1. Personal Data we collect
We collect Personal Data about you when you provide it directly to us, when service providers (such as our advertising service providers) provide us with Personal Data about you, or when Personal Data about you is automatically collected in connection with your use of our Service. We collect the following Personal Data from you in connection with the Service:
Basic Account Information: we ask for basic information from you in order to set up your account. We collect typical “business card information” such as your first and last name, physical address, email address. This is the basic information that we collect when you register to download our free service or buy any payment service.
Transaction and Billing Information: information that you provide in connection with your purchase of one of our services – a design kit, a Webflow template or a subscription plan – and that is required to process the transaction and your payment, for example billing name and surname, a billing address, a VAT number, the email you use for your webflow account. You must only provide us with Billing Information for accounts that you have the lawful right to access. We don’t see and collect any financial information such as credit card numbers. These are provided directly to PayPal whose use of your personal data is governed by their privacy policies: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
User Account Information: information that identifies you to our services, such as your email address, password.
Credentials: depending on the services you use, you may provide us with credentials for your website (like SSH, FTP, and SFTP username and password, or webflow credentials). For example, you may provide us with these credentials in order to allow us to troubleshoot problems on your projects and site more quickly.
Communications with Us: You may also provide us information when you communicate with our team about a support question or post a question about your site in our public forums.
Important Note: Users of our Services should not use end-customer personal data (e.g. actual or “live” end-customer data) when building their projects. Industry practice is to use “dummy data” that does not refer to actual people. Please also do not provide us with any sensitive personal data while building your projects. For example, do not provide personal health information or personal financial information). If this type of data is necessary to make your prototype “come alive”, use dummy data instead.
2. How we collect your Personal Data
There are two main methods we use:We collect information through your entry and use of the Site. In other words, when you access or use the Site, we are aware of your usage of Site, and may gather, collect and store the information relating to such usage, either independently or through the help of third-party service providers as detailed below.We collect information which you provide us voluntarily. We collect Personal Information when you complete the contact form and/or send us a feedback, comment or support request through our website. We may gather, collect and store the Personal Information either independently or through the help of our authorized third-party service providers as detailed below.
3. Why we collect and use your personal data
The information that we collect may be used notably for the purposes listed below:to provide our Services – for example, to set up and maintain your account, to identify you when login to our services, to process your transactions;to further develop and improve our Services – for example by adding new features that we think our users will enjoy or will help them create and manage their websites more efficiently;to send you updates and notifications about our services;to communicate with you, for example through an email, about offers and promotions;to monitor and prevent any problems with our Services, protect the security of our Services, detect and prevent fraudulent transactions and other illegal activities,to process your support requests;to share your activities with your contacts if you are connected through third parties services (Facebook, Google, Twitter);to respond to you about any comment or enquiry you have submitted.
4. Legal bases for collecting and processing personal data
We will only use your Personal Data if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity, and our “legitimate interests”, as further described below:Consent: we process Personal Data based on the consent you expressly grant to us at the time we collect such data. When we process Personal Data based on your consent, it will be expressly indicated to you at the point and time of collection.Contractual Necessity: We process the following categories of Personal Data because we need to process the data to perform under our User Agreement with you, which enables us to provide you with the Service. When we process data due to contractual necessity, failure to provide such Personal Data will result in your inability to use some or all portions of the Service that require such data:Contact InformationUser Account InformationTransaction and billing InformationTechnical assistance information.Legitimate Interest: We process the following categories of Personal Data when we believe doing so furthers the legitimate interest of us:Contact InformationUser Account InformationTransaction InformationExamples of these legitimate interests include:Operation and improvement of our business, products, and servicesMarketing of our products and servicesProvision of customer supportProtection from fraud or security threats Compliance with legal obligations
5. How and with whom we share your personal data
We do not sell our users’ private personal information.We share information about you in the limited circumstances spelled out below and with appropriate safeguards on your privacy:
Third Party Service Providers: We may share information about you with third party service providers who help us provide our Services to you (like payment providers that process payment, email delivery services that help us stay in touch with you, those that help us maintain the security of our products and services, those that assist us with understanding and enhancing our Services (like analytics providers in order to, for example, provide technical or other support services to you).We require vendors to agree to privacy commitments in order to share information with them.
Legal request: we may share your Personal Data when we believe it is necessary tocomply with applicable law or respond to valid legal process, including from law enforcement or other government agencies
6. How Long We Keep your Personal data
We generally discard information about you when we no longer need the information for the purposes for which we collect and use it–which are described in the section above on Why We collect personal data–and we are not legally required to continue to keep it.
While no online service is 100% secure, We maintain our customer’s privacy security as our highest priority and use commercially reasonable security measures to protect against unauthorized access, use, loss, alteration, or destruction of their personal data.
8. Rights and choices you have regarding your personal data
You have certain rights with respect to your Personal Data, and we want to help you review and update your information to ensure it is accurate and up-to-date.In compliance with the European General Data Protection Regulation, you have the rights listed below:
Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data.
Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data.
Erasure: You can request that we erase some or all of your Personal Data from our systems. Please note that deleting mandatory information may prevent you from using the related services.
Portability: You can ask for a copy of your Personal Data in a machine-readable format.You can usually access, correct, or delete your personal data using your account settings and tools that we offer, but if you aren’t able to do that, or have any additional requests or questions, contact us directly at firstname.lastname@example.org.For the following, please email us at email@example.com:
Withdrawal of Consent: if we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our Service.
Restriction of Processing: You can ask us to restrict further processing of your Personal Data.Users in the European Economic Area (EEA) and Switzerland have the right to lodge a complaint with the Supervisory Authority for data protection in their country, should they find that we did not appropriately address their question or concern. You can find a detailed list of supervisor authorities here.
Right to objectYou can at any time opt out of receiving newsletters and other promotional messages from us. Just click on the “unsubscribe” button at the bottom of those messages. If you opt out of promotional messages, we may still send you other messages, like those about your account and legal notices.
Closing Your AccountYou may ask to close an account by emailing us at firstname.lastname@example.org, and upon termination of your account, we will take reasonable steps to delete your Personal Data as soon as is practicable. However, some information may remain in archived/backup copies for our records or as otherwise required by law. Those interests include without limitation the completion of transactions, maintaining records for financial reporting purposes, complying with our legal obligations, resolving disputes, and enforcing agreements.
Our Service is not intended for children under the age of 16, and therefore, we don’t knowingly acquire or receive Personal Data from children under the age of 16. If we later learn that any user of our Service is under the age of 16 in the EU, we will take appropriate steps to remove that user’s information from our account database and will restrict that individual from future access to the Service.
10. Links to third party sites
11. Information about cookies