Policies and Procedures

Last Updated: May 27, 2026.

Your privacy is extremely important to us, and we are committed to fair practices that protect your information. This Privacy Policy is provided to explain our information practices and the choices you can make about the way your information is collected and used.

This Privacy Policy describes the privacy practices of Help Scout PBC and its affiliates and subsidiaries (collectively, “Help Scout”, “we”, “us”, or “our”) and how we handle personal information in connection with our website (www.helpscout.com), our platform, and any other digital property that links to this Privacy Policy (collectively, the “Platform”), and our related services, events, social media pages, interactions with you, and email and other electronic communications( (collectively, and together with the Platform, referred to in this Privacy Policy as the “Help Scout Service”). This Privacy Policy also explains the choices you have with respect to your personal information.

We treat all personal information covered by this Privacy Policy as pertaining to individuals acting as business representatives and not in their individual or household capacity. Only data that we are controllers of is in scope of this Privacy Policy. Data handled on behalf of our customers as processors falls within the scope of our Data Processing Addendum. For more information about the privacy practices of one of our customers, please refer to their privacy policy or notice.

This Privacy Policy addresses the following topics:

Help Scout’s Participation in the Data Privacy Framework

Personal information we collect

How we use personal information

How we disclose personal information

Privacy rights and choices

Other sites and services

Security

Children’s privacy

International data transfers

Retention of personal information

Notice to California Residents

Notice to Individuals in Europe

Changes to this privacy policy

How to contact us

Help Scout's Participation in the Data Privacy Framework

Help Scout PBC has self-certified to the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce.

We have committed to comply with the DPF Principles for all personal data received from the European Economic Area and the United Kingdom in reliance on those Frameworks. If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles shall govern.

To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Additionally, the U.S. Federal Trade Commission has jurisdiction over Help Scout’s compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.

Liability for onward transfers.

When we transfer personal data covered by the DPF to a third-party agent or service provider, we remain liable under the DPF Principles if that agent processes such personal data in a manner inconsistent with the DPF Principles, unless Help Scout is not responsible for the event giving rise to the damage.

Independent dispute resolution.

In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF , Help Scout commits to resolve DPF Principles-related complaints about our collection and use of your personal data. EU and UK individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF or the UK Extension to the EU-U.S. DPF should first contact Help Scout using the contact information provided in the “How to Contact Us” section in this Privacy Policy.

We have appointed JAMS as our independent dispute-resolution provider. You can submit a complaint at: https://www.jamsadr.com/DPF-Dispute-Resolution. For human-resources data transferred under the Frameworks, we cooperate directly with the EU Data Protection Authorities and the UK Information Commissioner’s Office.

Binding arbitration.

Under certain conditions, if a complaint is still unresolved after (1) you have raised it with Help Scout, (2) you have used the free independent dispute-resolution service offered by JAMS, and (3) you have contacted the relevant EU data-protection authorities or the UK ICO, then you may be entitled to invoke binding arbitration before the Data Privacy Framework Panel at no cost to you. Help Scout will arbitrate such residual claims and will abide by the Panel’s decisions in accordance with Annex I of the DPF Principles. Additional information can be found on the Data Privacy Framework website at https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf.

Personal information we collect

Personal information you provide. The information you provide us may include:

• Contact details, such as your first and last name, business email and mailing addresses, phone number, and professional title.
• Professional information, such as company name, location, and email, and other details we may collect about your company.
• Account information, such as your username and password, that you use to access our Services.
• Payment information needed to complete your transactions with us, including name, payment card information, and billing information. This information is processed by our payment service provider, Braintree, which handles your payment information per its privacy policy. Learn more here: https://www.paypal.com/us/legalhub/privacy-full.
• Communications that we exchange with you when you contact us with questions, feedback, or for any other reason, including through email, phone, chat features, or chatbot interactions.
• Usage information, such as information about how you use our Services and interact with us, including any content you upload to our Services or otherwise submit to us, and information you provide when you use any interactive features of our Services.
• Marketing data such as your preferences for receiving our marketing communications and details about your engagement with them.
• Survey responses, such as the information you provide in response to our surveys, questionnaires, or contests.
• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Automatic collection of personal information. We, our service providers, and our advertising partners may automatically collect or log and combine information about you, your computer or mobile device, and your interaction over time with our Services, such as:

