This is Visa's Global Privacy Notice, covering how Visa and its Affiliates handle personal information
The document is Visa's own Global Privacy Notice. It explains how Visa and its Affiliates collect, use and share Personal Information when you use Visa's products, services, offers and promotions, or those of Visa's clients. 'Affiliates' are companies that Visa U.S.A. Inc. or its parent Visa Inc. directly or indirectly controls through ownership.
Details not recorded for this card
Supporting quotations
Visa Global Privacy Notice
This Global Privacy Notice explains how Visa and its Affiliates¹ collect, use, and share Personal Information when you use our, or our clients’, products, services, offers, and promotions.
Visa’s Affiliates are companies that are directly or indirectly controlled by Visa U.S.A. Inc. or its parent company Visa Inc. through ownership
Not stated here
The notice does not name Chime or any other card issuer, so it does not say which Visa products or Visa entities apply to a given issuer's customers.
The notice states an effective date of May 14, 2026
The notice dates itself 'Effective date: May 14, 2026'. This analysis covers the version carrying that date.
Details not recorded for this card
Supporting quotations
Effective date: May 14, 2026
Use & Processing · Company commitment
When Visa acts on behalf of its clients, it uses personal information only as the client's contract authorizes
Visa describes itself as a global payments technology company that fills many roles. Where it acts on behalf of its Visa clients, it says it collects, uses and shares Personal Information only as authorized by its contracts with those clients. For questions about how those companies handle your information, or to exercise your rights, the notice tells you to contact them directly. Its example: for questions about your Visa card transactions, contact the institution that issued your card.
Details not recorded for this card
Supporting quotations
When we act on behalf of our Visa clients, we only collect, use, and share Personal Information as authorized by our contracts with our clients.
If you have questions about how these companies handle your Personal Information, or wish to exercise your rights, please contact them directly. For example, if you have questions about your Visa card transactions, please contact the institution that issued your card for more information.
Not stated here
The client contracts that set what Visa may do are not part of this notice, and the passage does not list which Visa activities are done on behalf of clients.
The controller is the Visa entity named in the terms you sign when enrolling in a Visa service
Where Visa acts as a controller under applicable laws and collects information directly from an individual, the controller is the Visa entity listed on the terms and conditions the individual signs when enrolling in a Visa service, product or offer.
Details not recorded for this card
Supporting quotations
Where Visa acts a controller under applicable laws and collects information directly from an individual, the controller is the Visa entity listed on the terms and conditions you sign when enrolling in a Visa service, product, or offer.
Qualifications & exceptions
Applies where Visa acts as a controller under applicable laws and collects the information directly from the individual.
Not stated here
The terms and conditions that name the Visa entity are not part of this notice, so it does not say which entity applies to a particular service.
Some Visa companies and services have their own privacy notices, and supplemental notices add legally required detail
Visa says some of its companies and services have different privacy notices, which are provided when you use them. It also has supplemental privacy notices that provide additional information as required by law.
Details not recorded for this card
Supporting quotations
Some Visa companies and services have different privacy notices that are provided when you use them. We also have supplemental privacy notices that provide additional information as required by law.
Not stated here
The notice does not identify which Visa companies or services have their own notices; the supplemental notices it lists later are linked, not reproduced here.
Which laws give you which choices, and which apply to you, is not stated in this passage; the portal's own page is not supplied here.
Sharing & Disclosure · Context
Affiliates are companies Visa U.S.A. Inc. or Visa Inc. directly or indirectly controls through ownership
The notice defines Visa's Affiliates as companies directly or indirectly controlled through ownership by Visa U.S.A. Inc. or its parent company Visa Inc. The companies it names are examples: Visa International Service Association, Visa Worldwide Pte. Limited, Visa Canada Corporation, Visa International Servicios de Pago España, S.R.L., Visa Europe Limited, Visa do Brasil Empreendimentos Ltda, CardinalCommerce Corporation, CyberSource Corporation and Verifi, Inc. The intro sentence uses this term for the companies whose handling of Personal Information the notice describes.
Details not recorded for this card
Supporting quotations
Visa’s Affiliates are companies that are directly or indirectly controlled by Visa U.S.A. Inc. or its parent company Visa Inc. through ownership—for example, Visa International Service Association, Visa Worldwide Pte. Limited, Visa Canada Corporation, Visa International Servicios de Pago España, S.R.L.,Visa Europe Limited, Visa do Brasil Empreendimentos Ltda, CardinalCommerce Corporation, CyberSource Corporation, and Verifi, Inc.
Visa and its Affiliates¹ collect, use, and share Personal Information
Qualifications & exceptions
The named companies are given as examples ('for example'), not as a complete list.
'Personal Information' means information capable of being associated with an individual, alone or combined
The notice defines Personal Information as information that, alone or in combination with other information, is capable of being associated with, or could reasonably be associated with, an individual. It says the term, sometimes called 'personal data', may have specific meanings under different privacy laws.
Details not recorded for this card
Supporting quotations
“Personal Information” refers to information that (alone or when used in combination with other information) is capable of being associated with or could reasonably be associated with an individual. Personal Information, sometimes referred to as “personal data”, may also have specific meanings under different privacy laws.
Not stated here
The notice does not say which specific legal meanings it has in mind.
The categories of personal information Visa collects depend on its relationship and interactions with you
The notice lists categories of Personal Information that Visa 'may' collect, introducing the list with 'may include'. It says what Visa collects varies with its relationship and interactions with you.
Details not recorded for this card
Supporting quotations
Depending on our relationship and interactions with you, the categories of Personal Information we collect may include:
The Personal Information we collect varies depending on our relationship and interactions with you.
Not stated here
The list is introduced with 'may include'; the notice does not say that every category is collected from every person or that the list is complete.
Contact information includes names, addresses, phone numbers, email, emergency contacts and social media profile names
Contact Information covers your name, username, mailing address, email address, telephone and mobile numbers, emergency contact information and social media profile names, along with other personal identifiers. It can also include contact information of sole proprietors and business contact information.
Details not recorded for this card
Supporting quotations
Contact Information – This includes your name, username, mailing address, email address, telephone number, mobile number, emergency contact information, and social medial profile names, along with other personal identifiers. This may also include contact information of sole proprietors and business contact information.
Data Access & Collection · Company practice
Transaction and financial information includes full card numbers, PIN verification data, CVV and transaction details
Transaction and Financial Information includes card details: the 16-digit payment card number (also called the personal account number or PAN), an associated non-financial identifier known as a payment account reference or PAR token, expiration date, service code, PIN verification data and CVV. It also includes transaction details: date, time, location, amount and merchant information.
Details not recorded for this card
Supporting quotations
Transaction and Financial Information – This includes:
Information about your card, including your 16-digit payment card number, which is also known as a personal account number or “PAN”; an associated non-financial identifier known as payment account reference or “PAR” token; and expiration date, service code, PIN verification data, and CVV; and
Information about your transactions, including the date, time, location, and amount of the transaction and information about the merchant. This also may include item-level data in some instances.
Qualifications & exceptions
Item-level transaction data is included only 'in some instances'.
Data Access & Collection · Company practice
Relationship information covers payment preferences, demographics, propensity scores and social media data
Relationship Information is information about your shopping and payment preferences and other information that can help Visa offer you personalized content. The examples are demographic information such as age range and marital or family status; the likelihood that you may be interested in certain purchases or experiencing life events, and other propensity scores; and data from social media profiles and information about your interests.
Details not recorded for this card
Supporting quotations
Relationship Information – This includes information about your shopping and payment preferences and other information that can help us offer you personalized content, such as:
Demographic information, such as age range and marital or family status;
Likelihood that you may be interested in certain purchases or experiencing life events and other propensity scores; and
Data from social media profiles and information about your interests.
Data Access & Collection · Company practice
Interaction information covers promotions, customer service contacts, visitor logs, events and security answers
Interaction Information is information about your interactions with Visa: participation in promotions or programs (such as rewards program account information); card benefits program qualification data and related records; information collected when you contact Visa, such as customer service; visitor logs; information from Visa-sponsored events, including travel-related information for you and any companions; and other information you provide, such as consumer authentication data like passwords or account security questions.
Details not recorded for this card
Supporting quotations
Interaction Information – This includes information about your interactions with Visa, such as:
Information collected when you participate in promotions or programs, such as rewards program account information;
Card benefits program information, including qualification data and related records;
Information collected when you contact us, such as if you contact our customer service;
Visitor logs;
Information collected when you attend Visa sponsored events, such as travel-related information for you and any companions gathered at the events; and
Other information you provide us, such as data collected for consumer authentication (e.g., passwords or account security questions).
Data Access & Collection · Company practice
Biometric identifiers may include facial recognition, fingerprints, keystroke timing, scroll position and behavior data
Biometric Identifiers 'may include' facial recognition data, fingerprints, keystroke timing, scroll position, and behavioral data or other physical patterns. The notice gives the example of using biometric authentication with Visa or its clients when you elect to do so.
Details not recorded for this card
Supporting quotations
Biometric Identifiers – This may include facial recognition data, fingerprints, keystroke timing, scroll position, and behavioral data or other physical patterns, such as when you elect to use biometric authentication with Visa or its clients.
Not stated here
Election to use biometric authentication is given as an example ('such as'); the notice does not say whether biometric identifiers are also collected in other situations.
Data Access & Collection · Company practice
Business customer data covers your role, authority to order and supplier qualification details
Business Customer Data is information about your role within your company, your authorization to use products or services and your authority to place orders, customer or supplier qualification details, and other data you share with Visa in connection with the relationship.
Details not recorded for this card
Supporting quotations
Business Customer Data – This includes information about your role within your company, your authorization to use products or services, and your authority to place orders; customer/supplier qualification details; and other data you share with us in connection with the relationship.
Inference & Profiling · Company practice
Visa derives propensities, attributes and scores from relationship and transaction information
Inferred and Derived Information is data Visa infers and derives by analyzing its relationship and transactional information. Its example is generating propensities, attributes and scores for marketing, security or fraud purposes.
Details not recorded for this card
Supporting quotations
Inferred and Derived Information – We infer and derive data elements by analyzing our relationship and transactional information. For example, we may generate propensities, attributes, and/or scores for marketing, security, or fraud purposes.
Not stated here
The example names marketing, security and fraud purposes; the notice does not say here whether inferred data is used for other purposes.
Data Access & Collection · Company practice
Online and technical information includes IP address, device identifiers, advertising ID, browsing history, cookies
Online and Technical Information is information about your interactions with Visa's websites, applications or advertisements: IP address, device identifiers, settings, characteristics, advertising ID, browsing history, web server logs, server log records, activity log records, keystroke timing and other information collected using cookies and similar technologies. Keystroke timing is also listed under Biometric Identifiers.
Details not recorded for this card
Supporting quotations
Online and Technical Information – This includes information regarding your interactions with our websites, applications, or advertisements, including IP address, device identifiers, settings, characteristics, advertising ID, browsing history, web server logs, server log records, activity log records, keystroke timing, and other information collected using cookies and similar technologies.
Data Access & Collection · Company practice
Audio and visual information includes photographs, video, CCTV and call recordings, and voicemails
Audio and Visual Information is audio, electronic, visual or similar information about your interactions with Visa: photographs, video images, CCTV recordings, call center recordings, call monitoring records and voicemails.
Details not recorded for this card
Supporting quotations
Audio and Visual Information – This includes audio, electronic, visual, or similar information relating to your interactions with us, including photographs, video images, CCTV recordings, call center recordings, call monitoring records, and voicemails.
Data Access & Collection · Company practice
Government-issued ID numbers such as SSN, driver's license and passport numbers are a listed category
Government Issued Identification Numbers include social security number, driver's license number, passport number and other government-issued identifiers.
Details not recorded for this card
Supporting quotations
Government Issued Identification Numbers – This includes social security number, driver’s license number, passport number, and other government issued identifiers as may be needed for compliance or given the nature of the relationship.
Qualifications & exceptions
Collected as may be needed for compliance or given the nature of the relationship.
Data Access & Collection · User right or choice
Visa may collect precise geolocation automatically from your mobile device if you opt in
Geolocation Information may include precise geolocation that Visa collects automatically from your mobile device if you opt in to allow it. For Visa's mobile apps, the notice adds that you may allow Visa to obtain your precise location, and that you do not have to provide location information to use the apps.
Details not recorded for this card
Supporting quotations
Geolocation Information – This may include precise geolocation information, which we may collect automatically from your mobile device if you opt-in to allow us to collect it.
When you download our mobile applications, you may allow us to obtain your precise location from your mobile device.
You do not have to provide location information or enable push notifications to use our mobile apps.
Professional and employment information is collected about employees and prospective employees
Professional and Employment Information covers professional or employment-related information for employees and prospective employees: applicant and resume data such as education and work history; qualifications such as skills and credentials; professional interests and goals; information collected for employee qualifications, such as right-to-work documentation; and references.
Details not recorded for this card
Supporting quotations
Professional and Employment Information – This includes professional or employment-related information for employees and prospective employees, including applicant and resume data, such as education and work history; information about qualifications for the position, such as skills and credentials; professional interests and goals; information collected for employee qualifications, such as right to work documentation; and references.
Data Access & Collection · Company practice
Compliance data includes records of your marketing opt-ins and opt-outs and of privacy rights requests
Compliance Data covers records maintained to demonstrate compliance with applicable laws, records of consumer preferences such as opt-ins and opt-outs of marketing programs, and records related to data subject rights requests.
Details not recorded for this card
Supporting quotations
Compliance Data – This includes records maintained to demonstrate compliance with applicable laws; records related to consumer preferences, such as your opt-ins and opt-outs of marketing programs; and records related to data subject rights requests.
Legal Rights & Agreement Rules · Context
Some collected information may count as sensitive personal information in some jurisdictions
Visa says some of the Personal Information in the listed categories may be considered sensitive Personal Information in some jurisdictions. 'Personal Information' is the notice's defined term for information capable of being associated with an individual.
Details not recorded for this card
Supporting quotations
Some of the Personal Information in these categories may be considered sensitive Personal Information in some jurisdictions.
“Personal Information” refers to information that (alone or when used in combination with other information) is capable of being associated with or could reasonably be associated with an individual.
Not stated here
The notice does not say which categories are sensitive or which jurisdictions treat them that way.
Visa may receive your information from your financial institutions, card issuer, merchants and acquirers
Visa says it may collect Personal Information from your financial institutions, payment card issuer, merchants, acquirers and other partners. The sources depend on Visa's relationship and interaction with you.
Details not recorded for this card
Supporting quotations
We may collect Personal Information about you from various sources, depending on our relationship and interaction with you.
Your financial institutions, payment card issuer, merchants, acquirers, and other partners when you use a Visa-branded payment product or when we’re acting on their behalf, such as when you tap your Visa card;
Qualifications & exceptions
When you use a Visa-branded payment product or when Visa is acting on those partners' behalf, such as when you tap your Visa card.
Data Access & Collection · Company practice
Visa collects information from you directly and from your devices, call recordings and facility CCTV
Visa may collect Personal Information from you directly, for example when you enroll in card-link offer programs from Visa or a co-promotion partner, enroll in a Visa click-to-pay solution or answer surveys. It may also collect from your computer or devices when you interact with its platforms, websites and applications or through other automatic technologies, such as when it records calls to its call center and uses CCTV cameras in its facilities.
