Privacy notice Privacy notice V 2026-07. Published 2026-July-01 This updated Optimizely Privacy Notice (“Privacy Notice”) explains how information about you, that directly identifies you, or that makes you identifiable (“personal information” (also referred to as “personal data” in some jurisdictions)) is collected, used, disclosed, and otherwise processed by Optimizely. This Privacy Notice replaced Optimizely’s former Privacy Policy. SUMMARY Who Collects And Processes Your Personal Information? Optimizely does, in the form of the respective legal entity, entity of the global group of the Optimizely group of companies. The Optimizely Privacy Notice describes in detail the processing activities of the applicable Optimizely group entity that apply. What Personal Information Does Optimizely Collect? Optimizely may collect various types of personal information about you when conducting its business, including (but not limited to): personal contact information, personal information related to your or your employer’s business relationship with Optimizely, personal information Optimizely must collect due to legal-and compliance-related purposes, personal usage, registration, and participation data that Optimizely may generate through your use of its web and online offerings, special categories of personal information, application-related personal information, personal information that Optimizely may receive from third parties, personal information Optimizely requires to ensure your or your employer’s satisfaction with our products, services and offerings. What Are the Purposes Optimizely Collects Your Personal Information? Optimizely processes your personal information to: pursue its business relationships with you, your employer, or your employer’s customers, including ensuring your satisfaction with and keeping you up to date on the latest news about our products and services, develop and offer you its software products, cloud and other services, protect the quality and safety of its premises, facilities, products or services, secure and, if necessary, defend its protected legal assets against unlawful attacks, assert our rights or defend Optimizely against legal claims, ensure compliance with statutory laws and regulations applicable to Optimizely, operate Optimizely’s Internet pages, web offerings, or other online events including analyzing the behaviour of the users, enabling you to create a user profile, benefit from an identity service and to promote and continuously improve your user experience, search you as a potential talent for Optimizely, transfer it to recipients like other entities of the Optimizely Group, third-party service providers, Optimizely partners and others. Rights of Access, Correction & Return. You have the right to request, from Optimizely, access to, correction of, and/or the return or the deletion of your personal information. You may request from Optimizely to restrict the access to your personal information or to exclude it from further processing. You may revoke a once given consent or object to processing activities that Optimizely may intend to pursue in a given case. When you believe that Optimizely was not processing your personal information in accordance with this Privacy Notice or under breach of applicable personal information protection laws, you have the right to lodge a complaint with a relevant supervisory authority. The Privacy Notice describes each of these rights in detail, including how you can reach us to exercise any of these rights against Optimizely and how to identify, if necessary, the relevant personal information protection authority. Country Specific Disclosures. In Schedule I4, Optimizely addresses several country specific aspects that must be explained in a Privacy Notice under relevant country laws. The country-specific requirements include, but is not limited to those, from the EU and EEA, the United States of America, and the United Kingdom. Intranet Sites. This Privacy Notice does not apply to Optimizely internet-pages or web-services that present their own privacy Notice – (for example, the Optimizely Applicant Notice (however called) presented at Optimizely Careers). Learn More. This summary does not replace or supersede the detailed explanations in the Optimizely Privacy Notice. In case of any doubt, please always refer to the relevant passage in the actual full Notice below. If you want to learn more about each of these purposes for which Optimizely may collect, transfer, and use your personal information, including for how long your personal information is being retained, please refer to the full Privacy Notice below. ______________________________ Definitions. When we use - “Optimizely”, “Optimizely Group”, “we”, “us”, or “our” in this Privacy Notice - we are referring to Optimizely North America Inc. and Optimizely AB and their respective affiliates. And “Local Optimizely’ means an applicable Optimizely Group company. “Service” - we are referring to any of the services and product offerings that we offer as a controller, our websites https://www.optimizely.com and Optimizely World or any other Optimizely Group product or service that posts or links to this Privacy Notice. Services may include any of Optimizely’s on-prem and cloud software products, web services, apps, online-forums, webinars and events, non-marketing related newsletters, white papers, tutorials, trainings, as well as other offerings like contests or sweepstakes. “Personal information” - we are also referring to personal information and personally identifiable information. Optimizely as a Data Controller: This Privacy Notice applies only where Optimizely is the “data controller” (or similar term under applicable laws) and is responsible for and controls the processing of your personal information collected by Optimizely