Square · Square Privacy Notice

Passive Buyer Data Collection

High severity
Share 𝕏 Share in Share

Why it matters

This means your name, payment card details, and purchase history can end up in Square's systems simply by swiping your card at a café or retail store that uses Square — without your direct knowledge or consent.

Consumer impact

Square collects a wide range of personal and financial data — including transaction history, device identifiers, location data, government-issued ID, and inferred behavioral profiles — from both merchants and the consumers who shop at Square-powered businesses, even without a direct account relationship. This data may be shared with financial institution partners, service providers, and used for cross-product profiling and marketing purposes, which creates meaningful privacy exposure for everyday buyers. You can submit a data access, correction, or deletion request through Square's privacy rights portal at https://squareup.com/us/en/privacy/request.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Visit Square's privacy rights portal, select 'Delete My Data', provide your name and email or payment details to identify your record, and submit the request. Square is required to respond within 45 days under CCPA.

Applicable agencies

  • FTC
    The FTC has enforcement authority under FTC Act Section 5 over deceptive or unfair data collection practices, including failure to provide adequate notice to consumers whose data is collected indirectly.
    File a complaint →

Provision details

Document information
Document
Square Privacy Notice
Entity
Square
Document last updated
March 24, 2026
Tracking information
First tracked
April 1, 2026
Last verified
April 1, 2026
Record ID
CA-P-001732
Document ID
CA-D-00363
Evidence Provenance
Source URL
Wayback Machine
SHA-256
311409eb81b913c92600bb79bb319a485be267afc521fbf8d50f93f25568d3c6
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Square | Document: Square Privacy Notice | Record: CA-P-001732
Captured: 2026-04-01 13:31:06 UTC | SHA-256: 311409eb81b913c9…
URL: https://conductatlas.com/platform/square/square-privacy-notice/passive-buyer-data-collection/
Accessed: April 4, 2026
Classification
Severity
High
Categories

Other provisions in this document