Note: While our most popular guides have been translated into Spanish, some guides are only available in English.

Data privacy and Squarespace

There are many data privacy laws around the world that apply to businesses in different ways depending on the location and industry. The laws vary, but have a shared goal of giving individuals more awareness of and control over how companies may collect and use data about them. Squarespace complies with data privacy laws applicable to us, and you can find the details of how we use data in our Privacy Policy.

Note: This guide is available as a resource, but should not be construed or relied upon as legal advice. Per our Terms of Service, Squarespace doesn't provide advice or recommendations regarding laws applicable to your site or business.

Examples of data privacy laws

The GDPR, or General Data Protection Regulation, is a European law that broadly applies to companies that process the “personal data” of individuals in Europe. Several other countries have laws similar to GDPR, including:

Unlike the EU, the U.S. doesn’t have one data privacy law of general applicability. However, there are several industry-specific federal laws that relate to data privacy. For example:

  • The Gramm-Leach-Bliley Act (The Financial Modernization Act) regarding financial information
  • The Health Insurance Portability and Accountability Act (HIPAA) regarding protected health information

Some U.S. states have passed state-specific laws about data privacy and data security, including California, Nevada, Colorado, and Virginia.

Managing your personal data on Squarespace

You can access, update, and delete personal data in your account, including:

You can also delete your account.

To request that we remove other specific data from our system, whether it’s your own data or visitor data we store on your behalf, email us at

Designing your site for compliance

These guides cover the ways in which Squarespace helps you comply with data privacy laws, and what you should know if you use our services.

Squarespace sites aren’t compliant with the Gramm-Leach Bliley Act (GLBA), and should never be used to collect "nonpublic personal information" (as defined in GLBA).

Tip: If your business is a large corporation or enterprise looking for premium support, you may require a custom solution to meet your contracting, payment, or support needs. To learn more, visit our Enterprise page.
Was this article helpful?
6 out of 13 found this helpful