Loyalty and Rewards Notice

Use & Processing · Context

This notice covers Mastercard's handling of personal information in its loyalty and rewards Programs

Mastercard International Incorporated and its affiliates (together "Mastercard", "us" or "we") use this notice to describe how they process Personal Information in connection with Mastercard's loyalty programs. "Programs" means programs in which you earn points or rewards for purchases made with your eligible Mastercard card and redeem them for promotions, discounts, cashback, rebates, sweepstakes, special offers or other benefits. "Personal Information" means any information relating to an identified or identifiable individual. The notice says it gives further information about certain aspects of processing covered by Mastercard's Global Privacy Notice, and recommends reading the two together.

Supporting quotations

Effective Date: February 9, 2026

we offer and support market-leading loyalty programs that allow you to earn points or rewards for purchases made with your eligible Mastercard card and to redeem those points or rewards for promotions, discounts, cashback, rebates, sweepstakes, special offers or other benefits (“Programs”)

This privacy notice (“Notice”) describes how Mastercard International Incorporated and its affiliates (collectively “Mastercard”, “us” or “we”) process Personal Information in connection with our Programs

“Personal Information” means any information relating to an identified or identifiable individual (“you”)

We recommend that you read this notice together with Mastercard's

This Notice provides further information about certain aspects of the processing of Personal information covered by our

Qualifications & exceptions

• Effective date: February 9, 2026.
• Points or rewards are earned on purchases made with an eligible Mastercard card.

Not stated here

• Which cards count as eligible, and which specific Programs exist, is not stated in this notice.
• The Global Privacy Notice is linked but its text is not part of this saved document.

Use & Processing · Restriction or exception

Not covered: priceless.com and processing Mastercard does for banks, merchants and partners

This notice does not cover Mastercard's processing in the context of other programs such as the priceless.com website, which has its own Priceless privacy notice. It also does not cover processing where Mastercard acts on behalf of and under the instructions of financial institutions (for example, the bank that issued your card), merchants and other partners that act as data controllers, including for processing payment transactions. For those cases the notice points you to the privacy notices of those institutions, merchants and partners.

Supporting quotations

This Notice does not cover the processing by Mastercard in the context of other programs such as the priceless.com website

This Notice also does not cover the processing where we act on behalf of and under the instructions of financial institutions (e.g., the bank that issued your Mastercard card), merchants and other partners which act as data controllers, including for processing payment transactions

Please refer to their privacy notices for information about the processing of your Personal Information in such cases.

Qualifications & exceptions

• The second exclusion applies only where Mastercard acts on behalf of and under the instructions of a financial institution, merchant or other partner that acts as a data controller.
• priceless.com is given as an example of other excluded programs ("such as").

Not stated here

• Other programs besides priceless.com that fall outside this notice are not listed.
• The Priceless notice and the partners' own notices are not part of this saved document.

Data Access & Collection · Company practice

Program account data includes registered card details, CVC2 and login credentials

Under the Programs, Mastercard collects account information and contact details: full name, email address, the payment card number(s) you choose to register for a Program, expiry date, CVC2, login credentials, your accrued total of points or rewards, and your points or rewards redemption history. Depending on the program, you may also choose to provide additional details, such as your address, phone number, date of birth, tax ID number, and gender where permitted by law.

Supporting quotations

Under the Programs, we collect the following types of Personal Information relating to you:

Account information and contact details, such as full name, email address, payment card number(s) you choose to register for a Program, expiry date, CVC2, login credentials, accrued total of points or rewards and points or rewards redemption history.

Depending on the program, you may also choose to provide additional details, such as your address, phone number, date of birth, tax ID number, and gender where permitted by law.

Qualifications & exceptions

• The additional details (address, phone number, date of birth, tax ID number, gender) depend on the program and are ones you may choose to provide.
• Gender is collected only where permitted by law.

Not stated here

• The notice does not say which programs ask for the additional details.

Data Access & Collection · Company practice

Mastercard collects transaction details for cards enrolled in a Program

For card(s) enrolled in a Program, Mastercard collects transaction information such as the date and time of payment(s), personal account number, name of merchant, commercial and transaction code, currency and amount of a purchase, and a tokenized ID generated to identify whether your purchases are eligible for the Programs.

