• Information and Communications Technology


EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 11/9/2016
Next Certification Due Date: 11/1/2019
Data Collected: HR, NON-HR

Swiss-U.S. Privacy Shield Framework: Active

Original Certification Date: 11/16/2017
Next Certification Due Date: 11/1/2019
Data Collected: HR, NON-HR

Purpose of Data Collection

We collect personal data of our customers for account management, billing, internal marketing (not third party marketing), fraud prevention purposes and provision of our internet security services. Information we collect includes customer name, email address, IP address, billing information, and phone number. We may share such data with third parties who provide us with billing, marketing, account management tools, and other product support that enable us to provide the service to our customers. Personal data from visitors to our customers' sites is processed as part of the internet traffic logs we process on behalf of our customers (e.g., IP addresses) and also may be processed if our customers include such information in the data they insert into our network. For example, we may temporarily log such visitors' interactions with a website, such as IP address, country of origin, domain name and device type, to provide security services to our customers. We never request or intentionally process sensitive personal data, and deliberately limit our exposure to personal data.

Privacy Policy

HR and Non-HR Data


An updated version of our Privacy Policy, including updated references to the EU and Swiss-U.S. Privacy Shield and the EU General Data Protection Regulation.

Effective Date: 7/3/2018

Verification Method


Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Cloudflare, Inc. at:

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Cloudflare, Inc. to your question or complaint, please contact the independent recourse mechanism listed below


Appropriate statutory body with jurisdiction to investigate any claims against Cloudflare, Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission