Provision record
Calendly · Calendly Privacy Notice · View original document ↗

Direct data subject to customer controller

High severity High confidence Explicit document language Common · 290 of 352 platforms

Key Facts

If a user wishes to exercise rights with respect to data processed by a Calendly customer, who does Calendly direct that user to contact?
If a user wishes to exercise rights with respect to data processed by a Calendly customer, Calendly directs that user to contact the customer which collected their information.
Stay ahead of the changes
Track Calendly and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Calendly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Routing rights requests to the customer rather than Calendly means Calendly is not the point of contact for exercising rights over customer-controlled data, potentially complicating access for individuals who do not know which customer holds their data.

Clause Stability Stable

0
Changes
4
Months Monitored
Jul 10, 2026
First Seen
Jul 10, 2026
Last Seen
This clause type exists across 5148 other provisions on other platforms.

Consumer impact (what this means for users)

To exercise your data rights over information collected by a Calendly customer, you must direct your request to that customer, not to Calendly.

How other platforms handle this

ZipRecruiter Medium

Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.

Roblox Medium

Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...

Square Medium

to request that your data be transferred to a third party (data portability)

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
If you have questions about how your data is processed by our customers or wish to exercise your rights with respect to that data, you should contact the customer which collected your information.

Excerpt from Calendly's Privacy Notice

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Calendly Privacy Notice
Entity
Calendly
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-050273
Document ID
CA-D-00563
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
9c4f19c5c822aa52a1b2da5bb522c829f8cdb46c74a22604b9e46848c521cc8d
Analysis generated
July 9, 2026 09:03 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Calendly
Document: Calendly Privacy Notice
Record ID: CA-P-050273
Captured: 2026-07-09 09:03:25 UTC
SHA-256: 9c4f19c5c822aa52…
URL: https://conductatlas.com/platform/calendly/calendly-privacy-notice/provision/CA-P-050273/direct-data-subject-to-customer-controller/
Accessed: Sept. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Calendly's Direct data subject to customer controller clause do?

Routing rights requests to the customer rather than Calendly means Calendly is not the point of contact for exercising rights over customer-controlled data, potentially complicating access for individuals who do not know which customer holds their data.

How does this clause affect you?

To exercise your data rights over information collected by a Calendly customer, you must direct your request to that customer, not to Calendly.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.

Is ConductAtlas affiliated with Calendly?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Calendly.