The policy enumerates GDPR data subject rights including access, rectification, erasure, restriction, portability, objection, consent withdrawal, and supervisory authority complaint, exercisable by contacting support@clickup.com or the postal address provided.
This analysis describes what ClickUp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses the GDPR data subject rights available to users and the mechanism for exercising them, which is relevant for EEA and UK users and for enterprise customers assessing ClickUp's compliance with GDPR processor obligations. The provision also notes the right to complain to the UK ICO directly.
The updated policy now explicitly recognizes eight distinct data subject rights, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, withdraw consent, and lodge complaints with regulators. Previously, ClickUp described privacy controls through general opt-out options and data access procedures without formal legal framing. The revised language aligns with GDPR and similar data protection frameworks, providing clearer legal reference points for how users may exercise control over their personal data. You can exercise these rights by contacting ClickUp's support team.
View change record →The agreement states that users may exercise GDPR data subject rights including access, erasure, portability, and objection by contacting support@clickup.com or by mail to ClickUp's San Diego address. UK users may also contact the Information Commissioner's Office at ico.org.uk or by phone at +44 (0)303 123 1113.
How other platforms handle this
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
to request that your data be transferred to a third party (data portability)
"Under applicable data protection law (including GDPR), you have the following rights regarding your personal data: Right to Access: You may request a copy of the personal data we hold about you. Right to Rectification: You may request correction of inaccurate or incomplete personal data. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances. Right to Data Portability: You may request to receive your personal data in a structured, commonly used, machine-readable format. Right to Object: You may object to processing based on legitimate interests, direct marketing, or profiling. Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority.Excerpt from ClickUp's Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages GDPR and UK GDPR data subject rights frameworks, enforced by EEA supervisory authorities and the UK Information Commissioner's Office respectively.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses the GDPR data subject rights available to users and the mechanism for exercising them, which is relevant for EEA and UK users and for enterprise customers assessing ClickUp's compliance with GDPR processor obligations. The provision also notes the right to complain to the UK ICO directly.
The agreement states that users may exercise GDPR data subject rights including access, erasure, portability, and objection by contacting support@clickup.com or by mail to ClickUp's San Diego address. UK users may also contact the Information Commissioner's Office at ico.org.uk or by phone at +44 (0)303 123 1113.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ClickUp.