Updated on: May 21, 2024
Kinsta Inc. (hereinafter, “Kinsta,” “we,” “us,” or “our”) provides managed hosting services, software, and support through our MyKinsta application; DevKinsta local website development software; Beta Services; and other related websites (including kinsta.com), forums, courses, communities, events, applications, services, software, and personnel (collectively, the “Services”). IF YOU ARE PURCHASING OR USING OUR SERVICES IN ANY WAY, PLEASE READ OUR TERMS OF SERVICE FOR DETAILED INFORMATION ABOUT THE BINDING LEGAL AGREEMENT BETWEEN YOU AND KINSTA.
1. Introduction and Scope
This Privacy Policy (the “Policy”) provides information on how we collect, process, and share the personal data (also referred to as personal information) of individuals who are external to our organization, including but not limited to job applicants, customers, potential customers, affiliates, visitors to our website, and service providers and each of their respective representatives (referred to in this Policy as “you” or “your”).
For the avoidance of doubt, this Privacy Policy does not apply to data collected by our customers who use our Services to create and manage their own websites, applications, databases, or other technologies (“Customer Applications”). If data is collected and processed by our customers or through their Customer Applications, the customer controls such data (and Kinsta is a processor of such data pursuant to our DPA). Please contact the owner or operator of the applicable Customer Application directly for information about its privacy policies and how it processes personal data.
After reading this Policy, if you have additional questions or would like further information, please contact us at [email protected].
2. Personal Data We Collect And How We Use It
As further explained below, we collect and process personal data only for lawful reasons, such as (i) when the processing is necessary to perform a contract, like the Terms of Service, (ii) our legitimate business interests, such as improving, personalizing, marketing, and developing the Services, promoting safety and security, and recruiting and evaluating applicants, or (iii) with your consent, if required by applicable law.
- Information You Provide to Us
- Account and Payment Data: If you set up a Kinsta account through our Services or otherwise engage with Kinsta, you provide basic contact and/or account setup information, such as your name, email, address, company information, language preference, username, password, and payment information. Please note that we do not store your payment information, but the third-party payment processors we engage may retain your payment information in accordance with their own privacy policies and terms.
- Website Comments and Posts: When you leave a comment, forum post, or contribute an article on our website, you have the option to provide a profile picture (or “Gravatar”), display name, website (URL), and other content or information at your option. Please note that any information you post to our website will be publicly available.
- Research and Inquiries: When you participate in our research program or contact us through our live chat, online contact form, or through email or any other communication mechanism, you typically provide your name, email, information relevant to your inquiry or the research, and any other information you choose to provide at your option.
- Applicant Data: If you are applying for a job with us, you provide any information included on your resume, CV, or application materials, such as contact information, date of birth, photo, education, employment, and work history, qualifications, skills, and professional licenses. You also may provide other personal data during an in-person or video interview.
- No Sensitive Information: Please do not provide any sensitive personal data when using the Services, communicating with us, or applying for a job – such as social security numbers, health or medical information, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning a person’s sex life or sexual orientation. We do not intentionally process sensitive personal data and reserve the right to reject or delete it.
- How We Use Data Provided By You:
- Provide, Improve, and Maintain the Services: We use the data you provide to set up your account, provide the Services, receive or make payments, and communicate with you about your account and the Services.
- Market the Services: We may use your information to market and promote our Services. You may opt-out of marketing communications at anytime by contacting us at [email protected] or clicking the “Unsubscribe” button in the applicable communication.
- Protect You and the Services: We use the information we collect to promote the safety and security of the Services, our customers, and other parties. For example, we may use your information to authenticate users, facilitate secure payments, protect against spam, fraud, and abuse, respond to a legal request or claim, conduct audits, or enforce our Terms of Service or other terms and policies that may be in effect.
- Recruiting and Hiring: We use the applicant data described above to recruit and evaluate applicants who may join our team.
- Information We Collect Automatically: We collect certain information via cookies or other automated means when you use the Services. The information we collect automatically is generally about your usage of the Services and your devices, such as search history, IP address, browser used, operating system and settings, access times, opens, clicks, and downloads of our email, and referring URL. If you are using a mobile device, we may also collect data that identifies your device, settings, and frequency of usage. This data may be collected by or shared with our third-party analytics, advertising, and anti-spam partners. If we are required to do so under applicable law, we will obtain your consent before automatically collecting any data.
- How We Use Data That Is Collected Automatically: Kinsta and its service providers use the automatically collected data described above to provide, advertise, and improve the Services, including to keep track of your preferences and profile information, customize services and content, measure the effectiveness of promotions and digital communications, conduct analytics, place our advertisements on other websites, estimate your general location and time zone, protect against malicious activity and spam, and to secure your accounts.
- Visitors to our website www.kinsta.com have options to control or limit how we or our partners use cookies and similar technologies. For more information, please see www.allaboutcookies.org/cookies.
- Information We Receive from Third Parties: From time to time, we may collect personal information from third parties such as public websites, social networks, marketing partners, and recruiting databases. This information may include names, contact information, email, professional or employment information, and other information which is publicly available.
- How We Use Data That Is Collected From Third Parties: We may use information collected from third parties for our own promotional or marketing purposes, such as sending prospective or former customers emails about our Services, or for recruiting and evaluating applicants.
- You may opt-out of marketing or recruiting communications at any time by contacting us at [email protected] or following the “Unsubscribe” instructions included in the applicable communication.
