Fastly Privacy Policy

This document is Fastly's Privacy Policy, governing how Fastly collects, uses, shares, and protects personal data from visitors to its website, prospective and current customers, and individuals whose data is processed through its edge cloud services, with stated legal bases including consent, legitimate interests, and contractual necessity under GDPR and equivalent frameworks. The policy states that Fastly collects personal data including contact information, usage data, log data, payment information, and device and browser identifiers, and the terms authorize sharing this data with service providers, business partners, advertising networks, and in the context of corporate transactions such as mergers or acquisitions. A notable structural distinction in this policy is the explicit separation between Fastly's role as a data controller (for website visitors and its own customers) and as a data processor (for personal data passing through customer-configured services), which limits Fastly's direct privacy obligations regarding end-user data handled on behalf of its enterprise clients. The policy references GDPR compliance for EU/EEA residents, CCPA/CPRA rights for California residents, and additional rights for UK, Swiss, and Brazilian data subjects, and states that Fastly relies on Standard Contractual Clauses for cross-border data transfers from the EU. Compliance teams should note that the policy's processor-controller distinction has direct implications for data subject request handling workflows, and that Fastly's advertising and analytics data sharing activities may require evaluation under applicable consent and cookie regulations including the ePrivacy Directive.