In this Policy, “Personal Information” means any information relating to an identifiable natural person. Except as described in this Policy, Webflow will not give, sell, rent, or loan any Personal Information to any third party.

Personal Information does not include data or information collected, derived, or otherwise generated from the use of the Platform, provided that such data has been anonymized, de-identified, and/or aggregated so as not to identify or permit the identification of any individual (“De-identified Data”), De-identified Data helps us understand trends in usage of the Platform so that we can better consider new features or otherwise tailor the Platform. In addition to collecting and using De-identified Data ourselves, we may share De-identified Data with third parties, including our customers, partners and service providers, for various purposes, including to help us better understand our customers’ needs and improve the Platform as well as for advertising and marketing purposes.

3. Links to other websites

The Platform contains links to websites and applications other than the Platform, including websites and applications operated by affiliates and other third parties. This Policy applies only to information collected by the Platform.

Webflow does not endorse and is not responsible for the practices of third parties or their websites or applications. We do not determine and are not responsible for the privacy practices or the content of websites or applications operated by third parties. Your browsing and interaction on any third-party website or service, including those that have a link on our website, are subject to that third party’s own rules and policies.

We are not responsible for and we do not control any third parties that you authorize to access your Website Content. If you are using a third-party website or service and you allow such a third-party access to your Website Content, you do so at your own risk.

5. Customer testimonials / comments / reviews

From time to time, we post Customer testimonials on the Sites which may contain Personal Information. We will always obtain your consent prior to posting any Personal Information included in your testimonial(s).

7. Hosting and data transfer

As Webflow is based in the United States, we may host, transfer, and process your Personal Information in the United States or countries other than the United States. Webflow uses a variety of safeguards, including contractual and technical measures, to protect the Personal Information and data we transfer. Webflow will ensure that any of our service providers, processors, or third parties will undergo an adequate privacy vet prior to providing them your Personal Information. Furthermore, Webflow does assume liability for onward transfer to third parties and shall remain liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles.

If you are located in the United Kingdom (“UK”), European Union (“EU”), European Economic Area (“EEA”) or Switzerland, please see Webflow’s EU & Swiss Privacy Policy. Webflow complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Webflow has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Webflow has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Webflow commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. Webflow provides alternative dispute resolution provider and appropriate recourse free of charge.

9. Correcting and updating your information

Customers may update, delete, or change your Personal Information you have provided Webflow by logging in to the Platform and providing such additional information or deleting such information where applicable. If you are not a Customer and would like to gain access to, or request deletion of, information we have collected, please contact us at contact@webflow.com. We will provide a response in accordance with applicable. For the avoidance of doubt, Webflow has no direct relationship with your End Users Any such End Users seeking access to, or who would like to correct, amend, or delete data which may be stored on the Platform should direct their request to you, the Customer. If Webflow receives a request from your End User we will inform you in a commercially reasonable amount of time.

11. Children's Personal Information

Webflow does not knowingly collect any Personal Information from children under the digital age of consent (13 in the United States, 16 in the EU). If you are under the age of 13 (or the applicable digital age of consent), please do not submit any Personal Information through our Platform. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce our Policy by instructing their children never to provide Personal Information on our Platform. If you have reason to believe that a child under the age of 13 (or the applicable digital age of consent) has provided Personal Information to Webflow through our Platform, please contact us, and we will delete that Personal Information from our databases without delay.

13. U.S. State Privacy Rights

Residents of certain U.S. states, including but not limited to California, Colorado, Connecticut, Virginia, and Utah, may have additional rights in relation to their Personal Information. However, these rights may be subject to certain exceptions. For instance, we may be unable to disclose specific pieces of Personal Information if the disclosure would create a substantial, articulable, and unreasonable risk to the security of Personal Information, your Account with us, or the security of our network systems. Your rights may include:

• Right Against Discrimination - You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising your right to know, delete or opt-out of sales.

• Right to Know - You have the right to request in writing: (i) a list of the categories of personal information, such as name, address, email address, that a business has disclosed to third parties during the immediately preceding calendar year for the third parties' direct marketing purposes, and (ii) the names and addresses of all such third parties. In addition, you have the right to request: (i) the categories of personal information we have collected about you, (ii) the categories of sources from which personal information is collected, (iii) the business or commercial purpose for the information collection, (iv) the categories of third parties with whom we have shared personal information, and (v) the specific pieces of personal information we hold about an individual. You have the right to request a copy of the specific Personal Information we collected about you during the 12 months before your request.

• Right to Delete - You have the right to request us to delete any Personal Information we have collected from you or maintain about you, subject to certain exceptions.

To assert your right to know or your right to delete your Personal Information, please contact us according to the “Contact Us” section below. To verify your identity, we may ask you to verify Personal Information we already have on file for you. If we cannot verify your identity from the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes.

Right to Opt-Out of Selling. As described in this Privacy Policy, in certain situations we may share your Personal Information with certain third parties for our marketing or other purposes. To the extent such sharing is considered a “sale” under the CCPA, as a California resident you have the right to opt-out of such sharing. If you would like us to no longer share your Personal Information in this way, you can opt-out by visiting the following web page: Do Not Sell My Info. If you opt-out, we may be unable to offer you some of our Platforms which require sharing of Personal Information.

California consumers may also use the Digital Advertising Alliance’s tool to send requests under the California Consumer Privacy Act (“CCPA”) for a web browser to opt out of the sale of personal information by some or all of that framework’s participating companies by accessing the DAA’s tool here: https://www.privacyrights.info/, or by downloading the DAA’s AppChoices mobile application opt-out here: https://www.privacyrights.info/appchoices.

The AppChoices app is not limited to opt-outs for CCPA purposes and may be used by anyone to limit the collection of cross-app data for interest-based advertising purposes by participating DAA member companies.

In addition, under California Civil Code Sections 1798.83–1798.84, California residents are entitled to ask us for a notice identifying the categories of Personal Information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties.

If you are a California resident and would like a copy of this notice, please submit a written request to: privacy@webflow.com or Webflow Inc., 398 11th Street, San Francisco, CA 94103.

15. Business transactions

Webflow may assign or transfer this Policy, and your user account and related Personal Information, to any person or entity that acquires all or substantially all of the business, stock or assets of, or is merged with Webflow. We may also transfer or assign such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, or similar transactions or proceedings, provided that the recipient of such information will continue to be bound by the terms of this Privacy Policy.