• Device data including your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, device type (e.g., phone or tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, and general location information such as city, state, or geographic area derived from the IP address.
• Online activity data such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to our Platform, navigation paths between pages or screens, information about your activity on a page or screen, access times, duration of access, and whether you have opened or otherwise engaged with our communications like our marketing emails.
• Security and fraud signals such as device identifiers (including derived identifiers such as device fingerprints), network and device characteristics, and interaction signals (e.g., mouse movements and typing patterns) to help detect bots, prevent fraud, and secure accounts.

We use this information to better understand your interactions with our Services, improve and troubleshoot our Services, and help maintain the security and integrity of our Services.

Like many online services, we use cookies and similar technologies to facilitate automatic data collection. Depending on how you interact with the Services, these technologies may include:

• Cookies, which are small text files in your browser that keep track of your preferences, help us understand how you use our site, and allow us to uniquely identify our visitors.
• Local storage, which allows us to store more information at once anywhere on your device and not only in your browser.
• Web beacons, which are tiny images, also known as pixel tags, that track when someone opens an email or visits a webpage and help us keep track of what our visitors find interesting.
• Third-party scripts, which are software libraries and code provided by our service providers that run on our Services and help us operate features and protect our Services and users. These tools may collect or derive device identifiers (including device fingerprints) and interaction signals (such as mouse movements and typing patterns) to help detect bots, prevent fraud, and secure accounts (e.g., preventing credential stuffing and suspicious sign-ups/log-ins).
• Session replay technologies, which are third-party software used to record a video replay of users’ interactions with our Platform. The video replay may include users’ clicks, mouse movements, scrolls, mobile app touches, typing, and other activity taken during the session. We may use these replays for research and development purposes, such as to help us troubleshoot problems with our website, understand how users interact with and use our Platform, and identify areas for improvement.
• Chat technologies may be available on the Platform that you can use to communicate with us or, in some cases, a digital ‘chatbot’ that will help respond to your inquiries. Our chat vendors and other third parties may access and use the personal information you provide through the chat feature as well as the device data and online activity data described above, and monitor and record your chats, for the purposes described in this Privacy Policy. When you use these features, please note that you may be communicating with a digital agent and not a human.

Personal information we obtain from third parties. Help Scout may receive personal information from third parties, such as those listed below. We may merge or combine such personal information with the personal information we collect from you directly or automatically.

• Third-party accounts. When you log into the Services through a third-party account, such as Google, we may collect certain information from your third-party account (e.g., name, email address, user name), depending on the privacy permissions you have configured within that third-party account.
• Social media platforms. We may maintain pages on social media platforms like Facebook, Twitter, and LinkedIn. When you visit or interact with our pages on those platforms, you or the platforms may provide us with information through the platform.
• Other sources. We may obtain personal information from other third parties, such as our service providers, marketing partners, event sponsors, publicly-available sources, and data providers.
• Referrals. Users of the Platform may have the opportunity to refer colleagues or other contacts to us and share their contact information. Please do not provide us with someone’s contact information unless you have their permission to do so.

How we use personal information

Our primary purpose in collecting personal information is to provide the services that you request. We also use personal information for the following purposes or as otherwise described in this Privacy Policy or at the time of collection:

Providing our Services. We use personal information to operate, maintain, and provide you with our Services. In particular, we use personal information to perform our contractual obligations under our terms of use or other terms governing our offerings, or to take steps that you request prior to entering into a contract with us. Where we cannot process your personal information for these purposes on the grounds of contractual necessity, we process your personal information for this purpose based on our legitimate interest in providing you with the information or offerings you access or request. For example, we use personal information to:

• process your transactions, including granting access to our Platform and providing our services and technology;
• establish, manage, monitor, and maintain your account;
• improve and personalize your experience on or with the Services;
• verify your identity or determine your eligibility for offers and promotions;
• communicate with you, including providing notices about your account or transaction (e.g., confirmations, invoices, technical notices, updates, and security alerts) through email, phone, chat features, or other communication channels, and responding to any of your requests, feedback, or questions;
• contact you by phone, email, or other form of communication;
• provide any contests, surveys, sweepstakes, or other promotions you participate in;
• provide maintenance and support; and
• fulfill any other purpose for which you provide personal information.