Supporting quotations

Transaction information related to the card(s) enrolled in a Program, such as date / time of payment(s), personal account number, name of merchant, commercial and transaction code, currency and amount of a purchase, and a tokenized ID generated to identify whether your purchases are eligible for the Programs.

Qualifications & exceptions

• The items listed are examples ("such as"), not a complete list.

Data Access & Collection · Company practice

Offer preferences, survey answers and support messages are also collected

Mastercard also collects your preferences for or interest in specific offers or categories of offers, information you provide when completing voluntary surveys, and information provided in connection with customer support, such as the date, time and content of your message.

Supporting quotations

Your preferences for or interest in specific offers or categories of offers.

Information provided when completing voluntary surveys.

Information provided in connection with our customer support, such as date, time and content of your message.

Qualifications & exceptions

• Survey information comes only from surveys that are voluntary.
• Support information is described by example ("such as" date, time and content of your message).

Data Access & Collection · Company practice

Location is collected if you choose to enable sharing to see nearby offers

Mastercard collects your geographic location if you choose to enable the sharing of your location to see offers near you. Separately, the device-related information the notice lists includes IP address and "location data", collected through cookies and similar technologies; the notice does not say whether that location data depends on the same location-sharing choice.

Supporting quotations

Your geographic location (if you choose to enable the sharing of your location to see offers near you).

IP address, location data

Not stated here

• Whether the "location data" listed under device-related information is covered by the same enable-sharing choice is not stated.

Data Access & Collection · Company practice

Device details and interaction data are collected through cookies and similar technologies

Mastercard collects device-related information (for example device ID, device model, browser type, operating system, referring URL, IP address and location data) and information about your interaction with the Programs on its websites or with emails it sends you (for example dates and times of action). It collects this information through cookies and similar technologies such as web beacons and other trackers, as described in the consent tools provided on its websites or in its emails.

Supporting quotations

Device-related information (e.g., device ID, device model, browser type, operating system, referring URL, IP address, location data) and information about your interaction with our Programs on our websites or with the emails that we send to you (e.g., dates and times of action).

We collect such information via cookies and similar technologies (such as web beacons and other trackers), as described in the consent tools provided on our websites or in the emails that we send to you.

Qualifications & exceptions

• Collection is described as happening through cookies and similar technologies, as set out in the consent tools on Mastercard's websites or in its emails.
• Device items and interaction items are examples ("e.g.").

Not stated here

• The content of the consent tools, and what choices they offer, is not part of this notice.

Data Access & Collection · Company practice

Information comes from third parties as well as directly from you

Mastercard says it obtains the categories of Personal Information above from third parties such as financial institutions, loyalty program operators and merchants, directly from you, and from your interaction with cookies and similar technologies.

Supporting quotations

We obtain the above categories of Personal Information from various sources: from third parties such as financial institutions, loyalty program operators and merchants, directly from you, or from your interaction with cookies and similar technologies.

Qualifications & exceptions

• Third-party sources are named by example ("such as").

Data Access & Collection · Context

Some collected information may count as sensitive, depending on applicable law

The notice says that, depending on applicable law, some of the information collected may qualify as sensitive Personal Information. It does not say which items might qualify.

Supporting quotations

Depending on applicable law, some of this information may qualify as sensitive Personal Information.

Not stated here

• Which categories qualify as sensitive, and which law applies, are not stated.

Use & Processing · Company commitment

Mastercard says it needs a legal basis for each use, and relies on consent in some countries

Mastercard may use your Personal Information for the purposes in the table. Depending on the country in which you are located, it says it will only process your Personal Information when it has a legal basis, as identified in the table. The table does not list consent as a legal basis for every activity, but the notice states that in some countries consent is the only or most appropriate legal basis, and in those countries Mastercard relies on consent for all processing activities. The table pairs each processing activity with its legal bases.

Supporting quotations

We may use your Personal Information for the purposes set out below. Depending on the country in which you are located, we will only process your Personal Information when we have a legal basis for the processing, as identified in the table below.

However, please note that even though this table does not list consent as a legal basis for each processing activity, in some countries consent is the only or most appropriate legal basis for the processing of Personal Information, and in those countries we rely on consent for all processing activities.