Details not recorded for this card
Supporting quotations
You, such as when you enroll in card link offer programs from Visa or a co-promotion partner, enroll in a Visa click-to-pay solution, or provide survey responses to us;
Your computer or devices when you interact with our platforms, websites, and applications or through other automatic technologies, such as when we record calls to our call center and use CCTV cameras in our facilities; and
Data Access & Collection · Company practice
Visa may also collect from data aggregators, social media companies and public sources, and from references or employers
Visa may collect Personal Information from other third parties, including data aggregators, social media companies and other publicly available sources.
Details not recorded for this card
Supporting quotations
Other third parties, including data aggregators, social media companies, and other publicly available sources. In addition, Professional and Employment Information may be collected from your references and third parties that help us conduct internal investigations and background screenings, and Business Customer Data may be collected from your employer, trade show and conference organizers, and professional services companies.
Qualifications & exceptions
Professional and Employment Information may also come from your references and from third parties that help Visa conduct internal investigations and background screenings.
Business Customer Data may also come from your employer, trade show and conference organizers, and professional services companies.
Use & Processing · Company practice
Visa uses personal information to run its payment networks, prevent fraud and develop fraud and security features
The purposes table lists three purposes together in one row: (1) operating Visa's electronic payments networks, including authorization, clearing, settlement and tokenization, enabling your payment transactions, and related purposes such as authentication and dispute resolution; (2) safeguarding against fraud and cyber incidents, strengthening the cyber resilience of Visa's operations and network and managing risk exposure; and (3) developing and offering enhanced identity verification, fraud and security features, such as fraud scores and rules-based or artificial-intelligence-based systems that can identify fraud patterns. The categories listed for this row are Contact Information, Transaction and Financial Information, Relationship Information, Interaction Information, Biometric Identifiers, Business Customer Data, Inferred and Derived Information, Online and Technical Information, Audio and Visual Information, Government Issued Identification Numbers, Geolocation Information and Compliance Data.
Details not recorded for this card
Supporting quotations
Operate Visa’s electronic payments networks (including authorization, clearing, and settlement of transactions and tokenization), enable your payment transactions, and for related purposes, such as authentication and dispute resolution.
To safeguard against fraud and cyber incidents, enhance the cyber resilience of our operations and network and effectively manage risk exposure.
To develop and offer enhanced identity verification, fraud and security features such as fraud scores and rules based or artificial intelligence based systems that can identify fraud patterns
Contact Information
Transaction and Financial Information
Relationship Information
Interaction Information
Biometric Identifiers
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Geolocation Information
Compliance Data
Qualifications & exceptions
Every category in the notice's list is shown for this row except Professional and Employment Information.
Not stated here
The row lists the categories together; it does not say which category is used for which of the three purposes or to what extent.
Visa gives contract, legal compliance and legitimate interests as its legal bases for network and fraud-prevention uses
For the network, fraud-prevention and fraud-feature row, the legal bases listed are: fulfilling a contract to which you are a party, or one between you and a merchant or between you and the financial institution that issued your card, where Visa provides payment services or acts as a data processor; complying with laws and regulations that apply to Visa around the world; and Visa's own legitimate interests or those of others, such as protecting you, Visa or others from security threats or fraud, enabling or administering its business (quality control, compliance, consolidated reporting, customer service), managing corporate transactions such as mergers or acquisitions, and understanding and improving its business or customer relationships generally.
Details not recorded for this card
Supporting quotations
Operate Visa’s electronic payments networks (including authorization, clearing, and settlement of transactions and tokenization), enable your payment transactions, and for related purposes, such as authentication and dispute resolution.
To safeguard against fraud and cyber incidents, enhance the cyber resilience of our operations and network and effectively manage risk exposure.
To develop and offer enhanced identity verification, fraud and security features such as fraud scores and rules based or artificial intelligence based systems that can identify fraud patterns
To fulfill a contract to which you are a party, such as a contract with you, or as needed to fulfill a contract between you and a merchant or between you and the financial institution or other entity that issued your card, where Visa is providing payment services or acting as a data processor
To comply with the laws and regulations that are applicable to us around the world
For the purposes of our own legitimate interests or for the legitimate interests of others, such as to protect you, us, or others from threats (such as security threats or fraud); to enable or administer our business, such as for quality control, compliance, consolidated reporting, and customer service; to manage corporate transactions, such as mergers or acquisitions; and to understand and improve our business or customer relationships generally
Qualifications & exceptions
The column is headed 'Legal Basis for Processing (Where required under applicable law)', so these bases are given only where the law requires a legal basis.
Not stated here
The legal bases are listed for the row as a whole; the table does not say which basis supports which purpose or which country's law applies.
Visa uses personal information to provide the products, services, programs, offers or information you request
One listed purpose is providing you with the products, services, programs, offers or information you request from Visa, and related purposes such as determining eligibility and customer service. The categories listed for this purpose are Contact Information, Transaction and Financial Information, Relationship Information, Interaction Information, Biometric Identifiers, Business Customer Data, Inferred and Derived Information, Online and Technical Information, Audio and Visual Information, Government Issued Identification Numbers, Geolocation Information and Compliance Data.
Details not recorded for this card
Supporting quotations
Provide you with the products, services, programs, offers, or information you request from Visa, and for related purposes such as determining eligibility and customer service
Contact Information
Transaction and Financial Information
Relationship Information
Interaction Information
Biometric Identifiers
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Geolocation Information
Compliance Data
Qualifications & exceptions
Every category in the notice's list is shown for this purpose except Professional and Employment Information.
Not stated here
The table does not say which categories are used for which parts of this purpose.
Visa gives contract, legal compliance and legitimate interests as legal bases for providing what you request
For the purpose of providing the products, services, programs, offers or information you request, the legal bases listed are fulfilling a contract to which you are a party, complying with the laws and regulations that apply to Visa around the world, and Visa's own legitimate interests or those of others. The contract and legitimate-interests entries say 'as described above'. 'As described above' points back to the first row of the table, where the contract basis covers a contract with you or one between you and a merchant or your card issuer when Visa provides payment services or acts as a data processor, and the legitimate-interests basis covers examples such as protecting against security threats and fraud, administering the business, managing corporate transactions and improving customer relationships. These bases are listed against all categories shown for this purpose, which exclude only Professional and Employment Information.
Details not recorded for this card
Supporting quotations
Provide you with the products, services, programs, offers, or information you request from Visa
To fulfill a contract to which you are a party, as described above
To comply with the laws and regulations that are applicable to us around the world
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
To fulfill a contract to which you are a party, such as a contract with you, or as needed to fulfill a contract between you and a merchant or between you and the financial institution or other entity that issued your card, where Visa is providing payment services or acting as a data processor
For the purposes of our own legitimate interests or for the legitimate interests of others, such as to protect you, us, or others from threats (such as security threats or fraud); to enable or administer our business, such as for quality control, compliance, consolidated reporting, and customer service; to manage corporate transactions, such as mergers or acquisitions; and to understand and improve our business or customer relationships generally
Interaction Information
Biometric Identifiers
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Geolocation Information
Compliance Data
Relationship Information
Qualifications & exceptions
Legal bases are given only where the law requires one, as the column heading says: 'Where required under applicable law'.
Not stated here
The table does not say which basis supports which part of the purpose or which country's law applies.
Visa processes data to provide services to its clients, such as calculating loyalty rewards and delivering client offers
One listed purpose is providing services to Visa's clients. The example given: if you enroll in a card issuer or merchant loyalty program, Visa will process 'Card Transaction Data' to calculate your rewards and provide targeted offers to you from the client. The row lists these categories: Contact Information, Transaction and Financial Information, Relationship Information, Interaction Information, Biometric Identifiers, Business Customer Data, Inferred and Derived Information, Online and Technical Information, Audio and Visual Information, Government Issued Identification Numbers, Geolocation Information and Compliance Data. Its legal bases are contract (as described above), compliance with laws and regulations, and legitimate interests (as described above).
