users to provide their name, address, email address and payment information so that you can complete their orders. You may also use cookies and similar technologies to analyze usage and other trends.
237245
238You're solely responsible for complying with any laws and regulations that apply to your collection and use of your End Users' information, including personal information you collect about them from us or using Squarespace functionality or cookies or similar technologies. Please be aware that you and Squarespace may be independent controllers of some data ("Independently Controlled Data"). Independently Controlled Data includes data related to your End Users' interactions with Your Site such as IP address, device/browser details, web pages visited prior to coming to Your Site and browsing activity on Your Site. Independently Controlled Data may be collected by the Services through an End User's browser and technologies like cookies. Note that Independently Controlled Data is both Squarespace Controlled PI and User Controlled PI.
246You're solely responsible for complying with any laws and regulations that apply to your collection and use of your End Users' information, including personal information you collect about them from us or using Squarespace functionality or cookies or similar technologies. Please be aware that you and Squarespace may be independent controllers of some data ("Independently Controlled Data"). Independently Controlled Data includes data related to your End Users' interactions with Your Site such as IP address, device/browser details, web pages visited prior to coming to Your Site and browsing activity on Your Site. Independently Controlled Data may be collected by the Services through an End User's browser and technologies like cookies. Note that Independently Controlled Data is Squarespace Controlled PI with respect to processing by Squarespace (for which we determine the purposes and means of the processing) and User Controlled PI with respect to processing by a User (for which the User determine the purposes and means of the processing).
239247
240248You must publish your own privacy and cookie policies and comply with them.
241249
242250We're not liable for your relationship with your End Users or how you collect and use personal information about them (even if you collect it from us or using Squarespace functionality or cookies or similar technologies) and we won't provide you with any legal advice regarding such matters.
243251
244252**b. End User payment information**
245253
246Your End Users' payment information may be processed via third party eCommerce Payment Processors with which you integrate your Account, in accordance with such eCommerce Payment Processors' terms and policies. We transmit your End Users' complete payment information when they initially provide or update it only so that we can pass it along to the eCommerce Payment Processors you agree to use. We don't collect or store your End Users' payment information.
254If you use the Squarespace Payments Services through the Services, in accordance with the Squarespace Payments Terms, you accept that Squarespace, the Processor providing the Processor Services and certain Squarespace Payments Services third party service providers (such as [Sift](https://sift.com/service-privacy) and [Plaid](https://plaid.com/legal/)) have the authority to access, use and transmit your End Users' Transaction, payment (cardholder information) and other information. We share such End Users' Transaction, payment (cardholder information) and other information with the Processor and certain Squarespace Payments Services third party service providers to provide the Payments Services, to perform administrative payment functions, to perform individual identity or bank verification, to prevent or investigate suspected risk, fraud, security threats, illegal and malicious activity.
247255
256If you integrate Your Site with a third party eCommerce Payment Processors, Your End Users' payment information may be processed via third party eCommerce Payment Processors, in accordance with such eCommerce Payment Processors' terms and policies. We transmit your End Users' complete payment information when they initially provide or update it only so that we can pass it along to the eCommerce Payment Processors you agree to use. With respect to such third party eCommerce Payment Processors integrated with Your Site, we don't collect or store your End Users' payment information.
257
248258**13\. Updates to this Privacy Policy**
249259
250260We'll update this Privacy Policy from time to time to reflect changes in technology, law, our business operations or any other reason we determine is necessary or appropriate. When we make changes, we'll update the "Effective Date" at the top of the Privacy Policy and post it on our sites. If we make material changes to it or the ways we process personal information, we'll notify you (by, for example, prominently posting a notice of the changes on our sites before they take effect or directly sending you a notification).
251261
252262We encourage you to check back periodically to review this Privacy Policy for any changes since your last visit. This will help ensure you better understand your relationship with us, including the ways we process your personal information.
253263
254264**14\. Who is Squarespace?**
255265
256When we say "Squarespace" (or "we", "us" or "our"), we mean: (a) Squarespace, Inc. if you are a resident of or have your principal place of business in the United States of America or any of its territories or possessions (the "US"); or (b) Squarespace Ireland Limited, in any other case.
266When we say "Squarespace" (or "we", "us" or "our"), we mean: (a) Squarespace, Inc. if you are a resident of or have your principal place of business in the United States of America or any of its territories or possessions (the "US"); or (b) Squarespace Ireland Limited if you are a resident of or have your principal place of business outside the US.
257267
258268If your place of residence or principal place of business changes, the Squarespace entity that controls your personal information will be determined by your new residence or principal place of business from the date it changes.
259269
260270**15\. How to contact us**
261271
262272If you have questions, comments or complaints about this Privacy Policy or our privacy practices or if you would like to exercise your rights and choices, please email us at [privacy@squarespace.com](mailto:privacy@squarespace.com), or write to us at the addresses below: