Privacy policy clauses for Fastly
Fastly is a content delivery network (CDN) and edge cloud platform that accelerates website and application performance by caching and serving content from servers located geographically closer to users. Websites use Fastly to reduce latency, improve load times, and distribute traffic efficiently across global edge locations.
Free scan · No signup · Results in 60 seconds
What data Fastly collects
Your privacy policy must disclose each of the following data types when you use Fastly.
When does Fastly trigger privacy obligations?
Data Flow & When Obligations Begin
The moment Fastly is deployed on your site or app, your infrastructure begins collecting and transmitting IP addresses and request headers (which may contain user-agent strings, referrer data, and custom headers) to Fastly's edge servers globally. This is not optional—it happens on every user request before your origin server is even contacted.
Regulatory Triggers
GDPR (EU/UK): If any of your users are in the EU, IP addresses are personal data under GDPR Article 4(1). Fastly processes these at edge locations outside the EU by default. You must:
- –Establish a Data Processing Agreement (DPA) under GDPR Article 28 *before* deployment
- –Document the lawful basis for processing (Article 6) in your privacy notice
- –