Research and development. We may use personal information for research and development purposes in our legitimate business interests, including to analyze and improve the Services and our business and to develop new features, functionality, products, and services. As part of these activities, we may create or use aggregated, de-identified, or otherwise anonymized data from the personal information we collect. We make personal information into anonymized data by removing information that makes the data personally identifiable to you. We may use this anonymized data and share it with third parties for our lawful business purposes to analyze and improve the Services and promote our business.

Direct marketing. We may send you Help-Scout-related or other direct marketing communications, as permitted by law, including email. Our processing is based on your consent where that consent is required by applicable law. Where we rely on your consent you have the right to withdraw it any time in the manner indicated when you consent or via the Services. Where such consent is not required by applicable law, we process your personal information for this purpose based on our legitimate interests in promoting our business and providing you with tailored, relevant content. You may opt out of our marketing communications as described in the “Opt-out of marketing communications” section below.

Interest-based advertising. We may engage our advertising partners, including third-party and social media companies, to help us advertise our business and to display ads for our Services around the web and elsewhere. These companies may use cookies and similar technologies to collect information (including the automatically-collected data described above) about your interactions over time across our Services, our email communications, and other online services and use that information to serve ads that they think will interest you. In these cases, the privacy policy of our advertising partners may apply to their processing of your information.

Except where consent is required by applicable law, we undertake such advertising based on our legitimate business interests. Where we seek your consent, you may withdraw your consent at any time. You can learn more about your choices for limiting interest-based advertising in the “interest-based advertising choices” section below.

Artificial intelligence. We may use artificial intelligence (AI) and machine learning technologies to process, analyze, or enhance personal information. For example, AI may be used to support customer support functions (including through chatbot interactions), develop or improve features and functionality, personalize your experience, assist with marketing activities, and improve operational efficiency. When you interact with features or services powered by AI, your personal information may be processed by these systems to provide relevant outputs or to help improve the AI models we use. In addition, our third-party service providers may also use AI technologies in connection with the services they provide to us. Unless you are notified otherwise through a supplemental privacy notice, any processing of personal information by or through AI technologies will be handled in accordance with this Privacy Policy. Our use of AI is necessary to perform the contract governing our operation of the Services. Where we cannot process your personal information as required to operate the Services on the grounds of contractual necessity, we process your personal information for this purpose based on our legitimate interests in providing you with personalized, relevant content and services. Where we cannot rely on contractual necessity or our legitimate interest, we will obtain your consent for such processing. Where we rely on your consent you have the right to withdraw it any time in the manner indicated when you consented or via the relevant services.

Compliance and protection. We may use personal information to comply with legal obligations or based on our legitimate interests in protecting our or others’ rights, privacy, safety, or property (including by making and defending legal claims), including to:

• Audit our internal processes for compliance with legal and contractual requirements and internal policies.
• Enforce the terms and conditions that govern the Services.
• Prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft. For example, we may use third-party fraud prevention and security services that collect and analyze security and fraud signals to generate risk assessments and help us block or challenge suspicious activity.
• Comply with applicable laws, lawful requests, and legal processes, such as responding to subpoenas or government authorities’ requests.

With Your Consent. We will use and disclose your personal information in accordance with your prior direction or, in some cases, we may specifically ask you for your consent to collect, use, or share your personal information, such as when required by law.

How we disclose personal information

In addition to the specific situations discussed elsewhere in this Privacy Policy or at the point of collection, Help Scout may disclose your personal information to the following entities or persons:

Service providers. Companies and individuals that provide services on our behalf or help us operate the Services or our business (such as hosting, information technology, email delivery, and website analytics services).

Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, when necessary in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith, are necessary or appropriate for the compliance and protection purposes described above.

Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in, Help Scout PBC (including, in connection with a bankruptcy or similar proceedings).

