For users who DO NOT apply or sign up for a Square Account, click here.
For users who sign up for a Weebly eCommerce by Square Account only, click here.
For our Sellers’ Customers who sign up for digital receipts and marketing messages, click here.
For Cash App account holders, click here.
Effective Date: January 1, 2020
Posted Date: December 10, 2019
We’ve included annotations in the gray boxes below to emphasize certain portions of our notice and help guide you as you read them. The annotations aren’t summaries, so please take the time to read everything!
If you are a Square Seller, or apply for a loan through Square Capital, this privacy notice applies to you. It explains what data we collect about you, what we do with it, when and why we share it with others, how long we keep it, how we secure it, what cookies are and what they (and similar technologies) do, what data is collected about you by third party service providers, and what choices you have to control your data.
By using our services you consent to these data practices. If you use our services on behalf of your company, that company consents too.
This Privacy Notice describes how Square, Inc. and our affiliates (collectively, “Square,” “we,” and “us”) collect, use, disclose, transfer, store, retain or otherwise process your information when you (whether you are a person acting as a sole proprietor or on behalf of another business entity) apply or sign up for a Square Seller account and other services (including, but not limited to, Square Capital) through Square’s website or applications (collectively, “Services”).
This Privacy Notice applies to information collected in connection with your access to and use of our Services. Please read this Privacy Notice carefully. By continuing to interact with our Services, you are consenting to the practices described in this Privacy Notice.
Our Privacy Notice explains:
We use your data to make Square’s products and services work better for you and for others. This describes what data we get about you (which can vary depending on where you live).
We use data you put into our systems when you open and use an account or other systems, like financial or tax information, information that identifies who you are, transaction information, and any other data you give us.
We collect information you provide when you:
We call this information Seller Account Data.
Specifically, we collect (and/or have collected during at least the 12-month period preceding the effective date of this Privacy Notice) the following categories of information:
We also get data from the devices you use when you interact with our systems, like your location or information about the device you’re using. We need this data to do things like help protect your account from hackers, combat fraud, check if payments are being made or received legally and by you, and making our products and services better for you and others.
We also need to check that you are using our services legally, that you are eligible for the services you want to use, and we protect your data and our services from fraudsters who may put you and your money at risk. To do this, we may collect data about you from companies that help us verify your identity, do a credit check, prevent fraud or assess risk.
We also obtain information about your customers on your behalf when they transact with you. We call this information Your Customers’ Data. We collect Your Customers’ Data when they transact with you through your use of Square’s products, for instance when they make a payment at your establishment, or schedule an appointment, or receive an invoice from you. The particular Customer Data we collect will vary depending on how you use our products and services and which products and services you use. Your Customers’ Data may include:
Privacy laws that apply in certain places, like California, treat “businesses” and “service providers” differently. Under those laws, a business is the company that decides why and how to process personal information. A service provider processes personal information on behalf of a business in order to provide services. When Square processes Your Customers’ Data, we generally act as your service provider. In select cases, however, we may act as a business when we process Your Customers’ Data. For example, we act as a business when we use Your Customers’ Data to send Your Customers digital receipts directly from Square, or when we allow you to use Customer Directory or Square Marketing to contact your buyer using a masked email address (for example, j*****@gmail.com) that gets routed to them via Square. Your Customers can visit the Privacy Notice for Square Buyer Features for more information on how Square processes their data when it is acting as a business, and the Privacy Notice for non-account holders for more information on how Square processes their data as your service provider.
We collect your information from you and the other sources listed below.
We collect (and/or have collected during at least the 12-month period preceding the effective date of this Privacy Notice) information about you from the following categories of sources:
We use your data to do things like make sure the products you are using work, help you log in to your account, verify who you are, secure your data, fight fraud, follow the law, enforce our agreements, figure out what new products we can build, and market products to you that we think could make it easier for you to run your business.
We may collect, use and share (or have collected, used or shared during at least the 12-month period preceding the effective date of this Privacy Notice), information about you for the following reasons:
If we send you marketing emails, each email will have instructions on how you can “opt out” of getting future marketing from us.
To learn about what choices you have about interest-based advertising and cross-device tracking, please see below.
We share your information with others in the circumstances described in this section. For example, with other people with whom you interact when you use our services; within our family of companies (like Cash App and Weebly), who may offer services that we think could be useful to you; with service providers who help us run our services; with ad platforms that help us market and advertise our services to you; or if we need to share your information to comply with the law.
