Privacy policy clauses for Webflow
Webflow is a visual website builder and content management system (CMS) that allows businesses to design, build, and manage websites without writing code. Websites hosted on Webflow collect user data through forms, analytics, and site interactions to enable core functionality and service improvement.
Free scan · No signup · Results in 60 seconds
What data Webflow collects
Your privacy policy must disclose each of the following data types when you use Webflow.
When does Webflow trigger privacy obligations?
Obligation triggers
Webflow's core data collection—form submissions, IP addresses, and page views—creates controller obligations the moment your site goes live. Here's what activates compliance requirements:
Form submissions trigger GDPR Article 13/14 (information to be provided) and CCPA Section 1798.100 (right to know) obligations immediately. Any web form collecting personal data (names, emails, phone numbers) requires you to disclose what you collect, why, and for how long—*before* the user submits. CCPA applies if you operate a for-profit business collecting California residents' data; GDPR applies if you collect from EU residents, regardless of where you're based.
IP address collection by Webflow happens automatically during page views. Under GDPR Article 5(1)(a) (lawfulness), you must have a legal basis (consent, contract, legitimate interest) documented *before* collection starts. Under the ePrivacy Directive Article 5(3), you need explicit consent for non-essential tracking cookies—though Webflow shows no documented cookies, IP logging itself may constitute tracking depending on your use case.
