EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 6/30/2017
Next Certification Due Date: 8/2/2019
Data Collected: NON-HR

Purpose of Data Collection

Shift4 processes, stores, and transmits cardholder data in compliance with the internationally recognized PCI Data Security Standard. Other than authorization and settlements services, cardholder data is never used for any other purpose and is never disclosed to or shared with third parties not directly involved with credit card processing.

Privacy Policy

Non-HR Data


This policy is comprised of the seven common principles of the Privacy Shield Program Framework and affirms Shift4’s commitment to the program. The Privacy Shield Program Framework also includes 16 equally binding principles that explain and augment the first seven. Shift4 confirms its eligibility under FTC jurisdiction, which covers acts or practices in or affecting commerce by any “person, partnership, or corporation.” This privacy policy, as updated, will be publicly maintained in the Shift4 Security Corner The Privacy Shield Framework can be found at

Effective Date: 6/6/2018

Verification Method


Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Shift4 Corporation at:

Jonathan Rodriquez
Director of Security Compliance
Shift4 Corporation
Alternate Contact
1551 Hillshire Drive
Las Vegas, Nevada 89134

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Shift4 Corporation to your question or complaint, please contact the independent recourse mechanism listed below

Appropriate statutory body with jurisdiction to investigate any claims against Shift4 Corporation regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission