Effective start date: 2019-02-28
Effective end date: 2019-11-27
Published on: February 28, 2019
This privacy policy (this “Privacy Policy”) covers and describes how Fastly, Inc. and its subsidiaries (“Fastly”, “We” or “Us”) collect, use, share, secure and disclose the personal information we collect from individuals who interact with www.fastly.com and our websites that link to this Privacy Policy or who initiate communications with us (“Visitors”), individuals who register for or authenticate to our edge cloud services (“Customers”), individuals who register for or attend our marketing events or receive our marketing emails (“Attendees”).
In their use of our services, Customers submit content, configurations and credentials to the Fastly edge cloud services to be processed. The security and privacy practices governing our Customers’ (and our Customers’ Internet clients) use of our services and how we store, process, transmit and disclose the data submitted to the services by our Customers is described in and governed by our service contracts with our Customers. Our terms of service are available here. Our data processing terms are available here. To the extent a Customer submits to the services the personal information of European persons (including the United Kingdom and Switzerland), Fastly processes that personal information as a data processor or as the Customer’s sub-processor (as the case may be). Customers are solely responsible for establishing the policies governing, and ensuring compliance with all applicable laws and regulations related to, the Customer’s (and the Customer’s Internet client’s) collection and submission of personal data to our services. Any personal information about an individual (i.e., a “data subject”) hosted, stored or published by a Customer is the responsibility of the Customer and is not covered by this Privacy Policy.
Fastly acknowledges that you have the right to access your personal information. Fastly has no direct relationship with the data subjects whose personal data we process on behalf of our Customers. An individual who seeks access, or who seeks to correct, amend or delete inaccurate data should direct their requests or queries to our Customer (i.e., the data controller). In addition, we will forward to the applicable Customer any request by a data subject received by Fastly regarding personal data processed on behalf of that Customer. If requested to remove data, we will respond to your request within a reasonable timeframe. Please read this Privacy Policy carefully to understand how we collect, use, disclose, and protect the personal information (or, alternatively, “personal data”) of our Visitors, Customers and Attendees, as well as the choices available to you regarding that information.
Fastly has certified its services under the EU–U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce and the European Union and Switzerland, respectively (collectively, the “Privacy Shield”). The Privacy Shield will apply to personal data we receive from Visitors, Customers or Attendees in the EU, the United Kingdom or Switzerland that we collect and use pursuant to this Privacy Policy. You can view our notice of self-certification here. For more information on the Privacy Shield, please visit the U.S. Department of Commerce’s Privacy Shield website.
Information that we collect from you includes the following:
Categories of collected personal information | Description |
---|---|
Identification and Contact Information | Information that can personally identify you, such as name, postal address, e-mail address, or telephone number, either actively or passively, and billing information such as credit card number and tax address. |
Professional Information | Information that you provide when you fill in forms on our websites, including information that can personally identify you, such as your job title, credit card number and other contact details. Information you provide as a contributing user that is published or displayed (hereafter, referred to as “posted”) on public areas of our websites, or transmitted to other users of our websites or third parties. Your user contributions are posted and may be accessed by others at your own risk. Information you provide when applying for a job with Fastly, including your résumé. |
Transactional Data | Details of financial transactions you carry out through our websites or related to orders of our services, such as credit card information, or in connection with planning and hosting corporate events, such as reservations and hospitality. |
Technical Data | Information about your Internet connection and Internet protocol (IP) address, your login data, the equipment you use to access our websites, time zone settings and location, browser plug-in types and versions, operating system and other technology on the devices you use to access or use our websites. |
Marketing and Communications Data | Your preferences in receiving marketing from us and our partners and your communication preferences. Your responses to surveys that we might ask you to complete for research purposes. Records and copies of your correspondence (including e-mail addresses, IRC handles, and Twitter handles), if you contact us. This information may contain contact details you include within your correspondence. |
Behavioral Data | Inferred or assumed information relating to your behaviour and interests, based on your online activity and your use of our websites. |
We do not collect any “Special Categories of Personal Data” about you. This includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not collect any information about criminal convictions and offenses.
Legal Basis for Processing of European Union and United Kingdom Data Subjects:
If you are an individual from the European Economic Area (EEA), our legal basis for collecting and using the personal information described in Section 2.1 above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where: (a) we have your consent to do so, (b) where we need the personal information to perform a contract with you (e.g. to deliver the services you have requested), or (c) where the processing is in our or a third party’s legitimate interests (and not overridden by your data protection interests or fundamental rights and freedoms). In some cases, we may also have a legal obligation to collect personal information from you, or may otherwise need the personal information to protect your vital interests or those of another person.
