Global Privacy Notice (with US Privacy Addendum and California Privacy Notice)

Mastercard · agreement dated June 16, 2026 · Official agreement

Read the agreement

4 of 165 cards in Account & Service Control

Account & Service Control · Restriction or exception

If you do not provide data needed for legal duties or a contract, you may lose access to services

Mastercard says that where the Personal Information it collects from you is needed to meet its legal or regulatory obligations or to enter into an agreement with you, and you do not provide it when requested, it may not be able to provide (or continue to provide) its products or services to you, and you may not be able to purchase the products you require or fully use its services.

Details
Condition
Information is needed for legal or regulatory obligations or to enter into an agreement, and you do not provide it

Supporting quotations

Where the Personal Information we collect from you is needed to meet our legal or regulatory obligations or enter into an agreement with you, if you do not provide your Personal Information when requested, we may not be able to provide (or continue to provide) our products or services to you and you may not be able to purchase our products you require or fully use our services.

Qualifications & exceptions

  • Applies only where the information is needed to meet legal or regulatory obligations or to enter into an agreement with you.

Account & Service Control · Company commitment

Mastercard says it will not deny or reprice service for exercising rights, with exceptions

Mastercard says it will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these rights, except where the different price or level of quality is reasonably related to the value of the data it receives from you. It adds that in some instances it may not be able to provide the goods or services you request if you exercise certain rights.

Details
Exception
Different price or quality reasonably related to the value of the data received
Condition
If you choose to exercise these rights

Supporting quotations

We will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these rights, except where the different price or level of quality of goods or services is reasonably related to the value of the data that we receive from you.
In some instances, we may not be able to provide you with the goods or services that you request if you choose to exercise certain rights.

Qualifications & exceptions

  • Exception where the price or quality difference is "reasonably related to the value of the data" received from you; and some services may be unavailable if you exercise certain rights.

Not stated here

  • The notice does not say which rights affect which services.

Account & Service Control · Procedure

Requests are verified, including two-step verification on the My Data portal

The addendum says requests for access, deletion or correction are subject to Mastercard's ability to reasonably verify your identity in light of the information requested, under CCPA requirements. For the My Data portal it describes a two-step verification: besides email, name and surname, an additional second factor chosen during registration (a mobile one-time passcode or security answer). Before disclosing information it also asks consumers to answer specific questions about the products they use that are in scope of the request, and for requests by email it verifies identity using contact information (email, name and surname) and specific questions about the products they use.

Details
Condition
Ability to reasonably verify identity; second factor chosen at registration; product questions

Supporting quotations

Requests for access, deletion, or correction of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested, pursuant to relevant CCPA requirements, limitations, and regulations.
a two-step verification will enable their account to be guarded by an extra layer of security. In addition to your email, name, and surname, we require additional verification through the second factor of authentication that you have chosen (mobile one-time passcode or security answer) during registration.
Before disclosing information, we also ask consumers to respond to specific questions about the products they use and that are in scope of their privacy request.
when consumers reach out to Mastercard via email, we verify their identity by using their contact information (email, name, and surname) and specific questions about the products they use.

Qualifications & exceptions

  • Verification is required for access, deletion and correction requests; the two-step method described applies to requests made through the My Data portal.

Account & Service Control · Company commitment

California residents will not be treated worse for exercising CCPA rights, with a data-value exception

The addendum says residents have the right not to be retaliated against for exercising their CCPA privacy rights, subject to certain limitations. Mastercard says it will not deny, charge different prices for, or provide a different level of quality of goods or services if you exercise your rights, except where the different price or level of quality is reasonably related to the value of the data it receives from you.

Details
Exception
Different price or quality reasonably related to the value of the data received

Supporting quotations

You have the right not to be retaliated against for the exercise of your CCPA privacy rights, subject to certain limitations.
We will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise your rights, except where the different price or level of quality of goods or services is reasonably related to the value of the data that we receive from you.

Qualifications & exceptions

  • The right is "subject to certain limitations" and has an exception for price or quality differences reasonably related to the value of the data received.

Not stated here

  • The "certain limitations" are not listed in this source.