Details not recorded for this card
Supporting quotations
Provide services to our clients. For example, if you enroll in a card issuer or merchant loyalty program, we will process Card Transaction Data to calculate your rewards and provide targeted offers to you from the client
Contact Information
Transaction and Financial Information
Relationship Information
Interaction Information
Biometric Identifiers
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Geolocation Information
Compliance Data
To fulfill a contract to which you are a party, as described above
To comply with the laws and regulations that are applicable to us around the world
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
Qualifications & exceptions
Every category in the notice's list is shown for this row except Professional and Employment Information.
Not stated here
'Card Transaction Data' is not defined in this notice, so it is unclear which of the listed categories it covers.
Only the loyalty-program case is given as an example; other client services are not described in this row.
Use & Processing · Company practice
Visa uses personal information to run Click to Pay: enrollment, staying signed in, checkout and digital wallet links
One listed purpose is operating Visa solutions such as Click to Pay: enrolling you (directly with Visa or with your issuing bank), enabling you to check out, managing your profile, participating in programs related to your use, and, if you have chosen, keeping you signed in on your device and integrating with other digital wallets. It may include moving your enrollment so the service is provided by your issuing bank. The row lists these categories: Contact Information, Transaction and Financial Information, Relationship Information, Interaction Information, Biometric Identifiers, Business Customer Data, Inferred and Derived Information, Online and Technical Information, Audio and Visual Information, Government Issued Identification Numbers, Geolocation Information and Compliance Data. Its legal bases are contract, compliance with laws and regulations, and legitimate interests (the first and last 'as described above').
Details not recorded for this card
Supporting quotations
Operate Visa solutions such as Click to Pay, including to enroll you in the solution (which may be directly with Visa, or with your issuing bank), to enable you to stay signed in on your device (if you have chosen this), to enable you to check out using the solution, to manage your profile, and to integrate with other digital wallets (if you have chosen to do this), and to participate in programs related to your use of the solution. This may include transitioning your enrollment so that the service is provided to you by your issuing bank (if and when applicable)
Contact Information
Transaction and Financial Information
Relationship Information
Interaction Information
Biometric Identifiers
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Geolocation Information
Compliance Data
To fulfill a contract to which you are a party, as described above
To comply with the laws and regulations that are applicable to us around the world
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
Qualifications & exceptions
Staying signed in and wallet integration apply only if you have chosen them.
Moving enrollment to your issuing bank applies only 'if and when applicable'.
Not stated here
Visa's Click to Pay terms of service and an issuing bank's own privacy notice are not part of this notice.
Use & Processing · Company practice
Visa uses personal information to administer surveys, loyalty programs, sweepstakes, contests and events
One listed purpose is administering surveys, loyalty programs, sweepstakes, contests and events. The row lists these categories: Contact Information, Transaction and Financial Information, Relationship Information, Interaction Information, Biometric Identifiers, Business Customer Data, Inferred and Derived Information, Online and Technical Information, Audio and Visual Information, Government Issued Identification Numbers, Geolocation Information and Compliance Data. Only two legal bases are listed for this row: contract (as described above) and legitimate interests (as described above). Unlike most rows, no compliance-with-law basis is shown here.
Details not recorded for this card
Supporting quotations
Administer surveys, loyalty programs, sweepstakes, contests, and events
Contact Information
Transaction and Financial Information
Relationship Information
Interaction Information
Biometric Identifiers
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Geolocation Information
Compliance Data
To fulfill a contract to which you are a party, as described above
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
Qualifications & exceptions
Every category in the notice's list is shown for this row except Professional and Employment Information.
Only the contract and legitimate-interests bases are listed for this row.
Use & Processing · Company practice
Based on your choices, Visa delivers marketing communications, personalized offers and interest-based ads
One listed purpose is delivering marketing communications, personalized offers and interest-based ads to you, based on your choices. The row lists these categories: Contact Information, Transaction and Financial Information, Relationship Information, Interaction Information, Biometric Identifiers, Business Customer Data, Inferred and Derived Information, Online and Technical Information, Audio and Visual Information, Geolocation Information and Compliance Data. The only legal basis listed in this row is Visa's legitimate interests, such as sending you news and offers relevant to you. Elsewhere the notice says Visa may also rely on your consent, where required by law, for marketing communications and personalized experiences offered through its partners.
Details not recorded for this card
Supporting quotations
Based on your choices, deliver marketing communications, personalized offers, and interest-based ads to you
Contact Information
Transaction and Financial Information
Relationship Information
Interaction Information
Biometric Identifiers
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Geolocation Information
Compliance Data
For the purposes of our own legitimate interests or for the legitimate interests of others, such as to send you news and offers that are relevant to you
Where applicable, we also may process Personal Information with your consent. For example, we may rely on your consent, where required by law, to provide you with marketing communications and personalized experiences offered through our partners.
Qualifications & exceptions
Government Issued Identification Numbers and Professional and Employment Information are not listed for this row.
Consent is mentioned for this purpose where applicable and where required by law.
Not stated here
The notice does not say which marketing uses need your consent and which rest on legitimate interests.
Visa uses personal information to fulfill, develop or maintain its business relationship with you or your company
One listed purpose is fulfilling, developing or maintaining Visa's business relationship with you and/or your company. The row lists these categories: Contact Information, Transaction and Financial Information, Relationship Information, Interaction Information, Biometric Identifiers, Business Customer Data, Inferred and Derived Information, Online and Technical Information, Audio and Visual Information, Government Issued Identification Numbers, Geolocation Information and Compliance Data. Two legal bases are listed: contract (as described above) and legitimate interests (as described above); no compliance-with-law basis is shown in this row.
Details not recorded for this card
Supporting quotations
Fulfill, develop, or maintain our business relationship with you and/or your company
Contact Information
Transaction and Financial Information
Relationship Information
Interaction Information
Biometric Identifiers
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Geolocation Information
Compliance Data
To fulfill a contract to which you are a party, as described above
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
Qualifications & exceptions
Every category in the notice's list is shown for this row except Professional and Employment Information.
Only the contract and legitimate-interests bases are listed for this row.
Use & Processing · Company practice
Visa uses personal information to facilitate employment or contracting relationships and evaluate candidates
One listed purpose is facilitating your employment or contracting relationship with Visa or evaluating you for a position, including customary human resources purposes, risk management and compliance. The categories listed for this row are Contact Information, Relationship Information, Interaction Information, Biometric Identifiers, Online and Technical Information, Audio and Visual Information, Government Issued Identification Numbers, Professional and Employment Information and Compliance Data. Its legal bases are contract, compliance with laws and regulations, and legitimate interests; the contract and legitimate-interests entries say 'as described above', meaning the first row's descriptions of a contract and of legitimate interests such as security, business administration and improving relationships.
Details not recorded for this card
Supporting quotations
Facilitate your employment or contracting relationship with us or evaluate you for a position, including customary human resources purposes, risk management, and compliance
Contact Information
Relationship Information
Interaction Information
Biometric Identifiers
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Professional and Employment Information
Compliance Data
To fulfill a contract to which you are a party, as described above
To comply with the laws and regulations that are applicable to us around the world
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
To fulfill a contract to which you are a party, such as a contract with you, or as needed to fulfill a contract between you and a merchant or between you and the financial institution or other entity that issued your card, where Visa is providing payment services or acting as a data processor
For the purposes of our own legitimate interests or for the legitimate interests of others, such as to protect you, us, or others from threats (such as security threats or fraud); to enable or administer our business, such as for quality control, compliance, consolidated reporting, and customer service; to manage corporate transactions, such as mergers or acquisitions; and to understand and improve our business or customer relationships generally
Qualifications & exceptions
Transaction and Financial Information, Business Customer Data, Inferred and Derived Information and Geolocation Information are not listed for this row.
