Privacy Notice for Square Sellers and Website Visitors

DATED 2024-07-01 · VERSION 20260106_rev01 · COMPARED WITH 20241001_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20241001_rev01 to 20260106_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+**General**
+General
 ## Privacy Notice for Square Sellers and Website Visitors
 Effective Date: July 1, 2024
 This Privacy Notice describes how your Square entity as indicated below ("Square," "we" and "us") collects, uses, discloses, transfers, stores, retains or otherwise processes your information when you (whether you are a person acting as a sole proprietor or on behalf of another business entity) visit our website [(www.squareup.com)](https://www.squareup.com/) or apply or sign up for a Square account (collectively, "Services").
 - [SECURITY]()
 - [COOKIES & OTHER SIMILAR TECHNOLOGIES]()
 - [HOW LONG WE RETAIN YOUR INFORMATION]()
 - [YOUR CHOICES]()
 - [CHILDREN'S PERSONAL INFORMATION]()
 - [ADDITIONAL COUNTRY DISCLOSURES]()
+    \- [EU/UK]()
+    \- [AUSTRALIA]()
+    \- [JAPAN]()
+    \- [UNITED STATES]()
+    - [EU/UK]()
+    - [AUSTRALIA]()
+    - [JAPAN]()
+    - [UNITED STATES]()
 - [CHANGES TO THIS PRIVACY NOTICE]()
 - [HOW TO CONTACT US]()
 ## INFORMATION WE COLLECT ABOUT YOU
 We collect information about you in three ways: (i) when you provide it to us directly; (ii) when we gather information while you are using the Services; and (iii) when we collect information from other sources. We explain below what types of data are involved in each case, how and why we process (use) it and the lawful basis that applies to our use of the relevant information.
 - Information that your customers voluntarily provide you, or that you input into Square's systems about your customers
 - For example, survey responses; participation in contests, promotions, or other prospective seller marketing forms or devices; suggestions for improvements; notes you take about your customers, or any other actions performed when they interact with you using Square
+ |
 We use Your Customers' Data as part of our contractual obligation to provide the Services you request to you and, in the United States, as disclosed in the [Privacy Notice for Users Who Do Not Apply or Sign Up for a Square Account or Other Services](https://squareup.com/us/en/legal/general/privacy-no-account), or as instructed by your customers.
 It is your responsibility to obtain any necessary permission for us to use Your Customers' Data in the manner envisaged in this Privacy Notice so that we can provide you with the Services requested by you.
 ## WHEN AND WITH WHOM WE SHARE YOUR INFORMATION
 We may share the personal information described in the ["Information We Collect About You"](https://squareup.com/us/en/legal/general/privacy) section with the following categories of service providers and third parties:
 We store your information for as long as is necessary for the purposes identified in this Privacy Notice, including to provide our Services, to comply with legal obligations, to enforce and prevent violations of our Terms, to protect against fraudulent activity, and to defend our legal rights, property and users.
 The retention periods for your information are determined on a case-by-case basis that depends on the following factors:
 - **The nature of the information and why it is collected and processed.** The length of time we will keep your information will generally be determined by how long we need that information to provide you with our Services, including any optional features you use and to provide customer support. For example:
+    \- As set out in this Privacy Notice, we require Square Account Data to deliver our Services. We need to keep it for the duration your Square account exists so that we can maintain your account.
+    \- Similarly, we will also keep your Usage Data for the lifetime of your account.
+    - As set out in this Privacy Notice, we require Square Account Data to deliver our Services. We need to keep it for the duration your Square account exists so that we can maintain your account.
+    - Similarly, we will also keep your Usage Data for the lifetime of your account.
 - **Legal reasons.** In certain cases, we are obliged to keep your information for legal reasons, which may include after your account has been deactivated. We will keep your information where it necessary for us:
+    \- To respond to a legal request or to comply with applicable law. We must keep your information where we have a legal obligation to do so, for example, if we receive a valid legal request, such as a preservation order or search warrant, related to your account, we preserve your information after you delete your account.
+    \- To deal with and resolve requests, disputes or complaints.
+    \- For litigation or regulatory matters. For example, we preserve your information related to a legal claim or complaint, such as where we are subject to a regulatory investigation or we need to defend ourselves in legal proceedings about a claim related to your information or respond to a regulator in relation to a legal or regulatory complaint made by you or someone else.
+    \- Issues relating to the safety, security and integrity of our Services and to protect rights, property and users. For example, we keep information where it is necessary to investigate misuse of our Services, such as fraud.
+    - To respond to a legal request or to comply with applicable law. We must keep your information where we have a legal obligation to do so, for example, if we receive a valid legal request, such as a preservation order or search warrant, related to your account, we preserve your information after you delete your account.
+    - To deal with and resolve requests, disputes or complaints.
