This analysis describes what Squarespace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
It conditions the existence of key data subject rights on applicable law and legal exceptions, meaning the rights are not universally guaranteed by this clause alone.
Interpretive note: The clause uses 'may have the right', which is doubly conditional—on applicable law and legal exceptions. Both qualifiers are preserved in the canonical claim.
The updated policy establishes two separate opt-in categories for SMS communications: optional transactional SMS (for account notifications and two-factor authentication) and optional marketing SMS (for promotional messages). The policy explicitly states it will not sell, share, or disclose phone numbers to third parties for their marketing purposes. For users with financial accounts, the policy now explicitly covers Balance Services and Capital Services in addition to Payments Services, and identity verification procedures are clarified to include bank statements and specific triggering scenarios such as account recovery, ownership disputes, or suspicious activity detection. You can opt in or out of each SMS category independently, and two-factor authentication can be used without providing a phone number.
View change record →Your ability to access, port, update, change, or delete your personal information depends on whether applicable law grants those rights and whether legal exceptions apply.
How other platforms handle this
The CCPA provides California residents specific rights to delete their personal data that we collected from them and retained, subject to certain exceptions (the "right to delete").
Right to Know: The right to request details about the Personal Information we collect, use, or disclose, as well as information about our data practices.
The right to request that we disclose to you the personal information we collect, use, or disclose about you, and information about our data practices.
"Where applicable law requires (and subject to any relevant exceptions or obligations under law), you may have the right to access, port, update, change or delete personal information.Excerpt from Squarespace's Privacy Policy
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
It conditions the existence of key data subject rights on applicable law and legal exceptions, meaning the rights are not universally guaranteed by this clause alone.
Your ability to access, port, update, change, or delete your personal information depends on whether applicable law grants those rights and whether legal exceptions apply.
ConductAtlas has identified this type of provision across 277 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Squarespace.