Visa uses transaction, contact, relationship, interaction, online and location data for analytics and modeling
One listed purpose is understanding how you and others use Visa's products, for analytics, modeling, creating business intelligence and insights, and understanding economic trends. For these activities the row says Transaction and Financial Information, Contact Information, Relationship Information, Interaction Information, Online and Technical Information and Geolocation Information 'may be used'. The legal basis listed is Visa's legitimate interests (as described above).
Details not recorded for this card
Supporting quotations
Understand how you and others use our products, for analytics, modeling, and to create business intelligence and insights and to understand economic trends
Transaction and Financial Information, Contact Information, Relationship Information, Interaction Information,Online and Technical Information, and Geolocation Information may be used for these activities.
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
Qualifications & exceptions
Only the six categories named in the row are listed for these activities.
Legitimate interests is the only legal basis listed for this row.
Use & Processing · Company practice
Visa generates de-identified, anonymized or aggregated datasets for product development and consulting for clients
One listed purpose is generating de-personalized, de-identified, anonymized or aggregated datasets, which are used for product development and for delivering consulting services to clients. Transaction and Financial Information, Contact Information, Relationship Information, Interaction Information and Online and Technical Information 'may be used' to generate them. The legal basis listed is Visa's legitimate interests (as described above).
Details not recorded for this card
Supporting quotations
Generate de-personalized, de-identified, anonymized, or aggregated datasets, which are used for product development and delivery of consulting services to clients
Transaction and Financial Information, Contact Information, Relationship Information, Interaction Information, and Online and Technical Information may be used to generate these datasets.
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
Qualifications & exceptions
Only the five categories named in the row are listed for generating these datasets.
Not stated here
The notice does not describe how the datasets are de-identified or aggregated, or whether the datasets themselves, rather than consulting results, reach clients.
Use & Processing · Company practice
Visa uses personal information for 'Everyday Business Purposes' such as account management, security and analytics
One listed purpose is supporting Visa's 'Everyday Business Purposes': account management, quality control, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance, analytics and research, enforcement of contracts and other contract management, and the provision of requested products and services. The categories listed are Contact Information, Transaction and Financial Information, Relationship Information, Interaction Information, Business Customer Data, Inferred and Derived Information, Online and Technical Information, Audio and Visual Information, Government Issued Identification Numbers, Geolocation Information, Professional and Employment Information and 'Compliance Information'. The legal bases are contract, compliance with laws and regulations, and legitimate interests (the first and last 'as described above', as for the first row).
Details not recorded for this card
Supporting quotations
Support our Everyday Business Purposes, such as for account management, quality control, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance, analytics and research, enforcement of contracts and other contract management, and the provision of requested products and services*
Contact Information
Transaction and Financial Information
Relationship Information
Interaction Information
Business Customer Data
Inferred and Derived Information
Online and Technical Information
Audio and Visual Information
Government Issued Identification Numbers
Geolocation Information
Professional and Employment Information
Compliance Information
To fulfill a contract to which you are a party, as described above
To comply with the laws and regulations that are applicable to us around the world
For the purposes of our own legitimate interests or for the legitimate interests of others, as described above
Qualifications & exceptions
Biometric Identifiers are the one listed category not shown for this row.
Not stated here
The purpose text ends with an asterisk that no footnote in this notice explains.
This row names 'Compliance Information' where other rows say 'Compliance Data'; the notice does not say whether they are the same category.
Where applicable, Visa may also process personal information with your consent, for example for partner marketing
Visa says that where applicable it may also process Personal Information with your consent. Its example is relying on consent, where required by law, to provide you with marketing communications and personalized experiences offered through its partners.
Details not recorded for this card
Supporting quotations
Where applicable, we also may process Personal Information with your consent. For example, we may rely on your consent, where required by law, to provide you with marketing communications and personalized experiences offered through our partners.
Qualifications & exceptions
For the marketing and personalization example, consent is relied on where required by law.
Not stated here
Only the marketing and personalization example is given; the notice does not list other processing that relies on consent.
'Everyday Business Purposes' include requested services, identity management, security protection and fraud prevention
The notice says 'Everyday Business Purposes' encompasses the following business purposes and related purposes for which Personal Information may be used: providing the information, product or service requested or reasonably expected given the context of collection (such as customer credentialing, customer service, negotiation and contracting, personalization and preference management, product updates, bug fixes or recalls, and dispute resolution); identity and credential management, including identity verification, authentication and system and technology administration; protecting the security and integrity of systems, networks, applications and data, including detecting and resolving security threats and working with cybersecurity centers, consortia and law enforcement about imminent threats; and fraud detection and prevention.
Details not recorded for this card
Supporting quotations
Everyday Business Purposes” encompasses the following business purposes and related purposes for which Personal Information may be used:
To provide the information, product, or service requested by the individual or as reasonably expected given the context in which with the Personal Information was collected (such as customer credentialing, providing customer service, negotiation and contracting, personalization and preference management, providing product updates, bug fixes or recalls, and dispute resolution);
For identity and credential management, including identity verification and authentication, and system and technology administration;
To protect the security and integrity of systems, networks, applications, and data, including detecting, analyzing, and resolving security threats, and collaborating with cybersecurity centers, consortia, and law enforcement about imminent threats;
For fraud detection and prevention;
Qualifications & exceptions
The list covers these purposes 'and related purposes', so it is not stated to be closed.
'Everyday Business Purposes' also include legal compliance, audits, contract enforcement, de-identification and back-ups
The 'Everyday Business Purposes' list also includes: legal and regulatory compliance, including all uses and disclosures required by law or reasonably needed for compliance with company policies and procedures (such as anti-money laundering, security and incident response, intellectual property protection and ethics hotlines); corporate audit, management, finance and accounting analysis and reporting; enforcing contracts and protecting against injury, theft, legal liability, fraud or abuse, and protecting people or property, including physical security; de-identifying, depersonalizing or anonymizing data or creating aggregated datasets (for example for consolidated reporting, research or analytics); making back-up copies for business continuity and disaster recovery; and corporate governance, including mergers, acquisitions and divestitures.
Details not recorded for this card
Supporting quotations
Everyday Business Purposes” encompasses the following business purposes and related purposes for which Personal Information may be used:
For legal and regulatory compliance, including all uses and disclosures of Personal Information that are required by law or reasonably needed for compliance with company policies and procedures, such as anti-money laundering programs, security and incident response programs, intellectual property protection programs, and corporate ethics and compliance hotlines;
For corporate audit, management, finance and accounting analysis, and reporting;
To enforce our contracts and to protect against injury, theft, legal liability, fraud, or abuse, and to protect people or property, including physical security programs;
To de-identify, depersonalize, or anonymize the data or create aggregated datasets, such as for consolidating reporting, research, or analytics;
To make back-up copies for business continuity and disaster recovery purposes; and
For corporate governance, including mergers, acquisitions, and divestitures.
Qualifications & exceptions
The list covers these purposes 'and related purposes', so it is not stated to be closed.
Not stated here
The notice does not define which company policies and procedures count for the compliance item.
Visa may disclose personal information to its Affiliates and to service providers who provide services to Visa
Visa lists its Affiliates among those to whom it may disclose Personal Information. It also lists its service providers, to whom it may disclose information for the purposes of providing services to Visa.
Details not recorded for this card
Supporting quotations
We may disclose your Personal Information to:
Our Affiliates;
Our service providers, for the purposes of providing services to us;
Qualifications & exceptions
Disclosure to service providers is for the purposes of providing services to Visa.
Sharing & Disclosure · Company practice
Visa may disclose information to financial institutions, merchants and payment processors under confidentiality limits
Visa may disclose Personal Information to financial institutions, merchants, payment processors and other third parties that are subject to appropriate confidentiality and use restrictions. The stated purposes are enabling your payments, managing fraud and risk, providing and developing products and services, and supporting Visa's Everyday Business Purposes, a term the notice defines in its purposes section.
