Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“When we transfer personal data from the EU, Switzerland, or UK to any other country, we will do so according to an adequate mechanism of transfer as required by applicable laws or regulations.”
“If your DFP complaint cannot be resolved through the above channels, you may invoke binding arbitration for residual claims not fully or partially resolved by other redress mechanisms.”
“If we learn we have collected or received personal data from a child under 16, we will delete that information immediately.”
“If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.”
“Fastly does not sell your data to third-parties. Please see Section 3 on sharing data with third-parties.”
“Fastly shall remain liable under the Frameworks' principles if its agent processes such personal information in a manner inconsistent with the Frameworks' principles unless Fastly proves that it is not responsible...”
Fastly's Privacy Policy explains how Fastly handles your personal information: it does not sell your data, will notify you 30 days before making material changes to how it treats your data, and gives you a chance to opt out before sharing your data with third parties or using it for new purposes. Fastly may store and process your information in the United States and other countries. If you transmit personal data to Fastly's websites, you do so at your own risk, as Fastly cannot guarantee transmission security.
Fastly's Privacy Policy establishes the terms under which Fastly collects, processes, stores, and shares personal data, including cross-border transfers to the United States and other countries conducted only through legally required adequate transfer mechanisms. The policy commits Fastly to a data retention ceiling of the business relationship plus seven years (subject to a legitimate business interest exception), an immediate deletion obligation for personal data of children under 16 discovered after collection, and a prohibition on selling personal data to third parties. Users retain an opt-out right before their data is disclosed to independent third parties or used for materially different purposes, and Fastly must provide 30 days' advance notice before material changes to data-treatment practices take effect. Where the EU-U.S. or Swiss-U.S. Data Privacy Framework Principles conflict with the policy, those Principles govern, and Fastly remains liable for agent mishandling of personal data unless it proves it bears no responsibility.
As an individual user, this document means Fastly will not sell your personal data and will keep it no longer than seven years after your business relationship ends, unless Fastly has a legitimate business interest in retaining it longer. Before Fastly discloses your data to an independent third party or uses it for a purpose materially different from what was originally stated, you have the right to opt out — you can act on that right when Fastly presents the opt-out opportunity. You will also receive at least 30 days' notice by email or posted notice before any material change to how Fastly treats your personal data takes effect, giving you a defined window to review those changes.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“When we transfer personal data from the EU, Switzerland, or UK to any other country, we will do so according to an adequate mechanism of transfer as required by applicable laws or regulations.”
“If your DFP complaint cannot be resolved through the above channels, you may invoke binding arbitration for residual claims not fully or partially resolved by other redress mechanisms.”
“If we learn we have collected or received personal data from a child under 16, we will delete that information immediately.”
“If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.”
“Fastly does not sell your data to third-parties. Please see Section 3 on sharing data with third-parties.”
“Fastly shall remain liable under the Frameworks' principles if its agent processes such personal information in a manner inconsistent with the Frameworks' principles unless Fastly proves that it is not responsible...”
“Fastly may collect from, transfer to, or process, and store your personal information in the United States and other countries other than the country where you live.”
“If we make material changes to how we treat our users' personal data, we will notify you by e-mail...and/or through a notice on http://docs.fastly.com/changes thirty (30) days prior to the change becoming effective.”
“We will give you an opportunity to opt out where personal data we control about you is to be disclosed to an independent third party or used for a purpose that is materially different from those set out in this …”
“We may share your personal data to a potential buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Fastly's assets...”
“Information that is transmitted via the Internet is not completely secure. We cannot guarantee the security of your personal data transmitted to our websites. Any transmission of personal data is at your own risk.”
“The retention period shall not exceed the duration of our business relationship with you plus (7) years unless we have a legitimate business interest need to retain the information for a longer period...”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Adequate mechanism required for EU/UK/Swiss transfers and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.