Mastercard says it discloses your data only as described, and does not sell it as defined by the CCPA
Mastercard says it does not disclose the personal data it collects about you except as described in the notice or as otherwise disclosed to you when the data is collected. It also says it does not sell personal data as the California Consumer Privacy Act defines selling.
Details not recorded for this card
Supporting quotations
We do not disclose personal data we collect about you, except as described herein or otherwise disclosed to you at the time of the data collection.
We do not sell personal data we collect about you, as defined by the California Consumer Privacy Act.
Qualifications & exceptions
The no-disclosure statement has two exceptions: disclosures described in the notice and disclosures made known at the time of collection.
The statement about selling is tied to the California Consumer Privacy Act definition of sale.
Not stated here
The notice does not set out the CCPA definition of a sale, so what that definition covers is not stated here.
Sharing & Disclosure · Company practice
Information is shared with Mastercard affiliates to operate the Program and Site
Mastercard says it shares information with its affiliates to operate the Program and the Site.
Details not recorded for this card
Supporting quotations
We share information to operate the Program and this Site with our affiliates.
Not stated here
The notice does not list the affiliates or say which information is shared with them for this purpose.
Sharing & Disclosure · Company practice
Your name, email, country and donation details go to the charity you choose
Mastercard shares information about your donation with the charity organization you select to receive your donation (a Donation Recipient). The information includes your name, your registered email address, your country, and details of your donation. The notice says Donation Recipients may use it to contact you to thank you and to give you information about their activities, including how they propose to use or have used your donation, and any tax receipts or certificates required for the donation.
Details not recorded for this card
Supporting quotations
We share information regarding your donation to the charity organization associated with the Program which you select to receive your donations ("Donation Recipients").
The information we share with Donation Recipients includes: your name, your registered email address, your country, and details of your donation.
Donation Recipients may use this information to contact you to thank you for your donation and provide you with information regarding their activities (including the use the Donation Recipient proposes to make, or has made, of your donation) and any tax receipts or certificates which may be required in connection with your donation.
Qualifications & exceptions
Applies to the charity you select to receive your donations.
The notice lists what Donation Recipients "may use" the information for: thanks, information on their activities and donation use, and required tax receipts or certificates.
Not stated here
The notice does not say whether Donation Recipients may use the information for other purposes or what privacy terms bind them.
Sharing & Disclosure · Company practice
Information is shared to carry out payment card transactions and the services you request
Mastercard says it shares information to perform payment card transactions and the services you request. It may share the personal information it collects with its headquarters, affiliates, financial institutions that issue payment cards or process payment card transactions, entities that assist with payment card fraud prevention, and merchants. As an example, it says it gives financial institutions information about their cardholders' transactions that Mastercard processes.
Details not recorded for this card
Supporting quotations
We share information to perform payment card transactions and to perform the services that you request.
We may share the personal information we collect with our headquarters, affiliates, financial institutions that issue payment cards or process payment card transactions, entities that assist with payment card fraud prevention, and merchants.
For example, in this context we provide financial institutions with information about their cardholders' transactions that Mastercard processes.
Qualifications & exceptions
Stated purpose is performing payment card transactions and the services you request.
Not stated here
The notice does not say which of the listed recipients receive donor information from this Program, or whether the cardholder-transaction example applies to donations made through the Site.
Sharing & Disclosure · Company practice
Acquirers that process your donation receive your country, credit card details and donation details
Mastercard says it shares information with acquirers who process donations made to the Program. The information shared with acquirers includes your country, your credit card details and details of your donation, which acquirers use to process transactions for donations made through the Program website.
Details not recorded for this card
Supporting quotations
We also share information with acquirers who process donations made to the Program.
The information we share with Acquirers includes: your country, your credit card details and details of your donation.
Acquirers use this information to process transactions in respect of your donations made via the Program website.
Qualifications & exceptions
Stated purpose is processing transactions for donations made through the Program website.
Not stated here
The notice does not define "acquirers" or name them.
Sharing & Disclosure · Company practice
Service providers may receive your data to perform services for Mastercard, under contract safeguards
Mastercard says it may share information with service providers who perform services on its behalf. It says it does not authorize those providers to use or disclose the information except as necessary to perform certain services for it or to comply with legal requirements, and that it requires them by contract to appropriately safeguard the privacy and security of the personal data they process for it.
Details not recorded for this card
Supporting quotations
We also may share the information with our service providers who perform services on our behalf.
We do not authorize these service providers to use or disclose the information except as necessary to perform certain services on our behalf or comply with legal requirements.
We require these service providers by contract to appropriately safeguard the privacy and security of personal data they process on our behalf.
is hosted by Goodworld Incorporated
Qualifications & exceptions
Provider use and disclosure is limited to what is necessary to perform services for Mastercard or to comply with legal requirements.
Not stated here
The notice does not list the service providers or the services. It states that Goodworld Incorporated hosts the Site, but does not say whether Goodworld is one of these service providers.
Information may be disclosed for legal process, safety, enforcing the Terms, preventing harm or investigating fraud
Mastercard says it may disclose information about you as required under applicable law or legal process, or when it believes disclosure is necessary to protect individuals' vital interests, to enforce the Terms of Use, to prevent Mastercard from harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.
Details not recorded for this card
Supporting quotations
We may disclose information about you as required under applicable law or legal process, or when we believe disclosure is necessary to protect individuals' vital interests, to enforce our
prevent Mastercard against harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.
Qualifications & exceptions
Stated as a "may" right, and for the reasons listed.
Several reasons depend on Mastercard's own belief that disclosure is necessary.
Not stated here
The notice does not say who may receive these disclosures.
Sharing & Disclosure · Permission or license
Your data may be transferred if Mastercard sells or transfers its business or assets
Mastercard reserves the right to transfer the personal data it has about you if it sells or transfers all or part of its business or assets. If that happens it says it will use reasonable efforts to direct the transferee to use the data you provided consistently with this notice, and afterwards you may contact the transferee with inquiries about processing of that information.
Details not recorded for this card
Supporting quotations
We also reserve the right to transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets.
Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use personal data you have provided to us in a manner that is consistent with this Privacy Notice.
Qualifications & exceptions
Applies if Mastercard sells or transfers all or a portion of its business or assets.
The commitment on how the transferee uses the data is limited to "reasonable efforts" to direct it.
Not stated here
The notice does not say whether you would be notified of such a transfer in advance.
Sharing & Disclosure · Company practice
Your data may be sent outside your country, where protections may differ
Mastercard says it may transfer personal data to recipients outside your country, that such transfers may be subject to restrictions, and that it will take all necessary steps to ensure compliance with applicable data protection law, in particular the legal requirements on adequate protection for transfers. It also warns that the destination countries may not have the same data protection laws as the country where you provided the information, and that you may not have access to mechanisms to protect the data under that country's law.
Details not recorded for this card
Supporting quotations
Mastercard may transfer personal data to recipients outside of your country.
Mastercard will take all necessary steps to ensure compliance with applicable data protection law
the countries which Mastercard transfers the personal data to may not have the same data protection laws as the country in which you initially provided the information, and you may not have access to mechanisms to protect the data under the data protection law in that country
Qualifications & exceptions
The compliance commitment is to steps to ensure compliance with applicable data protection law, and the notice itself warns that protections abroad may differ.
Not stated here
The notice does not name the destination countries or the legal mechanisms used for transfers.