Details not recorded for this card
Supporting quotations
We may disclose your Personal Information to:
Financial institutions, merchants, payment processors, and other third parties that are subject to appropriate confidentiality and use restrictions, for the purposes of enabling your payments, managing fraud and risk, providing and developing products and services, and supporting our Everyday Business Purposes;
Support our Everyday Business Purposes, such as for account management, quality control, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance, analytics and research, enforcement of contracts and other contract management, and the provision of requested products and services*
Everyday Business Purposes” encompasses the following business purposes and related purposes for which Personal Information may be used:
Qualifications & exceptions
Recipients are described as subject to appropriate confidentiality and use restrictions; the restrictions themselves are not described.
Not stated here
The notice does not name the recipients or describe the confidentiality and use restrictions.
Third-party fraud service providers that receive information are responsible for their own use of it
Visa may disclose Personal Information to third parties who help detect and prevent fraudulent transactions. The notice says these third-party fraud service providers are responsible for their use of your personal data and will use it for the purposes set out in their own notices.
Details not recorded for this card
Supporting quotations
Third parties who help us to detect and prevent fraudulent transactions. These third party fraud service providers that we use to help us detect and prevent fraudulent transactions; and they are responsible for their use of your personal data and will use it for the purposes set out in their own notices;
Not stated here
The providers are not named and their own notices are not part of this document, so what they do with the information is not stated.
Sharing & Disclosure · Company practice
Third-party advertising partners may use cookie data to help Visa's online advertising programs
Visa may disclose Personal Information to third parties, such as advertising partners, who may use data collected by cookies and similar means to help with Visa's online advertising programs.
Details not recorded for this card
Supporting quotations
Third parties, such as third-party advertising partners, who may use data collected by cookies and similar means to help us with our online advertising programs;
Not stated here
The notice does not name the partners or say which personal information beyond cookie-collected data they receive.
This list item does not address whether the sharing counts as a sale or sharing for advertising under U.S. state privacy laws; the U.S. state supplementary notice is linked later in the document but its text is not supplied here.
Sharing & Disclosure · Company practice
Visa may also disclose to government agencies, recruiters and references, and to a business customer's company
Visa may disclose Personal Information to government agencies. It may disclose Professional and Employment Information to recruiting agencies and your references, and Business Customer Data to your company and its affiliates.
Details not recorded for this card
Supporting quotations
Government agencies;
Recruiting agencies and your references (for Professional and Employment Information); and
Your company and its affiliates (for Business Customer Data).
Qualifications & exceptions
Disclosure to recruiting agencies and references is for Professional and Employment Information.
Disclosure to your company and its affiliates is for Business Customer Data.
Sharing & Disclosure · Company practice
Visa may disclose personal information when the law requires it and in cases the law permits, such as business transfers
Visa may disclose personal information when required by law, such as to law enforcement agencies, regulators or courts. It may also do so as permitted by law, for example when it sells or transfers business assets, enforces its contracts, protects its property or the rights, property or safety of others, or as needed for audits, compliance and corporate governance.
Details not recorded for this card
Supporting quotations
We may also disclose personal information when required to do so by law, such as to law enforcement agencies, regulators, or courts, or as permitted by law, such as when we sell or transfer business assets, enforce our contracts, protect our property or the rights, property or safety of others, or as needed for audits, compliance, and corporate governance.
Account & Service Control · Context
Click to Pay may be offered by Visa directly or by your card issuer, whose own privacy notice then applies
In certain countries Visa enables online checkout with Click to Pay. It may be offered by Visa directly or by your issuer as a feature of your card. If your issuing bank provides it under its terms and conditions, the notice tells you to see that bank's privacy notice. If Visa provides it, you will have received Visa's terms of service, and you can access your profile at any time through the Visa Click to Pay Consumer Portal.
Details not recorded for this card
Supporting quotations
In certain countries, Visa enables easy, consistent and secure online checkout with Click to Pay. This may be offered to you by Visa directly, or by your Issuer as a feature of your card.
If your issuing bank provides this service to you under their terms and conditions, please see their privacy notice for more information.
If Visa provides you with this service, you will have received Visa’s terms of service. You can also access your profile at any time on the
Visa's Click to Pay terms of service and the issuing bank's privacy notice are not part of this document.
Data Access & Collection · Company practice
Visa collects information through cookies, pixel tags, browser analysis tools, server logs and web beacons
When you visit Visa's website, use its mobile applications, or engage with its emails and online ads, Visa may collect information by automated means, using cookies, pixel tags, browser analysis tools, server logs and web beacons.
Details not recorded for this card
Supporting quotations
When you visit our website, use our mobile applications, or engage with our emails and online ads, we may collect information by automated means, using technologies such as cookies, pixel tags, browser analysis tools, server logs, and web beacons.
Use & Processing · Company commitment
Some automatically collected website data is used non-identifiably and not to profile you or target ads
Visa says that in some cases the information it collects is used only in a non-identifiable way. Its example is information about all website users, used to optimize its websites and understand traffic patterns. Visa says it does not use this information to profile you or target its ads.
Details not recorded for this card
Supporting quotations
In some cases, the information we collect is only used in a non-identifiable way. For example, we use information we collect about all website users to optimize our websites and to understand website traffic patterns. We do not use this information to profile you or target our ads.
Qualifications & exceptions
The commitment not to profile you or target ads is stated for information used only in a non-identifiable way, not for information used in an identifiable way.
Visa may use online information identifiably, including to authenticate you, personalize content and target ads
In other cases Visa may use the information it collects online in an identifiable way. Its examples are authenticating you or your device, delivering personalized content, and using the information for analytics, fraud detection and security. It may also use the information for online ad targeting. Visa's Cookie Notice gives more information about its online data collection technologies and your choices.
Details not recorded for this card
Supporting quotations
In other cases, we may use the information in an identifiable way. For example, we may authenticate you or your device, deliver personalized content or use the information for analytics, fraud detection, and security. We may also use the information for online ad targeting.
provides more information about our online data collection technologies and your choices
Not stated here
The Cookie Notice is a separate linked document whose text is not supplied here, so the choices it offers are not stated.
Third-party advertising companies may track you across sites, and Visa may place cookies so they can show targeted ads
Visa says it has relationships with third-party advertising companies that may track you, your browser or your device across different websites and applications. Subject to your settings, Visa may place cookies or tags on your computer when you visit its website so that these companies can display targeted advertisements to you on other websites. The notice says the use of your data by these companies is subject to their own privacy policies.
Details not recorded for this card
Supporting quotations
These third parties may track you, your browser or your device across different websites and applications.
Subject to your settings, we may place cookies or tags on your computer when you visit our website so that they can display targeted advertisements to you on other websites. The use of your data by these companies is subject to their own privacy policies.
Qualifications & exceptions
Cookies or tags are placed 'subject to your settings'.
Not stated here
The advertising companies, the Cookie Notice and their own privacy policies are not part of this document.
Many Visa websites place marketing, personalization and advertising cookies only if you click 'Accept All Cookies'
Many Visa websites place marketing, personalization and advertising cookies only if you explicitly accept them by clicking 'Accept All Cookies' on your first visit. Visa's Cookie Notice explains how to manage your preferences and how to disable cookies you previously accepted.
Details not recorded for this card
Supporting quotations
Many Visa websites only place marketing, personalization, and advertising cookies if you explicitly accept these cookies by clicking “Accept All Cookies” when you first visit the website.
explains how to manage your preferences and how to disable previously accepted cookies
Qualifications & exceptions
Stated for 'many' Visa websites, not all of them.
Not stated here
The notice does not say which Visa websites place these cookies without a prior opt-in.
The Cookie Notice is a separate linked document whose text is not supplied here.