3. How We Share Your Information
- Kinsta does not sell, rent, or lease your personal data to third parties. We only share your personal data with the following types of service providers for the purposes set forth below:
- IT/cloud service providers to store and secure your personal data
- Email and communications processors so we can communicate with you about the Services
- Payment processors to collect your fees and process payments
- Contractors to provide, market, and improve the Services and answer your questions
- Analytics, tracking, and measurement partners to help us operate and improve the Services
- Advertising partners to place our ads on other websites or platforms you visit and manage our web advertising campaigns
- Marketing partners to send you marketing and promotional communications about our Services
- Recruiting and talent acquisition partners to recruit and evaluate individuals who may join our team.
- We also may share your information as required by law, to investigate potential illegal activities or violations of our Terms of Service or other agreements, to protect the security of our Services and users, or as a result of a merger, acquisition, or assignment with a third party.
- A note about how we share your data with our event sponsors: If you attend one of our sponsored events, we may share your name and email with the sponsor for their own marketing and business purposes. If we are required to do so under applicable law, we will obtain your consent before sharing your data with our sponsors for their own purposes.
4. Controlling Your Account and Your Rights
- To submit a question or concern about how to control, modify, or delete your MyKinsta account or data, open a support chat. Instructions for canceling or deleting your MyKinsta account are located at https://kinsta.com/docs/user-settings/delete-account/.
- Depending on your location, you may have certain legal rights regarding your personal data, including:
- You may request access to your personal data and obtain information about our processing of your personal data, with whom we share your personal data, and your rights.
- You may request that we restrict our processing of your personal data.
- You may object to our processing of your personal data.
- Where we process personal data based on your consent, you may withdraw your consent.
- You may correct personal data that is inaccurate or incomplete.
- You may request that we delete your personal data or provide a copy of it to you.
- We will not discriminate against you for exercising any of your rights, and we will reasonably verify your identity before acting upon any request. To exercise your rights or submit a question, please contact us at [email protected]. If you live in the EEA, UK, or Switzerland, and you are unsatisfied with our response, you have the right to lodge a complaint regarding your personal data with an applicable supervisory authority.
5. How We Protect and Store Your Information
We maintain reasonable administrative, technical, and organizational safeguards designed to protect against loss, misuse, or unauthorized access, disclosure, alteration, or destruction of the personal data that we collect from you. We restrict access to personal data collected about you to our employees, contractors, and certain third-party service providers as discussed above. Details about our security measures may be found at https://trust.kinsta.com/. Please note, however, that no website or storage mechanism, including the Services, can guarantee 100% security.
Generally, we store your personal data for as long as we need it for the purposes described in this Policy. We retain your MyKinsta account information after cancellation to allow you to efficiently reinstate your Services account, if you so choose. Instructions for canceling or deleting your MyKinsta account are located at https://kinsta.com/docs/user-settings/delete-account/. We may retain certain personal data for longer periods to comply with our legal and regulatory obligations, for the purpose of fraud monitoring, detection and prevention, and for our tax, accounting, and financial reporting obligations.
6. Children
We do not knowingly collect personal data from children under 13, or any higher minimum age in the jurisdiction where the child resides. If we learn that we have collected any personal information from a child under the applicable minimum age, we will take reasonable steps to delete such information. Parents or guardians who believe that their child has submitted personal information to us and would like to have it deleted should contact us at [email protected].
7. International Transfers and the Data Privacy Frameworks
The personal data we collect within your country may be transferred outside of your country to Kinsta or its third-party contractors or service providers (described above) for the purposes described in this Privacy Policy, and when you provide us your personal data, you consent to any such transfers. As required by law, we rely on adequacy decisions, appropriate safeguards, or derogations when we transfer personal data across international borders.
Kinsta complies with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (collectively, the “DPF”) as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the applicable DPF Principles with regard to the processing of personal data received from the EU, UK (and Gibraltar), and Switzerland. We comply with the DPF Principles for onward transfers of personal data from the EU, UK (and Gibraltar), and Switzerland, including the onward transfer liability provisions. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles shall govern. To learn more about the DPF Principles, and to view our certification, visit https://www.dataprivacyframework.gov/.
The U.S. Federal Trade Commission has jurisdiction over our compliance with the DPF Principles. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including in order to meet national security or law enforcement requirements.
EU, UK (and Gibraltar), and Swiss individuals with inquiries or complaints should first contact us at [email protected]. If you have unresolved concerns regarding any personal data that is subject to the DPF Principles that we have not addressed satisfactorily, you may contact JAMS, our U.S.-based third party dispute resolution provider (free of charge) at https://www.jamsadr.com/file-a-dpf-claim. Under certain circumstances, more fully described on the Data Privacy Framework website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
8. Links to Other Websites
We may provide links to other websites as a service to you or in order to provide you additional venues in which you can leverage or share the opportunities of the Services. Please be aware that we do not control and are not responsible for their information collection, use, and disclosure practices. Please review and understand their privacy practices and policies, if any, before providing any personal data to them or using any of their services. We are not responsible for the content or information of these third-party sites, any products or services that may be offered through them, or any other use of the sites.
9. Changes to Our Privacy Policy
If we modify this Privacy Policy, we will post the updated version via our Services. It is your responsibility to periodically review this Policy, and you are bound by any changes to it by using our Services or continuing to affiliate with us after such changes have been posted.
10. Contact Us
If you have any questions, comments, or concerns regarding this Policy or our practices please write to us at:
Kinsta Inc.
Attn: Privacy and Data Protection Team
8605 Santa Monica Blvd #92581
West Hollywood, CA 90069
United States of America
[email protected]
UK Contact:
Kinsta Ltd.
[email protected]
EU Contact:
Blue Cloud Hosting Kft.
[email protected]
Swiss Contact:
Kinsta GmbH
[email protected]