Zendesk · Zendesk Privacy Policy · View original document ↗

Personal Data Categories Collected

Medium severity High confidence Explicitdocumentlanguage Rare · 2 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Zendesk Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The notice states that Zendesk collects identifiers, commercial records, internet activity, geolocation data, professional information, and inferences drawn from collected data, including profile inferences relating to preferences, psychological trends, and aptitudes.

This analysis describes what Zendesk's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision documents the scope of personal data categories Zendesk collects as a controller, including inferred profile data, which engages CCPA/CPRA disclosure requirements and GDPR Article 13 transparency obligations.

Consumer impact (what this means for users)

The agreement states that Zendesk collects a defined set of data categories including identifiers, browsing and search history on Zendesk properties, geolocation data, and inferences about preferences, psychological trends, and aptitudes drawn from that data. These categories are disclosed in satisfaction of CCPA and GDPR transparency requirements.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Access Zendesk's cookie preference center via the link in the notice footer to manage consent for analytics and advertising cookies that support inference and profiling activities.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Strava Medium

We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

See all platforms with this clause type →

Monitoring

Zendesk has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We collect the following categories of personal data: Identifiers and similar information, such as name, alias, address, phone number, unique personal identifier, online identifier, IP address, email address, account name, or other similar identifiers. Commercial information, such as records of products or services purchased, obtained, or considered. Internet or other electronic network activity, such as browsing history on our websites, search history on our websites, and information regarding interactions with our websites, applications, or advertisements. Geolocation data. Professional or employment-related information. Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

— Excerpt from Zendesk's Zendesk Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 13 (information to be provided at time of collection), CCPA and CPRA category disclosure requirements, and equivalent transparency obligations under Brazilian LGPD, Australian Privacy Act, and other regional frameworks referenced in the notice. The FTC and California Privacy Protection Agency are the primary US enforcement authorities. (2) GOVERNANCE EXPOSURE: Medium. The inclusion of inferred profile data including psychological trends and aptitudes as a disclosed category is operationally significant because CPRA classifies certain inferred data as sensitive personal information depending on context, and GDPR may require heightened protection for inferences that constitute profiling with significant effects. (3) JURISDICTION FLAGS: California residents have specific CPRA rights regarding inferred data and profiling, including the right to opt out of certain automated decision-making. EU/EEA residents may have rights to object to profiling under GDPR Article 21. Jurisdictions with sector-specific restrictions on profiling may impose additional requirements. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations receiving Zendesk marketing communications or using Zendesk's website should confirm that Zendesk's data collection practices align with their own vendor risk assessments. The breadth of inferred categories may require update of third-party data inventory records. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that their own privacy notices, if they reference Zendesk as a service provider, adequately disclose the categories of data Zendesk collects. Organizations subject to CPRA should assess whether Zendesk's inference practices require opt-out mechanisms to be offered to California employees or customers whose data Zendesk processes.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over deceptive or unfair data collection practices, including collection of inferred profile data without adequate disclosure
    File a complaint →
  • State AG
    California's CPRA grants the California Privacy Protection Agency and AG enforcement authority over collection and use of inferred and sensitive personal information categories
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Zendesk Privacy Policy
Entity
Zendesk
Document last updated
May 5, 2026
Tracking information
First tracked
May 20, 2026
Last verified
May 20, 2026
Record ID
CA-P-012588
Document ID
CA-D-00639
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
80f69b97852338b76e9face49bfa007e4c633d1fffd88ce56691da4acf0f8a21
Analysis generated
May 20, 2026 23:14 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Zendesk
Document: Zendesk Privacy Policy
Record ID: CA-P-012588
Captured: 2026-05-20 23:14:51 UTC
SHA-256: 80f69b97852338b7…
URL: https://conductatlas.com/platform/zendesk/zendesk-privacy-policy/personal-data-categories-collected/
Accessed: June 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Zendesk's Personal Data Categories Collected clause do?

This provision documents the scope of personal data categories Zendesk collects as a controller, including inferred profile data, which engages CCPA/CPRA disclosure requirements and GDPR Article 13 transparency obligations.

How does this clause affect you?

The agreement states that Zendesk collects a defined set of data categories including identifiers, browsing and search history on Zendesk properties, geolocation data, and inferences about preferences, psychological trends, and aptitudes drawn from that data. These categories are disclosed in satisfaction of CCPA and GDPR transparency requirements.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.

Is ConductAtlas affiliated with Zendesk?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zendesk.