If you contacted a company using Zendesk's support software, that company controls your personal data, not Zendesk. To delete or access your data, you need to contact the business, not Zendesk.
This analysis describes what Zendesk's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Millions of consumers interact with businesses through Zendesk-powered support tools without knowing it; this clause determines that those consumers must pursue their privacy rights through the business, not through Zendesk directly, which can significantly affect their practical ability to exercise rights.
If your personal data appears in a business's Zendesk help desk, Zendesk is not the entity responsible for responding to your access or deletion request. You must contact the business directly, which may make it harder to exercise rights if that business is unresponsive.
How other platforms handle this
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
You and your organization's administrator can access several types of Service Data directly from Google Cloud, including your account information, billing contact information, payment and transaction information, as well as product and communication settings and configurations.
to request that your data be transferred to a third party (data portability)
"When Zendesk processes personal data on behalf of its customers, Zendesk acts as a data processor and the customer acts as the data controller. In those cases, the customer's privacy policy and data processing agreement with Zendesk govern the processing of that data, not this Privacy Notice. If you are an end user of a Zendesk customer and have questions about how your personal data is processed, please contact the Zendesk customer directly.Excerpt from Zendesk's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision directly implicates GDPR Article 28 (processor obligations) and Article 4(7)-(8) (definitions of controller and processor), enforceable by EU supervisory authorities including the Irish Data Protection Commission as Zendesk's lead EU …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Millions of consumers interact with businesses through Zendesk-powered support tools without knowing it; this clause determines that those consumers must pursue their privacy rights through the business, not through Zendesk directly, which can significantly affect their practical ability to exercise rights.
If your personal data appears in a business's Zendesk help desk, Zendesk is not the entity responsible for responding to your access or deletion request. You must contact the business directly, which may make it harder to exercise rights if that business is unresponsive.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zendesk.