Visa collects information from social media platforms and may show you interest-based ads there
Visa's websites may let you interact with Visa and others through social media platforms. Visa collects information from these platforms as permitted by the sites' legal terms, and may display interest-based ads to you while you use them. The platforms let Visa personalize the ads it displays, and they may gain insights about individuals who respond to the ads.
Details not recorded for this card
Supporting quotations
Our websites may enable you to interact with us and others via social media platforms. We collect information from these platforms as permitted by the sites’ legal terms. We may also display interest-based ads to you when you are using these platforms. The platforms allow us to personalize the ads that we display to you, and they may gain insights about individuals who respond to the ads we serve.
Not stated here
The platforms' legal terms, which limit what Visa may collect, are not part of this document.
Data Access & Collection · User right or choice
Visa mobile apps may obtain precise location if you allow it and send push notifications only if you opt in
When you download Visa's mobile applications, you may allow Visa to obtain your precise location from your mobile device, which Visa uses to deliver personalized content and for analytics. Visa may also offer automatic push notifications and says it provides them only if you opt in. You do not have to provide location information or enable push notifications to use the apps.
Details not recorded for this card
Supporting quotations
When you download our mobile applications, you may allow us to obtain your precise location from your mobile device. We use this information to deliver personalized content and for analytics. We may also offer automatic ("push") notifications. We will provide push notifications only if you opt-in to receive them. You do not have to provide location information or enable push notifications to use our mobile apps.
Some Visa mobile apps may share data with advertising platforms for interest-based ads, via mobile network opt-in
Certain mobile applications controlled by Visa may allow Visa to share data with advertising platforms to show you interest-based ads. Visa says it relies on the mobile network operators' settings to let you opt in to this sharing when you download the applications. Where it is able, Visa will also give you choices in the account profile section of the application.
Details not recorded for this card
Supporting quotations
Certain mobile applications controlled by Visa may allow us to share data with advertising platforms for purposes of showing you interest-based ads. We rely on the mobile network operators’ settings to allow you to opt into this type of sharing when you download our applications. However, where able, we will also provide you choices within the account profile section of the application.
Qualifications & exceptions
Stated for 'certain' mobile applications controlled by Visa.
App-level choices are provided only 'where able'.
Not stated here
The notice does not name the apps, the data shared or the advertising platforms.
Data Access & Collection · Company practice
Visa collects device identifiers, including advertising ID, to authenticate you, link devices and better target ads
Visa collects device identifiers and other device-related information, including your device's advertising ID. It uses this to identify your device and authenticate you. It may also use device-related information to associate you with other devices you may use, including for fraud protection and to better target advertising. In many cases you can reset your device's advertising ID in the settings menu of Android and iOS devices.
Details not recorded for this card
Supporting quotations
We collect device identifiers and other device-related information, including your device’s advertising ID, if available. This information is used to identify your device and authenticate you. We may also use device-related information to associate you with different devices that you may use, including for fraud-protection purposes and to better target advertising. In many cases, you can reset your device’s advertising ID. Both Android and iOS devices enable you to reset your device identifier under the “settings” menu.
Qualifications & exceptions
The advertising ID is collected 'if available'.
Account & Service Control · User right or choice
You can access, correct and delete your information as applicable laws allow, including through a Visa online account
Visa says it respects your rights to access, correct and delete your information in accordance with applicable laws. If you have an online account with Visa, you can log in to access, update and delete your information. You can also submit requests under relevant laws through the Privacy Rights Portal. For card-related information the notice sends cardholders to their card issuers instead (see the separate card on cardholders).
Details not recorded for this card
Supporting quotations
We respect your rights to access, correct and delete your information in accordance with applicable laws. If you have an online account with Visa, you can log into your account to access, update, and delete your information. You can also submit requests under relevant laws to us via the
For security reasons and to prevent unauthorized disclosure of Personal Information, cardholders should contact their payment card issuers to access their relevant information.
Qualifications & exceptions
Rights are honored 'in accordance with applicable laws'.
Logging in to manage information applies if you have an online account with Visa.
Not stated here
The notice does not say which laws apply to you or how long Visa takes to answer requests; the portal page is not supplied.
Cardholders are told to contact their card issuers to access their information and make privacy requests
For security reasons and to prevent unauthorized disclosure, the notice says cardholders should contact their payment card issuers to access their relevant information, so that access goes only to authorized individuals subject to the issuer's verification processes. For questions about how your issuer, merchants or rewards networks handle your Personal Information, it tells you to check the privacy notices those companies provide and to contact them directly for privacy requests.
Details not recorded for this card
Supporting quotations
For security reasons and to prevent unauthorized disclosure of Personal Information, cardholders should contact their payment card issuers to access their relevant information. This helps ensure that access to the information is only provided to the authorized individuals, subject to the issuer’s verification processes.
Additionally, if you have questions about how your issuer, merchants, or rewards networks handle your Personal Information, please check the privacy notices provided by these companies and contact them directly for assistance with any privacy requests.
Not stated here
The issuers' and merchants' own privacy notices are not part of this document.
As a service provider, Visa processes your information as its client instructs, and clients manage your privacy rights
When Visa acts as a service provider (also called a data processor) for its clients, it says it processes your information only as the client instructs to provide the services, and for other appropriate purposes such as recordkeeping and compliance. It relies on its clients to give you appropriate privacy notices and to manage your privacy rights. By contrast, the notice says that where Visa acts as a controller and collects information directly from an individual, the controller is the Visa entity named in the terms the individual signs.
Details not recorded for this card
Supporting quotations
When Visa acts as a service provider (also called a data processor) for our clients, we only process your information as instructed by our client to provide the services and for other appropriate purposes, such as recordkeeping and compliance. We rely on our clients to provide you with appropriate privacy notices and to manage your privacy rights.
When we act on behalf of our Visa clients, we only collect, use, and share Personal Information as authorized by our contracts with our clients.
Where Visa acts a controller under applicable laws and collects information directly from an individual, the controller is the Visa entity listed on the terms and conditions you sign when enrolling in a Visa service, product, or offer.
Qualifications & exceptions
Processing is as instructed by the client, and for other appropriate purposes such as recordkeeping and compliance.
Residents of some states and countries have additional privacy rights set out in supplemental notices
The notice says residents of some states and countries have additional privacy rights, and that information on those rights is in supplemental privacy notices posted at the bottom of this Global Privacy Notice.
Details not recorded for this card
Supporting quotations
Supplemental Privacy Notices: Residents of some states and countries have additional privacy rights. Information on these rights is provided in the supplemental privacy notices posted at the bottom of this Global Privacy Notice.
Not stated here
Which states and countries, and what the additional rights are, are not stated here; the supplemental notices are separate linked documents whose text is not supplied.
Sharing & Disclosure · Company practice
Visa may transfer your personal information between countries, including to countries with weaker privacy laws
Visa is based in the United States and has Affiliates and service providers around the world. It says it may transfer your Personal Information between countries, including to countries that may not have privacy or data protection laws similar to those of your country of origin. It may transfer information to its main data centers in the United States and to other data centers, such as one in Europe or a local data center in your country where applicable.
Details not recorded for this card
Supporting quotations
Visa is based in the United States and has Affiliates and service providers around the world. Visa may transfer your Personal Information between countries, including to countries which may not have similar privacy or data protection laws as your country of origin. We may transfer your Personal Information to our main data centers in the United States, as well as our other data centers, such as our data center in Europe or a local data center in your country where applicable.
Not stated here
The notice does not name a transfer mechanism or list the countries where data centers or providers are located.
Legal Rights & Agreement Rules · Company commitment
Visa says it protects transferred information as the relevant notices describe and follows cross-border transfer rules
Visa says it will always protect your information as described in the relevant privacy notice(s), no matter where it is stored, and will transfer it in accordance with any applicable legal requirements for cross-border transfer of Personal Information.
