Visa Global Privacy Notice

Effective date: August 20, 2024

This Global Privacy Notice explains how Visa and its Affiliates¹ collect, use, and share Personal Information when you use our, or our clients’, products, services, offers, and promotions.

As a global payments technology company, Visa fulfills many roles. When we act on behalf of our Visa clients, we only collect, use, and share Personal Information as authorized by our contracts with our clients. If you have questions about how these companies handle your Personal Information, or wish to exercise your rights, please contact them directly. For example, if you have questions about your Visa card transactions, please contact the institution that issued your card for more information.

Where Visa acts a controller under applicable laws and collects information directly from an individual, the controller is the Visa entity listed on the terms and conditions you sign when enrolling in a Visa service, product, or offer. Some Visa companies and services have different privacy notices that are provided when you use them. We also have supplemental privacy notices that provide additional information as required by law.

You can learn more and exercise your privacy choices under relevant laws at our Privacy Rights Portal.

¹ Visa’s Affiliates are companies that are directly or indirectly controlled by Visa U.S.A. Inc. or its parent company Visa Inc. through ownership—for example, Visa International Service Association, Visa Worldwide Pte. Limited, Visa Canada Corporation, Visa International Servicios de Pago España, S.R.L., Visa Europe Limited, Visa do Brasil Empreendimentos Ltda, CardinalCommerce Corporation, CyberSource Corporation, and Verifi, Inc.

Personal Information

“Personal Information” refers to information that (alone or when used in combination with other information) is capable of being associated with or could reasonably be associated with an individual. Personal Information, sometimes referred to as “personal data”, may also have specific meanings under different privacy laws. The Personal Information we collect varies depending on our relationship and interactions with you.

Categories of Personal Information

Depending on our relationship and interactions with you, the categories of Personal Information we collect may include:

• Contact Information – This includes your name, username, mailing address, email address, telephone number, mobile number, and social media profile names, along with other personal identifiers.
• Transaction and Financial Information – This includes:
  • Information about your card, including your 16-digit payment card number, associated non-financial identifiers, expiration dates, service codes, PIN verification data, and CVV; and
  • Information about your transactions, including date, time, location, amount, merchant information, item-level data, and billing and shipping information.
• Relationship Information – This includes information about your shopping and payment preferences, demographic information, likelihood of interest in purchases or life events, and data from social media profiles.
• Interaction Information – This includes information collected when you participate in promotions or programs, engage with customer service, attend Visa sponsored events, and other user-provided data.
• Biometric Identifiers – This may include facial recognition data, fingerprints, and other biometric data used for authentication.
• Business Customer Data – Information pertaining to your role in your company, access to services, and qualifications.
• Inferred and Derived Information – Data elements generated from analyzing relationship and transactional information for marketing or security purposes.
• Online and Technical Information – Data regarding interactions with our platforms, including IP address, device identifiers, and browsing history.
• Audio and Visual Information – Includes digital recordings and images related to interactions with Visa.
• Government Issued Identification Numbers – This includes social security numbers, driver’s license numbers, and other identifiers for compliance purposes.
• Geolocation Information – Collected if you permit us to determine your precise location.
• Professional and Employment Information – Data collected from job applicants and employees, including resume data and qualifications.
• Compliance Data – Records maintained for legal compliance and consumer preferences.

Some of the Personal Information in these categories may be considered sensitive Personal Information in some jurisdictions.

Sources of Personal Information:

We may collect Personal Information about you from various sources, depending on our relationship and interaction with you, including:

• Financial institutions, payment card issuers, merchants, and partners when using Visa products;
• Directly from you when enrolling in programs;
• Automatically from your devices when interacting with our platforms;
• Third parties, including data aggregators and social media companies.

Why We Collect Personal Information and How We Use It:

Purpose for Collecting and Sharing

Legal Basis for Processing

• Operate Visa’s electronic payments networks and enable transactions.

  • Categories: All listed above.
  • Legal Basis: Fulfilling contracts, complying with laws, and legitimate interests.

• Provide products, services, programs, or information requested from Visa.

  • Categories: All listed above.
  • Legal Basis: Fulfilling contracts and complying with laws.

• Provide services to clients, such as loyalty programs.

  • Categories: All listed above.
  • Legal Basis: Fulfilling contracts and complying with laws.

• Operate Visa solutions and keep you signed in on your device.

  • Categories: All listed above.
  • Legal Basis: Fulfilling contracts and complying with laws.

• Administer surveys, programs, and events.

  • Categories: All listed above.
  • Legal Basis: Fulfilling contracts and legitimate interests.

• Deliver marketing communications and personalized offers.

  • Categories: All listed above.
  • Legal Basis: Legitimate interests.

• Fulfill and maintain business relationships with you or your company.

  • Categories: All listed above.
  • Legal Basis: Fulfilling contracts and legitimate interests.

• Evaluate you for employment or contracting positions.

  • Categories: Selected categories related to HR.
  • Legal Basis: Fulfilling contracts and complying with laws.

• Understand usage of products for analytics and create business insights.

  • Categories: While certain information may be used, results do not constitute Personal Information.
  • Legal Basis: Legitimate interests.

• Generate anonymous datasets for product development.

  • Categories: While certain information may be used, results do not constitute Personal Information.
  • Legal Basis: Legitimate interests.

• Support Everyday Business Purposes, such as quality control, governance, and compliance.

  • Categories: All listed above.
  • Legal Basis: Fulfilling contracts and complying with laws.

We may process Personal Information with your consent where required by law.

Categories of Third Parties and Our Disclosure of Personal Information

We may disclose your Personal Information to:

• Affiliates, service providers, payment processors, government agencies, recruiting agencies, and your company.
• As permitted by law, such as in legal proceedings or for audits.

Online Privacy

We collect information by automated means using technologies like cookies and web beacons, both in identifiable and non-identifiable ways.

Mobile Applications

When you download our apps, you may allow us to obtain your location and device identifiers to provide services and analytics.

Your Privacy Rights

You can log into your Visa account to manage your information or submit requests via the Privacy Rights Portal.

International Transfers

Visa may transfer your Personal Information globally, always protecting it according to legal requirements.

Information Security and Data Retention

We implement safeguards to protect your Personal Information from unauthorized access and retain it only as necessary.

Privacy Policies of Third Parties

Additional privacy notices may be found through your Visa issuers and third-party sites.

Job Applicants

Information from job applications is retained for recruiting and compliance.

Children's Data

Visa platforms are generally not for children, and information from children is collected only as permitted by law.

Changes to this Privacy Notice

Material changes will be posted online, and significant changes will be communicated.

How to Contact the Visa Privacy Office

To exercise your privacy rights, contact us via the Privacy Rights Portal. For assistance, contact:

• Email: privacy@visa.com
• Mail: Visa Global Privacy Office, 900 Metro Center Blvd., Foster City, CA, 94404 USA

Supplemental Privacy Notices

This Global Privacy Notice has additional notices based on your interaction with Visa, including specific notices for various countries and regions.