Privacy Notice for Square Sellers and Website Visitors

20220401_rev01 · COMPARED WITH 20220101_rev01 · ARCHIVE SNAPSHOT, DATE APPROXIMATE

Full text changes — 20220101_rev01 to 20220401_rev01

11**General**
22
3## Privacy Notice for Users Who Apply or Sign Up for a Square Account or Other Services
3## Privacy Notice for Square Sellers and Website Visitors
44
5**For users who DO NOT apply or sign up for a Square Account, [click here](https://squareup.com/legal/privacy-no-account).**
5Effective Date: April 1, 2022
66
7**For users who sign up for a Weebly eCommerce by Square Account only, [click here](https://weebly.com/privacy).**
7Posted Date: April 1, 2022
88
9**For our Sellers' Customers who sign up for digital receipts and marketing messages, [click here](https://squareup.com/us/en/legal/general/buyer-features).**
9This Privacy Notice describes how your Square entity as indicated below ("Square," "we" and "us") collects, uses, discloses, transfers, stores, retains or otherwise processes your information when you (whether you are a person acting as a sole proprietor or on behalf of another business entity) visit our website [(www.squareup.com)](https://squareup.com/us/en/legal/general/www.squareup.com) or apply or sign up for a Square account (collectively, "Services").
1010
11**For Cash App account holders, [click here](https://squareup.com/legal/cash-privacy).**
11- If your Country of Residence is the United States, your Square entity is Block, Inc., 1455 Market Street, Suite 600, San Francisco, CA 94103, United States.
1212
13**Last Updated: December 10, 2021**
13- If your Country of Residence is Canada, your Square entity is Square Canada, Inc. or Square Technologies, Inc.
1414
15We've included annotations in the gray boxes below to emphasize certain portions of our notice and help guide you as you read them. The annotations aren't summaries, so please take the time to read everything!
15- If your Country of Residence is Japan, your Square entity is Square KK.
1616
17If you are a Square Seller, or apply for a loan through Square Capital, this privacy notice applies to you. It explains [what data we collect about you](https://squareup.com/us/en/legal/general/privacy), [what we do with it](https://squareup.com/us/en/legal/general/privacy), [when and why we share it with others](https://squareup.com/us/en/legal/general/privacy), how long we [keep it](https://squareup.com/us/en/legal/general/privacy), how we [secure](https://squareup.com/us/en/legal/general/privacy) it, [what cookies are and what they (and similar technologies) do](https://squareup.com/us/en/legal/general/privacy), what data is collected about you by [third party service providers](https://squareup.com/us/en/legal/general/privacy), and what [choices](https://squareup.com/us/en/legal/general/privacy) you have to control your data.
17- If your Country of Residence is Australia, your Square entity is Square AU PTY, Ltd.
1818
19By using our services you consent to these data practices. If you use our services on behalf of your company, that company consents too.
19- If your Country of Residence is the United Kingdom or within the European Union, your Square entity is Squareup International Ltd.
2020
21This Privacy Notice describes how Block, Inc. and our affiliates (collectively, "Square," "we," and "us") collect, use, disclose, transfer, store, retain or otherwise process your information when you (whether you are a person acting as a sole proprietor or on behalf of another business entity) apply or sign up for a Square Seller account and other services (including, but not limited to, Square Capital) through Square's website or applications (collectively, "Services").
21The full contact details for each of these entities are available at the end of this Privacy Notice.
2222
23This Privacy Notice applies to information collected in connection with your access to and use of our Services. Please read this Privacy Notice carefully. By continuing to interact with our Services, you are consenting to the practices described in this Privacy Notice.
24
2523Our Privacy Notice explains:
2624
2725- [INFORMATION WE COLLECT ABOUT YOU]()
28- [INFORMATION WE MAY COLLECT ABOUT YOUR CUSTOMERS]()
29- [SOURCES OF INFORMATION WE COLLECT ABOUT YOU]()
30- [HOW WE USE YOUR INFORMATION]()
26- [INFORMATION WE COLLECT ABOUT YOUR CUSTOMERS]()
3127- [WHEN AND WITH WHOM WE SHARE YOUR INFORMATION]()
32 - [Cookies and Other Similar Automated Technologies]()
33 - [Third-Party Analytics Services]()
34 - [Online Tracking and Interest-Based Advertising]()
35- [HOW LONG WE KEEP YOUR INFORMATION]()
28- [SECURITY]()
29- [COOKIES & OTHER SIMILAR TECHNOLOGIES]()
30- [HOW LONG WE RETAIN YOUR INFORMATION]()
3631- [YOUR CHOICES]()
37 - [Online Behavioral or Interest-Based Advertising]()
38 - [Rights of California Residents]()
3932- [CHILDREN'S PERSONAL INFORMATION]()
40- [HOW WE SECURE INFORMATION]()
41- [STORAGE AND PROCESSING]()
33- [ADDITIONAL COUNTRY DISCLOSURES]()
34 \- [EU/UK]()
35 \- [AUSTRALIA]()
36 \- [JAPAN]()
37 \- [UNITED STATES]()
4238- [CHANGES TO THIS PRIVACY NOTICE]()
4339- [HOW TO CONTACT US]()
4440
45### INFORMATION WE COLLECT ABOUT YOU
41## INFORMATION WE COLLECT ABOUT YOU
4642
47We use your data to make Square's products and services work better for you and for others. This describes what data we get about you (which can vary depending on where you live).
43We collect information about you in three ways: (i) when you provide it to us directly; (ii) when we gather information while you are using the Services; and (iii) when we collect information from other sources. We explain below what types of data are involved in each case, how and why we process (use) it and the lawful basis that applies to our use of the relevant information.
4844
49##### Information You Provide
45##### Information You Provide ("Square Account Data")
5046
51We use data you put into our systems when you open and use an account or other systems, like financial or tax information, information that identifies who you are, transaction information, and any other data you give us.
47Below is a description of the types of information that we may receive directly from you which we refer to as "**Square Account Data**":
5248
53We collect information you provide when you:
49| Types of Information
50("Square Account Data") | Examples |
51| --- | --- |
52| Financial Information | Bank account information and payment card numbers |
53| Tax Information | Withholding allowances and tax filing status |
54| Identity Information | Name, email address, postal address, signature, and phone number;
55Passport number, driver's license number, Social Security number, Taxpayer Identification number, or other government-issued identification number |
56| Any other data you give us | Information that you voluntarily provide to us, including your survey responses; participation in contests, promotions, or other prospective seller marketing forms or devices; suggestions for improvements; referrals; or any other actions you perform on the Services. |
5457
55- Make a request to receive information about Square or our products;
56- Apply or sign up for a Square account or other Services;
57- Go through our identity or account verification process, authenticate into your account, communicate with us, answer our surveys, upload content, or otherwise interact with the Services.
58Here is an explanation of what we do with the Square Account Data described above, i.e. how we use it and for what purposes, along with an explanation of the lawful basis that supports this use.
5859
59We call this information **Seller Account Data**.
60| How we use Square Account Data | Why we process Square Account Data | Legal Justification |
61| --- | --- | --- |
62| When you make a request to receive information about Square or our products we collect Identity Information that you provide to us. | To respond to your request, including determining whether the Services are available in your country. | Pre-contract performance |
63| We use your Identification Information and your Financial Information to go through our identity or account verification process and to enable you to authenticate into your account once it is created.
64We share your Identification Information with identity verification vendors to verify information that we collect. Our vendors cross-check the identity and financial data you give us. Your information is also screened against relevant sanctions watchlists.