Processing Activity

Legal Basis for Processing

“Personal Information” means any information relating to an identified or identifiable individual (“you”)

Qualifications & exceptions

• The legal-basis requirement is stated by country: it depends on the country in which you are located.
• Reliance on consent for all activities applies only in countries where consent is the only or most appropriate legal basis.

Not stated here

• The notice does not name the countries where consent is the only or most appropriate basis.
• The notice does not say which listed basis applies to a particular person or country.

Use & Processing · Company practice

Determining offer eligibility and qualifying transactions: consent or direction, contract, or legitimate interest

For determining your eligibility to receive offers in connection with your card type, and identifying transactions that may qualify for a point or reward, the table lists three legal bases: you consented to or directed the use of your Personal Information; the processing is necessary for entering into or performing a contract to which you are a party; or Mastercard or a third party has a legitimate interest in using your Personal Information to determine eligibility for, manage, and provide you with the Programs and their benefits.

Details not recorded for this card

Supporting quotations

Determine eligibility to receive offers in connection with your card type as well as to identify transactions that may qualify for a point or reward.

You consented to or directed the use of your Personal Information; or

The processing is necessary for entering into, or performance of a contract to which you are a party; or

We, or a third party, have a legitimate interest in using your Personal Information to be able to determine eligibility for, manage, and provide you with the Programs and their benefits.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.

Account & Service Control · Company practice

Managing Program accounts and inquiries: consent or direction, contract, legal obligation or legitimate interest

For creating and managing your Program account(s), providing services, communicating with you about the Programs and responding to your inquiries, the table lists four legal bases: you consented to or directed the use of your Personal Information; the processing is necessary for entering into or performing a contract to which you are a party; the processing is necessary for compliance with a legal obligation or other regulatory obligations; or Mastercard or a third party has a legitimate interest in using your Personal Information to create and manage accounts, provide services and respond to your inquiries.

Details not recorded for this card

Supporting quotations

Create and manage your Program account(s), provide our services, communicate with you about the Programs and respond to your inquiries.

You consented to or directed the use of your Personal Information; or

The processing is necessary for entering into, or performance of a contract to which you are a party; or

The processing is necessary for compliance with a legal obligation or other regulatory obligations; or

We, or a third party, have a legitimate interest in using your Personal Information to create and manage accounts, provide our services, and respond to your inquiries.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.

Charges & Financial Obligations · Company practice

Processing and fulfilling purchases through a Program: consent or direction, contract, or legal obligation

For processing and fulfilling purchases made on or through a Program, the table lists three legal bases: you consented to or directed the use of your Personal Information; the processing is necessary for entering into or performing a contract to which you are a party; or the processing is necessary for compliance with a legal obligation or other regulatory obligations. A legitimate-interest basis is not listed in this row.

Details not recorded for this card

Supporting quotations

Process and fulfil purchases made on or through a Program.

You consented to or directed the use of your Personal Information

The processing is necessary for entering into, or performance of a contract to which you are a party; or

The processing is necessary for compliance with a legal obligation or other regulatory obligations.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.

Security & Safeguards · Company practice

Preventing fraud, threats and abuse: legal obligation, contract, or legitimate interest

For protecting against and preventing fraud and (cyber) threats, unauthorized transactions, abuse of the Programs, claims and other liabilities, the table lists three legal bases: the processing is necessary for compliance with a legal obligation or other regulatory obligations; the processing is necessary for entering into or performing a contract to which you are party; or Mastercard or a third party has a legitimate interest in using your Personal Information for the purpose of protecting against fraud, securing the Programs, its network, and the payment transactions it processes. Consent is not listed in this row.

Details not recorded for this card

Supporting quotations

Protect against and prevent fraud and (cyber) threats, unauthorized transactions, abuse of the Programs, claims and other liabilities.

The processing is necessary for compliance with a legal obligation or other regulatory obligations; or

The processing is necessary for entering into, or performance of a contract to which you are party; or

We, or a third party, have a legitimate interest in using your Personal Information for the purpose of protecting against fraud, securing our Programs, our network, and the payment transactions that we process.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.
• Consent is not listed for this row, though the notice says that in some countries Mastercard relies on consent for all processing activities.

Use & Processing · Company practice

Push notifications and marketing about the Programs: consent or direction, contract, or legitimate interest

For sending you push notifications and marketing communications about the Programs, including contests, sweepstakes and any other marketing activities, the table lists three legal bases: you consented to or directed the use of your Personal Information; the processing is necessary for entering into or performing a contract to which you are party; or Mastercard or a third party has a legitimate interest in using your Personal Information for the purpose of marketing products and services.