Advertising partners. Third-party advertising companies who we partner with for advertising campaigns or that collect information about your activity on the Services, including for the interest-based advertising purposes described above.

Related companies. We may disclose your personal information to companies that now or in the future are affiliated with us (that is, that control, are controlled by, or are under common control with us), such as affiliates and subsidiaries.

Our customers. If you joined or were added to our Platform as an authorized user of your employer, we may share personal information about you with your employer to facilitate the services that we provide to them.

Privacy rights and choices

You can make the following choices regarding your personal information:

Opt-out of Help Scout marketing communications. You may opt out of marketing-related emails and other communications by following the opt-out or unsubscribe instructions in the communications you receive, or by contacting us as instructed in the “How to Contact Us” section below. You may continue to receive Services-related and other non-marketing emails.

Cookies. Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser’s settings. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Platform and they may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.

We also use Google Analytics and other analytics providers to help us analyze how our Platform is being accessed and used. You can learn more about Google Analytics cookies by clicking here and about how Google protects your data by clicking here. To opt-out of Google Analytics, you can download and install the Google Analytics Opt-out Browser Add-on, available here.

Interest-based advertising choices. You can limit the use of your information for interest-based advertising by blocking third-party cookies in your browser settings, using browser plug-ins/extensions, or using your mobile device settings to limit the use of the advertising ID associated with your mobile device. You can also opt out of interest-based ads from companies participating in the following industry opt-out programs by visiting the linked websites: the Network Advertising Initiative (https://thenai.org/how-to-opt-out/), and the Digital Advertising Alliance (https://optout.aboutads.info). Individuals in Europe may also visit the European Interactive Digital Advertising Alliance (available at http://www.youronlinechoices.eu/). Some of the companies we work with may offer their own opt-out mechanisms. For example, you can learn more about how Google uses cookies for advertising purposes by clicking here and opt-out of ad personalization by Google by clicking here.

Many of the opt-out preferences described in this section must be set on each device or browser for which you want them to apply. Please note that some of the advertising companies we work with may not participate in the opt-out mechanisms described above, so even after opting-out, you may still receive interest-based advertisements from other companies. If you opt out of interest-based advertisements, you will still see advertisements online but they may be less relevant to you.

Do Not Track. Some browsers may be configured to send “Do Not Track” signals to the online services that you visit. The Platform currently does not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Your privacy rights. Depending on where you live and the nature of your interactions with our Services, you may have the following additional privacy rights in regards to your personal information depending on applicable law in your jurisdiction. Please note, these rights may not apply in your jurisdiction, are not absolute and, in some cases, we may not be able to respond to your request, such as when a legal exemption applies or if we are not able to verify your identity.

• Know/Information about how we have collected and used your personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
• Access to a copy of the personal information we collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
• Correction of personal information that is inaccurate or out of date.
• Deletion of personal information that we collected from you and no longer need to provide the Services or for other lawful purposes.
• Opt out of the sharing of your personal information for cross-context behavioral advertising purposes or the exchange of your personal information for monetary or other valuable consideration. To exercise this opt-out right, you can visit the “Do Not Sell or Share My Personal Information” link in the footer of our website. Where required by law, the website also recognizes the Global Privacy Control (GPC) signal. Note that due to technological limitations, if you visit our website from a different computer or device, or clear cookies on your browser that store your preferences, you will need to return to the website to select your preferences or rebroadcast the GPC signal.

To make a privacy rights request, except where otherwise directed, please email us or write to us as instructed in the “How to Contact Us” section below. We may ask for specific information from you to help us confirm your identity. Depending on where you live, you may be entitled to empower an authorized agent to submit requests on your behalf. We will require authorized agents to confirm their identity and authority in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination. We try to respond to all legitimate privacy rights requests within 45 days or such other period as required by applicable law.

In some instances your choices may be limited, such as when fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. If you are dissatisfied with how we address your request, you may submit a complaint by contacting us as instructed in the “How to Contact Us” section below. Depending on where you reside, you may have the right to complain to a data protection regulator where you live or work or where you feel a violation has occurred.

