Sensitive and Special Categories of Data: When we process sensitive or “special categories” of personal data, we do so only where a lawful basis applies. This may include:

• Meeting legal obligations in the field of employment, social security, or social protection law.
• Supporting workplace accommodations or assessing working capacity.
• Using voluntarily provided demographic data for diversity monitoring and compliance, kept separate from recruitment decisions and used only in aggregate.
• Protecting vital interests in emergencies.
• Establishing, exercising, or defending legal claims.

Sensitive personal information is only used for limited purposes permitted under applicable law. Where consent is the legal basis (for example, optional demographic disclosures in some jurisdictions), you can decline or withdraw consent at any time without affecting your candidacy.

AI technologies and automated decision-making: We use AI technologies to support our recruitment process, including creating interview transcripts and summaries and assisting recruiters in organizing applications. These tools are designed to make our processes more efficient and consistent, and they do not replace human review. We do not make hiring or engagement decisions based solely on automated processing, including profiling. All hiring decisions are made by Block recruiters and hiring managers.

For certain roles, we may need to verify the information you have provided, such as your identity, employment history, work authorization, and professional credentials. We may also conduct pre-employment background checks, where legally allowed, on aspects like criminal records, financial standing, global watch lists, and sex offender registries. The extent of these checks will depend on the position, particularly if it involves a regulated function, and they will be performed as late as possible in the recruitment process, typically after you have been selected for the role, to ensure these reviews are proportionate and only used where necessary. We will inform you about the specific checks prior to conducting them and obtain any required consent before proceeding.

We may share your personal data with:

• Block Group Companies, and corporate affiliates, such as Square, Cash App, Afterpay, and TIDAL, for the reasons outlined in this Privacy Notice;
• Third party partners and / or service providers, such as applicant hiring platforms, background screening providers and / or AI technology providers to generate summaries of interview transcripts;
• Government authorities and/or law enforcement officials, as required for the purposes outlined in this Privacy Notice or as otherwise mandated by law.
• Other third parties, in the event that a Block business is sold, integrated with another business, or Block obtains third-party financing, your details may be disclosed to our advisers, as well as to any prospective purchasers, lenders, and/or their advisors. Similarly, if a Block business is acquiring another company, your details may be shared with the seller and/or its advisors. If required by applicable law, we will notify you of the name and contact information of the recipient of your personal data.

Your personal data may be transferred to, stored in, or accessed from countries outside your country of residence. When we do so, we implement appropriate safeguards to protect your information.

• For residents of the EEA, UK, and Switzerland: For transfers to recipients outside these regions, we rely on the European Commission Standard Contractual Clauses. For UK transfers, we use the UK Addendum together with the EU Standard Contractual Clauses. Where a recipient maintains Binding Corporate Rules or participates in the EU-U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework, we may rely on those mechanisms. If the Standard Contractual Clauses are amended or found inadequate, we will implement alternative safeguards required by law.
• All other locations. Where required by local law, we put in place suitable contractual and organizational measures before transferring personal data internationally, and we limit transfers to what is permitted under our global data privacy requirements.

For further information, including how to obtain a summary of the documents used to protect your information, please contact us as described in the

below.

If your candidacy is successful: The processing of your personal data, including retention periods, will be governed by a separate Block Employee Privacy Notice which will be made available to you during on-boarding.

If your candidacy is unsuccessful: Unless a shorter or longer retention period is required by applicable law, we will retain your personal data for up to two years after the recruitment process has concluded. We do this to:

• Maintain records of the recruitment process
• Comply with applicable recordkeeping laws
• Protect our legitimate business interests, such as defending against legal claims

In some jurisdictions, local law requires us to retain recruitment data for shorter or longer retention periods. Where these rules apply, we will comply with the specific legal requirements.

We may also retain your data with your consent for consideration for future opportunities. You can withdraw consent at any time, and withdrawal will not affect your candidacy for current or past roles.

You may

at any time either to opt out of having your details kept on file for future opportunities or to obtain information about the retention period that applies in your jurisdiction.

You may have certain rights available to you, based on your country of residence and the laws that apply. These may include the right to:

• Access / Know: Request access to your personal data.
• Correction / Rectification: Request corrections to inaccurate or incomplete data.
• Deletion / Erasure: Request deletion in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request limits on processing under certain conditions.
• Portability: Request transfer of data in a usable format.
• Withdraw Consent: Withdraw consent for optional processing at any time.
• Non-Discrimination: Exercise rights without discriminatory treatment.

Note that these rights may be limited depending on applicable law, or such circumstances as when fulfilling your request would disclose another person’s data or if we are legally required or have a compelling interest to retain the information. If you have unresolved concerns, you have the right to file a complaint with the data protection authority in your country of residence or employment.

Additionally, Block does not sell or share your personal information with third parties for purposes of cross-context behavioral advertising.

To learn more, or to exercise any of these rights, please contact us at

. We may need to ask you to confirm certain verification details before processing your request.

We may update this Privacy Notice from time to time. Updates will be posted at

with a new “last updated” date. Where legally required, we will notify you of material changes.

The data controller for your personal data is the Block entity which you have applied to. If you have questions about this Privacy Notice or wish to contact us for any reason in relation to our privacy practices, please contact

.