6065
61Specifically, we collect (and/or have collected during at least the 12-month period preceding the effective date of this Privacy Notice) the following categories of information:
66 | To determine whether the Services are available in your country and to create your account with us and to meet our AML, "know your customer", background checking (see further below) and other compliance requirements. | Legal obligation. For example, "Know your Customer" and AML compliance requirements are governed by, among other laws, the Bank Secrecy Act (1970) (USA), the USA Patriot Act (2001) (USA), EU Directive 2015/849 (AMLD IV) on anti-money laundering and terrorist financing, EU Directive 2018/843 (AMLD V) on anti-money laundering and terrorist financing and EU Member State implementing legislation such as the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 (as amended) (Ireland). |
67| We use your Identification Information to deliver the information and support you request, including to deliver technical notices, security alerts, and support and administrative messages to you. We also use it to resolve disputes, collect payments or fees, and provide assistance for problems with our Services or your Square account. | To communicate with you to fulfill our obligations under the \[Terms of Service\](https://squareup.com/gb/en/legal/general/ua). | Contractual performance |
68| When you apply or sign up for a Square account or other Services, we collect all of the Square Account Data necessary to create your account and enable you to start fulfilling transactions. | To create and support your account with us, including displaying your transaction history including monthly account statements. | Contractual performance |
69| We use your Identification Information to send you surveys and get your feedback about our Services. | To understand if the Services are helpful to you and to evaluate the effectiveness of any updates we provide. | Legitimate interest |
70| We use your Identification Information to promote our products and Services to you. | To promote our products and services. | Legitimate interest or consent (where legally required for direct marketing contact). |
71| When you provide feedback to us or answer our surveys. | To improve our services and to develop new products and services. | Legitimate interest |
72| We use your Identification Information to personalise your use of our Services, for example, when you sign up for a Square account, we can associate certain information with your new account, such as information about other Square accounts you have had or currently have, and prior transactions you have made using our Services. | To improve your customer experience. | Legitimate interest and/or contractual performance. |
6273
63- **Financial information**, such as bank account information and payment card numbers;
64- **Identification Information**, such as:
65 - Name, email address, postal address, signature, and phone number;
66 - Passport number, driver's license number, Social Security number, Taxpayer Identification number, or other government-issued identification number;
67- **Tax information**, such as withholding allowances and tax filing status.
68- **Transaction Information**, such as information about when and where payment transactions occur, the names of the transacting parties, a description of the transactions, the payment or transfer amounts, billing and shipping information, and the devices and payment methods used to complete the transactions.
69- **Other Information You Provide**, such as information that you voluntarily provide to us, including your survey responses; participation in contests, promotions, or other prospective seller marketing forms or devices; suggestions for improvements; referrals; or any other actions you perform on the Services.
70
7174##### Information We Collect From Your Use of the Services
7275
73We also get data from the devices you use when you interact with our systems, like your location or information about the device you're using. [We need this data to do things like](https://squareup.com/us/en/legal/general/privacy) help protect your account from hackers, combat fraud, check if payments are being made or received legally and by you, and making our products and services better for you and others.
76We also get data from the devices you use when you interact with our systems, like your location or information about the device you're using. We refer to this as Usage Data.
7477
75- **Commercial information**, such as information about the products and services you sell (e.g., inventory, pricing and other data) and information about your payment transactions (e.g., when and where the transactions occur, a description of the transactions, the payment or transfer amounts, billing and shipping information, and payment methods used to complete the transactions);
76- **Electronic information**, such as web browser and device characteristics;
77- **Geolocation data**, which includes the location of your device. For more information and to learn how to disable collection of location information from your mobile device, please [see below]();
78- **Internet or other electronic network activity information**, which includes information about how you use and interact with our Services, including your access time, "log-in" and "log-out" information, browser type and language, the domain name of your internet service provider, other attributes about your browser, any specific page you visit on our platform, content you view, features you use, the date and time of your use of the Services, your search terms, and the website you visited before you visited or used the Services;
79- **Online identifiers** (e.g., information you use to log in to your account), Internet Protocol ("IP") address, and unique personal identifiers (including device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number; unique alias, and other identifiers);
80- **Professional or employment-related information**, such as information you provide about your business (e.g., appointments, staffing availability, and contact data) and your employees (e.g., job titles, payroll information, and hours worked and other timecard data); and
81- **Inferences** drawn from any of the information above to create a profile about you that may reflect, for example, your preferences, characteristics, and behavior, including for account security purposes or to enhance our Services to you.
78| Types of Informaton
79("Usage Data") | Examples |
80| --- | --- |
81| Commercial Information |
82- Information about the products and services you sell e.g., inventory, pricing and other data.
83- Information about your payment transactions e.g., when and where the transactions occur, a description of the transactions, the payment or transfer amounts, billing and shipping information, and payment methods used to complete the transactions.
8284
83##### Information We Collect From Other Sources
85 |
86| Geolocation data, which includes the location of your device | For more information and to learn how to disable collection of location information from your mobile device, please see below. |
87| Internet or other electronic network activity information |
8488
85We also need to check that you are using our services legally, that you are eligible for the services you want to use, and we protect your data and our services from fraudsters who may put you and your money at risk. To do this, we may collect data about you from companies that help us verify your identity, do a credit check, prevent fraud or assess risk.
89- Web browser and device characteristics.
90- Information about how you use and interact with our Services.
91- This includes your access time, "log-in" and "log-out" information, browser type and language, the domain name of your internet service provider, other attributes about your browser, any specific page you visit on our platform, content you view, features you use, the date and time of your use of the Services, your search terms, and the website you visited before you visited or used the Services.
8692
87- **Background check information**, including credit report information, identity verification information, and information about any person or corporation with whom you have had, currently have, or may have a financial relationship;
88- **Credit, Compliance and Fraud**. Information about you from third parties for any credit investigation, credit eligibility, identity or account verification process, fraud detection process, or collection procedure, or as may otherwise be required by applicable law. This includes, without limitation, the receipt and exchange of account or credit-related information with any credit reporting agency or credit bureau, where lawful, and any person or corporation with whom you have had, currently have, or may have a financial relationship, including without limitation past, present, and future places of employment, financial institutions, and personal reporting agencies.
93 |
94| Online identifiers |
8995
90### INFORMATION WE MAY COLLECT ABOUT YOUR CUSTOMERS
96- Information you use to log in to your account.
97- Internet Protocol ("IP") address, and unique personal identifiers (including device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number; unique alias, and other identifiers).
9198
92We also obtain information about your customers on your behalf when they transact with you. We call this information **Your Customers' Data**. We collect Your Customers' Data when they transact with you through your use of Square's products, for instance when they make a payment at your establishment, or schedule an appointment, or receive an invoice from you. The particular Customer Data we collect will vary depending on how you use our products and services and which products and services you use. Your Customers' Data may include:
99 |
100| Professional or employment-related information |
93101
94- **Device Information**. Information about Your Customer's device, including hardware model, operating system and version, device name, unique device identifier, mobile network information, and information about the device's interaction with our Services.
95- **Financial Information**. Bank account, payment card numbers, and payment history.
96- **Identification Information**. Your Customers' name; email address; mailing address; phone number; government-issued identification; or other historical, contact, and demographic information, and signature.
97- **Location Information**. The location of Your Customer's device if they pay with Apple or Android Pay.
98- **Transaction Information**. When Your Customers use Square to make or record payments to you, we collect information about when and where the transactions occur, the names of the transacting parties, a description of the transactions which may include item-level data, the payment or transfer amounts, billing and shipping information, and the devices and payment methods used to complete the transactions.
