Privacy Policy

For any individual that acts as the contact person for our customer, supplier, partner or other entity that we conduct or wish to conduct business with, we process the following information:

– Basic information (such as name, title, company name, work location and contact information)
– Business connections
– Communications

The individual acting as the contact person in a primary source of information, but the personal data may also be collected from your employees, your colleagues, and our (other) customers, suppliers and partners. The personal data is used to discuss business, pursue business opportunities, send notifications related to our services and otherwise communicate with you, contracting, invoicing and making payments. The processing is based on our legitimate interests to comply with contractual obligations, or the terms of agreements we have (or have had), maintaining relationships, and operating our business. In addition, the invoicing related personal data will be used in accounting and reporting, which processing shall be based on our obligations under the law.

Bitly Inc and Bitly Europe process personal data gathered when you use or access their respective websites, including any and all subdomains of the sites (each “Site”, as applicable), respectively.

Each time Site is accessed, our system automatically collects data and relevant information from the computer system of the calling device.

The following data is collected:
– Browser type and version used
– The user’s operating system
– The user’s internet service provider
– The IP address of the user
– Date and time of access
– Web pages from which the user’s system accessed our website
– Web pages accessed by the user’s system through our website

This data is stored in the log files of our system. This data is not stored together with other personal data of the user. The temporary storage of the IP address by the system is necessary for the delivery of the website to the computer of the user. For this purpose, the user’s IP address must be kept for the duration of the session. The storage in log files is done to ensure the functionality of the website. The data is also used to optimize the website and to ensure the security of our IT systems. An analysis of this data for marketing purposes does not take place. The legal basis for the temporary storage and other processing described above of data and logfiles is our legitimate interest to maintain functionality and ensure security of our website.

If you subscribe to our newsletter, request materials available from the website, send us a contact request, interact with our chat bot or otherwise contact us, we will likely add you to our list of commercial contacts. Please see the section “Newsletter, Events and Marketing” of this Privacy Policy to learn more about personal data processing in that regard. Please note that our services and resources are designed for business customers only (and should not even be interesting to consumers), and thus we presume that everyone contacting us and interested in our services represent a business, not a private individual. Personal data derived from our websites and contact requests are deleted upon request of the contact, if the data is identified as out of date, or if the contact is no longer deemed a suitable candidate for our services.

If you connect with us using various social media platforms and/or professional networks, please note that Btly does not control or have influence over how those platforms process your personal data. We recommend that you contact those third party platforms directly for information on their processing. Here are some links for your convenience:

Twitter: https://twitter.com/de/privacy
YouTube: https://policies.google.com/privacy?gl=DE&hl=en
LinkedIn: https://www.linkedin.com/legal/privacy-policy

Bitly may use third-party APIs and software development kits (“SDKs”) to provide certain functions in our Services. We use cookies and similar technologies for the following purposes: Technically necessary; Comfort; Statistics; Marketing. When we use cookies and/ or similar techniques for processing personal data, the types of personal data processed may vary, depending on the categories of cookies or similar techniques. Non-essential cookies are used only with your consent. You have the option of preventing cookies from being

Please see our Cookie Policy and EU Cookie Policy to learn how Bitly and its partners use cookies or similar technologies to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base.

If you subscribe to our newsletter or for other materials (such as blogs, newsletters available on our websites), we will process the given contact information to send the newsletter or provide the materials. Such processing is based on your consent and the necessity to fulfill our obligation to provide the subscribed material(s). The contact information is retained and possibly shared as described below.

We use following information to communicate on and promote our services (as compatible with the original purposes, if data is collected in another occasion):

– Basic information (such as name, title, company name, work location, contact information)
– Basic business information
– Business connections (to our former, current and potential customers and other relevant entities)
– Expressed interest to our products and services (such as download of specific materials)
– Communications
– Events
– Marketing preferences (such as subscribed newsletter(s))

The information is obtained from you (e.g. in connection with interaction we have with you, the subscription(s) and website forms, event registrations, demo requests or other contact requests and communications (including on third party platforms, such as LinkedIn), or our cooperation partners (for example, our referral partners may disclose us information on potential customers or organizers of events which we sponsor may disclose us information on participants). Subject to your (cookie) consent, this data may be combined with information on online activity data in our website domains. Such data is gathered with cookies, please see our cookie policies for detailed description.

