This analysis describes what Square's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause operationalizes Square's compliance with mandatory data protection obligations under EU and UK law by documenting the statutory rights available to a defined user population and the mechanisms through which those rights may be exercised.
EU and UK residents may exercise specified rights regarding their personal data held by Square, including requesting access, correction, deletion, processing restrictions, and data transfers to third parties. The provision also authorizes users to withdraw consent to processing and escalate concerns to regulatory authorities.
How other platforms handle this
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
For individuals in the United States, please also refer to our Notice For Individuals Residing In Certain US States below and the Consumer Health Data Policy.
Monitoring
Square has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you reside in the EU or the UK, you have the right under certain circumstances: to be provided with access to your personal data held by us; to request the rectification or erasure of your personal data held by us; to request that we cease processing your data; to request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example); to object to profiling activities based on our own legitimate interests; to object to solely automated processing producing legal or similar effects; to request that your data be transferred to a third party (data portability); to withdraw your consent to our processing of your data (where such processing is based on consent); and to lodge a complaint with the data protection authority in your jurisdiction.— Excerpt from Square's Square Privacy Notice
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This clause operationalizes Square's compliance with mandatory data protection obligations under EU and UK law by documenting the statutory rights available to a defined user population and the mechanisms through which those rights may be exercised.
EU and UK residents may exercise specified rights regarding their personal data held by Square, including requesting access, correction, deletion, processing restrictions, and data transfers to third parties. The provision also authorizes users to withdraw consent to processing and escalate concerns to regulatory authorities.
ConductAtlas has identified this type of provision across 3 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Square.