99- **Use Information**. Information about how Your Customers transact with you using our Services, including access time, "log-in" and "log-out" information, browser type and language, country and language setting on your device, IP address, the domain name of Your Customer's Internet service provider, other attributes about Your Customer's browser, mobile device and operating system, features Your Customer uses, and the date and time of use of the Services.
100- **Other Information You or Your Customers Provide**. Information that Your Customers voluntarily provide you, or that you input into Square's systems about your Customers. For example, survey responses; participation in contests, promotions, or other prospective seller marketing forms or devices; suggestions for improvements; notes you take about your customers, or any other actions performed when they transact with you using Square.
102- Information you provide about your business (e.g., appointments, staffing availability, and contact data) and your employees (e.g., job titles, payroll information, and hours worked and other timecard data).
101103
102##### Information Your Customers May Provide Square
104 |
105| Profile information - Inferences drawn from any of the information above to create a profile about you |
103106
104- **Identification information**. Your customers' name, email address, or telephone number, which we link to a tokenized version of their payment card number.
107- These may reflect your preferences, characteristics, and behavior. For example, if you use a product or service after receiving a marketing communication about it.
105108
106Privacy laws that apply in certain places, like California, treat "businesses" and "service providers" differently. Under those laws, a business is the company that decides why and how to process personal information. A service provider processes personal information on behalf of a business in order to provide services. When Square processes Your Customers' Data, we generally act as your service provider. In select cases, however, we may act as a business when we process Your Customers' Data. For example, we act as a business when we use Your Customers' Data to send Your Customers digital receipts directly from Square, or when we allow you to use Customer Directory or Square Marketing to contact your buyer using a masked email address (for example, j**\*\***\*\*\*@gmail.com) that gets routed to them via Square. Your Customers can visit the [Privacy Notice for Square Buyer Features](https://squareup.com/us/en/legal/general/buyer-features) for more information on how Square processes their data when it is acting as a business, and the [Privacy Notice for non-account holders](https://squareup.com/legal/privacy-no-account) for more information on how Square processes their data as your service provider.
109 |
107110
108### SOURCES OF INFORMATION WE COLLECT ABOUT YOU
111We need this Usage Data to do things like provide services to you that you have requested, fulfill our legal obligations (such as checking if payments are being made or received by you and that they are legally compliant), and help protect your account from hackers and prevent fraud. We also need this Usage Data to make our products and services better for you and others, for example, if more transactions are occurring on a specific hardware device we will build out more product and service availability on that device.
109112
110We collect your information from you and the other sources listed below.
113| How we use Usage Data | Why we process Usage Data | Legal Justification |
114| --- | --- | --- |
115| We collect your Commercial Information from the devices you use when you interact with our systems and from the information that is associated with the transaction as captured on our databases. | This enables us to provide services to you that you have requested including inventory, eCommerce and payments processing.
116This also enables us to protect the integrity of our Services and systems, and your, our, our customers', or your customers' rights or property.
117This also enables us to do internal research, measure, track, and analyze trends and usage.
111118
112We collect (and/or have collected during at least the 12-month period preceding the effective date of this Privacy Notice) information about you from the following categories of sources:
119 | Contract performance
113120
114- You directly, when you submit information to us or allow us to access information about you;
115- Your devices and applications when you interact with our website or use our Services;
116- Our group companies and affiliates;
117- Other sources, including:
118 - Social media networks;
119 - Online advertising companies;
120 - Service providers who help us with third-party identity verification, credit confirmation and fraud detection;
121 - Credit bureaus and financial institutions;
122 - Mailing list providers; and
123 - Publicly available sources (such as public records of criminal convictions and arrest records).
121Legitimate Interests
124122
125### HOW WE USE YOUR INFORMATION
123Legitimate Interests
126124
127We use your data to do things like make sure the products you are using work, help you log in to your account, verify who you are, secure your data, fight fraud, follow the law, enforce our agreements, figure out what new products we can build, and market products to you that we think could make it easier for you to run your business.
125 |
126| We use your Commercial Information when you interact with our systems and when it is associated with a transaction. We combine this information with Identification Information as well as with risk signals. | This enables us to debug, fix service errors, investigate, detect, prevent, report or recover from fraud, misrepresentations, security breaches or incidents, other potentially prohibited, malicious, or illegal activities; or to otherwise help protect your account, including to dispute chargebacks on your behalf. | Contract performance (support and maintenance)
128127
129We may collect, use and share (or have collected, used or shared during at least the 12-month period preceding the effective date of this Privacy Notice), information about you for the following reasons:
128Legal obligation (fraud or incident reporting)
130129
131##### Performing, Improving and Developing our Services
130Legitimate interest (protect your account)
132131
133- Delivering the information and support you request, including technical notices, security alerts, and support and administrative messages such as to resolve disputes, collect fees, and provide assistance for problems with our Services or your Square account;
134- Determining whether the Services are available in your country;
135- Developing new products and services;
136- Displaying your historical transaction or appointment information;
137- Improving, personalizing, and facilitating your use of our Services;
138- Processing or recording payment transactions or money transfers;
139- Providing, maintaining and improving our Services, including our website;
140- Doing internal research, measuring, tracking, and analyzing trends and usage; and
141- Otherwise providing you with the Square products and features you choose to use.
132 |
133| We collect your Internet or other electronic network activity information while you are using the Services using our website, web apps, and hardware and we combine this with your Profile Information. | This enables us to provide Services to you in compliance with regulatory obligations.
134This enables us to provide Services to identify any unusual activity on your account so as to detect and prevent fraud, and to debug and fix errors that impair how our Services function. | Legal obligation (fraud or incident reporting)
142135
143##### Communicating with You About our Services
136Contract performance
144137
145- Sending you surveys and getting your feedback about our Services;
146- Providing information about and promoting our Services to you; and
147- Sending you information we think you may find useful or which you have requested from us about our products and services.
138Legitimate interest
148139
149##### Protecting our Services and Maintaining a Trusted Environment
140 |
141| We store your Professional or employment-related information in our databases. | This enables us to deliver aspects of the Services (e.g., Team Management, Crew App and Payroll) that require this level of information to function. | Contract performance |
142| We generate your Profile Information using our databases. We use your Profile Information to verify your identity, and to enhance our Services. | This enables us to engage in profiling and automated processing to verify your identity both directly and through the use of third party identification verification services (so we can confirm you appear to be who you say you are), improve our products and Services and develop new products and Services. | Our legitimate interests in verifying your identity and reducing the risk of fraud, as well as, where permissible, offering new and improved services to our customers that are likely to be relevant to their business in light of their Seller activity and the systems and processes they use. |
143| We use your Geolocation data to determine whether we can provide you with Services and to customise our Services to your location. | This enables us to determine whether we can provide Services to you, and in what language, enables us to comply with applicable payment processor requirements, and other regulatory requirements, and also to combat fraud. | Contract performance (for Services in territories where we are authorised to conduct our business)
144Legal obligation (to comply with territorial restrictions) |
150145
151- Conducting investigations, complying with and enforcing applicable laws, regulations, legal requirements and industry standards, and responding to lawful requests for information from the government or to valid legal process;
152- Contacting you to resolve disputes, collect fees, and help you with our Services;
153- Debugging to identify and fix errors that impair how our Services function;
154- Making sure you follow our [Terms of Service](https://squareup.com/legal/ua) or other applicable agreements or policies;
155- Investigating, detecting, preventing, recovering from or reporting fraud, misrepresentations, security breaches or incidents, other potentially prohibited, malicious, or illegal activities, or to otherwise help protect your account, including to dispute chargebacks on your behalf;
156- Protecting your, our, our customers', or your customers' rights or property, or the security or integrity of our Services;
157- Verifying or maintaining the quality and safety of our Services; and
158- Verifying your identity (e.g., through government-issued identification numbers).