We may share the personal information described in the “Information We Collect About You” section with the following categories of service providers and third parties:
Digital cookies and similar technologies help us make our services better to use by doing things like recognizing when you’ve signed in, analyzing how you use our services so we can make them more useful to you, giving you a more personalized experience, and making our ads to you work better.
When you interact with our online services, or open emails we send you, we obtain certain information using automated technologies, such as cookies, web server logs, web beacons and other technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an internet tag, pixel tag, or clear GIF, is a tiny graphic image that may be used in our websites or emails.
We use these automated technologies to collect your device information, internet activity information, and inferences as described above. These technologies help us to:
We set some of these automated technologies ourselves, but others are set by third parties who deliver services on our behalf. For example, we may use other companies’ web analytics services (described in the “Third-Party Analytics Services” section), which use automated technologies to help us evaluate how customers use our websites.
Your browser can alert you when cookies are placed on your device, and how you can stop or disable them via your browser settings. Please note, however, that without cookies all of the features of our online services may not work properly. If you use a mobile device, you can manage how your device and browser share certain device data by changing the privacy and security settings on your mobile device. You can learn more about cookies and how to manage your preferences by visiting http://www.allaboutcookies.org.
We use other companies as service providers to help us analyze our site, track metrics, and advertise to you. These service providers generally promised us under contract to keep data private but have their own privacy policies that you should be aware of.
We may use third-party analytics service providers to help us with our online services, such as Google Analytics, Facebook, BugSnag and Crashlytics. The analytics providers that administer these services use technologies such as cookies, web beacons, and web server logs to help us analyze how you use our online services. We may disclose your site-use information(including IP address) to these analytics providers, and other service providers who use the information to help us figure out how you and others use our online services.
We and the service providers we use to advertise to you may collect information about your activities on Square. We use this information to advertise to you and to tailor our products and services to your interests. You may see certain ads on other websites because we use third-party services to advertise our services to you. We use these services to target our ads to you and others based on your demographics, interests, and context. These third party ad services track your online activities over time and across multiple websites by collecting your information through automated technologies, including third-party cookies, web server logs, and web beacons. The ad services use this information to show you Square ads that may be tailored to your individual interests. The information our ad services may collect on our behalf includes data about your visits to websites that serve Square ads, such as the pages or ads you view and the actions you take on those websites. This data collection takes place both on our online services, and on third-party websites that serve our ads to you. This process also helps us figure out if our ads to you are effective.
To learn about how to opt out of interest-based advertising in the U.S., click here.
Certain web browsers allow you to instruct your browser to respond to Do Not Track (“DNT”) signals to website you visit, informing those sites that you do not want your online activities to be tracked. At this time, our websites are not designed to respond to DNT signals or similar mechanisms from browsers.
We keep your information as long as you keep using our products and services. After that, we keep it for as long as we need it to do things like fight fraud, collect fees you owe, resolve disputes with (or involving) you, follow the law, enforce our agreements and defend our rights in court.
We generally keep your information as long as reasonably necessary to provide you the Services or to comply with applicable law. However, even after you deactivate your account, we can retain copies of information about you and any transactions or Services in which you may have participated for a period of time that is consistent with applicable law, applicable statute of limitations or as we believe is reasonably necessary to comply with applicable law, regulation, legal process, or governmental request, to detect or prevent fraud, to collect fees owed, to resolve disputes, to address problems with our Services, to assist with investigations, to enforce our General Terms or other applicable agreements or policies, or to take any other actions consistent with applicable law.
You can see, change or fix information you gave us, ask us to deactivate your account, control your location information, or tell us to stop marketing to you by opting out.
If you live in California, you have additional rights, which we describe below.
You may access, change, or correct information that you have provided by logging into your Square account at any time or by making a request to us using the contact details below. We will need to verify your identity before granting access or otherwise changing or correcting your information.
If you wish to deactivate your account, you can do so by logging into your Square account or by emailing us using the contact details provided below.
In order to provide certain Services, we may request access to location information, including precise geolocation information collected from your device. If you do not consent to the collection of this information, certain Services will not function properly and you will not be able to use those Services. You can stop our collection of location information at any time by changing the preferences on your mobile device. If you do so, some of our mobile applications will no longer function. You also may stop our collection of location information via mobile application by following the standard uninstall process to remove all Square mobile applications from your device.
You can opt out of receiving promotional messages from Square by following the instructions in those messages, by informing the caller that you would not like to receive future promotional calls, or by changing your notification settings by logging into your Square account. You may only opt out of text messages from Square by replying STOP. Opting out of receiving communications may impact your use of the Services. If you decide to opt out, we may still send you non-promotional communications, such as digital receipts and messages about your account or our ongoing business relations.