The personal data above is used to generate leads, target marketing activities to the contacts representing potential and current customers (for example to help our sales teams to target their efforts to contacts with potential interest in our services) and other stakeholders (including our suppliers and partners), and to retarget and customize our marketing. Naturally, the data is used to provide product and service updates, announce new materials, invitations to our events, and otherwise market our products and services and provide related information in different channels, such as emails, phone calls, on social platforms and over display. For example, we may retarget relevant contacts by serving new retail content on LinkedIn based on previous engagement with retail content on the Bitly Group websites. In addition, personal data is used, as applicable, for business intelligence, market and customer analysis, reporting and statistical purposes, and to better understand how people interact with our websites and services.

Once we have obtained your consent, the processing is needed to carry out marketing and reach our current and potential customers. You have a right to prohibit use of your contact information in marketing at any time by using the available web-tools (such as the “unsubscribe” button at the end of newsletter) or by sending us a notice (you can find the Contact Information at the very end of this Privacy Policy).

Personal data stored for marketing purposes are deleted upon request of the contact, if the data is identified as out of date, or if the contact is no longer deemed a suitable candidate for our services.

Please note that if you hold a Bitly Account(s) and/or use Bitly Services managed by other Bitly entities, personal data collected by us is combined with personal data collected in connection with such other Services. Sharing and combining the personal data is based on Bitly’s legitimate interests in finding synergies generated from performing, planning, and developing business at the group level, and in promoting sales by cross and up-selling complementary products of group companies. The Bitly group companies have combined their customer support services to provide more effective global customer support. Your inquiries can be answered by both Bitly Europe and Bitly Inc. employees and collaborators. You can assert your data subject rights with Bitly Inc. as well as with us. The primary responsibility under GDPR for the processing of data lies with the entity which you are contracting or which is communicating with you.

Bitly Europe and Bitly Inc. are joint controllers according to Art. 26 GDPR. Bitly Inc. and Bitly Europe GmbH have concluded a joint controller agreement in accordance with the GDPR, in which we have made arrangements about our joint responsibilities with regards to the processing of your personal data. To protect your personal data, we have concluded so-called standard contractual clauses (“SCCs”). SCCs are data protection regulations issued by the European Commission, the conclusion of which imposes legal obligations on the data importer and the implementation of which guarantees compliance with European data protection standards.

Personal data may be transferred outside the European Union and the European Economic Area, including, but not limited to, the United States of America as well as other locations and jurisdictions in which we conduct our business or our service providers are located. Such transfers are performed subject to standard data protection clauses adopted by the EU Commission in accordance with the GDPR, which are made available to the data subject upon request.

If you are a resident of the EEA or Switzerland, or otherwise subject to the GDPR, and we process your personal data, you have the right to ask for the following rights:

– In all cases a right to be informed about processing by Bitly that pertains to personal data based on which you may be identified, and access to a copy of such personal data (Art. 15 GDPR).
– If the personal data that is being processed is incorrect or inaccurate, you are entitled to demand for the data to be corrected (Art. 16 GDPR).
– Subject to the conditions set in the GDPR, you may demand for the deletion or limitation of the processing and have the right to object to the processing altogether (Art. 17, 18, and 21 GDPR).
– If the processing is based on your consent or a contract and the processing of data is carried out using automated procedures, you may be entitled to data transferability (Article 20 GDPR).
– If you have consented to the processing of your data by the data controller, you may revoke your consent at any time. The legality of the data processing carried out on the basis of the consent that was obtained prior to the revocation will not be affected.

Furthermore, you have a right to appeal to the competent supervisory authority (Art. 77 GDPR) if you deem the personal data processing by us to violate the GDPR or other applicable data protection laws.

Landesbeauftragte für Datenschutz und Informationsfreiheit

Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de

Contact details of authorities in other EU Member States can be found from the directory maintained by the European Data Protection Board.

Contact Details for questions and Exercising your rights

If you have any questions or concerns regarding privacy when using the Services or wish to use your rights, such as object the processing or have your personal data removed, please send us a detailed message to: privacy@bit.ly or privacy-eu@bit.ly. In addition to email you may exercise any of your rights by sending a request to us, our contact details are provided in “Contact Information” above.

We will make every effort to resolve your concerns. Once we receive your request, we will ask that you verify your identity such as by authenticating through your account. Please note that if you do not have a Bitly account, Bitly has no way of identifying you or verifying that you created or clicked on a Bitly Product, or otherwise interacted with our Services.