146##### Information We Collect from Other Sources
159147
160##### Advertising and Marketing
148We also need to check that you are eligible for the services you want to use, are using our services legally, and to protect your data and our services from potential fraudulent activity which may put you and your money at risk. To do this, we may collect data about you from companies that help us verify your identity, do a credit check, prevent fraud or assess risk.
161149
162- Marketing our Services to you; and
163- Communicating with you about opportunities, products, services, contests, promotions, discounts, incentives, surveys, and rewards offered by us and select partners.
150| Types of Information
151("External Data)" | Examples |
152| --- | --- |
153| Background Check Information |
154- Credit report information.
155- Identity verification information.
156- Information about any person or corporation with whom you have had, currently have, or may have a financial relationship.
164157
165If we send you marketing emails, each email will have instructions on how you can "opt out" of getting future marketing from us.
158 |
159| Credit, Compliance and Fraud Information |
166160
167To learn about what choices you have about interest-based advertising and cross-device tracking, please [see below]().
161- Account or credit-related information with any credit reporting agency or credit bureau, where lawful, and any person or corporation with whom you have had, currently have, or may have a financial relationship, including without limitation past, present, and future places of employment, financial institutions, and personal reporting agencies.
168162
169##### Other Uses
163 |
170164
171- For any other reason we may tell you about from time to time.
165| How we use External Data | Why we process External Data | Legal Justification |
166| --- | --- | --- |
167| We collect Background Check Information about you from background check vendors and we process this information using our anti-fraud and risk management systems. | This helps us verify your identity, do a credit check, prevent fraud and assess risk. | Legal obligation Legitimate interest |
168| We receive and exchange Credit, Compliance and Fraud Information using our credit management systems and processes. | As required under applicable laws, as part of any credit investigation, credit eligibility, identity or account verification process, fraud or risk detection process, or collection procedure. | Legal obligation Legitimate interest |
172169
173### WHEN AND WITH WHOM WE SHARE YOUR INFORMATION
170## INFORMATION WE COLLECT ABOUT YOUR CUSTOMERS
174171
175We share your information with others in the circumstances described in this section. For example, with other people with whom you interact when you use our services; within our family of companies (like [Cash App](https://cash.app/) and [Weebly](https://www.weebly.com/)), who may offer services that we think could be useful to you; with service providers who help us run our services; with ad platforms that help us market and advertise our services to you; or if we need to share your information to comply with the law.
172We also obtain information about your customers on your behalf as your service provider when they transact with you or otherwise when you request that we do so. We call this information Your Customers' Data. We collect Your Customers' Data when they interact with you through your use of Square's products, for instance when they make a payment at your establishment, or schedule an appointment, or receive an invoice from you. The particular Customer Data we collect will vary depending on your location, which products and services you use and how you use them. Your Customers' Data may include:
176173
177We may share the personal information described in the ["Information We Collect About You"]() section with the following categories of service providers and third parties:
174| Types of Information
175("Your Customers' Data") | Examples |
176| --- | --- |
177| Customer Device Information |
178- Information about your customer's device, including hardware model, operating system and version, device name, unique device identifier, mobile network information, and information about the device's interaction with our Services.
178179
179##### With other Users of our Services with Whom You Interact
180 |
181| Customer Financial Information |
180182
181- With other users of our Services with whom you interact through your own use of our Services. For example, we may share information with your customers when you make or accept a payment, appointment, or money transfer using our Services.
183- Bank account and payment card numbers.
182184
183##### With our Affiliates and Group Companies
185 |
186| Customer Identification Information |
184187
185- With our group companies and corporate affiliates, for the reasons outlined above. For example, we may share your information internally to understand how you engage with Square company products to help make our Services better for you and for everyone, and to help us build Services tailored to your preferences.
188- Your customers' name; email address; mailing address; phone number; government-issued identification; or other historical, contact, and demographic information, and signature.
186189
187##### With our Service Providers
190 |
191| Customer Location Information |
188192
189- With service providers who help us provide, maintain, and improve our Services (e.g., vendors who help us with fraud prevention, identity verification, and fee collection services), as well as financial institutions, payment networks, payment card associations, credit bureaus, partners and other entities that help us provide the Services;
190- With service providers that help us run our advertising campaigns, contests, special offers, or other events or activities.
193- The location of your customer's device if they pay with Apple or Android Pay, or give their consent.
191194
192##### Business Transfers and Corporate Changes
195 |
196| Customer Transaction Information |
193197
194- To a subsequent owner, co-owner, or operator of one or more of the Services; or
195- If we do or try to do a corporate merger, consolidation, or restructuring (including during due diligence and negotiation of these); the sale of substantially all of our stock and/or assets; the financing, acquisition, divestiture, or dissolution of all or a portion of our business; or other corporate change.
198- When your customers use Square to make or record payments to you, we collect information about when and where the transactions occur, the names of the transacting parties, a description of the transactions which may include item-level data, the payment or transfer amounts, billing and shipping information, and the devices and payment methods used to complete the transactions.
196199
197##### Safety and Compliance with Law
200 |
201| Customer Use Information |
198202
199- If we believe that disclosure is reasonably necessary (i) to comply with any applicable law, regulation, legal process or governmental request (e.g., from creditors, tax authorities, law enforcement agencies, in response to a garnishment, levy, or lien notice, etc.); (ii) to establish, exercise or defend our legal rights; (iii) to enforce or comply with our [General Terms](https://squareup.com/legal/ua) or other applicable agreements or policies; (iv) to protect our or our customers' rights or property, or the security or integrity of our Services; (v) for an investigation of suspected or actual illegal activity; or (vi) to protect us, users of our Services or the public from harm, fraud, or potentially prohibited or illegal activities.
203- Information about how your customers interact with you using our Services, including access time, "log-in" and "log-out" information, browser type, history and language, country and language setting on your device, IP address, the domain name of your customer's Internet service provider, other attributes about your customer's browser, mobile device and operating system, features your customer uses, and the date and time of use of the Services.
200204
201##### With Your Consent
205 |
206| Other Information You or Your Customers Provide |
202207
203- With your consent. For example:
204 - At your direction or as described at the time you agree to share; or
205 - When you authorize a third party application or website to access your information.
208- Information that your customers voluntarily provide you, or that you input into Square's systems about your customers
209- For example, survey responses; participation in contests, promotions, or other prospective seller marketing forms or devices; suggestions for improvements; notes you take about your customers, or any other actions performed when they interact with you using Square
206210
207##### With Others
211 |
208212
209- With other companies who deliver services on our behalf, including via the use of [cookies]() and similar automated technologies, [third party analytics](), and [online tracking and interest-based advertising]().
213We use Your Customers' Data as part of our contractual obligation to provide the Services you request to you.
210214
211##### Aggregated and Anonymized Information
215It is your responsibility to obtain any necessary permission for us to use Your Customers' Data in the manner envisaged in this Privacy Notice so that we can provide you with the Services requested by you.
212216
213- We also may share (within our group of companies or affiliates, or with service providers or other third parties) aggregated and anonymized information that does not specifically identify you or any individual user of our Services.
217## WHEN AND WITH WHOM WE SHARE YOUR INFORMATION
214218
215#### COOKIES AND OTHER SIMILAR TECHNOLOGIES
219We may share the personal information described in the ["Information We Collect About You"](https://squareup.com/us/en/legal/general/privacy) section with the following categories of service providers and third parties:
216220
217Digital cookies and similar technologies help us make our services better to use by doing things like recognizing when you've signed in, analyzing how you use our services so we can make them more useful to you, giving you a more personalized experience, and making our ads to you work better.
