Retention & Deletion · Company practice
Data is deleted or de-identified when no longer needed, with no fixed retention period stated
Mastercard says it takes measures to delete your personal data or keep it in a form that does not permit identifying you when it is no longer necessary for the purposes for which it was processed, unless the law requires keeping it longer. It says that in deciding the retention period it considers criteria such as the products and services requested or provided, the nature and length of the relationship, possible re-enrolment, the impact on services if some information is deleted, mandatory legal retention periods and the statute of limitations.
Details not recorded for this card
Supporting quotations
We also take measures to delete your personal data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period.
When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.
Qualifications & exceptions
- Deletion or de-identification happens when the data is no longer necessary for the purposes of processing, unless the law requires longer retention.
Not stated here
- The notice gives no specific retention period for any category of data.