CMS

Zarla

Zarla is a website builder platform operated by Newfold Digital that allows small businesses to create and host websites without technical expertise. As a hosting and website creation service, its core function involves server-side processing of website visitor logs including IP addresses. Any analytics or marketing cookies added to a Zarla-built site require ePrivacy consent. All data is processed in the US via Standard Contractual Clauses.

Block Zarla until consent Scan my site

Overview

What does Zarla do?

What is Zarla?

Zarla is an AI-assisted website builder targeted at small businesses and entrepreneurs who want to create a professional web presence quickly without coding knowledge. It is operated by Newfold Digital (formerly Web.com Group), one of the largest web services companies in the US. Zarla generates website designs based on business type and allows customisation of content, colours, and layout. Built sites are hosted on Newfold Digital's US-based infrastructure.

What data does Zarla process?

Zarla as a hosting and website builder processes server-side access logs including visitor IP addresses, request timestamps, browser user agents, and pages accessed. The website owner's account data (name, email, billing information) is also processed. The specific visitor tracking on a Zarla-built website depends on what analytics tools, contact forms, or marketing widgets the site owner has added to their site.

GDPR implications for website owners

The GDPR compliance picture for Zarla depends on two layers. First, Zarla as the hosting infrastructure processes server logs, which can rely on legitimate interest. Second, whatever tracking, analytics, or contact form tools the site owner adds to their Zarla website are the site owner's responsibility. Each third-party tool requires its own consent and DPA. Zarla itself is the hosting processor; the site owner is the data controller for their visitors.

Consent requirements

No consent is required for Zarla's hosting infrastructure itself. Consent is required for any non-essential analytics, marketing, or tracking cookies added to the Zarla-built website. The site owner is responsible for implementing a GDPR-compliant consent banner if their site uses any such tools.

Data transfers outside the EU

Zarla is hosted by Newfold Digital in the US. Standard Contractual Clauses apply. Disclose Zarla as your hosting provider in your privacy policy and sign Newfold Digital's DPA.

Practical compliance steps

Add a privacy policy to your Zarla site disclosing Zarla/Newfold Digital as your hosting provider and the US transfer. Implement a GDPR consent banner if you use analytics or tracking tools. Ensure any contact forms have privacy notices. Sign Newfold Digital's DPA. Document the hosting in your RoPA.

Compliance

Zarla and the GDPR

Zarla is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for server-side access logs. Consent (Art. 6(1)(a)) for any non-essential analytics or marketing cookies embedded in the built website.
Risk level: low
Applicable regulations: GDPR, ePrivacy Directive, UK GDPR, CCPA

Impact assessment (DPIA)

A DPIA is generally not required for basic Zarla website hosting. It becomes relevant if the Zarla-built website collects personal data through forms, user accounts, or integrated third-party services that process European visitor data at scale.

Sample text for your banner

This website is hosted on Zarla (Newfold Digital, United States). Zarla processes server access logs including visitor IP addresses on US infrastructure. Any additional tracking tools on this site are listed separately in our cookie policy.

Cookies and trackers

What Zarla sets and contacts

Tracking method: Website builder platform, first-party cookies, server-side page rendering, optional third-party integrations
Server location: United States (Zarla/Newfold Digital infrastructure)
Data transferred outside the EU: Zarla is a website builder operated by Newfold Digital (formerly Web.com Group), a US company. All website data and visitor logs are processed on US infrastructure. Transfers rely on Standard Contractual Clauses under GDPR Article 46.

Cookies set (1)

Name	Type	Duration	Purpose
_zarla_sess	session	Session	Session cookie required for Zarla website builder and hosting platform functionality

Third-party domains contacted (2)

zarla.com
newfold.com

Questions

Frequently asked questions about Zarla

Can't find your question? Write to us, we answer fast.

Write to us

Does Zarla set cookies on my website visitors?

Zarla as a hosting platform sets minimal functional cookies. Any analytics or tracking cookies depend on tools you add to your Zarla site. You are responsible for managing consent for all non-essential cookies on your site.

Do I need a GDPR consent banner on my Zarla website?

Only if your site uses non-essential cookies or tracking tools. Zarla hosting itself does not require a banner. If you add analytics, live chat, or marketing pixels, you need a GDPR consent banner for those tools.

What is the legal basis for using Zarla as a hosting provider?

Legitimate interest (Art. 6(1)(f)) applies to server-side access log processing standard to any web host. The contract between you and Newfold Digital covers account data processing. US transfer is covered by Newfold Digital's DPA and SCCs.

Does Zarla transfer data outside the EU?

Yes. Zarla is operated by Newfold Digital, a US company. Server logs and website data are processed in the US. Standard Contractual Clauses apply. Disclose Newfold Digital as your hosting provider in your privacy policy.

Do I need a DPIA for Zarla?

Generally not for standard hosting. A DPIA becomes relevant if your Zarla site processes sensitive personal data through forms, user accounts, or integrated services at scale.

How do I make my Zarla website GDPR compliant?

Add a privacy policy disclosing Newfold Digital as hosting provider and the US transfer. Add a consent banner if using analytics or tracking. Ensure contact forms include privacy notices. Sign Newfold Digital's DPA.

Are there EU-hosted website builder alternatives to Zarla?

Jimdo and Strato (both German) host websites in the EU. Squarespace and Wix offer EU data residency. Self-hosted CMS on EU infrastructure provides maximum GDPR control.

What should I include about Zarla in my privacy policy?

State that your website is hosted by Zarla (Newfold Digital Inc., USA), that Newfold Digital processes server access logs including visitor IP addresses, the legal basis is legitimate interest for infrastructure security, and the US transfer is covered by SCCs under Newfold Digital's DPA.

Parabola

Cryout Creations Parabola is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Cryout Creations Parabola supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Cryout Creations Parabola remains a leading.

CMS

LearnDash

LearnDash is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. LearnDash supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, LearnDash ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Tendenci

Tendenci is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Tendenci integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Tendenci helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

Brizy

Brizy is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Brizy supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Brizy enables informed decisions that improve experience and drive results.

CMS

OceanWP

OceanWP is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. OceanWP integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, OceanWP helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

Dotclear

Dotclear is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Dotclear supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Dotclear ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site