Provision record
Heap · Heap Privacy Policy · View original document ↗

Customer responsible for legal basis of visitor data processing

High severity Explicit document language Common · 297 of 352 platforms
Stay ahead of the changes
Track Heap and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Heap's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

How other platforms handle this

Cerebras Medium

This Policy does not apply to Personal Data we process in our role as a data processor or service provider on behalf of our customers and partners.

ClickUp Medium

Please be aware that this Privacy Policy does not govern all the information ClickUp may process. Our commitment to customers and service providers is governed by a separate Data Protection Addendum.

Perplexity AI Medium

Additional terms and conditions from Merchants will apply to any purchases you make using ProShop, and you are responsible for reviewing and complying with such additional terms and conditions

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
As a data controller, it is up to you to determine the legal basis of this processing.

Excerpt from Heap's Privacy Policy

Provision details

Document information
Document
Heap Privacy Policy
Entity
Heap
Document last updated
May 5, 2026
Tracking information
First tracked
Last verified
Record ID
CA-P-073165
Document ID
CA-D-00706
Evidence Provenance
Source URL
Wayback Machine
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Heap
Document: Heap Privacy Policy
Record ID: CA-P-073165
Captured: UTC
URL: https://conductatlas.com/platform/heap/heap-privacy-policy/provision/CA-P-073165/customer-responsible-for-legal-basis-of-visitor-data-processing/
Accessed: Aug. 3, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Heap's Customer responsible for legal basis of visitor data processing clause do?

The clause states: “As a data controller, it is up to you to determine the legal basis of this processing.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 297 platforms. See the full comparison.

Is ConductAtlas affiliated with Heap?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Heap.