221| Category of service providers (third parties & affiliates) with whom we share your personal information in order for you to receive the Services | Description of the services in question |
222| --- | --- |
223| Service support partners | We work with the following types of third party service providers who help us provide, maintain and improve the Services:
224- Technology providers or potential partners to store information, provide software, or programs to help us provide the Services;
225- Marketing or event providers that help us run our advertising campaigns, contests, special offers, or other events or activities;
226- Identity verification providers to help us with fraud prevention and to assist us in meeting our AML, "know your customer", background checking and other compliance requirements;
227- Fee collection service providers to help us enforce our legal rights;
228- Financial partners, like financial institutions, payment networks, payment card associations, and credit bureaus that help us provide the Services.
218229
230 |
231| Third Party Analytics Services | We use third-party analytics service providers to help us with our online services, such as Google Analytics, Facebook, BugSnag and Crashlytics. The analytics providers that administer these services use technologies such as cookies, web beacons, and web server logs to help us analyze how you use our online services. We may disclose your \[site-use information\](https://squareup.com/us/en/legal/general/privacy) (including IP address) to these analytics providers, and other service providers who use the information to help us figure out how you and others use our online services.
232
233- To learn more about Google Analytics and how to opt out, please visit https://marketingplatform.google.com/about/ or https://support.google.com/analytics/answer/181881?hl=e
234
235- To learn more about how Facebook uses your data please visit https://www.facebook.com/help/325807937506242/ or log on to your Facebook account and access your settings. To understand more about Facebook advertising please see here https://www.facebook.com/about/ads.
236- To learn more about BugSnag, please visit https://docs.bugsnag.com/legal/privacy-policy/.
237- To learn more about Crashlytics, please visit https://fabric.io/terms.
238
239 |
240| Online Tracking and Interest-Based Advertising | Consistent with local law, we and the service providers we use to advertise to you may collect information about your activities on our website. We use this information to advertise to you and to tailor our products and services to your interests. You may see certain ads on other websites because we use third-party services to advertise our services to you. We use these services to target our ads to you and others based on your demographics, interests, and context. These third party ad services track your online activities over time and across multiple websites by collecting your information through automated technologies, including third-party cookies, web server logs, and web beacons. The ad services use this information to show you Square ads that may be tailored to your individual interests. The information our ad services may collect on our behalf includes data about your visits to websites that serve Square ads, such as the pages or ads you view and the actions you take on those websites. This data collection takes place both on our online services, and on third-party websites that serve our ads to you. This process also helps us figure out if our ads to you are effective.
241
242To learn about how to opt out of interest-based advertising in the U.S., see "Cookies And Other Similar Technologies" and the "United States" sections below.
243
244To adjust your preferences on interest based advertising in the EU, click on the link on our website to the Cookies Policy which will allow you to adjust your settings preferences.
245
246Certain web browsers allow you to instruct your browser to respond to Do Not Track ("DNT") signals to website you visit, informing those sites that you do not want your online activities to be tracked. At this time, our websites are not designed to respond to DNT signals or similar mechanisms from browsers.
247
248 |
249| Partners | We may share minimal personal information (such as your business name) with potential partners who may be able to provide a complementary or related service for your business. |
250| Our Affiliates and Group Companies | With other business units (Cash App, Afterpay/Clearpay, and TIDAL) and between wholly-owned subsidiaries of Block, Inc. For example, we may share your information internally to understand how you engage with our company products to help make our Services better for you and for everyone, and to help us build Services tailored to your preferences. We will provide you with notice of the proposed sharing at the time so that you can make an informed decision. |
251
252| Other third parties who will receive your personal information | Why we share data with these parties |
253| --- | --- |
254| Other users of our Services with whom you interact through your own use of our Services. | To enable you to make or accept a payment, appointment, or money transfer using our Services. |
255| Law enforcement agencies | If we believe that disclosure is reasonably necessary (i) to comply with any applicable law, regulation, legal process or governmental request (e.g., from creditors, tax authorities, law enforcement agencies, in response to a garnishment, levy, or lien notice, etc.); (ii) to establish, exercise or defend our legal rights; (iii) to enforce or comply with our \[General Terms\](https://squareup.com/us/en/legal/general/ua) or other applicable agreements or policies; (iv) to protect our or our customers' rights or property, or the security or integrity of our Services; (v) for an investigation of suspected or actual illegal activity; or (vi) to protect us, users of our Services or the public from harm, fraud, or potentially prohibited or illegal activities. |
256| To a subsequent owner, co-owner, or operator of one or more of the Services | To enable them to continue to run the Services after the change of owner or operator. |
257| If we do or try to do a corporate merger, consolidation, or restructuring (including during due diligence and negotiation of these); the sale of substantially all of our stock and/or assets; the financing, acquisition, divestiture, or dissolution of all or a portion of our business; or other corporate change. | To enable the completion of the relevant merger, restructuring, financing, acquisition, divestiture, dissolution or other corporate change. |
258| Our Affiliates and Group Companies | See below. |
259
260## SECURITY
261
262We do a lot to keep your data safe. While we think we have strong defenses in place, no one can ever guarantee that hackers won't be able to break into our sites or steal your data while it is stored or flowing from you to us or vice versa.
263
264We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, and misuse, and unauthorized access, disclosure, alteration, and destruction. Nevertheless, the internet is not a 100% secure environment, and we cannot guarantee absolute security of the transmission or storage of your information. We hold information about you both at our own premises and with the assistance of third-party service providers. Your personal information will be accessible by our employees, contractors and service providers who require access for the purposes described in this Privacy Notice.
265
266For more information about our security practices, please visit https://squareup.com/us/en/security.
267
268## COOKIES AND OTHER SIMILAR TECHNOLOGIES
269
270If you are reading this Privacy Notice in a country where we have a separate Cookies Policy, you will see the Cookie Banner that applies to you each time you visit the site.
271
272The following additional information applies across all of our websites and apps.
273
274Digital cookies and similar technologies help us make our services better to use by doing things like recognizing when you've signed in, analyzing how you use our services so we can make them more useful to you, giving you a more personalized experience.
275
219276When you interact with our online services, or open emails we send you, we obtain certain information using automated technologies, such as cookies, web server logs, web beacons and other technologies. A "cookie" is a text file that websites send to a visitor's computer or other internet-connected device to uniquely identify the visitor's browser or to store information or settings in the browser. A "web beacon," also known as an internet tag, pixel tag, or clear GIF, is a tiny graphic image that may be used in our websites or emails.
220277
221278We use these automated technologies to collect your device information, internet activity information, and inferences as described above. These technologies help us to:
222279
223280- Remember your information so you do not have to re-enter it;
224281- Track and understand how you use and interact with our online services and emails;
225282- Tailor our online services to your preferences;
226283- Measure how useful and effective our services and communications are to you; and
227284- Otherwise manage and enhance our products and services.
228285
229We set some of these automated technologies ourselves, but others are set by third parties who deliver services on our behalf. For example, we may use other companies' web analytics services (described in the ["Third-Party Analytics Services"]() section), which use automated technologies to help us evaluate how customers use our websites.
286We set some of these automated technologies ourselves, but others are set by third parties who deliver services on our behalf. For example, we may use other companies' web analytics services (described in the ["Third-Party Analytics Services"](https://squareup.com/us/en/legal/general/privacy) section above), which use automated technologies to help us evaluate how customers use our websites.