Some of the advertising platforms that we use to collect information from or about you in order to provide more relevant advertising to you on websites participate in the DAA Self-Regulatory Program for Online Behavioral Advertising. This program offers a centralized location where users can make choices about the use of their information for online behavioral advertising. To make choices about the use of your information for online behavioral advertising on websites, please visit the Digital Advertising Alliance Webchoices tool. If you opt out of online behavioral advertising using this method, this opt-out will only apply to the specific browser or device from which you opt out.
Some of the advertisers, advertising technology companies, and service providers that perform advertising-related services for us may be members of the Network Advertising Initiative (NAI), a cooperative of online marketing companies that offers a centralized tool for opting out of interest-based advertising delivered to each of its member companies. If you would like to opt out of the NAI’s members’ use of information from or about you on websites, please visit the NAI’s opt-out of interest-based advertising page. If you opt out of interest-based advertising using this method, this opt-out will only apply to the specific browser or device from which you opt out.
Some of the advertising platforms that we use to collect information from or about you in order to provide our advertising to you within mobile applications participate in the DAA Self-Regulatory Program for Online Behavioral Advertising. This program offers a mobile application called the “AppChoices,” which provides a centralized location where you can make choices about the use of your information for online behavioral advertising within the mobile environment. The AppChoices application can be downloaded from your mobile device at www.aboutads.info/appchoices or from your device’s app store. If you opt out of online behavioral advertising using this method, this opt-out will only apply to the specific browser or device from which you opt out.
On your mobile device, you may also go to your device settings and select “Limit Ad Tracking” (for iOS devices), or “Opt out of Interest-Based Ads” (for Android devices), which will allow you to limit our use of information collected from or about your mobile device (such as precise location data) for the purposes of serving online behavioral advertising to you.
Even though you use our services while acting as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietor of a business, nonprofit, or government agency, if you live in California, California law gives you the right to ask if we disclose your personal information to third parties for their direct marketing purposes (we do not disclose your personal information for others’ direct marketing purposes). It also gives you the right to ask if we sell your personal information to third parties (we do not sell your personal information and have not done so in the past), and if we did (which we don’t), you’d have the right to opt out of such sales.
If you are a kid under 13, please don’t use our services. If we collect your data and later learn you are a kid under 13, we will delete it.
Our Services are general audience services not directed at children under the age of 13. If we learn that any information we collect has been provided by a child under the age of 13, we will promptly delete that information.
We do a lot to keep your data safe. While we think we have strong defenses in place, no one can ever guarantee that hackers won’t be able to break into our sites or steal your data while it is stored or flowing from you to us or vice versa.
We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, and misuse, and unauthorized access, disclosure, alteration, and destruction. Nevertheless, the internet is not a 100% secure environment, and we cannot guarantee absolute security of the transmission or storage of your information. We hold information about you both at our own premises and with the assistance of third-party service providers.
For more information about our security practices, please visit https://squareup.com/us/en/security.
We operate in many countries, and we (or our service providers) may move your data and process it outside the country where you live.
We may, and we may use third-party service providers to, process and store your information in the United States, Canada, Japan, the European Union, and other countries.
We can change this privacy notice. When the changes impact your rights or how we use your data in important ways, we’ll tell you first by email (if you’ve given us your email address).
We may amend this Privacy Notice from time to time by posting a revised version and updating the “Effective Date” above. The revised version will be effective on the “Effective Date” listed. We will provide you with reasonable prior notice of material changes in how we use your information, including by email if you have provided one. If you disagree with these changes, you may cancel your account at any time. If you keep using our Services, you consent to any amendment of this Privacy Notice.
You can contact our privacy team with any questions or concerns at the address below.
Please contact our privacy team with any questions or concerns regarding this Privacy Notice:
Square, Inc. 1455 Market Street, Suite 600 San Francisco, CA 94103, U.S.A
privacy@squareup.com
If you have any questions or concerns regarding our privacy notice, or if you believe our privacy notice or applicable laws relating to the protection of your personal information have not been respected, you may file a complaint with our privacy team listed above. We will respond to let you know when you can expect a further response. We may request additional details from you regarding your concerns and may need to engage or consult with other parties in order to investigate and address your issue. We may keep records of your request and any resolution.
Last Revised: 2/23/2020 To view our archived Privacy Policy, click here.
GoDaddy cares about your privacy. For this reason, we collect and use personal information only as needed to deliver our products, services, websites and mobile applications, and to communicate with you about the same, or as you have requested (collectively, our “Services”). Your personal information includes information such as:
Our Privacy Policy not only explains how and why we use your personal information that we collect, but also how you can access, update or otherwise take control of your personal information. We’ve also created a Trust Center that offers answers to your most common questions, quick links to access your Account Settings, instructions on how to exercise certain rights that might be available to you, and definitions to key terms and concepts noted in this Privacy Policy.