Nevada opt-out right. Nevada Revised Statutes Chapter 603A allows Nevada residents to opt-out of the “sale” of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. If you are a Nevada resident who wishes to exercise your “sale” opt-out rights, you may submit your request us using the contact information listed at the end of this Privacy Policy with “Nevada Opt-Out Request” in the subject line.

California Shine the Light Law. If you exercise your opt-out right described above, we will consider it a request pursuant to California’s “Shine the Light” law to stop sharing your personal information covered by that law with third parties for their direct marketing purposes.

Other sites and services

Our Services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations do not endorse or represent that we are affiliated with any third party. We do not control websites or online services operated by third parties and are not responsible for their actions. This Privacy Policy does not apply to such third-party sites or services. We encourage you to read the privacy policies of the other websites and online services you use.

Security

We use reasonable organizational, technical, and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration, and destruction of personal information we maintain. Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee the security of personal information.

For more information about our security practices, please see our Security Policy.

Children's privacy

Our Services are not intended for children under 18 years of age. If we learn that we have collected personal information through the Services of a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.

International data transfers

All personal information is provided directly to our website in the United States. We may also transfer personal information to our affiliates and service providers in the United States and other jurisdictions. Please note that such jurisdictions may not provide the same protections as the data protection laws in your home country.

When we engage in cross-border data transfers, we will ensure that relevant safeguards are in place to afford adequate protection for personal information, and we will comply with applicable data protection laws, in particular by relying on an EU Commission or UK government adequacy decision or on contractual protections for the transfer of personal information. For more information about how we transfer personal information internationally, please contact as instructed in the “How to Contact Us” section below.

Retention of personal information

Where required under applicable laws, we retain personal information only for as long as is necessary to fulfill the purposes for which it was collected and processed, per our retention policies, and following applicable laws and regulatory obligations or until you withdraw your consent (where applicable).

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information, and whether we can achieve those purposes through other means, as well as the applicable legal and regulatory requirements.

Notice to California Residents

This section applies only to California residents and supplements the practices described elsewhere in this Privacy Policy. It describes how we collect, use, share, and retain personal information of California residents, and their rights with respect to their personal information. For purposes of this section, “personal information” has the meaning given in the California Consumer Privacy Act of 2018, as amended (the “CCPA”), but does not include information exempted from the scope of the CCPA. In some cases, we may provide a different privacy notice to certain categories of California residents, in which case that notice will apply instead of this section.

Your California Privacy Rights. As a California resident, you have the additional rights listed above under the “Your privacy rights” section.

Personal Information Collected and Purposes of Collection and Use. The list below summarizes the personal information we collect, or have collected in the 12 months preceding the last updated date of this Privacy Policy, by reference to the categories specified in the CCPA. Examples in the list refer to the types of personal information described in the section titled “Personal information we collect”

• Identifiers, such as contact information.
• Customer Records, such as account information, payment information, marketing data, and communications.
• Commercial Information, such as certain account information and survey responses.
• Internet or Network Activity, such as device data, online activity data, and security and fraud signals.
• Audio or Electronic Information, such as recorded calls and chats.
• Professional Information, such as company details or job title.
• Inferences, such as inferences drawn from the personal information identified above to create a profile reflecting your preferences, characteristics, or behavior.

We may collect these categories of personal information as described in the section titled, “Personal information we collect.”

The purposes, including the specific business and commercial purposes, for which we collect and use these categories of personal information are described in the section titled, “How we use personal information.”

To the extent that we may collect sensitive personal information (as defined under the CCPA), we only use or disclose it for purposes permitted under the CCPA (e.g., to provide the Services, detect security incidences and prevent fraud, and to verify and maintain the quality of the Services). We do not collect or use sensitive personal information for the purpose of inferring characteristics about California residents.

Personal Information Disclosed for a Business Purpose, “Sold,” or “Shared.” Each of the categories of personal information listed above may have been disclosed for business purposes in the preceding 12 months to any of the third parties set forth in this Privacy Policy under the section titled ”How we disclose personal information.”

The CCPA defines a “sale” of personal information to mean when a business discloses a California resident’s personal information to a third party for monetary or other valuable consideration. Where a business discloses personal information for purposes of cross-context behavioral advertising, whether or not for monetary or other valuable consideration, it qualifies as “sharing” under the CCPA.

