> How Divi processes personal data, what cookies its modules set and how to configure a Divi powered WordPress site in a GDPR compliant way for European visitors. > > Canonical: https://www.flowconsent.com/en/services/cms/divi CMS # Divi Unclassified · [Official website](https://www.elegantthemes.com/gallery/divi) Divi is a WordPress theme and visual builder developed by Elegant Themes (San Francisco, USA). It combines a flexible parent theme with the Divi Builder, a drag and drop page editor, plus a library of layouts, modules and global elements. Divi runs on the merchant's own WordPress server and does not set tracking cookies by default. The Bloom (email opt in) and Monarch (social sharing) add ons can introduce their own cookies or third party flows. [Block Divi until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=cms) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [CMS](https://www.flowconsent.com/en/services/cms) - Consent Unclassified - Prior consent Not required - Documented cookies 3 - Third-party domains 3 - Servers Self hosted on the WordPress operator's server; Elegant Themes Inc. (San Francisco, USA) operates license, updates, Divi Cloud, Divi AI and the marketplace Overview ## What does Divi do? ## What Divi is and where it sits in a WordPress stack Divi is one of the most established WordPress themes and visual builders, developed by Elegant Themes since 2013. It bundles a flexible parent theme, the Divi Builder visual editor, the Divi Theme Builder for templates, a wide library of layouts and modules, the Divi Cloud asset library, the Bloom email opt in plugin, the Monarch social sharing plugin and the Divi AI assistant. Many freelancers and agencies use Divi as their default WordPress stack for marketing and small business websites. ## What data Divi processes Divi itself runs on the WordPress server and does not collect data about anonymous visitors. The theme contacts Elegant Themes for license activation, automatic updates, Divi Cloud sync and Divi AI generations. The Bloom plugin stores email opt ins in the WordPress database and may set cookies that remember whether a popup has already been shown. Monarch social sharing buttons can load remote scripts from Twitter, Facebook, LinkedIn or Pinterest. The Divi Marketplace and third party Divi modules can introduce additional flows. ## GDPR and ePrivacy implications The plain Divi theme does not trigger the ePrivacy consent rule because it does not write information to the device. Bloom popups, Monarch buttons, embedded YouTube or Google Maps modules and any marketing tag placed via the Theme Options or Custom CSS can fall outside strictly necessary use and require consent under Article 6(1)(a) GDPR and Article 5(3) of the ePrivacy Directive. The site operator remains the controller for data collected by Divi Forms and similar modules. ## International data transfers Elegant Themes Inc. is established in the United States. License activation, automatic updates, Divi Cloud asset storage, Divi AI inferences and marketplace transactions take place on US infrastructure. Transfers rely on the Elegant Themes Data Processing Addendum, the EU Standard Contractual Clauses under Article 46(2)(c) GDPR and the EU US Data Privacy Framework, with TLS in transit, encryption at rest and standard hosting security controls. ## Practical compliance steps In the WordPress admin, disable Bloom popups that fire before consent, swap Monarch native sharing scripts for static share buttons or load them through a consent management platform, and gate every Divi module that embeds external content (YouTube, Google Maps, Mailchimp, Facebook). Decide whether Divi AI is allowed for content that may contain personal data. Document Elegant Themes Inc. as a processor in your record of processing activities and update the privacy notice with the United States transfer details. Compliance ## Divi and the GDPR - Legal basis Legitimate Interest (Art. 6(1)(f) GDPR) for rendering the Divi theme; performance of a contract (Art. 6(1)(b) GDPR) for license activation, Divi Cloud and Divi AI - Risk level low - Applicable regulations GDPR, ePrivacy Directive (Cookie Law), CCPA ### Impact assessment (DPIA) A DPIA is not required for a typical Divi marketing site. A DPIA may be considered when Bloom or third party Divi marketplace modules collect sensitive personal data at scale, when Divi AI is used on content that contains personal data, or when the site operates in a regulated sector and exposes personal data through Divi Forms or membership modules. ### Sample text for your banner > This website uses the Divi theme by Elegant Themes Inc. (USA). Divi itself does not load marketing or analytics cookies, but the email opt in (Bloom), social sharing (Monarch) and third party Divi modules we have enabled may set additional cookies. By accepting, you allow these scripts to run and any related data transfers, including to the United States under EU Standard Contractual Clauses and the EU US Data Privacy Framework. Cookies and trackers ## What Divi sets and contacts - Tracking method WordPress theme and visual builder that runs on the merchant's server; Divi modules render directly in the HTML output and may include optional third party embeds - Server location Self hosted on the WordPress operator's server; Elegant Themes Inc. (San Francisco, USA) operates license, updates, Divi Cloud, Divi AI and the marketplace - Cookieless mode available Yes - Data transferred outside the EU Elegant Themes Inc. is based in San Francisco. The Divi theme runs on the merchant's WordPress server, but license activation, automatic updates, Divi Cloud asset storage, Divi AI inferences and the Divi Marketplace operate on US infrastructure. Transfers rely on the Elegant Themes Data Processing Addendum, the EU Standard Contractual Clauses under Article 46(2)(c) GDPR and the EU US Data Privacy Framework. ### Cookies set (3) | Name | Type | Duration | Purpose | | ----------------------------- | ----------------------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- | | et\_bloom\_subscribed\_to\_\* | Functional (Bloom) | 1 year | Set by the Bloom email opt in plugin when the visitor has subscribed to a specific opt in. Used to avoid showing the same popup again. | | et\_bloom\_unique\_count\_\* | Functional (Bloom) | 1 year | Counter cookie set by Bloom to limit how many times the same popup is shown to the visitor based on the configured frequency. | | et\_pb\_ab\_view\_page\_\* | Analytics (A/B testing) | 1 year | Set by the Divi Leads A/B testing feature to remember which variation a visitor has seen, in order to keep them on the same variation across navigations. | ### Third-party domains contacted (3) - `elegantthemes.com` - `cdn.elegantthemes.com` - `divi.cloud` Questions ## Frequently asked questions about Divi Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Does Divi set cookies on visitor devices? The Divi theme itself does not set tracking, analytics or marketing cookies. The Bloom popup plugin can set a small cookie to remember whether a popup has already been shown to the visitor, and Monarch sharing buttons can trigger third party cookies from Twitter, Facebook, LinkedIn or Pinterest. ### Is consent required for Divi under GDPR and ePrivacy? Consent is not required for the Divi theme as such. Consent is required for Bloom popups that target non essential opt ins, for native Monarch share scripts, for embedded Divi modules (YouTube, Google Maps, Facebook) and for any marketing pixel added through Divi Theme Options. ### What is the legal basis for processing data through Divi? Theme rendering and license activation rely on legitimate interest under Article 6(1)(f) GDPR and the performance of the contract with Elegant Themes under Article 6(1)(b) GDPR. Personal data collected by Divi Forms, Bloom opt ins or membership modules follows the legal basis chosen by the site operator. ### How are data transfers to the United States protected? Elegant Themes signs the EU Standard Contractual Clauses under Article 46(2)(c) GDPR via its Data Processing Addendum and confirms participation in the EU US Data Privacy Framework. Supplementary measures include TLS in transit, encryption at rest and standard hosting security controls used by the underlying cloud provider. ### Is a DPIA required for Divi? A DPIA is not required for a typical Divi marketing site. A DPIA may be relevant when Bloom or third party Divi modules collect sensitive personal data at scale, when Divi AI processes personal content or when the site operates in a regulated sector and exposes data via membership or e commerce modules. ### How do I implement Divi in a GDPR compliant way? Disable Bloom popups that trigger before consent, switch Monarch native scripts for static share buttons or load them through a consent management platform, gate embedded modules (YouTube, Google Maps, Facebook) behind the same CMP, document Elegant Themes Inc. as a processor and update the privacy notice with the United States transfer details. ### What are the alternatives to Divi? Alternatives include Elementor (Israel), Bricks Builder (Germany), Brizy (Cyprus), Oxygen Builder (US), Astra theme with Spectra blocks, or moving to a different stack such as Webflow, Framer or Astro. The right choice depends on team skills, performance budget and the need for advanced theme builder features. ### How do I update the cookie policy when using Divi? Mention Elegant Themes Inc. (USA) as a processor for the theme, state that Divi itself does not set tracking cookies, list any Bloom or Monarch cookies and the third party services they load, mention the United States transfer with SCCs and the EU US Data Privacy Framework and link to the Elegant Themes Privacy Policy. Same category ## More services: CMS [See the whole category](https://www.flowconsent.com/en/services/cms) ### [bbPress](https://www.flowconsent.com/en/services/cms/bbpress) [bbPress is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. bbPress supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, bbPress ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/cms/bbpress) [CMS](https://www.flowconsent.com/en/services/cms/bbpress) · ### [Chamilo](https://www.flowconsent.com/en/services/cms/chamilo) [Chamilo is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Chamilo integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Chamilo helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/cms/chamilo) [CMS](https://www.flowconsent.com/en/services/cms/chamilo) · ### [Pimcore](https://www.flowconsent.com/en/services/cms/pimcore) [Pimcore is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Pimcore supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Pimcore ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/cms/pimcore) [CMS](https://www.flowconsent.com/en/services/cms/pimcore) · ### [Rubedo](https://www.flowconsent.com/en/services/cms/rubedo) [Rubedo is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Rubedo integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Rubedo helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/cms/rubedo) [CMS](https://www.flowconsent.com/en/services/cms/rubedo) · ### [Control](https://www.flowconsent.com/en/services/cms/control) [Control is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Control offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Control empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/cms/control) [Analytics](https://www.flowconsent.com/en/services/cms/control) · ### [Hostinger Website Builder](https://www.flowconsent.com/en/services/cms/hostinger-website-builder) [Hostinger Website Builder is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Hostinger Website Builder offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Hostinger Website Builder empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/cms/hostinger-website-builder) [Analytics](https://www.flowconsent.com/en/services/cms/hostinger-website-builder) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)