If at any time you have questions about our practices or any of your rights described below, you may reach our Data Protection Officer (“DPO”) and our dedicated team that supports this office by contacting us at privacy@godaddy.com. This inbox is actively monitored and managed so that we can deliver an experience that you can confidently trust.
What information we collect, how we collect it, and why
Much of what you likely consider personal information is collected directly from you when you:
However, we also collect additional information when delivering our Services to you to ensure necessary and optimal performance. These methods of collection may not be as obvious to you, so we thought we’d highlight and explain a bit more about what these might be (as they vary from time to time):
Cookies and similar technologies on our websites and our mobile applications allow us to track your browsing behavior, links clicked, items purchased, your device type, and to collect various data, including analytics, about how you use and interact with our Services. These technologies automatically collect data when you use and interact with our Services, including metadata, log files, cookie/device IDs, page load time, server response time, and approximate location information to measure website performance and improve our systems, including optimizing DNS resolution, network routing and server configurations. Specifically, interactions with the features, content and links (including those of third-parties, such as social media plugins) contained within the Services, Internet Protocol (IP) address, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, language preferences and cookie data, information about devices accessing the Services, including type of device, what operating system is used, device settings, application IDs, unique device identifiers and error data is collected. All this allows us to provide you with more relevant product offerings, a better experience on our sites and mobile applications, and to collect, analyze and improve the performance of our Services. We may also collect your location (IP address) so that we can personalize our Services. For additional information, and to learn how to manage the technologies we utilize, please visit our Cookie Policy. If you wish to opt out of interest-based advertising click here [or if located in the European Union click here]. Please note you will continue to receive generic ads.
Supplemented Data may be received about you from other sources, including publicly available databases or third parties from whom we have purchased data, in which case we may combine this data with information we already have about you so that we can update, expand and analyze the accuracy of our records, assess the qualifications of a candidate for employment, identify new customers, and provide products and services that may be of interest to you. If you provide us personal information about others, or if others give us your information, we will only use that information for the specific reason for which it was provided to us.
How we utilize information.
We strongly believe in both minimizing the data we collect and limiting its use and purpose to only that (1) for which we have been given permission, (2) as necessary to deliver the Services you purchase or interact with, or (3) as we might be required or permitted for legal compliance or other lawful purposes:
Delivering, improving, updating and enhancing our Services. We collect various information relating to your purchase, use and/or interactions with our Services. We utilize this information to:
Much of the data collected is aggregated or statistical data about how individuals use our Services, and is not linked to any personal information.
Sharing with trusted third parties. We may share your personal information with affiliated companies within our corporate family, with third parties with which we have partnered to allow you to integrate their services into our own Services, and with trusted third party service providers as necessary for them to perform services on our behalf, such as:
These third parties (and any subcontractors they may be permitted to use) have agreed not to share, use or retain your personal information for any purpose other than as necessary for the provision of Services.
We will also disclose your information to third parties:
Communicating with you. We may contact you directly or through a third party service provider regarding products or services you have signed up or purchased from us, such as necessary to deliver transactional or service related communications. We may also contact you with offers for additional services we think you’ll find valuable if you give us consent, or where allowed based upon legitimate interests. You don’t need to provide consent as a condition to purchase our goods or services. These contacts may include:
You may also update your subscription preferences with respect to receiving communications from us and/or our partners by signing into your account and visiting “Account Settings” page.
If we collect information from you in connection with a co-branded offer, it will be clear at the point of collection who is collecting the information and whose privacy policy applies. In addition, it will describe any choice options you have in regards to the use and/or sharing of your personal information with a co-branded partner, as well as how to exercise those options. We are not responsible for the privacy practices or the content of third-party sites. Please read the privacy policy of any website you visit.
If you make use of a service that allows you to import contacts (ex. using email marketing services to send emails on your behalf), we will only use the contacts and any other personal information for the requested service. If you believe that anyone has provided us with your personal information and you would like to request that it be removed from our database, please contact us at privacy@godaddy.com.
Transfer of personal information abroad. If you utilize our Services from a country other than the country where our servers are located, your personal information may be transferred across international borders, which will only be done when necessary for the performance of our contract with you, when we have your consent to do so, or when the appropriate standard contractual clauses are in place. Also, when you call us or initiate a chat, we may provide you with support from one of our global locations outside your country of origin.