You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise your rights and choices on your behalf, please provide a written attestation, declaration, or permission that has either been physically signed or provided electronically per applicable law. In certain circumstances, we may be required by law to retain your personal data.

Tools available to exercise your rights

If you have a Bitly Account, you may access, correct, or request deletion of your personal data by logging into your Account. For Bitly Link, Link in Bio and QR Code services, once logged in to your account, you will be able to view a history of the URLs you have shortened and the metrics pages for those URLs. You can request a complete copy of the personal data we store about your account by clicking the button to request a report in your Account Settings. You can delete your Account at any time through your Account settings page. If you delete your Account, you will no longer be able to access or use the Services. If you have an Account but are unable to access it, you can contact us at privacy@bit.ly. We will respond to your request within a reasonable timeframe.

As a Bitly Europe QR Code Services user you have the possibility to cancel the registration at any time by using the tools in the Service or via an email to customer support or privacy-eu@bit.ly. You can object to the storage of your personal data at any time. In this case, all personal data stored will be deleted to the extent permitted by law or no opposing legitimate interest prevails. To do so, please send an email to privacy-eu@bit.ly.

Please note that in the interest of ensuring that existing Bitly Products continue to function for all of our users, the Bitly Products that you have created and shared cannot be deleted or disabled (even if your Account is deleted), and any shortening and sharing activity that has already occurred on your Account also cannot be deleted. If you have concerns about any unauthorized use of your Account, you can delete your account within your Account settings.

International transfers of personal data

Depending on your location, information about you may be transferred to the United States or other countries outside the EU or European Economic Area (EEA) or may be processed there. These data transfers are necessary to provide you with the Services and functionalities you have requested as outlined in this policy.

To protect your personal data, we rely on appropriate legal basis for each data transfer. In particular, we use contractual safeguards such as Standard Contractual Clauses approved by the European Commission. Where applicable, we base data transfers also on adequacy decisions issued by the European Commission.

Please feel free to contact us for further information about international data transfers, including to obtain access to a copy of applicable safeguards.

The California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020, provides you with specific rights regarding your “personal information,” as that term is defined under the CCPA. This section describes the rights that California consumers have and explains how to exercise those rights. For the purposes of this section, personal information does not include: (i) information that is lawfully made available from federal, state or local government records; (ii) de-identified or aggregated data; or (iii) information excluded from the scope of the CCPA. To be clear, these rights are granted only to the extent that you are a California consumer and we are acting as a “business” under the CCPA with respect to your personal information. The rights in this section are not intended to grant you additional rights, but only your rights under the CCPA.

Information We Collect; How We Collect It; How We Use It

We have collected the following categories of personal information from consumers from the sources described in the Privacy Policy above, specifically the categories of sources identified in the subsection titled “Bitly Connections Platform Services” (under the section “Bitly Group Services”), and have shared such personal information with the following categories of third parties within the last twelve (12) months:

Category
Examples
Business or Commercial Purposes for Collecting Personal Information
Disclosed in the Prior Twelve (12) Months for the Following Business Purposes
“Sold” or “Shared” in the Prior Twelve (12) Months for the Following Purposes
Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information
A. Personal identifiers.
A real name, postal address, online identifier, Internet Protocol address, email address, account name.
To register your Bitly account or create a Bitly link
To communicate with you
To provide customer support
Marketing and advertising
Service optimization and analytics
To detect, deter and prevent malicious, fraudulent or unlawful activity
For the security and integrity of our services, to verify or maintain the quality or safety of services, and to identify and repair errors
Undertaking internal research for service optimization
Providing advertising and marketing services
Auditing related to counting ad impressions to unique visitors
For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.


None
Service providers who perform business services for us
B. Personal information covered by the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
Some personal information included in this category may overlap with other categories.
A name, physical characteristics or description, address, telephone number, credit card number, debit card number, or any other financial information, medical information.
To register your Bitly account
To communicate with you
To provide customer support
Marketing and advertising
Service optimization and analytics
To detect, deter and prevent malicious, fraudulent or unlawful activity
Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors
Undertaking internal research for service optimization
Providing advertising and marketing services
Auditing related to counting ad impressions to unique visitors
For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.


