Zendesk Privacy Policy

This document is Zendesk's Privacy Notice, governing how Zendesk collects, uses, discloses, and retains personal data about visitors to its websites, prospective and current customers, and end users of its services, with stated legal bases including consent, legitimate interests, and contractual necessity. The notice states that Zendesk collects a broad range of data categories including contact information, usage data, device and log data, payment information, and inferred data, and the terms authorize sharing this data with service providers, business partners, advertising networks, analytics providers, and in the context of corporate transactions such as mergers or acquisitions. Notably, the notice draws a clear operational distinction between data Zendesk processes as a controller (its own marketing and website interactions) and data it processes as a processor on behalf of its business customers (service data submitted through Zendesk products), with the latter governed by separate data processing agreements rather than this notice; this distinction is operationally significant because end users whose data appears in a customer's Zendesk instance must direct privacy requests to that business customer, not to Zendesk directly. The notice engages GDPR and UK GDPR for EU and UK residents, CCPA and CPRA for California residents, and references adequacy mechanisms including Standard Contractual Clauses for international data transfers; Zendesk also references its participation in the EU-U.S. Data Privacy Framework. Material compliance considerations include the adequacy of cross-border transfer mechanisms post-Schrems II, the sufficiency of consent mechanisms for cookie-based advertising, and the clarity of the controller-processor boundary for enterprise customers subject to their own regulatory obligations.