Privacy policy clauses for Framer
Framer is a design-to-website builder and content management system that enables users to create and publish websites without coding. Websites use Framer to streamline the design and deployment process while collecting visitor data through form submissions and analytics.
Free scan · No signup · Results in 60 seconds
What data Framer collects
Your privacy policy must disclose each of the following data types when you use Framer.
When does Framer trigger privacy obligations?
Installation and Form Data Collection
Adding Framer to your site triggers privacy obligations the moment it begins collecting form submission data and capturing visitor IP addresses. These are personal data under GDPR Article 4(1) and CCPA Section 1798.100, regardless of whether you think the data is sensitive.
Applicable Regulations
GDPR (EU/EEA visitors): If your site reaches any EU resident, Framer B.V. (Netherlands) becomes a data processor. You are the controller. GDPR Articles 5 (lawfulness, transparency, purpose limitation) and 28 (processor contracts) apply immediately. You must have a Data Processing Agreement (DPA) in place before data flows to Framer.
CCPA (California): If you collect form data from California residents, the IP address and form content are personal information under CCPA Section 1798.100. You must disclose collection in your privacy policy and honor consumer rights (access, deletion, opt-out).
ePrivacy Directive (EU/EEA): IP logging may require consent under Article 5(3) depending on whether it constitutes tracking.
