Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Zarla is a website builder platform operated by Newfold Digital that allows small businesses to create and host websites without technical expertise. As a hosting and website creation service, its core function involves server-side processing of website visitor logs including IP addresses. Any analytics or marketing cookies added to a Zarla-built site require ePrivacy consent. All data is processed in the US via Standard Contractual Clauses.
Zarla is an AI-assisted website builder targeted at small businesses and entrepreneurs who want to create a professional web presence quickly without coding knowledge. It is operated by Newfold Digital (formerly Web.com Group), one of the largest web services companies in the US. Zarla generates website designs based on business type and allows customisation of content, colours, and layout. Built sites are hosted on Newfold Digital''s US-based infrastructure.
Zarla as a hosting and website builder processes server-side access logs including visitor IP addresses, request timestamps, browser user agents, and pages accessed. The website owner''s account data (name, email, billing information) is also processed. The specific visitor tracking on a Zarla-built website depends on what analytics tools, contact forms, or marketing widgets the site owner has added to their site.
The GDPR compliance picture for Zarla depends on two layers. First, Zarla as the hosting infrastructure processes server logs, which can rely on legitimate interest. Second, whatever tracking, analytics, or contact form tools the site owner adds to their Zarla website are the site owner''s responsibility. Each third-party tool requires its own consent and DPA. Zarla itself is the hosting processor; the site owner is the data controller for their visitors.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
No consent is required for Zarla''s hosting infrastructure itself. Consent is required for any non-essential analytics, marketing, or tracking cookies added to the Zarla-built website. The site owner is responsible for implementing a GDPR-compliant consent banner if their site uses any such tools.
Zarla is hosted by Newfold Digital in the US. Standard Contractual Clauses apply. Disclose Zarla as your hosting provider in your privacy policy and sign Newfold Digital''s DPA.
Add a privacy policy to your Zarla site disclosing Zarla/Newfold Digital as your hosting provider and the US transfer. Implement a GDPR consent banner if you use analytics or tracking tools. Ensure any contact forms have privacy notices. Sign Newfold Digital''s DPA. Document the hosting in your RoPA.
Websites using Zarla must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is generally not required for basic Zarla website hosting. It becomes relevant if the Zarla-built website collects personal data through forms, user accounts, or integrated third-party services that process European visitor data at scale.
Sample consent text
This website is hosted on Zarla (Newfold Digital, United States). Zarla processes server access logs including visitor IP addresses on US infrastructure. Any additional tracking tools on this site are listed separately in our cookie policy.
Third-party domains contacted
zarla.comnewfold.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _zarla_sess | session | Session | Session cookie required for Zarla website builder and hosting platform functionality |
Zarla collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Zarla as a hosting platform sets minimal functional cookies. Any analytics or tracking cookies depend on tools you add to your Zarla site. You are responsible for managing consent for all non-essential cookies on your site.
Only if your site uses non-essential cookies or tracking tools. Zarla hosting itself does not require a banner. If you add analytics, live chat, or marketing pixels, you need a GDPR consent banner for those tools.
Legitimate interest (Art. 6(1)(f)) applies to server-side access log processing standard to any web host. The contract between you and Newfold Digital covers account data processing. US transfer is covered by Newfold Digital's DPA and SCCs.
Yes. Zarla is operated by Newfold Digital, a US company. Server logs and website data are processed in the US. Standard Contractual Clauses apply. Disclose Newfold Digital as your hosting provider in your privacy policy.
Generally not for standard hosting. A DPIA becomes relevant if your Zarla site processes sensitive personal data through forms, user accounts, or integrated services at scale.
Add a privacy policy disclosing Newfold Digital as hosting provider and the US transfer. Add a consent banner if using analytics or tracking. Ensure contact forms include privacy notices. Sign Newfold Digital's DPA.
Jimdo and Strato (both German) host websites in the EU. Squarespace and Wix offer EU data residency. Self-hosted CMS on EU infrastructure provides maximum GDPR control.
State that your website is hosted by Zarla (Newfold Digital Inc., USA), that Newfold Digital processes server access logs including visitor IP addresses, the legal basis is legitimate interest for infrastructure security, and the US transfer is covered by SCCs under Newfold Digital's DPA.