None
Service providers who perform business services for us


C. Protected classification characteristics under California or federal law.
Age and gender.
Marketing and advertising

None
Service providers who perform business services for us
D. Commercial information.
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
To provide customer support
Marketing and advertising
Service optimization and analytics
To detect, deter and prevent malicious, fraudulent or unlawful activity
Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors
Undertaking internal research for service optimization
For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.


None
Service providers who perform business services for us
F. Internet or other similar network activity.
Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.
To register your Bitly account or create a Bitly link
When you interact with a Bitly link, as needed to provide services to our customers
Marketing and advertising
Service optimization and analytics
To detect, deter and prevent malicious, fraudulent or unlawful activity
Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors
Undertaking internal research for service optimization
Providing advertising and marketing services
Auditing related to counting ad impressions to unique visitors
For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.


None
Service providers who perform business services for us
G. Location data.
Physical location.
To create a Bitly link
When you interact with a Bitly link, to detect, as needed to provide services to our customers
Marketing and advertising
Service optimization and analytics
To detect, deter and prevent malicious, fraudulent or unlawful activity
Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors
Undertaking internal research for service optimization
Providing advertising and marketing services
Auditing related to counting ad impressions to unique visitors
For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.


None
Service providers who perform business services for us
H. Inferences drawn from other personal information for profiling purposes.
Used to create a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
When you interact with a Bitly link, as needed to provide services to our customers
Marketing and advertising
Service optimization and analytics
To detect, deter and prevent malicious, fraudulent or unlawful activity
Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors
Undertaking internal research for service optimization
Providing advertising and marketing services
Auditing related to counting ad impressions to unique visitors
For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.


None
Service providers who perform business services for us

We do not use or disclose sensitive personal information, as that term is defined under the CCPA. The categories of personal information described above are anonymized or erased from our systems upon request, if the data is detected as irrelevant in our automated or manual system maintenance, or after 3 years following the last contact with the relevant individual, whichever occurs first.

Selling or Sharing of Personal Information

Bitly does not “sell” or “share” your personal information to third parties, as those terms are used in the CCPA.

Rights to Your Information

a. Right to Know
As a California consumer, you have the right to request that we disclose certain information to you about our collection, use, disclosure, or sale/sharing of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights, below), and subject to certain limitations that we describe below, we will disclose such information. You have the right to request any or all of the following:

– The categories of personal information we collected about you.
– The categories of sources from which the personal information is collected.
– Our business or commercial purpose for collecting or selling that personal information.
– The categories of third parties with whom we share that personal information.
– The specific pieces of personal information we collected about you (see Data Portability Rights below).

b. Right to Delete
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights, below), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. However, we may retain personal information that has been de-identified or aggregated. Furthermore, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) to perform certain actions set forth under the CCPA, such as detecting security incidents and protecting against fraudulent or illegal activity.

c. Right to Data Portability
You have the right to request a copy of the personal information we have collected and maintained about you in the past 12 months. The CCPA allows you to request your information from us up to twice during a 12-month period. We will provide our response in a readily usable (and usually electronic) format.

d. Right to Correct
You have the right to request the correction of any personal information we maintain about you.

e. Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights, including but not limited to, by:

– Denying you goods or services.
– Charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
– Providing you a different level or quality of goods or services.
– Suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

f. Exercising Your Rights
To exercise the rights described above, please contact us by using the following methods

– Emailing us at privacy@bit.ly

After submitting a request, we will take steps to verify your identity in order for us to properly respond and confirm that it is not a fraudulent request. In order to verify your identity, we will ask, at a minimum, that you provide your name, email address, and relationship to us, so that we can seek to match this information with the information existing in our systems. When providing us this information, you represent and affirm that all information provided is true and accurate. Depending on the request, if we are unable to verify that the consumer submitting the request is the same individual about whom we have collected personal information, we may contact you for more information, or we may not be able to meet your request.

Only you, or an agent legally authorized to act on your behalf, may make a verifiable request related to your personal information. If you are making a request as the authorized agent of a California consumer, we will ask you to submit reliable proof that you have been authorized in writing by the consumer to act on such consumer’s behalf.

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the CCPA allows us up to 90 days to respond. We will still contact you within 45 days from when you contacted us to let you know we need more time to respond.

California “Shine the Light”
In addition to the above rights, under California Civil Code Section 1798.83 (“Shine the Light”), California residents may have the right to request in writing from businesses with whom they have an established business relationship: (a) a list of the categories of personal information, as defined under Shine the Light, such as name, email address, and mailing address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and (b) the names and addresses of all such third parties. To request the above information, please contact us by email at privacy@bit.ly. If you do not want your personal information shared with any third party who may use such information for direct marketing purposes, then you may opt out of such disclosures by sending an email to us at privacy@bit.ly.

