Visa Global Privacy Notice

Depending on our relationship and interactions with you, the categories of Personal Information we collect may include:

• Contact Information – this includes your name, username, mailing address, email address, telephone number, mobile number and social medial profile names, along with other personal identifiers.
• Transaction and Financial Information – this includes:
  • Information about your card, including your 16-digit payment card number, which is also known as a personal account number or “PAN”; an associated non-financial identifier known as payment account reference or “PAR” token; and expiration date, service code, PIN verification data, and CVV; and
  • Information about your transactions, including the date, time, location and amount of the transaction and information about the merchant. This may also include item-level data in some instances, and billing and shipping information.
• Relationship Information – this includes information about your shopping and payment preferences and other information that can help us offer you personalised content, such as:
  • Demographic information, such as age range and marital or family status;
  • Likelihood that you may be interested in certain purchases or experiencing life events and other propensity scores; and
  • Data from social media profiles and information about your interests.
• Interaction Information – this includes information about your interactions with Visa, such as:
  • Information collected when you participate in promotions or programmes, such as rewards programme account information;
  • Card benefits programme information, including qualification data and related records;
  • Information collected when you contact us, such as if you contact our customer service;
  • Visitor logs;
  • Information collected when you attend Visa-sponsored events, such as travel-related information for you and any companions gathered at the events; and
  • Other information you provide us with, such as data collected for consumer authentication (e.g., passwords or account security questions).
• Biometric Identifiers – this may include facial recognition data, fingerprints, keystroke timing, scroll position and behavioural data or other physical patterns, such as when you elect to use biometric authentication with Visa or its clients.
• Business Customer Data – this includes information about your role within your company, your authorisation to use products or services and your authority to place orders; customer/supplier qualification details; and other data you share with us in connection with the relationship.
• Inferred and Derived Information – we infer and derive data elements by analysing our relationship and transactional information. For example, we may generate propensities, attributes and/or scores for marketing, security or fraud purposes.
• Online and Technical Information – this includes information regarding your interactions with our websites, applications or advertisements, including IP address, device identifiers, settings, characteristics, advertising ID, browsing history, web server logs, server log records, activity log records, keystroke timing and other information collected using cookies and similar technologies.
• Audio and Visual Information – this includes audio, electronic, visual or similar information relating to your interactions with us, including photographs, video images, CCTV recordings, call centre recordings, call monitoring records and voicemails.
• Government-Issued Identification Numbers – this includes national insurance number, driver’s licence number, passport number and other government-issued identifiers that may be needed for compliance or given the nature of the relationship.
• Geolocation Information – this may include precise geolocation information, which we may collect automatically from your mobile device if you opt in to allow us to collect it.
• Professional and Employment Information – this includes professional or employment-related information for employees and prospective employees, including applicant and CV data, such as education and work history; information about qualifications for the position, such as skills and credentials; professional interests and goals; information collected for employee qualifications, such as right-to-work documentation; and references.
• Compliance Data – this includes records maintained to demonstrate compliance with applicable laws; records related to consumer preferences, such as your opt-ins and opt-outs of marketing programmes; and records related to data subject rights requests.

Some of the Personal Information in these categories may be considered sensitive Personal Information in some jurisdictions.

We may collect Personal Information about you from various sources, depending on our relationship and interaction with you. These sources may include:

• Your financial institutions, payment card issuer, merchants, acquirers, and other partners when you use a Visa-branded payment product or when we’re acting on their behalf, such as when you tap your Visa card;
• You, such as when you enrol in card link offer programmes from Visa or a co-promotion partner, enrol in a Visa click-to-pay solution, or provide survey responses to us;
• Your computer or devices when you interact with our platforms, websites and applications or through other automatic technologies, such as when we record calls to our call centre and use CCTV cameras in our facilities; and
• Other third parties, including data aggregators, social media companies and other publicly available sources. In addition, Professional and Employment Information may be collected from your references and third parties that help us conduct internal investigations and background screenings, and Business Customer Data may be collected from your employer, trade show and conference organisers, and professional services companies.

“Everyday Business Purposes” encompasses the following business purposes and related purposes for which Personal Information may be used:

• To provide the information, product, or service requested by the individual or as reasonably expected given the context in which the Personal Information was collected (such as customer credentialing, providing customer service, personalisation and preference management, providing product updates, bug fixes or recalls and dispute resolution);
• For identity and credential management, including identity verification and authentication, and system and technology administration;
• To protect the security and integrity of systems, networks, applications, and data, including detecting, analysing and resolving security threats, and collaborating with cybersecurity centres, consortia and law enforcement about imminent threats;
• For fraud detection and prevention;
• For legal and regulatory compliance, including all uses and disclosures of Personal Information that are required by law or reasonably needed for compliance with company policies and procedures, such as anti-money laundering programmes, security and incident response programmes, intellectual property protection programmes, and corporate ethics and compliance hotlines;
• For corporate audit, analysis and reporting;
• To enforce our contracts and to protect against injury, theft, legal liability, fraud or abuse, and to protect people or property, including physical security programmes;
• To de-identify, de-personalise, or anonymise the data or create aggregated datasets, such as for consolidating reporting, research or analytics;
• To make back-up copies for business continuity and disaster recovery purposes; and
• For corporate governance, including mergers, acquisitions and divestitures.

We may disclose your Personal Information to:

• Our Affiliates;
• Our service providers, for the purposes of providing services to us;
• Financial institutions, merchants, payment processors and other third parties that are subject to appropriate confidentiality and use restrictions, for the purposes of enabling your payments, managing fraud and risk, providing and developing products and services, and supporting our Everyday Business Purposes;  
• Third parties, such as third-party advertising partners, who may use data collected by cookies and similar means to help us with our online advertising programmes;
• Government agencies;
• Recruiting agencies and your references (for Professional and Employment Information); and
• Your company and its affiliates (for Business Customer Data).

We may also disclose personal information when required to do so by law, such as to law enforcement agencies, regulators or courts, or as permitted by law, such as when we sell or transfer business assets, enforce our contracts, protect our property or the rights, property or safety of others, or as needed for audits, compliance and corporate governance.