This is Visa's Global Privacy Notice, covering how Visa and its Affiliates handle personal information
The document is Visa's own Global Privacy Notice. It explains how Visa and its Affiliates collect, use and share Personal Information when you use Visa's products, services, offers and promotions, or those of Visa's clients. 'Affiliates' are companies that Visa U.S.A. Inc. or its parent Visa Inc. directly or indirectly controls through ownership.
Details not recorded for this card
Supporting quotations
Visa Global Privacy Notice
This Global Privacy Notice explains how Visa and its Affiliates¹ collect, use, and share Personal Information when you use our, or our clients’, products, services, offers, and promotions.
Visa’s Affiliates are companies that are directly or indirectly controlled by Visa U.S.A. Inc. or its parent company Visa Inc. through ownership
Not stated here
The notice does not name Chime or any other card issuer, so it does not say which Visa products or Visa entities apply to a given issuer's customers.
The notice states an effective date of May 14, 2026
The notice dates itself 'Effective date: May 14, 2026'. This analysis covers the version carrying that date.
Details not recorded for this card
Supporting quotations
Effective date: May 14, 2026
Legal Rights & Agreement Rules · Context
The controller is the Visa entity named in the terms you sign when enrolling in a Visa service
Where Visa acts as a controller under applicable laws and collects information directly from an individual, the controller is the Visa entity listed on the terms and conditions the individual signs when enrolling in a Visa service, product or offer.
Details not recorded for this card
Supporting quotations
Where Visa acts a controller under applicable laws and collects information directly from an individual, the controller is the Visa entity listed on the terms and conditions you sign when enrolling in a Visa service, product, or offer.
Qualifications & exceptions
Applies where Visa acts as a controller under applicable laws and collects the information directly from the individual.
Not stated here
The terms and conditions that name the Visa entity are not part of this notice, so it does not say which entity applies to a particular service.
Some Visa companies and services have their own privacy notices, and supplemental notices add legally required detail
Visa says some of its companies and services have different privacy notices, which are provided when you use them. It also has supplemental privacy notices that provide additional information as required by law.
Details not recorded for this card
Supporting quotations
Some Visa companies and services have different privacy notices that are provided when you use them. We also have supplemental privacy notices that provide additional information as required by law.
Not stated here
The notice does not identify which Visa companies or services have their own notices; the supplemental notices it lists later are linked, not reproduced here.
Some collected information may count as sensitive personal information in some jurisdictions
Visa says some of the Personal Information in the listed categories may be considered sensitive Personal Information in some jurisdictions. 'Personal Information' is the notice's defined term for information capable of being associated with an individual.
Details not recorded for this card
Supporting quotations
Some of the Personal Information in these categories may be considered sensitive Personal Information in some jurisdictions.
“Personal Information” refers to information that (alone or when used in combination with other information) is capable of being associated with or could reasonably be associated with an individual.
Not stated here
The notice does not say which categories are sensitive or which jurisdictions treat them that way.
Visa gives contract, legal compliance and legitimate interests as its legal bases for network and fraud-prevention uses
For the network, fraud-prevention and fraud-feature row, the legal bases listed are: fulfilling a contract to which you are a party, or one between you and a merchant or between you and the financial institution that issued your card, where Visa provides payment services or acts as a data processor; complying with laws and regulations that apply to Visa around the world; and Visa's own legitimate interests or those of others, such as protecting you, Visa or others from security threats or fraud, enabling or administering its business (quality control, compliance, consolidated reporting, customer service), managing corporate transactions such as mergers or acquisitions, and understanding and improving its business or customer relationships generally.
Details not recorded for this card
Supporting quotations
Operate Visa’s electronic payments networks (including authorization, clearing, and settlement of transactions and tokenization), enable your payment transactions, and for related purposes, such as authentication and dispute resolution.
To safeguard against fraud and cyber incidents, enhance the cyber resilience of our operations and network and effectively manage risk exposure.
To develop and offer enhanced identity verification, fraud and security features such as fraud scores and rules based or artificial intelligence based systems that can identify fraud patterns
To fulfill a contract to which you are a party, such as a contract with you, or as needed to fulfill a contract between you and a merchant or between you and the financial institution or other entity that issued your card, where Visa is providing payment services or acting as a data processor
To comply with the laws and regulations that are applicable to us around the world
For the purposes of our own legitimate interests or for the legitimate interests of others, such as to protect you, us, or others from threats (such as security threats or fraud); to enable or administer our business, such as for quality control, compliance, consolidated reporting, and customer service; to manage corporate transactions, such as mergers or acquisitions; and to understand and improve our business or customer relationships generally
Qualifications & exceptions
The column is headed 'Legal Basis for Processing (Where required under applicable law)', so these bases are given only where the law requires a legal basis.
Not stated here
The legal bases are listed for the row as a whole; the table does not say which basis supports which purpose or which country's law applies.
Visa gives contract, legal compliance and legitimate interests as legal bases for providing what you request
For the purpose of providing the products, services, programs, offers or information you request, the legal bases listed are fulfilling a contract to which you are a party, complying with the laws and regulations that apply to Visa around the world, and Visa's own legitimate interests or those of others. The contract and legitimate-interests entries say 'as described above'. 'As described above' points back to the first row of the table, where the contract basis covers a contract with you or one between you and a merchant or your card issuer when Visa provides payment services or acts as a data processor, and the legitimate-interests basis covers examples such as protecting against security threats and fraud, administering the business, managing corporate transactions and improving customer relationships. These bases are listed against all categories shown for this purpose, which exclude only Professional and Employment Information.
Details not recorded for this card
Supporting quotations
Provide you with the products, services, programs, offers, or information you request from Visa
To fulfill a contract to which you are a party, as described above
To comply with the laws and regulations that are applicable to us around the world
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
To fulfill a contract to which you are a party, such as a contract with you, or as needed to fulfill a contract between you and a merchant or between you and the financial institution or other entity that issued your card, where Visa is providing payment services or acting as a data processor
For the purposes of our own legitimate interests or for the legitimate interests of others, such as to protect you, us, or others from threats (such as security threats or fraud); to enable or administer our business, such as for quality control, compliance, consolidated reporting, and customer service; to manage corporate transactions, such as mergers or acquisitions; and to understand and improve our business or customer relationships generally
Interaction Information
Biometric Identifiers
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Geolocation Information
Compliance Data
Relationship Information
Qualifications & exceptions
Legal bases are given only where the law requires one, as the column heading says: 'Where required under applicable law'.
Not stated here
The table does not say which basis supports which part of the purpose or which country's law applies.
Legal Rights & Agreement Rules · Company commitment
Visa says it protects transferred information as the relevant notices describe and follows cross-border transfer rules
Visa says it will always protect your information as described in the relevant privacy notice(s), no matter where it is stored, and will transfer it in accordance with any applicable legal requirements for cross-border transfer of Personal Information.
Details not recorded for this card
Supporting quotations
However, we will always protect your information as described in the relevant privacy notice(s), no matter where it is stored, and transfer it in accordance with any applicable legal requirements for cross-border transfer of Personal Information.
Not stated here
The notice does not say which legal requirements it means or how the protection is carried out for each transfer.
This notice covers Visa Inc. and its Affiliates; read your card issuer's and other clients' notices too
The notice says it explains how Visa Inc. and its Affiliates handle your Personal Information. It asks you to also read the privacy notice from your Visa card issuer and other applicable clients to learn how those companies handle your information, and, if you take part in offers or promotions, the privacy notices from the merchant or rewards network before you sign up.
Details not recorded for this card
Supporting quotations
This Privacy Notice explains how Visa Inc. and its Affiliates handle your Personal Information. Please also read the privacy notice provided by your Visa card issuer and other applicable clients to learn how each of those companies handle your information. Additionally, if you are participating in offers or promotions, please read the privacy notices provided by the merchant or the rewards network before you sign up.
Not stated here
The issuers', clients', merchants' and rewards networks' notices are not part of this document.
Legal Rights & Agreement Rules · Context
Social media platforms and other websites reached through Visa's websites have their own privacy policies
The notice says social media platforms and other websites that may be accessed through Visa's websites have their own privacy policies, and Visa encourages you to read their notices before you give them your information.
Details not recorded for this card
Supporting quotations
Social media platforms and other websites that may be accessed through Visa’s websites also have their own privacy policies. We encourage you to read the privacy notices provided by these sites before you give them your information.
Legal Rights & Agreement Rules · Company commitment
Visa may change the notice: online alerts for material changes, direct notice if already-collected data is affected
Visa says it may update the notice from time to time. It will post an alert online if the changes are material, and will notify you if the changes will materially affect the way it uses Personal Information it has already collected.
Details not recorded for this card
Supporting quotations
We may update this Privacy Notice from time to time. We will post an alert online if the changes are material. If the changes will materially affect the way we use Personal Information that we have already collected, we will notify you.
Qualifications & exceptions
Direct notice to you is promised only where the change will materially affect how already-collected information is used.
Not stated here
The notice does not say how you will be notified, how far ahead of a change, or when an update takes effect.
Legal Rights & Agreement Rules · Context
Visa lists a Candidate Privacy Notice among the notices that supplement this one
The notice says it is supplemented by additional notices that depend on how you interact with Visa and where. The first one listed is a Candidate Privacy Notice.
Details not recorded for this card
Supporting quotations
This Global Privacy Notice is supplemented by the following additional notices, depending on how you interact with us and where:
The Candidate Privacy Notice is a separate linked document whose text is not supplied here, so what it adds is not stated.
Legal Rights & Agreement Rules · Context
Visa lists separate jurisdiction-specific notices for 13 countries or regions, in local languages
The notice lists supplemental notices for Argentina (Spanish), Australia (English), Brazil (Portuguese), Canada (English), mainland China (Simplified Chinese), Colombia (Spanish), the European Economic Area, Switzerland and the UK (English), Japan (Japanese), South Korea (Korean), New Zealand (English), Taiwan (Traditional Chinese), Turkey (Turkish) and Vietnam (English, with a Vietnamese version listed separately). The Global Privacy Notice says it is supplemented by these notices depending on how you interact with Visa and where.
Each notice applies depending on how you interact with Visa and where, as the introduction to the list says.
Not stated here
The text of these linked notices is not supplied in this document, so what additional terms or rights each one sets out is not stated.
Legal Rights & Agreement Rules · Context
Visa lists a U.S. State Privacy Laws Supplementary Notice and a U.S. Social Security Number Policy statement
For the United States, the notice lists two supplemental documents: a 'U.S. - State Privacy Laws Supplementary Notice (English)' and a 'U.S. - Social Security Number Policy and Sensitive Personal Information Statement (English)'.
Both documents are separate linked pages whose text is not supplied here, so this analysis does not state what state-law rights or what Social Security number and sensitive information practices they set out.
Legal Rights & Agreement Rules · Context
Open banking has its own privacy notice, available only in certain countries, otherwise redirecting to this notice
Visa lists an Open Banking Privacy Notice. It says open banking is available only in certain countries, and that if open banking is not available in your region you will be redirected to the Visa Global Privacy Notice.
Please note open banking is only available in certain countries. If open banking is not available in your region, you will be redirected to the Visa Global Privacy Notice.
Qualifications & exceptions
Open banking is available only in certain countries.
Not stated here
The Open Banking Privacy Notice is a separate linked document whose text is not supplied here.