Examples of Legitimate Basis:
Where you have registered to use our services or use our services, we process personal information in order to perform our contractual obligations related to the services that you have requested. Where we collect personal information in connection with operating our websites and services, we have a legitimate interest in ensuring our websites, services and associated networks and IT systems operate properly and securely. Where you have requested to receive information about our products, services and business or other marketing communications, then we process personal information based upon our legitimate interest in engaging in direct marketing with Visitors, Customers, Attendees, individuals and companies that have requested to receive information from us. Where we rely on your consent to process the personal information, you have the right to withdraw or decline your consent at any time. Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal. Where we collect personal information that includes behavioral data, including through the use of cookies, we have a legitimate interest in providing you with an optimal user experience and understanding and analyzing how Visitors interact with our website. You can find more the use of cookies in the websites, please read and review our Cookie Policy found here.
Fastly collects your information both actively and passively (in accordance with our Cookie Policy) as you interact with our websites or contact us.
Fastly may directly collect personal information you provide us in the following ways:
As is true of most websites and services provided using the Internet, we gather certain information automatically. This information may include Internet protocol (IP) addresses, browser type, Internet service provider (ISP), the referring page that you navigated to our websites from, the page that you navigated away to from our websites, the files viewed on our site (e.g. HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and administer the site.
The information we collect automatically is statistical data, which we may associate with personal information we collect in other ways or receive from third parties. This information helps us to improve our websites and to deliver better and more personalized service.
Fastly and our partners use cookies or similar technologies (such as web beacons) to gather information, analyze trends, administer our websites, track users’ movements around our websites, and to gather demographic information about our user base as a whole. These technologies may provide us with personal information, information about devices and networks you utilize to access our websites, analytics information and other information regarding your interactions with our websites. Users can control the use of cookies at the individual browser level but if you choose to disable cookies, it may limit your use of certain features or functions on our website or service. For detailed information about the use of cookies and related technologies in our websites, please read and review our Cookie Policy found here.
We partner with a third party to manage our advertising on other sites. Our third party partner may use technologies such as cookies to gather information about your activities on our websites and other sites in order to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here (or if located in the European Union, click here). Please note that this does not opt you out of being served ads. You will continue to receive generic ads.
In connection with operating our global caching network’s general interaction with the Internet, Fastly collects client IP address information on a limited basis to provide and improve its services. Fastly also may collect and retain for its legitimate business purposes client or Customer IP addresses associated with suspicious activity that may pose a risk to the Fastly network or our Customers, or that are associated with administrative connections to the Fastly service.
We use your information to enhance your experience using our websites and services. We use personal information that we collect about you or that you provide to us, including any personal information about Visitors, Customers and Attendees:
We retain your information for as long as your account is active or as needed to provide you our services or perform our contractual obligations, unless a longer retention period is required or permitted by law. The retention period shall not exceed the duration of our business relationship with you plus (7) years unless we have a legitimate business interest need to retain the information for a longer period, which include maintaining a record of your preferences, securing the integrity of databases, conducting audits, complying with our legal and contractual obligations, resolving disputes, and enforcing our agreements.
Yes.
Third-Party Service Providers:
We engage third-party service providers in the operation of our business or to support our business. We consequently share information, including personal information, with these contracted third-party service providers in connection with using their services. These include cloud-based productivity and collaboration tools, customer relations management, backup, storage, payment processing, analytics and other services. We also engage and share information with third-party service providers for fraud protection, credit risk reduction and payment collection associated with our accounts. Our service providers may have access to, process or store your personal information for the purpose of providing us with their contracted-for services. Our service providers are not authorized sell or rent your personal information or use your personal information for a purpose unrelated to the service we have purchased.
Affiliates:
We share information, including personal information, with our subsidiaries and affiliates in the operation of our global business because our subsidiaries and affiliates may provide you services under our contracts or other functions described in Section 2.4 above.
Third Party Cookies:
As described in our Cookie Policy, we collect and share information through the use of cookies.
Consent:
We may disclose your information to any third party with your consent.
Compliance with Laws; Law Enforcement Requests; Protection of Our Rights:
In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet law enforcement requirements. We may disclose personal data to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. We may also share such information if we believe it is necessary or appropriate in order to protect our rights, property, or safety of Fastly, our Visitors, Customers or Attendees, our personnel or others, to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our contracts, or as otherwise required by law.
Corporate Events:
We may share your information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Fastly’s assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by Fastly about our websites users is among the assets transferred. We may also share your information with potential investors, financing sources, auditors or agents that may conduct due diligence of our business. You will be notified via email and/or a prominent notice on our websites of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.
Referrals:
Our service permits you to refer our service to other people, including, for instance, to add users to your account. If you provide us with contact information for persons you would like to refer, we will communicate with the referred persons and may disclose you as the source of the referral. If you believe that one your contacts has provided us with your personal information and you would like to request that it be removed from our databases, please contact us at abuse@fastly.com.
Community Forums:
Our website includes a community forum and other interactive features. When interacting in the community form, your account is publicly accessible unless you change the privacy settings of your profile through your account portal.
Some content or applications are served by third parties, including advertisers, ad networks and servers, content providers, and application providers who may collect your information as you interact with those parties through our websites.
This collection can occur under the following circumstances:
These third parties may also use automatic data collection technologies such as cookies or beacons to collect information about you when you use our websites, your online activities, and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We may receive information about you from other sources, including publicly available databases or third parties from whom we have purchased data, and combine this data with information we already have about you. This helps us to update, expand and analyze our records, identify new customers, and provide products and services that may be of interest to you. If you provide us personal information about others, or if others give us your information, we will only use that information for the specific reason for which it was provided to us. If we receive personal information about you from a third party in order to engage in marketing of our services, then we will market to individuals only in their capacity as representatives of companies we wish to sell to and we will present you an opportunity to opt-out of future communications.
Examples of the types of personal information that may be obtained from public sources or purchased from third parties and combined with information we already have about you, may include:
If you receive a marketing communication or promotion from us, you may opt-out of these communications at any time by clicking the unsubscribe link provided in the email or by sending a request to abuse@fastly.com.
Our websites may include links to other websites whose privacy practices may differ from those of Fastly. If you submit personal information to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.
You can use certain web browser and opt-out options to limit the personal information you provide us.
The following mechanisms are in place to provide control over your information by:
If you want to review, delete, or change your personal information, you can log in to the appropriate website and visit your account profile page. After you log in, you can send us an e-mail at the address noted in the Contact Information section below to request access to, correction of, or deletion of any personal information that you provided to us. You can also request the closure of your account within your account settings. We will remove your user account from our active database and your account will be archived as an inactive account. We retain your account information in accordance with our retention policy as described above in Section 2.5 and in order to maintain a record of your preferences, to secure the integrity of applicable databases, conduct audits, complying with our legal and contractual obligations, resolving disputes, and enforce our agreements.
To remove your personal information from our blog, please follow the instructions to remove posts or delete your user account. If you want your personal information removed from other places on our websites, please contact us via the information supplied in the Contact Information section below. Upon request, we will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information or if we have retained your personal information after the closure of your account, in which case we will let you know that we are unable to do so and why. To request this information please contact us via the information supplied in the Contact Information section below. We will respond to your request within a reasonable timeframe.
If you need to report abuse, please contact us by email at abuse@fastly.com.
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.
Information you provide to us is stored on our secure servers behind firewalls. Any sensitive information is encrypted using Transport Layer Security (TLS) (sometimes referred to as Secure Sockets Layer or SSL).
You must also make sure that your information is safe and secure. Even if we give you (or you have chosen) a password for access to certain parts of our websites, you are responsible for keeping this password confidential. Do not share your password with anyone. We urge you to be careful about giving out information in public areas of our websites, for example, message boards. The information you share in public areas may be viewed by any user of our websites.
Information that is transmitted via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our websites. Any transmission of personal information is at your own risk. We are not responsible if you circumvent any privacy settings or security measures on our websites.
We limit access to certain pages on our websites and allow you to set certain privacy settings via your account profile; however, be aware that no security measures are perfect or impenetrable.
Additionally, we cannot control the actions of other users of our websites with whom you may choose to share your user contributions. Given that, we cannot and do not guarantee that your user contributions will not be viewed by unauthorized persons.
Our websites are not intended for children under 13 years of age. No one under age 13 may provide any personal information to or on the websites.
We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on our websites or on or through any of their features, register on the websites, make any purchases through the websites, use any of the interactive or public comment features of our websites or provide any information about yourself to us, including your name, address, telephone number, e-mail address or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 13, we will delete that information immediately.
If you believe we might have any information from or about a child under 13, please contact us via the Contact Information section below.
California Civil Code Section § 1798.83 permits users of our websites that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an e-mail or write us at our mailing address noted in the Contact Information section below.
If you have any questions or comments about this Privacy Policy and our privacy practices, contact us at:
or
Fastly, Inc.
General Counsel
475 Brannan St, Suite 300
San Francisco, CA 94107
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
It is our policy to post any changes we make to this Privacy Policy on this page with a notice that this Privacy Policy has been updated on http://docs.fastly.com/changes. If we make material changes to how we treat our users’ personal information, we will notify you by e-mail to the primary e-mail address specified in your account and/or through a notice on http://docs.fastly.com/changes thirty (30) days prior to the change becoming effective. The date this Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable e-mail address for you, and for periodically visiting http://docs.fastly.com/changes and this Privacy Policy to check for any changes.