Details not recorded for this card

Supporting quotations

Send you push notifications and marketing communications about the Programs (including contests, sweepstakes, and any other marketing activities).

You consented to or directed the use of your Personal Information; or

The processing is necessary for entering into, or performance of a contract to which you are party; or

We, or a third party, have a legitimate interest in using your Personal Information for the purpose of marketing products and services.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.

Inference & Profiling · Company practice

Personalizing offers from your preferences and spending: consent or direction, contract, or legitimate interest

For analyzing your preferences, spending patterns, interests, and your use of and interaction with the Programs in order to give you relevant offers, personalized content and personalized recommendations in connection with a Program (for example offers in your geographic range or based on your purchase history), the table lists three legal bases: you consented to or directed the use of your Personal Information; the processing is necessary for entering into or performing a contract to which you are party; or Mastercard or a third party has a legitimate interest in using your Personal Information for providing you with personalized content and recommendations.

Details not recorded for this card

Supporting quotations

Analyze your preferences, spending patterns, interests, use of and interaction with the Programs to provide you with relevant offers, personalized content and personalized recommendations in connection with a Program (e.g., we may present you offers that are in your geographic range or based on your purchase history).

You consented to or directed the use of your Personal Information; or

The processing is necessary for entering into, or performance of a contract to which you are party; or

We, or a third party, have a legitimate interest in using your Personal Information for the purposes of providing you with personalized content and recommendations.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.
• The geographic-range and purchase-history examples are given as illustrations ("e.g.").

Use & Processing · Company practice

Operating and improving products, offers and websites: consent or direction, contract, or legitimate interest

For operating, evaluating and improving Mastercard's products and services, including the effectiveness of its offers and campaigns, and analyzing Program websites, mobile apps and other digital assets to facilitate their functionality, the table lists three legal bases: you consented to or directed the use of your Personal Information; the processing is necessary for entering into or performing a contract to which you are party; or Mastercard or a third party has a legitimate interest in using your Personal Information to operate, evaluate and improve its products or services and promote customer engagement with the Program.

Details not recorded for this card

Supporting quotations

Operate, evaluate, and improve our products and services, including the effectiveness of our offers and campaigns, and analyze our Program websites, mobile apps and any other digital assets to facilitate their functionality.

You consented to or directed the use of your Personal Information; or

The processing is necessary for entering into, or performance of a contract to which you are party; or

We, or a third party, have a legitimate interest in using your Personal Information to operate, evaluate, and improve our products or services and promote customer engagement with the Program.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.

Use & Processing · Company practice

Anonymized aggregate reports for partners: legitimate interest or statistical and research purposes

For anonymizing Personal Information and preparing aggregated reports for internal analysis and to advise Mastercard's financial institutions, merchants and other customers and partners on spending patterns, fraud and other insights, the table lists two legal bases: Mastercard or a third party has a legitimate interest in using your Personal Information to anonymize it and prepare aggregated data reports; or the processing is undertaken for statistical and/or research purposes. Neither consent nor contract is listed in this row.

Details not recorded for this card

Supporting quotations

Anonymize Personal Information and prepare aggregated reports for internal analysis and to advise our financial institutions, merchants and other customers and partners in relation to spending patterns, fraud, and other insights.

We, or a third party, have a legitimate interest in using your Personal Information to anonymize Personal Information and prepare aggregated data reports; or

The processing is undertaken for statistical and/or research purposes (in jurisdictions where this legal basis is available).

Qualifications & exceptions

• The statistical and/or research basis applies in jurisdictions where this legal basis is available.
• Legal bases depend on the country in which you are located.

Not stated here

• The notice does not say how the anonymization is done or what the aggregated reports contain beyond the listed insights.

Legal Rights & Agreement Rules · Company practice

Enforcing terms and defending legal rights: contract, legal obligation, or legitimate interest

For enforcing applicable terms of use, or as necessary to establish, exercise and defend legal rights, the table lists three legal bases: the processing is necessary for entering into or performing a contract to which you are party; the processing is necessary for compliance with a legal obligation or other regulatory obligations; or Mastercard or a third party has a legitimate interest in using your Personal Information to enforce Program terms of use and establish, exercise and defend legal rights. Consent is not listed in this row.

Details not recorded for this card

Supporting quotations

Enforce applicable terms of use or as necessary to establish, exercise and defend legal rights.

The processing is necessary for entering into, or performance of a contract to which you are party; or

The processing is necessary for compliance with a legal obligation or other regulatory obligations; or

We, or a third party, have a legitimate interest in using your Personal Information to enforce Program terms of use and establish, exercise, and defend legal rights.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.
• Consent is not listed for this row, though the notice says that in some countries Mastercard relies on consent for all processing activities.

Legal Rights & Agreement Rules · Company practice

Complying with laws and government or court requests: legal obligation or legitimate interest

For complying with applicable laws, or as requested by any judicial process, law enforcement or governmental agency having or claiming jurisdiction over Mastercard, the table lists two legal bases: the processing is necessary for compliance with a legal obligation or other regulatory obligations; or Mastercard or a third party has a legitimate interest in using your Personal Information to respond to a judicial process, law enforcement or governmental agency. Consent is not listed in this row.

Details not recorded for this card

Supporting quotations

Comply with applicable laws or as requested by any judicial process, law enforcement or governmental agency having or claiming jurisdiction over Mastercard.

The processing is necessary for compliance with a legal obligation or other regulatory obligations; or

We, or a third party, have a legitimate interest in using your Personal Information to respond to a judicial process, law enforcement or governmental agency.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.
• The agencies are described as "having or claiming jurisdiction over Mastercard".

Legal Rights & Agreement Rules · Company practice

Complying with industry standards and policies: consent or direction, legal obligation, contract or legitimate interest

For complying with industry standards and Mastercard's policies, the table lists four legal bases: you consented to or directed the use of your Personal Information; the processing is necessary for compliance with a legal obligation or other regulatory obligations; the processing is necessary for entering into or performing a contract to which you are party; or Mastercard or a third party has a legitimate interest in using your Personal Information to comply with industry standards and its policies.

Details not recorded for this card

Supporting quotations

Comply with industry standards and our policies.

You consented to or directed the use of your Personal Information; or

The processing is necessary for compliance with a legal obligation or other regulatory obligations; or

The processing is necessary for entering into, or performance of a contract to which you are party; or

We, or a third party, have a legitimate interest in using your Personal Information to comply with industry standards and our policies.

Qualifications & exceptions

• Legal bases depend on the country in which you are located.

Sharing & Disclosure · Permission or license

Mastercard may share your information with its U.S. headquarters, affiliates and group companies

Mastercard says it may share your Personal Information with Mastercard's headquarters in the U.S., its affiliates, and other entities within Mastercard's group of companies.

Supporting quotations

We may share your Personal Information:

With Mastercard’s headquarters in the U.S., our affiliates, and other entities within Mastercard’s group of companies.

Sharing & Disclosure · Permission or license

Marketing agencies and service providers may receive your information, under contractual protections

Mastercard may share your Personal Information with marketing agencies and other service providers who perform services on its behalf and in connection with the purposes described in this notice. Mastercard says it subjects them to strict contractual data protection and security obligations.

Supporting quotations

We may share your Personal Information:

With marketing agencies and other service providers who perform services on our behalf and in connection with the purposes described in this Notice. We subject them to strict contractual data protection and security obligations.

Qualifications & exceptions

• Sharing is for services performed on Mastercard's behalf and in connection with the purposes described in the notice.

Not stated here

• The notice does not describe the contractual obligations beyond calling them strict data protection and security obligations.

Sharing & Disclosure · Permission or license

Card issuers and merchants may receive your information to support Program initiatives and handle complaints

Mastercard may share your Personal Information with financial institution(s), such as the banks that issued the card(s) enrolled in a Program, or with merchants, to the extent necessary to support Program-related initiatives and to handle complaints.

Supporting quotations

We may share your Personal Information:

With financial institution(s) (e.g., banks that issued the card(s) enrolled in a Program) or merchants to the extent necessary to support Program-related initiatives, and to handle complaints.

Qualifications & exceptions

• Only to the extent necessary to support Program-related initiatives and to handle complaints.

Sharing & Disclosure · Permission or license

Third parties that run or support a Program you choose to join may receive your information

Mastercard may share your Personal Information with third parties that operate or support a Program that you choose to join.