230287
231Your browser can alert you when cookies are placed on your device, and how you can stop or disable them via your browser settings. Please note, however, that without cookies all of the features of our online services may not work properly. If you use a mobile device, you can manage how your device and browser share certain device data by changing the privacy and security settings on your mobile device. You can learn more about cookies and how to manage your preferences by visiting [http://www.allaboutcookies.org](http://www.allaboutcookies.org/).
288Your browser can alert you when cookies are placed on your device, and how you can stop or disable them via your browser settings. Please note, however, that without cookies all of the features of our online services may not work properly. If you use a mobile device, you can manage how your device and browser share certain device data by changing the privacy and security settings on your mobile device. Within mobile applications, you may also go to your device settings and select "Limit Ad Tracking" (for iOS devices), or "Opt out of Interest-Based Ads" (for Android devices), which will allow you to limit our use of information collected from or about your mobile device (such as precise location data) for the purposes of serving online behavioral advertising to you.
232289
233#### THIRD-PARTY ANALYTICS SERVICES
290Some third parties offer a centralized means for recording your choices in relation to the use of your data for online behavioral advertising purposes. If you opt out of online behavioral advertising using this method, this opt-out will only apply to the specific browser or device from which you opt out.
234291
235We use other companies as service providers to help us analyze our site, track metrics, and advertise to you. These service providers generally promised us under contract to keep data private but have their own privacy policies that you should be aware of.
292## HOW LONG WE RETAIN YOUR INFORMATION
236293
237We may use third-party analytics service providers to help us with our online services, such as Google Analytics, Facebook, BugSnag and Crashlytics. The analytics providers that administer these services use technologies such as cookies, web beacons, and web server logs to help us analyze how you use our online services. We may disclose your [site-use information]() (including IP address) to these analytics providers, and other service providers who use the information to help us figure out how you and others use our online services.
294We store your information for as long as is necessary for the purposes identified in this Privacy Notice, including to provide our Services, to comply with legal obligations, to enforce and prevent violations of our Terms, to protect against fraudulent activity, and to defend our legal rights, property and users.
238295
239- To learn more about Google Analytics and how to opt out, please visit [https://marketingplatform.google.com/about/](https://marketingplatform.google.com/about/) or [https://support.google.com/analytics/answer/181881?hl=en](https://support.google.com/analytics/answer/181881).
240- To learn more about how Facebook uses your data please visit [https://www.facebook.com/help/325807937506242/](https://www.facebook.com/help/325807937506242/) or log on to your Facebook account and access your settings. To understand more about Facebook advertising please see here https://www.facebook.com/about/ads.
241- To learn more about BugSnag, please visit [https://docs.bugsnag.com/legal/privacy-policy/](https://docs.bugsnag.com/legal/privacy-policy/).
242- To learn more about Crashlytics, please visit [https://fabric.io/terms](https://fabric.io/terms).
296The retention periods for your information are determined on a case-by-case basis that depends on the following factors:
243297
244#### ONLINE TRACKING AND INTEREST-BASED ADVERTISING
298- **The nature of the information and why it is collected and processed.** The length of time we will keep your information will generally be determined by how long we need that information to provide you with our Services, including any optional features you use and to provide customer support. For example:
299 \- As set out in this Privacy Notice, we require Square Account Data to deliver our Services. We need to keep it for the duration your Square account exists so that we can maintain your account.
300 \- Similarly, we will also keep your Usage Data for the lifetime of your account.
245301
246We and the service providers we use to advertise to you may collect information about your activities on Square. We use this information to advertise to you and to tailor our products and services to your interests. You may see certain ads on other websites because we use third-party services to advertise our services to you. We use these services to target our ads to you and others based on your demographics, interests, and context. These third party ad services track your online activities over time and across multiple websites by collecting your information through automated technologies, including third-party cookies, web server logs, and web beacons. The ad services use this information to show you Square ads that may be tailored to your individual interests. The information our ad services may collect on our behalf includes data about your visits to websites that serve Square ads, such as the pages or ads you view and the actions you take on those websites. This data collection takes place both on our online services, and on third-party websites that serve our ads to you. This process also helps us figure out if our ads to you are effective.
302- **Legal reasons.** In certain cases, we are obliged to keep your information for legal reasons, which may include after your account has been deactivated. We will keep your information where it necessary for us:
303 \- To respond to a legal request or to comply with applicable law. We must keep your information where we have a legal obligation to do so, for example, if we receive a valid legal request, such as a preservation order or search warrant, related to your account, we preserve your information after you delete your account.
304 \- To deal with and resolve requests, disputes or complaints.
305 \- For litigation or regulatory matters. For example, we preserve your information related to a legal claim or complaint, such as where we are subject to a regulatory investigation or we need to defend ourselves in legal proceedings about a claim related to your information or respond to a regulator in relation to a legal or regulatory complaint made by you or someone else.
306 \- Issues relating to the safety, security and integrity of our Services and to protect rights, property and users. For example, we keep information where it is necessary to investigate misuse of our Services, such as fraud.
247307
248To learn about how to opt out of interest-based advertising in the U.S., click [here]().
308## YOUR CHOICES
249309
250Certain web browsers allow you to instruct your browser to respond to Do Not Track ("DNT") signals to website you visit, informing those sites that you do not want your online activities to be tracked. At this time, our websites are not designed to respond to DNT signals or similar mechanisms from browsers.
310You can [see, change or fix information](https://squareup.com/us/en/legal/general/privacy) you gave us, ask us to [deactivate](https://squareup.com/us/en/legal/general/privacy) your account, control your [location information](https://squareup.com/us/en/legal/general/privacy), or [tell us to stop marketing to you by opting out](https://squareup.com/us/en/legal/general/privacy).
251311
252### HOW LONG WE KEEP YOUR INFORMATION
253
254We keep your information as long as you keep using our products and services. After that, we keep it for as long as we need it to do things like fight fraud, collect fees you owe, resolve disputes with (or involving) you, follow the law, enforce our agreements and defend our rights in court.
255
256We generally keep your information as long as reasonably necessary to provide you the Services or to comply with applicable law. However, even after you deactivate your account, we can retain copies of information about you and any transactions or Services in which you may have participated for a period of time that is consistent with applicable law, applicable statute of limitations or as we believe is reasonably necessary to comply with applicable law, regulation, legal process, or governmental request, to detect or prevent fraud, to collect fees owed, to resolve disputes, to address problems with our Services, to assist with investigations, to enforce our [General Terms](https://squareup.com/legal/ua) or other applicable agreements or policies, or to take any other actions consistent with applicable law.
257
258### YOUR CHOICES
259
260You can [see, change or fix](https://squareup.com/us/en/legal/general/privacy) information you gave us, ask us to [deactivate](https://squareup.com/us/en/legal/general/privacy) your account, control your [location information](https://squareup.com/us/en/legal/general/privacy), or [tell us to stop marketing to you by opting out](https://squareup.com/us/en/legal/general/privacy).
261
262If you live in California, you have additional rights, which we describe [below]().
263
264312##### Personal Information
265313
266You may access, change, or correct information that you have provided by logging into your Square account at any time or by making a request to us using the [contact details below](). We will need to verify your identity before granting access or otherwise changing or correcting your information.
314You may access, change, or correct information that you have provided by logging into your Square account at any time or by making a request to us using the \[contact details below(https://squareup.com/us/en/legal/general/privacy#contact). We will need to verify your identity before granting access or otherwise changing or correcting your information.
267315
268316##### Deactivating Your Account
269317
270If you wish to deactivate your account, you can do so by logging into your Square account or by emailing us using the contact details [provided below]().
318If you wish to deactivate your account, you can do so by logging into your Square account or by emailing us using the contact details [provided below](https://squareup.com/us/en/legal/general/privacy).
