Data Processing Addendum

Terms and Agreements

• Terms of Service
• Product Terms
• Beta Terms
• Data Processing Addendum
• Creator Agreement

Privacy Resources

• Global Privacy Policy
• EU & Swiss Privacy Policy
• Cookie Policy
• Subprocessors
• Privacy FAQs

Policies

• Acceptable Use Policy
• Intellectual Property Policy
• Trademark Usage Policy

Data Processing Addendum

Effective date: November 15, 2023 Last modified date: November 7, 2023

‍This Webflow Data Processing Addendum (this "DPA") forms part of, and is subject to the provisions of, the Agreement. This DPA will apply to the extent Customer is subject to relevant Data Protection Laws.

HI THERE ‍ If you would like to execute a DocuSigned version of this Data Processing Addendum, please review and sign our pre-signed DPA here.

1. Definitions

Capitalized terms that are used but not defined in this DPA have the meanings given to them in the Agreement.

• 1.1. “Affiliate” means an entity that directly or indirectly controls (e.g., subsidiary), is controlled by (e.g., parent), or is under common control with (e.g., sibling) such party; and the term “control” (including the terms “controlled by” and “under common control with”) means either: (a) ownership or control of more than 50% of the voting interests of the subject entity; or (b) the power to direct or cause the direction of the management and policies of an entity, whether through ownership, by contract, or otherwise.

• 1.2. “Agreement” means any subscription agreement governing Customer’s access to and use of the Platform, which may mean, as applicable, Webflow’s online Terms of Service (available at webflow.com/legal/terms), a Master Subscription Agreement, or other related Platform subscription agreement between Webflow and Customer.

• 1.3. “Authorized Affiliate” means Customer's Affiliate(s) which (a) are subject to Data Protection Laws; (b) are permitted to use the Platform pursuant to the Agreement between Customer and Webflow; and (c) have not signed their own Agreement with Webflow and are not "Customers" as defined under this DPA.

• 1.4. “Controller” means the entity that determines the purposes and means of the Processing of Personal Information.

• 1.5. “Customer” means the entity and the entity’s Authorized Affiliates that agree to be bound by the Agreement and this DPA.

• 1.6. “Customer Personal Information” means all Personal Information, excluding Customer Relationship Data, made available to Webflow by or on behalf of Customer.

• 1.7. “Customer Relationship Data” means Personal Information that relates to Customer’s relationship with Webflow, including the names or contact information of the business point(s) of contact between Customer and Webflow, individuals, Customer billing information, and customer relationship management information.

• 1.8. “Customer Workforce” means any Data Subjects who are employees, contractors, representatives, or other individuals engaged by Customer who have access to the Platform via a user account.

• 1.9. “Data Breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Customer Personal Information transmitted, stored, or otherwise Processed.

• 1.10. “Data Protection Laws” means all applicable laws and regulations applicable to Webflow’s processing of Personal Information under the Agreement.