Square

squareup.com · facts updated 5 hours ago

Privacy facts at a glance

Jurisdictions: US · EU · UK · CA · AU · JP
Retention: The privacy notice includes a section titled 'How Long We Retain Your Information' but the specific retention periods are not included in the provided excerpts.
DPA available: Yes
Certifications: PCI DSS
GDPR addressed: Yes
CCPA addressed: Yes

Tracked documents

https://squareup.com/us/en/legal/general/privacy checked 3 minutes ago

https://squareup.com/us/en/legal/general/ua checked 7 hours ago

Data processing agreement

https://squareup.com/us/en/legal/general/data-processing checked 6 hours ago

Security / trust page

https://squareup.com/us/en/payments/secure checked 5 hours ago

Recent changes

Security / trust page 5 hours ago

Document updated.

Data processing agreement 1 day ago

Document updated.

Security / trust page 2 days ago

Document updated.

major Privacy policy 4 days ago

Square's privacy policy page previously returned a Cloudflare rate-limiting error page and now displays the full General Privacy Notice for Square Sellers and Website Visitors (last updated March 16, 2026, effective April 16, 2026), including sections on data collection, sharing, retention, and country-specific disclosures.

Document updated.

Public summary; per-account review history visible to subscribers tracking this vendor.

Track Square in your workspace.

Get notified when Square adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

Start tracking — 14-day trial

No card required.