+    - For litigation or regulatory matters. For example, we preserve your information related to a legal claim or complaint, such as where we are subject to a regulatory investigation or we need to defend ourselves in legal proceedings about a claim related to your information or respond to a regulator in relation to a legal or regulatory complaint made by you or someone else.
+    - Issues relating to the safety, security and integrity of our Services and to protect rights, property and users. For example, we keep information where it is necessary to investigate misuse of our Services, such as fraud.
 ## YOUR CHOICES
 As described further below, you may be entitled to certain rights with respect to your personal information. You can also [see, change or fix information](https://squareup.com/us/en/legal/general/privacy) you gave us, ask us to [deactivate](https://squareup.com/us/en/legal/general/privacy) your account, control your [location information](https://squareup.com/us/en/legal/general/privacy), or [opt out of receiving promotional messages from us](https://squareup.com/us/en/legal/general/privacy).
 ##### Your Personal Information Rights
 - to object to profiling activities based on our own legitimate interests;
 - to object to solely automated processing producing legal or similar effects;
 - to request that your data be transferred to a third party (data portability);
 - to withdraw your consent to our processing of your data (where such processing is based on consent); and
 - to lodge a complaint with the data protection authority in your jurisdiction.
+In order to exercise any of these rights (including the right to withdraw your consent), please email privacy-eu@squareup.com. We may need to verify your identity before granting access or otherwise changing or correcting your information.
+In order to exercise any of these rights (including the right to withdraw your consent), please email [privacy-eu@squareup.com](mailto:privacy-eu@squareup.com). We may need to verify your identity before granting access or otherwise changing or correcting your information.
 ##### International Data Transfers
+We operate in many countries, and we (or our service providers) may move your data and process it outside the country where you live. We use third-party service providers to process and store your information in the United States, Japan, the EU, and other countries. When we transfer your personal data to our affiliates outside the EU, we make use of standard contractual clauses (which have been approved by the European Commission) to help ensure your information is afforded a high standard of protection, and that your privacy rights can be vindicated. For a list of the countries in which we operate, please see https://squareup.com/gb/about.
+We operate in many countries, and we (or our service providers) may move your data and process it outside the country where you live. We use third-party service providers to process and store your information in the United States, Japan, the EU, and other countries. When we transfer your personal data to our affiliates outside the EU, we make use of standard contractual clauses (which have been approved by the European Commission) to help ensure your information is afforded a high standard of protection, and that your privacy rights can be vindicated. For a list of the countries in which we operate, please see [https://squareup.com/gb/about](https://squareup.com/gb/about).
+If you wish to obtain further details regarding the contractual arrangements we enter into to protect your personal data when it is transferred outside the EU, you may do so by emailing us via privacy-eu@squareup.com. You can also access the standard contractual clauses approved by the European Commission at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc\_en.
+If you wish to obtain further details regarding the contractual arrangements we enter into to protect your personal data when it is transferred outside the EU, you may do so by emailing us via [privacy-eu@squareup.com](mailto:privacy-eu@squareup.com). You can also access the standard contractual clauses approved by the European Commission at: [https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc\_en](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en).
 ### AUSTRALIA
 Square complies with the Privacy Act 1988 (Cth)(**Privacy Act**) and with the 13 Australian Privacy Principles (**APPs**) in the Privacy Act, as well as with this Privacy Policy.
+We may share your information with Cuscal Limited, an Authorised Deposit-Taking Institution (ADI) supervised by the Australian Prudential Regulation Authority (APRA). Cuscal supports our provision of the Services through its banking and payments services and may not be able to provide its services without information about you. Cuscal's privacy policy is available via www.cuscal.com.au/privacy-policy and sets out details about Cuscal's collection, use and disclosure of information about you, as well as information about your rights to access your personal information.
+We may share your information with Cuscal Limited, an Authorised Deposit-Taking Institution (ADI) supervised by the Australian Prudential Regulation Authority (APRA). Cuscal supports our provision of the Services through its banking and payments services and may not be able to provide its services without information about you. Cuscal's privacy policy is available via [www.cuscal.com.au/privacy-policy](http://www.cuscal.com.au/privacy-policy) and sets out details about Cuscal's collection, use and disclosure of information about you, as well as information about your rights to access your personal information.
 ### JAPAN
 We may share your information with a third party outside of Japan, including, but not limited to, the United States, Canada, the EU, and in other countries. We may use some cloud service providers located in the United States and Japan. We are unable to specify all possible jurisdictions Personal Data of users of Square services in Japan would be transferred or stored, as service providers use multiple servers located in multiple jurisdictions and do not disclose all of these locations for security reasons.
 You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties. Please contact our privacy team at the address listed below under "Contact." We may request to verify your identity before processing your request.