Privacy policy clauses for Calendly
Calendly is a scheduling and meeting booking widget that allows website visitors to book appointments directly through your site. Websites use Calendly to streamline scheduling, reduce back-and-forth communication, and automatically manage calendar availability.
Free scan · No signup · Results in 60 seconds
What data Calendly collects
Your privacy policy must disclose each of the following data types when you use Calendly.
When does Calendly trigger privacy obligations?
Installation Triggers Immediate Obligations
The moment you embed Calendly on your website or link to it from your app, you begin collecting name, email, IP address, and meeting details from visitors who book. This triggers GDPR obligations immediately if you have any EU residents as users—regardless of where your company is based (GDPR Article 4(11) establishes territorial scope based on data subject location, not processor location).
GDPR applies if: You process data of EU residents. Calendly LLC (US-based) becomes your data processor; you are the controller. You must have a Data Processing Agreement (DPA) in place before data flows (GDPR Article 28(3)).
CCPA applies if: You operate a for-profit business in California and collect personal information from California residents. Calendly's collection of name, email, and IP address triggers CCPA Section 1798.100 rights (access, deletion, opt-out of sale). You must disclose what data Calendly collects in your privacy policy.
