Other Covered Entities

Leeyo Software Inc.
Zephr US Inc.
Zuora Services, LLC

Industries

  • Information and Communications Technology
  • Software

Participation

UK Extension to the EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 9/25/2023
Next Certification Due Date: 9/24/2024
Data Collected: NON-HR

Swiss-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 6/23/2017
Next Certification Due Date: 9/24/2024
Data Collected: NON-HR

EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 10/20/2016
Next Certification Due Date: 9/24/2024
Data Collected: NON-HR

Purpose of Data Collection

As a data controller, we collect personal data from individual contacts of corporate customers, suppliers and other business partners (EEA Business Contacts).  From our EEA Business Contacts, we collect the following types of personal data: name, job title, company affiliation and contact information.  We also store and process personal data on behalf of our corporate customers. Our corporate customers use our software-as-a-service products to process personal data at their discretion, including data pertaining to their own subscribers, such as name, contact information, account information a payment information.    We share personal data of EEA residents with our subsidiaries, affiliates and contractors, who process personal data on behalf of Zuora. We also provide information to our channel partners, such as distributors and resellers, to fulfill product and information requests, and to provide customers and prospective customers with information about Zuora and its products and services. We also share EEA Data with other third parties for the purposes for which we receive the EEA Data (e.g., performance of contractual obligations and rights), and we may also disclose EEA Data where we are legally required to disclose (e.g., under statutes, contracts or otherwise) or where the disclosure is permitted by law or the Privacy Shield Principles and we have a legitimate business interest in such disclosure.    

Privacy Policy

Non-HR Data

Description:

In this Privacy Statement (“Statement”), we, Zuora, Inc. (“Zuora”), describe our data collection and usage practices with respect to personal data we collect through http://www.zuora.com and other publicly-available web pages that directly link to this Statement (collectively the “Site”). This Statement describes how Zuora collects, uses, and stores the personal information and other information you provide on the Site. It also describes the choices available to you regarding our use of your personal information and how you can access and update this information. Zuora complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Zuora has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF. Zuora has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.

Effective Date: 9/22/2023

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Zuora, Inc. at:

Andrew Cohen
General Counsel - Chief Legal Officer
Zuora, Inc.
101 Redwood Shores Pkwy Ste 100
Redwood City, California 94065-1176

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Zuora, Inc. to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against Zuora, Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission