Loyalty and Rewards Notice
Skip to main content
[Announcing the Mastercard Partner Advantage Program
Whether you're seeking the right partner or ready to become one, our network helps you connect, grow and scale faster.](https://www.mastercard.com/us/en/business/services/mastercard-partner-advantage-program.html)
[Consumers are switching. Revenue is shifting. Open finance can be your differentiator.
Read The state of open finance 2026 report.](https://www.mastercard.com/us/en/news-and-trends/Insights/2026/the-state-of-open-finance-2026.html)
[Turn everyday transactions into lasting loyalty
Traditional account management is no longer enough. Learn what consumers are looking for in their post-purchase experience in our new research with Datos Insights.](https://www.mastercard.com/us/en/news-and-trends/Insights/2026/turn-everyday-transactions-into-lasting-loyalty.html)
Loyalty & Rewards Notice
Effective Date: February 9, 2026
- This notice covers Mastercard's handling of personal information in its loyalty and rewards Programs Use & Processing
At Mastercard, we offer and support market-leading loyalty programs that allow you to earn points or rewards for purchases made with your eligible Mastercard card and to redeem those points or rewards for promotions, discounts, cashback, rebates, sweepstakes, special offers or other benefits (“Programs”). We recommend that you read this notice together with Mastercard's Global Privacy Notice.
- This notice covers Mastercard's handling of personal information in its loyalty and rewards Programs Use & Processing
1. SCOPE OF THIS NOTICE
This privacy notice (“Notice”) describes how Mastercard International Incorporated and its affiliates (collectively “Mastercard”, “us” or “we”) process Personal Information in connection with our Programs. “Personal Information” means any information relating to an identified or identifiable individual (“you”).
- This notice covers Mastercard's handling of personal information in its loyalty and rewards Programs Use & Processing
- Mastercard says it needs a legal basis for each use, and relies on consent in some countries Use & Processing
This Notice does not cover the processing by Mastercard in the context of other programs such as the priceless.com website. Please refer to the Priceless privacy notice for information about how we process your Personal Information when you use priceless.com. This Notice also does not cover the processing where we act on behalf of and under the instructions of financial institutions (e.g., the bank that issued your Mastercard card), merchants and other partners which act as data controllers, including for processing payment transactions. Please refer to their privacy notices for information about the processing of your Personal Information in such cases.
- Not covered: priceless.com and processing Mastercard does for banks, merchants and partners Use & Processing
2. WHAT PERSONAL INFORMATION WE PROCESS FOR THE PROGRAMS
Under the Programs, we collect the following types of Personal Information relating to you:
- Program account data includes registered card details, CVC2 and login credentials Data Access & Collection
- Account information and contact details, such as full name, email address, payment card number(s) you choose to register for a Program, expiry date, CVC2, login credentials, accrued total of points or rewards and points or rewards redemption history. Depending on the program, you may also choose to provide additional details, such as your address, phone number, date of birth, tax ID number, and gender where permitted by law.
- Program account data includes registered card details, CVC2 and login credentials Data Access & Collection
- Transaction information related to the card(s) enrolled in a Program, such as date / time of payment(s), personal account number, name of merchant, commercial and transaction code, currency and amount of a purchase, and a tokenized ID generated to identify whether your purchases are eligible for the Programs.
- Mastercard collects transaction details for cards enrolled in a Program Data Access & Collection
- Your preferences for or interest in specific offers or categories of offers.
- Offer preferences, survey answers and support messages are also collected Data Access & Collection
- Your geographic location (if you choose to enable the sharing of your location to see offers near you).
- Location is collected if you choose to enable sharing to see nearby offers Data Access & Collection
- Information provided when completing voluntary surveys.
- Offer preferences, survey answers and support messages are also collected Data Access & Collection
- Information provided in connection with our customer support, such as date, time and content of your message.
- Offer preferences, survey answers and support messages are also collected Data Access & Collection
- Device-related information (e.g., device ID, device model, browser type, operating system, referring URL, IP address, location data) and information about your interaction with our Programs on our websites or with the emails that we send to you (e.g., dates and times of action). We collect such information via cookies and similar technologies (such as web beacons and other trackers), as described in the consent tools provided on our websites or in the emails that we send to you.
- Location is collected if you choose to enable sharing to see nearby offers Data Access & Collection
- Device details and interaction data are collected through cookies and similar technologies Data Access & Collection
We obtain the above categories of Personal Information from various sources: from third parties such as financial institutions, loyalty program operators and merchants, directly from you, or from your interaction with cookies and similar technologies. Depending on applicable law, some of this information may qualify as sensitive Personal Information.
- Information comes from third parties as well as directly from you Data Access & Collection
- Some collected information may count as sensitive, depending on applicable law Data Access & Collection
3. HOW WE USE YOUR PERSONAL INFORMATION
We may use your Personal Information for the purposes set out below. Depending on the country in which you are located, we will only process your Personal Information when we have a legal basis for the processing, as identified in the table below. However, please note that even though this table does not list consent as a legal basis for each processing activity, in some countries consent is the only or most appropriate legal basis for the processing of Personal Information, and in those countries we rely on consent for all processing activities.
- Mastercard says it needs a legal basis for each use, and relies on consent in some countries Use & Processing
Processing Activity
- Mastercard says it needs a legal basis for each use, and relies on consent in some countries Use & Processing
Legal Basis for Processing
- Mastercard says it needs a legal basis for each use, and relies on consent in some countries Use & Processing
Determine eligibility to receive offers in connection with your card type as well as to identify transactions that may qualify for a point or reward.
- Determining offer eligibility and qualifying transactions: consent or direction, contract, or legitimate interest Use & Processing
- You consented to or directed the use of your Personal Information; or
- The processing is necessary for entering into, or performance of a contract to which you are a party; or
- We, or a third party, have a legitimate interest in using your Personal Information to be able to determine eligibility for, manage, and provide you with the Programs and their benefits.
Create and manage your Program account(s), provide our services, communicate with you about the Programs and respond to your inquiries.
- Managing Program accounts and inquiries: consent or direction, contract, legal obligation or legitimate interest Account & Service Control
- You consented to or directed the use of your Personal Information; or
- The processing is necessary for entering into, or performance of a contract to which you are a party; or
- The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
- We, or a third party, have a legitimate interest in using your Personal Information to create and manage accounts, provide our services, and respond to your inquiries.
Process and fulfil purchases made on or through a Program.
- Processing and fulfilling purchases through a Program: consent or direction, contract, or legal obligation Charges & Financial Obligations
- You consented to or directed the use of your Personal Information
- Processing and fulfilling purchases through a Program: consent or direction, contract, or legal obligation Charges & Financial Obligations
- The processing is necessary for entering into, or performance of a contract to which you are a party; or
- Processing and fulfilling purchases through a Program: consent or direction, contract, or legal obligation Charges & Financial Obligations
- The processing is necessary for compliance with a legal obligation or other regulatory obligations.
- Processing and fulfilling purchases through a Program: consent or direction, contract, or legal obligation Charges & Financial Obligations
Protect against and prevent fraud and (cyber) threats, unauthorized transactions, abuse of the Programs, claims and other liabilities.
- Preventing fraud, threats and abuse: legal obligation, contract, or legitimate interest Security & Safeguards
- The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
- Preventing fraud, threats and abuse: legal obligation, contract, or legitimate interest Security & Safeguards
- The processing is necessary for entering into, or performance of a contract to which you are party; or
- Preventing fraud, threats and abuse: legal obligation, contract, or legitimate interest Security & Safeguards
- We, or a third party, have a legitimate interest in using your Personal Information for the purpose of protecting against fraud, securing our Programs, our network, and the payment transactions that we process.
- Preventing fraud, threats and abuse: legal obligation, contract, or legitimate interest Security & Safeguards
Send you push notifications and marketing communications about the Programs (including contests, sweepstakes, and any other marketing activities).
- Push notifications and marketing about the Programs: consent or direction, contract, or legitimate interest Use & Processing
- You consented to or directed the use of your Personal Information; or
- The processing is necessary for entering into, or performance of a contract to which you are party; or
- We, or a third party, have a legitimate interest in using your Personal Information for the purpose of marketing products and services.
Analyze your preferences, spending patterns, interests, use of and interaction with the Programs to provide you with relevant offers, personalized content and personalized recommendations in connection with a Program (e.g., we may present you offers that are in your geographic range or based on your purchase history).
- Personalizing offers from your preferences and spending: consent or direction, contract, or legitimate interest Inference & Profiling
- You consented to or directed the use of your Personal Information; or
- The processing is necessary for entering into, or performance of a contract to which you are party; or
- We, or a third party, have a legitimate interest in using your Personal Information for the purposes of providing you with personalized content and recommendations.
Operate, evaluate, and improve our products and services, including the effectiveness of our offers and campaigns, and analyze our Program websites, mobile apps and any other digital assets to facilitate their functionality.
- Operating and improving products, offers and websites: consent or direction, contract, or legitimate interest Use & Processing
- You consented to or directed the use of your Personal Information; or
- The processing is necessary for entering into, or performance of a contract to which you are party; or
- We, or a third party, have a legitimate interest in using your Personal Information to operate, evaluate, and improve our products or services and promote customer engagement with the Program.
Anonymize Personal Information and prepare aggregated reports for internal analysis and to advise our financial institutions, merchants and other customers and partners in relation to spending patterns, fraud, and other insights.
- Anonymized aggregate reports for partners: legitimate interest or statistical and research purposes Use & Processing
- We, or a third party, have a legitimate interest in using your Personal Information to anonymize Personal Information and prepare aggregated data reports; or
- The processing is undertaken for statistical and/or research purposes (in jurisdictions where this legal basis is available).
Enforce applicable terms of use or as necessary to establish, exercise and defend legal rights.
- Enforcing terms and defending legal rights: contract, legal obligation, or legitimate interest Legal Rights & Agreement Rules
- The processing is necessary for entering into, or performance of a contract to which you are party; or
- Enforcing terms and defending legal rights: contract, legal obligation, or legitimate interest Legal Rights & Agreement Rules
- The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
- Enforcing terms and defending legal rights: contract, legal obligation, or legitimate interest Legal Rights & Agreement Rules
- We, or a third party, have a legitimate interest in using your Personal Information to enforce Program terms of use and establish, exercise, and defend legal rights.
- Enforcing terms and defending legal rights: contract, legal obligation, or legitimate interest Legal Rights & Agreement Rules
Comply with applicable laws or as requested by any judicial process, law enforcement or governmental agency having or claiming jurisdiction over Mastercard.
- Complying with laws and government or court requests: legal obligation or legitimate interest Legal Rights & Agreement Rules
- The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
- Complying with laws and government or court requests: legal obligation or legitimate interest Legal Rights & Agreement Rules
- We, or a third party, have a legitimate interest in using your Personal Information to respond to a judicial process, law enforcement or governmental agency.
- Complying with laws and government or court requests: legal obligation or legitimate interest Legal Rights & Agreement Rules
Comply with industry standards and our policies.
- Complying with industry standards and policies: consent or direction, legal obligation, contract or legitimate interest Legal Rights & Agreement Rules
- You consented to or directed the use of your Personal Information; or
- Complying with industry standards and policies: consent or direction, legal obligation, contract or legitimate interest Legal Rights & Agreement Rules
- The processing is necessary for compliance with a legal obligation or other regulatory obligations; or
- Complying with industry standards and policies: consent or direction, legal obligation, contract or legitimate interest Legal Rights & Agreement Rules
- The processing is necessary for entering into, or performance of a contract to which you are party; or
- Complying with industry standards and policies: consent or direction, legal obligation, contract or legitimate interest Legal Rights & Agreement Rules
- We, or a third party, have a legitimate interest in using your Personal Information to comply with industry standards and our policies.
- Complying with industry standards and policies: consent or direction, legal obligation, contract or legitimate interest Legal Rights & Agreement Rules
4. HOW WE SHARE YOUR PERSONAL INFORMATION
We may share your Personal Information:
- Mastercard may share your information with its U.S. headquarters, affiliates and group companies Sharing & Disclosure
- Marketing agencies and service providers may receive your information, under contractual protections Sharing & Disclosure
- Card issuers and merchants may receive your information to support Program initiatives and handle complaints Sharing & Disclosure
- Third parties that run or support a Program you choose to join may receive your information Sharing & Disclosure
- Redemption partners may receive your information to process or fulfil purchases or transfers Sharing & Disclosure
- Mastercard may disclose information to protect individuals, itself or investigate suspected fraud Sharing & Disclosure
- Mastercard may disclose information as required by law or to answer law enforcement and government requests Sharing & Disclosure
- If Mastercard's business or assets are sold or transferred, your information may go with them Sharing & Disclosure
- With Mastercard’s headquarters in the U.S., our affiliates, and other entities within Mastercard’s group of companies.
- With marketing agencies and other service providers who perform services on our behalf and in connection with the purposes described in this Notice. We subject them to strict contractual data protection and security obligations.
- With financial institution(s) (e.g., banks that issued the card(s) enrolled in a Program) or merchants to the extent necessary to support Program-related initiatives, and to handle complaints.
- With third parties that operate or support a Program that you choose to join.
- With redemption partners to process or fulfil purchases or transfers made through a Program.
- When we believe disclosure is necessary to protect individuals’ vital interests, to protect Mastercard against harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.
- As required under applicable law or legal process, or to respond to requests from law enforcement or governmental agencies. When receiving such requests, we will follow the process set out in our Binding Corporate Rules opens in a new tab, where applicable.
- In the event of the sale or transfer of our business or assets, in whole or in part. In such event, we will use reasonable efforts to direct the transferee to use the Personal Information you provided to us in a manner consistent with this Notice.
5. YOUR RIGHTS AND CHOICES, HOW TO CONTACT US, AND ADDITIONAL INFORMATION ABOUT OUR PRACTICES
You have certain rights and choices regarding the Personal Information we maintain about you. For more information about how to submit a request to exercise your rights to your Personal Information, or your right to contact us, or to learn more about how we share, transfer, retain or protect your Personal Information, please refer to “Your Rights and Choices” in our Global Privacy Notice. You can exercise your rights to opt out of our processing of Personal Information by emailing us at: privacyanddataprotection@mastercard.com. Please indicate the name of the Program your request is about in the subject of your email.
- You can opt out of Mastercard's processing by emailing it and naming the Program Use & Processing
- Details on rights requests, contact, sharing, transfer, retention and protection are in the Global Privacy Notice Legal Rights & Agreement Rules
This Notice provides further information about certain aspects of the processing of Personal information covered by our Global Privacy Notice. For enquiries about your Mastercard card and your purchases, please contact your financial institution or merchant. More information about how to contact them can be found on their websites.