for Optimizely through your use of our Services. Optimizely as a Data Processor: In providing our Services, our customers may collect and process data in their utilisation of Services (“Customer Data”), or we may collect such data on their behalf, which may in either case include the personal information of our customers’ authorized users. Here, Optimizely is a “data processor” (or similar term under applicable laws), and we have contractually committed ourselves to our customers (typically in the form of our Software Subscription Agreement, and data processing agreement) to process that Customer Data (including personal information) under the instruction of the respective client, who is the data controller in these cases. As such, this Privacy Notice does not apply to the processing of Customer Data (including personal information), and we recommend you read the privacy notice of the respective client if their processing concerns your personal information. Table of Contents For What Purposes Does Optimizely Use Your Personal Information What Personal Information Does Optimizely Collect And Use, And How Do We Collect It How Long Will Your Personal Information Be Stored & Used by Optimizely With Whom May Optimizely Share Your Personal Information Your Control of Your Personal Information Your Control of Marketing Messages How Can You Exercise Your Rights of Control Children Region-Specific Disclosures Third Party Websites And Services EU-US, US-UK AND Swiss-US Data Privacy Framework Changes To This Privacy Notice Contact Us Country Specific Disclosures 1. FOR WHAT PURPOSES DOES OPTIMIZELY USE YOUR PERSONAL INFORMATION? When conducting business and operating various web presences and other communication channels, Optimizely collects limited personal information of the people it interacts with, including customers, partners, suppliers, vendors, candidates, and any other people with whom we interact. In any of these cases, Optimizely may use this personal information for one or more of the following business purposes: To pursue business relationships with customers, partners, and others. Optimizely may use personal information to pursue its business relationships with customers, partners, and other users to fulfill pre-contractual and contractual business relations. This may include satisfying requests, processing orders, delivering an ordered product or service, or engaging in any other relevant action to establish, fulfill and maintain our business relationships. When you purchase or intend to purchase Services from Optimizely on behalf of a corporate customer or are otherwise associated as contact person for the business relationship between Optimizely and a corporate customer or partner, Optimizely will use your personal information for this purpose. More specifically, Optimizely may use your personal information to confirm your opening of an account, manage the contract execution, send you disclosures as may be required by law, notice of payments, and other information about our products and services. Optimizely may respond to related inquiries, provide you with necessary support and process your feedback. In the context of your or your employer’s use of our Services, Optimizely may communicate with you by post, email, live chat, contact forms, phone or any other medium to resolve your, a user’s, or a customer’s question or complaint or to investigate suspicious transactions. In case of telephone calls or chat sessions, Optimizely may record such calls or chat sessions to improve the quality of Optimizely’s services after informing you accordingly during that call and, subject to applicable law, receiving your prior consent before the recording begins. Customer Satisfaction. Within an existing business relationship between you or your employer and Optimizely, Optimizely may use your personal information to help us understand how satisfied you are with the functionality and quality of our Services, to provide you with relevant information on our latest product announcements, software updates or upgrades, events, special offers, and other information about Optimizely’s Services that is relevant and useful to you. To develop our Services. To the extent permitted by applicable law, Optimizely may process your personal information for internal research, technological demonstration and development, and to help Optimizely create, develop, operate, deliver, improve, upgrade or enhance Optimizely’s products and services. Optimizely may process personal information to create anonymized data sets that may then be used to improve Optimizely’s Services. To ensure legal compliance. Optimizely processes personal information to comply with statutory obligations. This includes Optimizely’s compliance with applicable export laws, trade sanctions and embargoes of various countries including, without limitation, those of the European Union and its member states, and of the United States of America. Optimizely may use personal information to the extent necessary to comply with these legal requirements. Specifically, Optimizely may use personal information to conduct automated checks against applicable sanctioned-party lists, to regularly repeat such checks whenever a sanctioned-party list is updated or when a user updates that person’s information. In case of a potential match, Optimizely will block access to Optimizely’s services and systems and contact the user to confirm that person’s identity. If necessary, Optimizely uses personal information to prevent or prosecute criminal activities such as any form of cybercrime, the illegal use of our products and services or fraud, to assert our rights or defend Optimizely against legal claims, and to comply with data protection and unfair competition law related requirements. Depending on the country where the relevant Opti…