271319
272320##### Location Information
273321
274322In order to provide certain Services, we may request access to location information, including precise geolocation information collected from your device. If you do not consent to the collection of this information, certain Services will not function properly and you will not be able to use those Services. You can stop our collection of location information at any time by changing the preferences on your mobile device. If you do so, some of our mobile applications will no longer function. You also may stop our collection of location information via mobile application by following the standard uninstall process to remove all Square mobile applications from your device.
275323
276324##### Promotional Communications
277325
278You can opt out of receiving promotional messages from Square by following the instructions in those messages, by informing the caller that you would not like to receive future promotional calls, or by changing your notification settings by logging into your Square account. You may only opt out of text messages from Square by replying STOP. Opting out of receiving communications may impact your use of the Services. If you decide to opt out, we may still send you non-promotional communications, such as digital receipts and messages about your account or our ongoing business relations.
326You can opt out of receiving promotional messages from Square by following the instructions in those messages, by informing the caller that you would not like to receive future promotional calls, or by changing your notification settings by logging into your Square account. You may only opt out of text messages from Square by replying STOP. Opting out of receiving communications may impact your use of the Services. If you decide to opt out, we will still send you non-promotional communications which are required for the running of your account, such as digital receipts and messages about your account or our ongoing business relations.
279327
280#### ONLINE BEHAVIORAL OR INTEREST-BASED ADVERTISING
328## CHILDREN'S PERSONAL INFORMATION
281329
282##### Third-Party Online Behavioral or Interest-Based Advertising Services on Websites (including Mobile Websites)
330Our Services are general audience services not directed at children under the age of 18. If we learn that any information we collect has been provided by a child under the age of 18, we will promptly delete that information.
283331
284Some of the advertising platforms that we use to collect information from or about you in order to provide more relevant advertising to you on websites participate in the DAA Self-Regulatory Program for Online Behavioral Advertising. This program offers a centralized location where users can make choices about the use of their information for online behavioral advertising. To make choices about the use of your information for online behavioral advertising on websites, please visit the [Digital Advertising Alliance Webchoices tool](http://optout.aboutads.info/). If you opt out of online behavioral advertising using this method, this opt-out will only apply to the specific browser or device from which you opt out.
332## ADDITIONAL COUNTRY DISCLOSURES
285333
286Some of the advertisers, advertising technology companies, and service providers that perform advertising-related services for us may be members of the Network Advertising Initiative (NAI), a cooperative of online marketing companies that offers a centralized tool for opting out of interest-based advertising delivered to each of its member companies. If you would like to opt out of the NAI's members' use of information from or about you on websites, please visit the [NAI's opt-out of interest-based advertising page](http://optout.networkadvertising.org/). If you opt out of interest-based advertising using this method, this opt-out will only apply to the specific browser or device from which you opt out.
334### EU/UK
287335
288##### Third-Party Online Behavioral or Interest-Based Advertising Services Within Mobile Applications
336##### Personal Information
289337
290Some of the advertising platforms that we use to collect information from or about you in order to provide our advertising to you within mobile applications participate in the DAA Self-Regulatory Program for Online Behavioral Advertising. This program offers a mobile application called the "AppChoices," which provides a centralized location where you can make choices about the use of your information for online behavioral advertising within the mobile environment. The AppChoices application can be downloaded from your mobile device at [www.aboutads.info/appchoices](https://youradchoices.com/appchoices) or from your device's app store. If you opt out of online behavioral advertising using this method, this opt-out will only apply to the specific browser or device from which you opt out.
338If you reside in the EU or the UK, you have the right under certain circumstances:
291339
292On your mobile device, you may also go to your device settings and select "Limit Ad Tracking" (for iOS devices), or "Opt out of Interest-Based Ads" (for Android devices), which will allow you to limit our use of information collected from or about your mobile device (such as precise location data) for the purposes of serving online behavioral advertising to you.
340- to be provided with access to your personal data held by us;
341- to request the rectification or erasure of your personal data held by us;
342- to request that we cease processing your data;
343- to request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example);
344- to object to profiling activities based on our own legitimate interests;
345- to object to solely automated processing producing legal or similar effects;
346- to request that your data be transferred to a third party (data portability);
347- to withdraw your consent to our processing of your data (where such processing is based on consent); and
348- to lodge a complaint with the data protection authority in your jurisdiction.
293349
294#### RIGHTS OF CALIFORNIA RESIDENTS
350In order to exercise any of these rights (including the right to withdraw your consent), please email privacy-eu@squareup.com. We may need to verify your identity before granting access or otherwise changing or correcting your information.
295351
296**Even though you use our services while acting as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietor of a business, nonprofit, or government agency, if you live in** California, California law gives you the right to ask if we disclose your personal information to third parties for their direct marketing purposes (we do not disclose your personal information for others' direct marketing purposes). It also gives you the right to ask if we sell your personal information to third parties (we do not sell your personal information and have not done so in the past), and if we did (which we don't), you'd have the right to opt out of such sales.
352##### International Data Transfers
297353
298#### Children's Personal Information
354We operate in many countries, and we (or our service providers) may move your data and process it outside the country where you live.. We use third-party service providers to process and store your information in the United States, Japan, the EU, and other countries. When we transfer your personal data to our affiliates outside the EU, we make use of standard contractual clauses (which have been approved by the European Commission) to help ensure your information is afforded a high standard of protection, and that your privacy rights can be vindicated. For a list of the countries in which we operate, please see https://squareup.com/gb/about.
299355
300If you are a kid under 13, please don't use our services. If we collect your data and later learn you are a kid under 13, we will delete it.
356If you wish to obtain further details regarding the contractual arrangements we enter into to protect your personal data when it is transferred outside the EU, you may do so by emailing us via privacy-eu@squareup.com. You can also access the standard contractual clauses approved by the European Commission at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc\_en.
301357
302Our Services are general audience services not directed at children under the age of 13. If we learn that any information we collect has been provided by a child under the age of 13, we will promptly delete that information.
358### AUSTRALIA
303359
304### SECURITY
360Square complies with the Privacy Act 1988 (Cth)(**Privacy Act**) and with the 13 Australian Privacy Principles (**APPs**) in the Privacy Act, as well as with this Privacy Policy.
305361
306We do a lot to keep your data safe. While we think we have strong defenses in place, no one can ever guarantee that hackers won't be able to break into our sites or steal your data while it is stored or flowing from you to us or vice versa.
362We may share your information with Cuscal Limited, an Authorised Deposit-Taking Institution (ADI) supervised by the Australian Prudential Regulation Authority (APRA). Cuscal supports our provision of the Services through its banking and payments services and may not be able to provide its services without information about you. Cuscal's privacy policy is available via www.cuscal.com.au/privacy-policy and sets out details about Cuscal's collection, use and disclosure of information about you, as well as information about your rights to access your personal information.
307363
308We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, and misuse, and unauthorized access, disclosure, alteration, and destruction. Nevertheless, the internet is not a 100% secure environment, and we cannot guarantee absolute security of the transmission or storage of your information. We hold information about you both at our own premises and with the assistance of third-party service providers.
364### JAPAN
309365
310For more information about our security practices, please visit [https://squareup.com/us/en/security](https://squareup.com/us/en/security).
366We may share your information with a third party outside of Japan, including, but not limited to, the United States, Canada, the EU, and in other countries. We may use some cloud service providers located in the United States and Japan. We are unable to specify all possible jurisdictions Personal Data of users of Square services in Japan would be transferred or stored, as service providers use multiple servers located in multiple jurisdictions and do not disclose all of these locations for security reasons.
311367
312### STORAGE AND PROCESSING
368You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties. Please contact our privacy team at the address listed below under "Contact." We may request to verify your identity before processing your request.