Compliance with legal, regulatory and law enforcement requests. We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (such as subpoena requests), to protect our property and rights or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical.
To the extent we are legally permitted to do so, we will take reasonable steps to notify you in the event that we are required to provide your personal information to third parties as part of legal process. We will also share your information to the extent necessary to comply with any ICANN, registry or ccTLD rules, regulations and policies when you register a domain name with us. For reasons critical to maintaining the security, stability and resiliency of the Internet, this includes the transfer of domain name registration information to the underlying domain registry operator and escrow provider, and publication of that information as required by ICANN in the public WHOIS database or with other third parties that demonstrate a legitimate legal interest to such information.
How we secure, store and retain your data.
We follow generally accepted standards to store and protect the personal information we collect, both during transmission and once received and stored, including utilization of encryption where appropriate.
We retain personal information only for as long as necessary to provide the Services you have requested and thereafter for a variety of legitimate legal or business purposes. These might include retention periods:
If you have any questions about the security or retention of your personal information, you can contact us at privacy@godaddy.com.
How you can access, update or delete your data.
To easily access, view, update, delete or port your personal information, or to update your subscription preferences, please sign into your Account and visit “Account Settings.” Please visit our Trust Center for additional information and guidance for accessing, updating or deleting data.
If you make a request to delete your personal information and that data is necessary for the products or services you have purchased, the request will be honored only to the extent it is no longer necessary for any Services purchased or required for our legitimate business purposes or legal or contractual record keeping requirements.
If you are unable for any reason to access your Account Settings or our Trust Center, you may also contact us by one of the methods described in the “Contact Us” section below.
The E.U-U.S and Swiss-U.S. Privacy Shield Frameworks.
On July 16, 2020, the Court of Justice of the European Union issued a judgment declaring as “invalid” the European Commission’s Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of the protection provided by the EU-U.S. Privacy Shield. As a result of that decision, the EU-U.S. Privacy Shield Framework is no longer a valid mechanism to comply with EU data protection requirements when transferring personal data from the European Union to the United States.
Nonetheless, the U.S. Department of Commerce continues to administer the Privacy Shield program, and our parent company, GoDaddy Operating Company, LLC (and our related entities, including GoDaddy.com LLC, GoDaddy Media Temple, Inc., GoDaddy Sellbrite, Inc., Domains by Proxy, LLC, and GoDaddy Corporate Domains, LLC) complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. GoDaddy Operating Company, LLC has certified to the U.S. Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.
GoDaddy.com, LLC is responsible for the processing of personal information it receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. GoDaddy.com, LLC complies with the Privacy Shield Principles for all onward transfers of personal information from the EU and Switzerland, including the onward transfer liability provisions.
With respect to personal information received or transferred pursuant to each Privacy Shield Framework, GoDaddy.com, LLC is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, GoDaddy.com, LLC may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. Under certain conditions, more fully described on the Privacy Shield website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.
In compliance with the Privacy Shield Principles, GoDaddy.com, LLC commits to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact us in any manner provided in the "CONTACT US" section below in this Privacy Policy.
GoDaddy.com, LLC has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU and Switzerland in the context of the employment relationship.
‘Do Not Track’ notifications.
Some browsers allow you to automatically notify websites you visit not to track you using a “Do Not Track” signal. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, we currently do not alter our practices when we receive a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” you may wish to visit www.allaboutdnt.com.
Age restrictions.
Our Services are available for purchase only for those over the age of 18. Our Services are not targeted to, intended to be consumed by or designed to entice individuals under the age of 18. If you know of or have reason to believe anyone under the age of 18 has provided us with any personal information, please contact us.
Non-Discrimination.
We will not discriminate against you for exercising any of your privacy rights. Unless permitted under applicable laws, we will not:
Changes to this policy.
We reserve the right to modify this Privacy Policy at any time. If we decide to change our Privacy Policy, we will post those changes to this Privacy Policy and any other places we deem appropriate, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If we make material changes to this Privacy Policy, we will notify you here, by email, or by means of a notice on our home page, at least thirty (30) days prior to the implementation of the changes.
Contact us.
If you have any questions, concerns, or complaints about our Privacy Policy, or how we handle your personal data, you may contact our Office of the Data Protection Officer by email at privacy@godaddy.com. In the alternative, you may contact us by either of the following means:
We will respond to all requests, inquiries or concerns within thirty (30) days. No
If you are not satisfied with our response, you may direct privacy complaints to your local data protection authority. GoDaddy.com LLC bis the data controller for www.godaddy.com
Copyright © 2024 Grace Of Face - All Rights Reserved.