Zendesk Privacy Policy

This document is Zendesk's Privacy Notice, governing how Zendesk collects, uses, shares, and retains personal data of visitors to its websites, prospective and current customers, and end users of its customer service platform, with legal bases including contract performance, legitimate interests, consent, and legal obligation depending on the processing activity. The notice states that Zendesk collects identifiers, contact information, payment data, device and browser information, usage and log data, cookie and tracking data, and inferred demographic or interest data; the terms authorize sharing this data with affiliated entities, subprocessors, advertising and analytics partners, and third parties in the context of business transfers. The notice draws a structural distinction between Zendesk as a data controller for data collected through its own websites and marketing activities, and as a data processor acting on behalf of its business customers for Service Data processed within the platform, a distinction that has operational significance for data subject rights routing. The notice engages GDPR, UK GDPR, CCPA and CPRA, and other regional frameworks including those applicable in Australia, Japan, Brazil, and Singapore; EU and UK users are subject to specific rights and mechanisms including data subject access, erasure, and portability requests, while California residents receive separate disclosures on categories of personal information collected and sold or shared. Compliance teams should note that Zendesk's role as both controller and processor creates distinct obligations under each framework, and that the routing of data subject rights requests to the relevant Zendesk customer as controller for Service Data may affect how individuals can exercise those rights in practice.