This notice applies only to data where Zendesk controls the purpose of processing; data processed within Zendesk's products on behalf of business customers (Subscribers) is excluded, and affected individuals are directed to contact those Subscribers directly.
This analysis describes what Zendesk's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision defines the scope of Zendesk's privacy obligations under this notice, excluding data processed on behalf of Subscribers and disclaiming responsibility for Subscriber data practices. Compliance teams engaging Zendesk as a vendor must assess Subscriber obligations separately, including reviewing the Zendesk Data Processing Agreement to understand the allocation of data controller and processor responsibilities.
Under this clause, individuals whose personal data is processed within a Zendesk Subscriber's support or service platform are not covered by this notice and must direct data rights requests to the Subscriber organization. The agreement states Zendesk is not responsible for the privacy or data security practices of its Subscribers.
Cross-platform context
See how other platforms handle Controller vs. Processor Distinction and similar clauses.
Compare across platforms →"This Notice only applies when Zendesk is the Controller of personal data (example: Zendesk website visitors' personal data and business-to-business contact data). Zendesk is a Processor, not a Controller, of personal data that we process on behalf of our Subscribers when they use Zendesk products and Services. For clarity, this means that this Notice does not apply to where Zendesk processes personal data as a processor in its products and Services. If you have questions related to how a Zendesk Subscriber utilizes your personal data, please contact them directly. We are not responsible for the privacy or data security practices of our Subscribers.Excerpt from Zendesk's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision defines the scope of Zendesk's privacy obligations under this notice, excluding data processed on behalf of Subscribers and disclaiming responsibility for Subscriber data practices. Compliance teams engaging Zendesk as a vendor must assess Subscriber obligations separately, including reviewing the Zendesk Data Processing Agreement to understand the allocation of data controller and processor responsibilities.
Under this clause, individuals whose personal data is processed within a Zendesk Subscriber's support or service platform are not covered by this notice and must direct data rights requests to the Subscriber organization. The agreement states Zendesk is not responsible for the privacy or data security practices of its Subscribers.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zendesk.