In the 12 months preceding the last updated date of this Privacy Policy, we have “sold” or “shared” Internet or Network Activity (excluding security and fraud signals) and certain Identifiers (e.g., hashed email addresses) to our analytics and advertising partners for purposes of advertising our business and Services (including tracking the success of our advertising campaigns) and measuring activity on the Services as further described in this Privacy Policy under the section titled “Interest-Based Advertising.” We do not knowingly “sell” or “share” the personal information of California residents under 16 years of age.

Notice to Individuals in Europe

The information provided in this section applies only to individuals in the European Economic Area, the United Kingdom, and Switzerland (for purposes of this Privacy Policy, collectively, “Europe”). Except as otherwise specified, references to “personal information” in this Privacy Policy are equivalent to “personal data” governed by European data protection legislation.

Controller. The controller of your personal information covered by this Privacy Policy for purposes of European data protection legislation is Help Scout PBC, 68 Harrison Ave #605, PMB 78505, Boston, MA 02111, USA. Our data representatives’ contact information is provided in the “How to contact us” section below.

Legal bases for processing. The legal basis of our processing of your personal information as described in this Privacy Policy will depend on the type of personal information and the specific context in which we process it. However, the legal bases we typically rely on are described next to each processing purpose in the section titled, “How we use personal information.” We rely on our legitimate interests as our legal basis only where those interests are not overridden by the impact on you (unless we have your consent or our processing is otherwise required or permitted by law). If you have questions about the legal basis of how we process your personal information, contact us using the contact information included in the section titled, “How to contact us.”

Use for New Purposes. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and where the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.

Your rights. European data protection laws may provide you with certain rights regarding your personal information. You may ask us to take the following actions in relation to your personal information that we hold:

• Access. Provide you with information about our processing of your personal information and give you access to your personal information.
• Correction. Update or correct inaccuracies in your personal information.
• Deletion. Delete your personal information.
• Restriction. Restrict the processing of your personal information.
• Objection. Object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights.
• Portability. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
• Withdraw Consent. Where we rely on your consent, you may withdraw it at any time.

To exercise these rights, please contact us as described in the “How to Contact Us” section of this Privacy Policy. We may request specific information from you to help us confirm your identity. Applicable law may require or permit us to decline your request. If you have unresolved concerns, you may have the right to complain to a data protection authority where you reside, work, or where you believe a violation has occurred.

Cross-Border Data Transfer. If we transfer your personal information to a country outside of Europe such that we are required to apply additional safeguards to your personal information under European data protection laws, we will do so. Please contact us using the information at the end of this Privacy Policy for further information about any such transfers or the specific safeguards applied.

Changes to this privacy policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Platform, or as otherwise required by law. In all cases, your continued use of the Services following posting or other notification of changes constitutes your acknowledgement of such changes. Please review this Privacy Policy periodically to keep up to date on our most current policies and practices.

How to contact us

Help Scout PBC is the entity responsible for processing personal information under this Privacy Policy (as a controller, where provided under applicable law).

If you have any questions or comments about this Privacy Policy or our privacy practices, or if you would like to exercise your rights concerning your personal information, please contact us by email or write to us at:

Attn: Privacy Agent Help Scout PBC 68 Harrison Ave #605 PMB 78505 Boston, MA 02111

EEA and UK Representative Contact Information:

General Data Protection Regulation (GDPR) - European Representative

Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Help Scout PBC has appointed European Data Protection Office (EDPO) as its GDPR Representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR:

• by using EDPO’s online request form: https://edpo.com/gdpr-data-request/
• by writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium

UK General Data Protection Regulation (GDPR) - UK Representative

Pursuant to Article 27 of the UK GDPR, Help Scout PBC has appointed EDPO UK Ltd as its UK GDPR representative in the UK. You can contact EDPO UK regarding matters pertaining to the UK GDPR:

• by using EDPO’s online request form: https://edpo.com/uk-gdpr-data-request/
• by writing to EDPO UK Ltd, Unit 33, Waterside, Schooner Court, 44-48 Wharf Road, London, N1 7UX, United Kingdom