Supporting quotations

We may share your Personal Information:

With third parties that operate or support a Program that you choose to join.

Not stated here

• The notice does not name these third parties.

Sharing & Disclosure · Permission or license

Redemption partners may receive your information to process or fulfil purchases or transfers

Mastercard may share your Personal Information with redemption partners to process or fulfil purchases or transfers made through a Program.

Supporting quotations

We may share your Personal Information:

With redemption partners to process or fulfil purchases or transfers made through a Program.

Sharing & Disclosure · Permission or license

Mastercard may disclose information to protect individuals, itself or investigate suspected fraud

Mastercard may share your Personal Information when it believes disclosure is necessary to protect individuals' vital interests, to protect Mastercard against harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

Supporting quotations

We may share your Personal Information:

When we believe disclosure is necessary to protect individuals’ vital interests, to protect Mastercard against harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

Qualifications & exceptions

• Depends on Mastercard's own belief that disclosure is necessary for one of the stated reasons.

Not stated here

• The notice does not say to whom such disclosures are made.

Sharing & Disclosure · Permission or license

Mastercard may disclose information as required by law or to answer law enforcement and government requests

Mastercard may share your Personal Information as required under applicable law or legal process, or to respond to requests from law enforcement or governmental agencies. When it receives such requests, it says it will follow the process set out in its Binding Corporate Rules, where applicable.

Supporting quotations

We may share your Personal Information:

As required under applicable law or legal process, or to respond to requests from law enforcement or governmental agencies. When receiving such requests, we will follow the process set out in our Binding Corporate Rules opens in a new tab, where applicable.

Qualifications & exceptions

• The Binding Corporate Rules process is followed "where applicable".

Not stated here

• The linked Binding Corporate Rules text is not supplied here, so this card cannot say what that process involves.

Sharing & Disclosure · Permission or license

If Mastercard's business or assets are sold or transferred, your information may go with them

Mastercard may share your Personal Information in the event of the sale or transfer of its business or assets, in whole or in part. In that event, it says it will use reasonable efforts to direct the transferee to use the Personal Information you provided in a manner consistent with this notice.

Supporting quotations

We may share your Personal Information:

In the event of the sale or transfer of our business or assets, in whole or in part. In such event, we will use reasonable efforts to direct the transferee to use the Personal Information you provided to us in a manner consistent with this Notice.

Qualifications & exceptions

• The commitment is limited to reasonable efforts to direct the transferee; it is not an absolute guarantee.

Use & Processing · User right or choice

You can opt out of Mastercard's processing by emailing it and naming the Program

Mastercard says you can exercise your rights to opt out of its processing of your Personal Information by emailing privacyanddataprotection@mastercard.com, indicating the name of the Program your request is about in the subject of the email.

Supporting quotations

You can exercise your rights to opt out of our processing of Personal Information by emailing us at: privacyanddataprotection@mastercard.com. Please indicate the name of the Program your request is about in the subject of your email.

Not stated here

• The notice does not say which processing can be opted out of, whether this varies by country, or how Mastercard responds.

Legal Rights & Agreement Rules · Procedure

Details on rights requests, contact, sharing, transfer, retention and protection are in the Global Privacy Notice

Mastercard says you have certain rights and choices regarding the Personal Information it maintains about you. For how to submit a request to exercise your rights or contact it, and to learn more about how it shares, transfers, retains or protects Personal Information, the notice refers you to "Your Rights and Choices" in Mastercard's Global Privacy Notice. This notice itself gives the opt-out email route and the sharing list above; the retention, transfer and protection details are not in this document.

Supporting quotations

You have certain rights and choices regarding the Personal Information we maintain about you.

to learn more about how we share, transfer, retain or protect your Personal Information, please refer to

Not stated here

• The Global Privacy Notice text is not part of this saved document, so retention periods, transfers and security measures are unknown here.

Account & Service Control · Procedure

Questions about your card or purchases go to your financial institution or merchant

For enquiries about your Mastercard card and your purchases, the notice tells you to contact your financial institution or merchant, whose contact details can be found on their websites.

Supporting quotations

For enquiries about your Mastercard card and your purchases, please contact your financial institution or merchant. More information about how to contact them can be found on their websites.