313369
314We operate in many countries, and we (or our service providers) may move your data and process it outside the country where you live.
370### UNITED STATES
315371
316We may, and we may use third-party service providers to, process and store your information in the United States, Canada, Japan, the European Union, and other countries.
372###### **California**
317373
318### CHANGES TO THIS PRIVACY NOTICE
374Privacy laws that apply in certain places, like California, treat "businesses" and "service providers" differently. Under those laws, a business is the company that decides why and how to process personal information. A service provider processes personal information on behalf of a business in order to provide services. When Square processes Your Customers' Data, we generally act as your service provider. In select cases, however, we may act as a business when we process Your Customers' Data. For example, we act as a business when we use Your Customers' Data to send your customers digital receipts directly from Square, or when we allow you to use Customer Directory or Square Marketing to contact your buyer using a masked email address (for example, j\*\*\*\*\*@gmail.com) that gets routed to them via Square. Your customers can visit the [Privacy Notice for Square Buyer Features](https://squareup.com/us/en/legal/general/buyer-features) for more information on how Square processes their data when it is acting as a business.
319375
320We can change this privacy notice. When the changes impact your rights or how we use your data in important ways, we'll tell you first by email (if you've given us your email address).
376Even though you use our services while acting as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietor of a business, nonprofit, or government agency, if you live in California, California law gives you the right to ask if we disclose your personal information to third parties for their direct marketing purposes (we do not disclose your personal information for others' direct marketing purposes). It also gives you the right to ask if we sell your personal information to third parties (we do not sell your personal information and have not done so in the past), and if we did (which we don't), you'd have the right to opt out of such sales.
321377
322We may amend this Privacy Notice from time to time by posting a revised version and updating the "Effective Date" above. The revised version will be effective on the "Effective Date" listed. We will provide you with reasonable prior notice of material changes in how we use your information, including by email if you have provided one. If you disagree with these changes, you may cancel your account at any time. If you keep using our Services, you consent to any amendment of this Privacy Notice.
378#### What You Need to Know About the California Consumer Privacy Act and Interest-Based Advertising
323379
324### CONTACT
380As described in our [privacy notice](https://squareup.com/us/en/legal/general/privacy), Square and third parties that provide advertising or other functionality on our behalf, may use cookies, pixel tags, and other technology to help us advertise our products and services to you as informed by your interests. This approach is called interest-based advertising, which means we tailor our ads to you based on information that gives us a sense of what interests you, such as information collected from your activity on the web, including but not limited to, browsing or purchasing products on or through our websites or on third party websites, your activity on mobile sites and applications, or your responses to our marketing emails.
325381
326You can contact our privacy team with any questions or concerns at the address below.
382Square does not sell your data, has not in the past, and is committed not to do so in the future. While the California Consumer Privacy Act (CCPA) lacks clear guidance whether this type of interest-based advertising would be considered a "sale" of personal information under that law, we do not believe this information constitutes a "sale" under CCPA.
327383
328Please contact our privacy team with any questions or concerns regarding this Privacy Notice:
384However, we also want to provide you with ways for you to control the cookies and internet-based information you may share with us. You can always restrict the placement of cookies on your computer or remove them from your browser by going to your browser settings. More information on how to manage these settings on common browsers and devices are below.
329385
330Block, Inc. 1455 Market Street, Suite 600 San Francisco, CA 94103, U.S.A
331[privacy@squareup.com](mailto:privacy@squareup.com)
386- Manage cookie settings in [Chrome](https://support.google.com/chrome/answer/95647) and [Chrome Android](https://support.google.com/chrome/answer/95647) and [Chrome iOS](https://support.google.com/chrome/answer/95647)
387- Manage cookie settings in [Firefox](https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop)
388- Manage cookie settings in [Internet Explorer](https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d)
389- Manage cookie settings in [Microsoft Edge](https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-0)
390- Manage cookie settings in [Safari](https://support.apple.com/en-gb/guide/safari/sfri11471/mac) and [Safari iOS](https://support.apple.com/en-gb/HT201265)
332391
333If you have any questions or concerns regarding our privacy notice, or if you believe our privacy notice or applicable laws relating to the protection of your personal information have not been respected, you may file a complaint with our privacy team listed above. We will respond to let you know when you can expect a further response. We may request additional details from you regarding your concerns and may need to engage or consult with other parties in order to investigate and address your issue. We may keep records of your request and any resolution.
392You can also opt out of receiving interest-based ads from third party advertisers who are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance's (DAA) Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt out pages on the [NAI website](https://optout.networkadvertising.org/) and [DAA website](https://optout.aboutads.info/).
393
394Please note that cookie-based opt outs are applicable only to the browser and device you use when you opt out. If you wish to opt out across all devices, you must replicate your choices across each device, including your mobile device. In addition, if you clear or delete your cookies on that browser or device, you will need to reset your cookie opt out.
395
396## CHANGES TO THIS PRIVACY NOTICE
397
398We reserve the right to change this Privacy Notice from time to time, as may be required. We will provide you with reasonable prior notice of any material changes in how we use your information, including by email if you have provided one. If you disagree with these changes, you may cancel your account at any time. Any amendments will be published by posting a revised version of the Privacy Notice and updating the "Effective Date" above. The revised version will be effective on the "Effective Date" listed.
399
400If you have any questions or concerns regarding this Privacy Notice, please reach out to us by contacting your country specific privacy contact below:
401
402<table><tbody><tr><td>United States</td><td>Block, Inc.<p>1455 Market Street, Suite 600 San Francisco, CA 94103, U.S.A</p><p>privacy@squareup.com</p></td><td></td></tr><tr><td>European Union &amp; the United Kingdom</td><td>FAO: Data Protection Officer<p>Squareup International Ltd.</p><p>Fumbally Square<br>Fumbally Lane<br>Dublin 8, Ireland</p><p>privacy-eu@squareup.com</p></td><td>If your request or concern is not satisfactorily resolved by us, you can contact your local data protection authority (see http://ec.europa.eu/justice/dataprotection/bodies/authorities/index_en.html).</td></tr><tr><td>Canada</td><td>Square Canada, Inc.<p>Square Technologies, Inc.</p><p>5000 Yonge Street,<br>Toronto, ON M2N 7E9, Canada</p><p>privacy@squareup.com</p></td><td>If you are dissatisfied with the results of our investigation or any resulting corrective measures, you may be entitled to make a written submission to the Privacy Commissioner in your jurisdiction or to the Office of the Privacy Commissioner of Canada at the address below:<p>Office of the Privacy Commissioner of Canada</p><p>30 Victoria StreetGatineau, Quebec</p><p>K1A 1H3</p><p>https://www.priv.gc.ca/en</p></td></tr><tr><td>Japan</td><td>Square, K.K.<p>Tri-Seven Roppongi 10F,<br>7-7, Roppongi, Minato-ku,<br>Tokyo, 106-0032, Japan</p><p>Representative Director: Akio Takisaki<br>privacy@squareup.com</p></td><td></td></tr><tr><td>Australia</td><td>Square AU PTY, Ltd.<p>GPO Box 1640,<br>Melbourne, VIC 3001, Australia</p><p>privacy@squareup.com</p></td><td>If you are dissatisfied with our response to your complaint, you may be entitled to make a written submission to the Office of the Australian Information Commissioner, whose contact details are as follows:<p>Office of the Australian Information Commissioner (OAIC)<br>Phone: 1300 363 992<br>Email: enquiries@oaic.gov.au<br>Address: GPO Box 5218 Sydney NSW 2001</p></td></tr></tbody></table>