Key Facts
Who does Squarespace place responsibility on to ensure their collection and processing of Customer Controlled Information complies with applicable law?
Squarespace places responsibility on its Customers to ensure their collection and processing of Customer Controlled Information complies with applicable law.
Is Squarespace's use and disclosure of de-identified information subject to any restrictions under its Privacy Policy?
Squarespace's use and disclosure of de-identified information is not subject to any restrictions under its Privacy Policy and may be used and disclosed to others for any purpose without limitation.
What does Squarespace require before its vendor may verify a user's identity through biometric means?
Squarespace requires a user's explicit consent before its vendor may verify the user's identity through biometric means.
What does Squarespace's Privacy Policy state users may be entitled to under the DPF Principles?
Squarespace's Privacy Policy states that users may be entitled to binding arbitration under the DPF Principles through the International Centre for Dispute Resolution for DPF-related disputes.
Will Squarespace sell, share, or otherwise disclose a user's Optional 2FA Information to a third party in a manner that permits that third party to use the user's phone number for the third party's marketing purposes?
Squarespace will not sell, share, or otherwise disclose a user's Optional 2FA Information to a third party in a manner that permits that third party to use the user's phone number and/or opt-in consent to send SMS messages for the third party's marketing purposes.
What may Squarespace disclose to third-party social media platforms on which Squarespace advertises?
Squarespace may disclose a user's Account History Information—and, if the user is a Customer, Site Usage Information—to third-party social media platforms on which Squarespace advertises, in order to avoid serving ads to existing paying Customers.
May Squarespace disclose a user's Account History Information to third-party social media platforms in order to avoid serving ads to existing paying Customers?
Squarespace may disclose a user's Account History Information—and, if the user is a Customer, Site Usage Information—to third-party social media platforms on which Squarespace advertises, in order to avoid serving ads to existing paying Customers.
What rights may users have where applicable law requires and subject to any relevant legal exceptions or obligations?
Squarespace states that, where applicable law requires and subject to any relevant legal exceptions or obligations, users may have the right to access, port, update, change, or delete their personal information.
May users have the right to access, port, update, change, or delete their personal information where applicable law requires?
Squarespace states that, where applicable law requires and subject to any relevant legal exceptions or obligations, users may have the right to access, port, update, change, or delete their personal information.
Does Squarespace create, store, or otherwise have access to any biometric data generated during the identity verification process?
Squarespace does not create, store, or otherwise have access to any biometric data generated during the identity verification process.
Summary
This document explains how Squarespace collects, uses, and shares your personal information, and what rights you may have over it. A few things matter most for ordinary users: Squarespace may share your account and usage data with social media platforms to suppress ads to existing paying customers; your 2FA phone number will not be sold or shared for third-party SMS marketing; and by simply using Squarespace's services, you are bound by its Terms of Service, Privacy Policy, and Cookie Policy together.
Analysis
This Privacy Policy establishes the substantive obligations, rights, and limitations governing Squarespace's collection, use, sharing, and retention of user data. It allocates legal compliance responsibility for Customer Controlled Information to Squarespace's Customers rather than to Squarespace itself, and removes all Policy-based restrictions on Squarespace's use and disclosure of de-identified information for any purpose. The Policy conditions data subject rights—including access, portability, correction, and deletion—on applicable law and relevant legal exceptions, rather than guaranteeing them independently. Squarespace retains liability for DPF-related violations by its third-party agents unless it proves it was not responsible for the event giving rise to the damage, and provides for binding arbitration through the International Centre for Dispute Resolution for DPF-related disputes.
What this means for you
As an individual user, this document means that Squarespace may use your account history and subscription plan to decide which ads you see, and may share your account and usage data with social media platforms for ad-suppression purposes. Your 2FA phone number is specifically protected from being shared in a way that enables third-party SMS marketing. Squarespace does not create, store, or access any biometric data from identity verification—that data stays with its vendor—but your explicit consent is required before any biometric verification proceeds. Where applicable law grants it, you may have the right to access, port, update, change, or delete your personal information by contacting Squarespace.
2 important changes detected
3 versions captured · Last updated: August 2026
What changed
Squarespace restructured its Privacy Policy on August 11, 2026, removing promotional language and 'Back to top' navigation elements, renumbering sections, and reorganizing the table of contents. The document now presents a cleaner structure with explicit section numbering and expanded section headers (e.g., 'Specific Information for California Residents' replacing 'California Supplemental Information'). No material changes to data collection, use, or disclosure practices are evident from the detected modifications; the update appears primarily organizational and formatting-focused.
Why this matters
The restructured Privacy Policy does not materially alter what information Squarespace collects, how it uses that information, or your rights and choices. The document's core provisions regarding data collection (including financial information, government identifiers, and promotion data), disclosure to vendors and affiliates, and security measures remain substantively unchanged. The update reflects organizational and formatting changes, including clearer section numbering and expanded section headers for state-specific privacy provisions.
View full change record →
What changed
Squarespace updated its Privacy Policy effective July 15, 2026, reorganizing how it handles financial and identity information. The policy removed specific mention of domain registration contact information from a list of data uses, expanded the definition of financial services covered to include Balance Services and Squarespace Capital Services, and separated SMS account information into two categories: Optional SMS for transactional/2FA purposes and SMS Marketing Information for promotional messages. The revised language clarifies that two-factor authentication does not require SMS information and adds explicit restrictions on sharing phone numbers with third parties for their marketing purposes.
Why this matters
The updated policy reorganizes how Squarespace handles SMS communications and financial services information. The revised language now separates Optional SMS Account Information (for transactional messages and two-factor authentication) from SMS Marketing Information (for promotional messages), clarifying that two-factor authentication does not require you to provide a phone number. Squarespace explicitly states it will not sell, share, or disclose your phone number to third parties for their marketing purposes. The policy also expands the definition of financial services covered to include Balance Services and Squarespace Capital Services in addition to Payments Services. You can opt in or out of SMS communications under both categories.
View full change record →
Archival ProvenanceSource & Archival Record
Last Captured
August 11, 2026 01:04 UTC
Capture Method
Automated scheduled archival capture
Document ID
CA-D-000569
Version ID
CA-V-005695
SHA-256
d51c15c6f25423ed0a70273a06f566838a66ee76a182e4b79e3598262ea2c711
✓ Snapshot stored
✓ Text extracted
✓ Change verified
✓ Hash verified