Details not recorded for this card
Supporting quotations
However, we will always protect your information as described in the relevant privacy notice(s), no matter where it is stored, and transfer it in accordance with any applicable legal requirements for cross-border transfer of Personal Information.
Not stated here
The notice does not say which legal requirements it means or how the protection is carried out for each transfer.
Visa uses physical, technical, organizational and administrative safeguards, including encryption
Visa says it uses physical, technical, organizational and administrative safeguards to help protect your Personal Information from unauthorized access or loss. As an example it uses encryption and other tools to protect sensitive information.
Details not recorded for this card
Supporting quotations
We use physical, technical, organizational, and administrative safeguards to help protect your Personal Information from unauthorized access or loss. For example, we use encryption and other tools to protect sensitive information.
Not stated here
The notice describes the safeguards only in general terms; it does not say which standards or certifications they follow.
This notice covers Visa Inc. and its Affiliates; read your card issuer's and other clients' notices too
The notice says it explains how Visa Inc. and its Affiliates handle your Personal Information. It asks you to also read the privacy notice from your Visa card issuer and other applicable clients to learn how those companies handle your information, and, if you take part in offers or promotions, the privacy notices from the merchant or rewards network before you sign up.
Details not recorded for this card
Supporting quotations
This Privacy Notice explains how Visa Inc. and its Affiliates handle your Personal Information. Please also read the privacy notice provided by your Visa card issuer and other applicable clients to learn how each of those companies handle your information. Additionally, if you are participating in offers or promotions, please read the privacy notices provided by the merchant or the rewards network before you sign up.
Not stated here
The issuers', clients', merchants' and rewards networks' notices are not part of this document.
Legal Rights & Agreement Rules · Context
Social media platforms and other websites reached through Visa's websites have their own privacy policies
The notice says social media platforms and other websites that may be accessed through Visa's websites have their own privacy policies, and Visa encourages you to read their notices before you give them your information.
Details not recorded for this card
Supporting quotations
Social media platforms and other websites that may be accessed through Visa’s websites also have their own privacy policies. We encourage you to read the privacy notices provided by these sites before you give them your information.
Use & Processing · Company practice
Job applicants' information is used and retained for recruiting, compliance and other customary HR purposes
If you applied for a job at Visa, the Personal Information in your application is used and retained for recruiting, compliance and other customary human resources purposes. This includes, where permitted, processing information to monitor Visa's pathways for employee recruitment.
Details not recorded for this card
Supporting quotations
If you have applied for a job at Visa, the Personal Information in your application will be used and retained for recruiting, compliance, and other customary human resources purposes. This includes, where permitted, processing information to monitor our pathways for employee recruitment.
Qualifications & exceptions
Processing to monitor recruitment pathways is included where permitted.
Not stated here
The separate Candidate Privacy Notice listed among the supplemental notices is not part of this document, and no retention period for application data is stated here.
Data Access & Collection · Company practice
Visa's platforms are generally not directed at children; it collects children's information only as the law permits
Visa says that, in general, its platforms are not directed to, likely to be accessed by or intended for children, and that it collects information from children only as permitted by applicable law. A Visa platform intended for use by children may have a separate privacy notice. If you believe Visa is processing a child's information inappropriately, the notice gives a Contact Us link.
Details not recorded for this card
Supporting quotations
In general, Visa’s platforms are not directed to, likely to be accessed by, or intended for children, and Visa only collects information from children as permitted by applicable law. If a Visa platform is intended to be used by children, it may have a separate privacy notice.
If you believe that we are processing a child’s information inappropriately, please
Stated 'in general': a platform intended for children may carry its own separate notice.
Not stated here
The notice gives no age threshold for who counts as a child and does not show the contact address behind the Contact Us link.
Legal Rights & Agreement Rules · Company commitment
Visa may change the notice: online alerts for material changes, direct notice if already-collected data is affected
Visa says it may update the notice from time to time. It will post an alert online if the changes are material, and will notify you if the changes will materially affect the way it uses Personal Information it has already collected.
Details not recorded for this card
Supporting quotations
We may update this Privacy Notice from time to time. We will post an alert online if the changes are material. If the changes will materially affect the way we use Personal Information that we have already collected, we will notify you.
Qualifications & exceptions
Direct notice to you is promised only where the change will materially affect how already-collected information is used.
Not stated here
The notice does not say how you will be notified, how far ahead of a change, or when an update takes effect.
Account & Service Control · Procedure
Use the Privacy Rights Portal to exercise rights; other questions go to the Visa Global Privacy Office by email or mail
To exercise privacy rights under relevant laws, the notice tells you to use the Privacy Rights Portal. For any other assistance, including questions to Visa's Data Protection Officers, you can email Visa, asking you not to include sensitive information such as your account number, or mail the Visa Global Privacy Office, 900 Metro Center Blvd., Foster City, CA, 94404, USA.
Details not recorded for this card
Supporting quotations
If you would like to exercise your privacy rights under relevant laws, please reach out us via the
For any other assistance you may contact us, including any queries to the applicable Data Protection Officers within Visa, at the information below:
Email us:
Please do not include sensitive information, such as your account number, in emails.
Mail us a letter: Visa Global Privacy Office 900 Metro Center Blvd. Foster City, CA, 94404 USA
Not stated here
The email address is hidden in the extracted text of this document, so it is not stated here.
Legal Rights & Agreement Rules · Context
Visa lists a Candidate Privacy Notice among the notices that supplement this one
The notice says it is supplemented by additional notices that depend on how you interact with Visa and where. The first one listed is a Candidate Privacy Notice.
Details not recorded for this card
Supporting quotations
This Global Privacy Notice is supplemented by the following additional notices, depending on how you interact with us and where:
The Candidate Privacy Notice is a separate linked document whose text is not supplied here, so what it adds is not stated.
Legal Rights & Agreement Rules · Context
Visa lists separate jurisdiction-specific notices for 13 countries or regions, in local languages
The notice lists supplemental notices for Argentina (Spanish), Australia (English), Brazil (Portuguese), Canada (English), mainland China (Simplified Chinese), Colombia (Spanish), the European Economic Area, Switzerland and the UK (English), Japan (Japanese), South Korea (Korean), New Zealand (English), Taiwan (Traditional Chinese), Turkey (Turkish) and Vietnam (English, with a Vietnamese version listed separately). The Global Privacy Notice says it is supplemented by these notices depending on how you interact with Visa and where.
Each notice applies depending on how you interact with Visa and where, as the introduction to the list says.
Not stated here
The text of these linked notices is not supplied in this document, so what additional terms or rights each one sets out is not stated.
Legal Rights & Agreement Rules · Context
Visa lists a U.S. State Privacy Laws Supplementary Notice and a U.S. Social Security Number Policy statement
For the United States, the notice lists two supplemental documents: a 'U.S. - State Privacy Laws Supplementary Notice (English)' and a 'U.S. - Social Security Number Policy and Sensitive Personal Information Statement (English)'.
Both documents are separate linked pages whose text is not supplied here, so this analysis does not state what state-law rights or what Social Security number and sensitive information practices they set out.
Legal Rights & Agreement Rules · Context
Open banking has its own privacy notice, available only in certain countries, otherwise redirecting to this notice
Visa lists an Open Banking Privacy Notice. It says open banking is available only in certain countries, and that if open banking is not available in your region you will be redirected to the Visa Global Privacy Notice.
Please note open banking is only available in certain countries. If open banking is not available in your region, you will be redirected to the Visa Global Privacy Notice.
Qualifications & exceptions
Open banking is available only in certain countries.
Not stated here
The Open Banking Privacy Notice is a separate linked document whose text is not supplied here.
Data Access & Collection · Context
A separate Cookie Notice explains Visa's practices for cookies, tags and similar online data
The notice points to Visa's Cookie Notice for its practices regarding cookies, tags and similar types of online data that it collects.