Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Squarespace Commerce is the online store feature of the United States based Squarespace platform, setting functional and analytics cookies and processing shopper and order data.
Squarespace Commerce is the online store and checkout functionality of Squarespace, a fully hosted website and commerce platform based in the United States. It lets businesses sell products, subscriptions and services with built in templates, payments and analytics.
A Squarespace store sets strictly necessary cookies for sessions, carts and security, and analytics cookies through Squarespace Analytics that measure visits and behaviour. It processes the visitor IP address, browsing and cart activity, and customer and order details at checkout. The analytics and any marketing cookies are non essential.
Session, cart and security cookies are strictly necessary and exempt, while analytics and marketing cookies require consent under Article 5(3) of the ePrivacy Directive. You are the controller and Squarespace acts as your processor, so a data processing agreement is needed.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Use the Squarespace cookie banner or a connected consent tool in opt in mode so analytics and marketing cookies load only after acceptance. Strictly necessary cookies can load immediately, and refusal must be as easy as acceptance.
Squarespace is based in the United States, so personal data is transferred there. Confirm that Squarespace relies on the EU US Data Privacy Framework or Standard Contractual Clauses and sign its data processing terms before serving European customers.
Turn on the Squarespace cookie banner in opt in mode, verify non essential cookies are blocked beforehand, sign the data processing agreement and document the cookies, the US transfer and the order data you collect. Disable analytics features you do not need.
Websites using Squarespace Commerce must obtain user consent under GDPR regulations.
DPIA considerations
A basic Squarespace store rarely needs a DPIA, but consider one for large scale customer profiling or extensive marketing. Assess the analytics cookies, the order data and the United States transfer.
Sample consent text
Our store runs on Squarespace and uses analytics cookies to measure visits. These load only if you accept. Cart and security cookies are strictly necessary.
Third-party domains contacted
squarespace.comsquarespace-cdn.comsqsp.netCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| crumb | Strictly necessary | Session | Security token that prevents cross site request forgery on the Squarespace store. |
| ss_cid | Analytics | 2 years | Assigns a unique identifier used by Squarespace Analytics to recognise returning visitors. |
| ss_cvr | Analytics | 2 years | Stores a visitor record used by Squarespace Analytics to measure behaviour over time. |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
Yes, it sets strictly necessary cookies for sessions, carts and security, and analytics cookies through Squarespace Analytics. The analytics and any marketing cookies are non essential.
You need consent for the analytics and marketing cookies before they are set, but not for the strictly necessary cart, session and security cookies.
The store and order processing rely on contract, while analytics and marketing cookies require consent under Article 6(1)(a) and the ePrivacy rules.
Yes, Squarespace is based in the United States, so visitor and customer data is transferred there under the EU US Data Privacy Framework or Standard Contractual Clauses.
A basic store rarely needs one, but large scale profiling or extensive marketing may. Assess the analytics cookies, the order data and the US transfer.
Enable the Squarespace cookie banner in opt in mode, confirm non essential cookies are blocked first, sign the data processing agreement and document the cookies and transfers.
European e commerce platforms and self hosted stores keep data in the EU. The right choice depends on your catalogue, payments and design needs.
List the strictly necessary, analytics and any marketing cookies your Squarespace store sets, with purpose and duration, state that non essential cookies load only after consent and disclose the US transfer.