Contacting Us
If you have questions or concerns about this privacy policy, your California privacy rights, or our information practices, please email us at privacy@bit.ly.

The Virginia Consumer Data Protection Act, the Colorado Privacy Act, and the Connecticut Data Privacy Act and similar laws in other U.S. states (“State Privacy Laws”) provide their consumers with specific rights regarding their personal data. To the extent that you are a resident of one of these states, this section describes your rights under the State Privacy Laws and explains how you may exercise these rights.

The categories of personal data we process, our purposes for processing your personal data, the categories of personal data that we share with third parties, and the categories of third parties with whom we share it are set forth in the terms of the Privacy Policy above.
Rights to Your Information

In addition to the rights set forth in our Privacy Policy, the State Privacy Laws provide you with the following rights:

– Right to know. You have the right to know whether we process your personal data and to access such personal data.
– Right to data portability. You have the right to obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means. You may request such personal data up to twice annually, subject to certain exceptions.
– Right to delete. You have the right to delete personal data that you have provided by or that we have obtained about you. Please note that we may deny such a request if the requested deletion falls under an exception as set forth in the State Privacy Laws. Additionally, if you request deletion of your personal data and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal data remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal data for any purpose except for those allowed under the State Privacy Laws.
– Right to opt out. You have the right to opt out of the processing of the personal data for purposes of: (i) targeted advertising; (ii) the sale of personal data; or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. As of the latest date of the Privacy Policy:
– We do not process personal data for the purposes of targeted advertising;
– We do not sell your personal data; and
– We do not engage in profiling decisions based on your personal data that produce legal or similarly significant effects concerning you.
– Right to correct. You have the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes for which we process it.
– Right to nondiscrimination. You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights. Unless permitted by the State Privacy Laws, we will not:
– Deny you goods or services;
– Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
– Provide you a different level or quality of goods or services; or
– Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

How to Exercise Your Rights; Verifying Your Identity

To exercise any of your privacy rights, or if you have any questions about your privacy rights, you may contact us by:

– Emailing us at privacy@bit.ly

After submitting a request, we will take steps to verify your identity in order for us to properly respond and/or confirm that your request is not fraudulent. We may contact you for additional information as reasonably necessary to authenticate your request, but if we are ultimately unable to authenticate your request using reasonable commercial efforts, then we may not be able to comply with it.

Only you or your authorized agent may make a verifiable request related to your personal data. If you are making a request as the parent or legal guardian of a known child regarding the processing of that child’s personal data, we may ask you to submit reliable proof of your identity.

Response Time; Your Right to Appeal

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the State Privacy laws allow us up to 90 days to respond. We will contact you within 45 days from when you contacted us to inform you of the need for additional time and the reason for such extension. We may charge you a reasonable fee to cover administrative costs if your requests are manifestly unfounded, excessive, or repetitive.

If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. You will have the right to appeal within a reasonable period of time after you have received our decision. Within 60 days (45 days for residents of Colorado) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint.

Nevada Privacy Rights

If you are a resident of Nevada, you have the right to opt out of the sale of certain personal data that we have collected (or may collect) from you to data brokers or other third parties. You can exercise this right by emailing us at privacy@bit.ly with the subject line “Nevada Do Not Sell Request.”

We do not knowingly collect personal data from children. If we learn that we have collected personal data of a child under 13 (or older as required by applicable law), we will take steps to delete such information from our systems as soon as possible. If you believe we might have any personal data from or about a child under 13, please contact us at privacy@bit.ly.

Bitly complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Bitly has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Bitly has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Bitly commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS Data Privacy Framework Dispute Resolution, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS Data Privacy Framework Dispute Resolution are provided at no cost to you.

Bitly is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). Under certain conditions, individuals have the right to invoke binding arbitration related to their personal data. In some cases, we hold liability in cases of onward transfers of data to third parties.

We reserve the right to make changes to this Privacy Policy at any time. If we make material changes in the way we collect or use information, we will provide notice by posting an announcement on the Services or sending you an email, and we will indicate when those changes will become effective. You are agreeing to any changes to the Privacy Policy when you use the Services after those changes become effective.