Participation
EU-U.S. Privacy Shield Framework: Active
Purpose of Data Collection
Shift4 processes, stores, and transmits cardholder data in compliance with the internationally recognized PCI Data Security Standard. Other than authorization and settlements services, cardholder data is never used for any other purpose and is never disclosed to or shared with third parties not directly involved with credit card processing.
Privacy Policy
Non-HR Data
This privacy policy is comprised of the seven common principles of the Privacy Shield Program Framework. It also affirms Shift4 Payments, LLC, (Shift4’s) commitment to the Privacy Shield Program as a data processor. The Privacy Shield Program Framework also includes 16 equally binding principles that explain and augment the first seven. Shift4 confirms its eligibility as a data processor under FTC jurisdiction, which covers acts or practices in or affecting commerce by any “person, partnership, or corporation.” The Data Protection Officer of Shift4 Payments, LLC, is Stephen Ames, Vice President of Compliance.
Verification Method
Self-Assessment
Dispute Resolution
Questions or Complaints?
If you have a question or complaint regarding the covered data, please contact Shift4 Payments, LLC at:
Director of Security Compliance
Las Vegas, Nevada 89134
Privacy Shield organizations must respond within 45 days of receiving a complaint.
If you have not received a timely or satisfactory response from Shift4 Payments, LLC to your question or complaint, please contact the independent recourse mechanism listed below
Appropriate statutory body with jurisdiction to investigate any claims against Shift4 Payments, LLC regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission