Policies & Safety

Automattic and the General Data Protection Regulation (GDPR) »Data Processing Agreements

Automattic is committed to helping our customers run their sites and online businesses in a manner that complies with the GDPR’s data protection and data transfer laws.

One way we are fulfilling our commitment is by providing a Data Processing Agreement, which is a contract that documents Automattic’s compliance with the GDPR requirements that apply to us as a data processor for your site. The Agreement also satisfies the requirement for standard model clauses that govern the transfer of your data to Automattic and its subsidiaries.

The Data Processing Agreement is an amendment to our Terms of Service and is available to anyone with an active subscription for one of our paid products. You can read our Data Processing Agreement here.

How Do I get a Data Processing Agreement?

If you would like to sign a Data Processing Agreement with us, please contact us at gdpr-contracts@automattic.com. In your email, please let us know your WordPress.com username, list the paid product(s) to which you have subscribed, and whether you participate in our WordAds/Jetpack ads programs. We will follow up with a copy of the Data Processing Agreement for you to sign.

Why Are These Only Available to Accounts with Paid Upgrades?

The data you share with Automattic, about yourself, is covered by our Privacy Policy, which outlines Automattic’s commitments on handling your data, in line with the GDPR. Some users – mostly businesses – use their site in a way that involves sharing data about other people with Automattic.

For example, a site owner might have a store on WordPress.com, that collects and stores other people’s names and addresses, and uses that information to ship packages to them.

For this type of information, the site owner (usually a business) is acting as a “Data Controller” – under GDPR, if the controller is handling data on EU residents, he or she should have a contract in place that applies to this controlled data and includes some additional commitments, above and beyond our standard policies. This “Data Processing Agreement” is a business to business agreement, and we offer it to customers of our paid plans, who most often have a need for them.

If you are acting as a data controller in this way or have specific concerns about getting an Agreement to cover your use of WordPress.com please get in touch and we will work with you to help.

Not quite what you're looking for?

Get Help