EU users have stronger legal protections than users in many other jurisdictions, including the right to full data erasure and the right to object to profiling — Square is legally obligated to respond to these requests within one month.
Square collects a wide range of personal and financial data — including transaction history, device identifiers, location data, government-issued ID, and inferred behavioral profiles — from both merchants and the consumers who shop at Square-powered businesses, even without a direct account relationship. This data may be shared with financial institution partners, service providers, and used for cross-product profiling and marketing purposes, which creates meaningful privacy exposure for everyday buyers. You can submit a data access, correction, or deletion request through Square's privacy rights portal at https://squareup.com/us/en/privacy/request.