Participation

EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 6/30/2017
Next Certification Due Date: 6/30/2018
Data Collected: NON-HR

Purpose of Data Collection

Shift4 processes, stores, and transmits cardholder data in compliance with the internationally recognized PCI Data Security Standard. Other than authorization and settlements services, cardholder data is never used for any other purpose and is never disclosed to or shared with third parties not directly involved with credit card processing.

Privacy Policy

Non-HR Data

Description:

This policy is comprised of the seven common principles of the Privacy Shield Program Framework and affirms Shift4’s commitment to the program. The Privacy Shield Program Framework also includes 16 equally binding principles that explain and augment the first seven. Shift4 confirms its eligibility under FTC jurisdiction, which covers acts or practices in or affecting commerce by any “person, partnership, or corporation.” This privacy policy, as updated, will be publicly maintained in the Shift4 Security Corner http://www.shift4.com/insight/security/. The Privacy Shield Framework can be found at https://www.privacyshield.gov/welcome.

Effective Date: 6/1/2017

Verification Method

Self-Assessment

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Shift4 Corporation at:

Stephen Ames, CISA, CISSP
Shift4 Corporation
1491 Center Crossing Road
Las Vegas, Nevada 89144

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Shift4 Corporation to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against Shift4 Corporation regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission