Participation
EU-U.S. Privacy Shield Framework: Active
Purpose of Data Collection
Shift4 processes, stores, and transmits cardholder data in compliance with the internationally recognized PCI Data Security Standard. Other than authorization and settlements services, cardholder data is never used for any other purpose and is never disclosed to or shared with third parties not directly involved with credit card processing.
Privacy Policy
Non-HR Data
This policy is comprised of the seven common principles of the Privacy Shield Program Framework and affirms Shift4’s commitment to the program. The Privacy Shield Program Framework also includes 16 equally binding principles that explain and augment the first seven. Shift4 confirms its eligibility under FTC jurisdiction, which covers acts or practices in or affecting commerce by any “person, partnership, or corporation.” This privacy policy, as updated, will be publicly maintained in the Shift4 Security Corner http://www.shift4.com/insight/security/. The Privacy Shield Framework can be found at https://www.privacyshield.gov/welcome.
Verification Method
Self-Assessment
Dispute Resolution
Questions or Complaints?
If you have a question or complaint regarding the covered data, please contact Shift4 Corporation at:
Las Vegas, Nevada 89144
Privacy Shield organizations must respond within 45 days of receiving a complaint.
If you have not received a timely or satisfactory response from Shift4 Corporation to your question or complaint, please contact the independent recourse mechanism listed below
NON-HR RECOURSE MECHANISM
Appropriate statutory body with jurisdiction to investigate any claims against Shift4 Corporation regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission