|
Mastercard International Incorporated and its affiliates (“Mastercard”) (“We” or “we”) respect your privacy. This Privacy Notice applies to both (i) the Masterpass Mobile Application, the Masterpass Wallet and/or Masterpass Online for consumers who have a Masterpass by Mastercard Wallet account (collectively, “Masterpass by Mastercard Wallet Services”) and (ii) the Masterpass.com website and the Masterpass wallet portal through which individuals access and transact with all Masterpass wallets, whether a Masterpass Wallet, a Masterpass wallet through a financial institution or another party (the “Masterpass Websites”). To learn more, click on one of the links below to jump to the listed section: |
This Privacy Notice describes the types of personal data we collect in connection with the Masterpass by Mastercard Wallet Services and the Masterpass Websites, the purposes for which we collect that personal data, the other parties with whom we may share it and the measures we take to protect the security of the data. It also tells you about your rights and choices with respect to your personal data, and how you can reach us to update your contact information or get answers to questions you may have about our privacy practices.
However, it is important to note that this Privacy Notice does not cover the following:
A.Masterpass Wallets other than the Masterpass by Mastercard Wallet: If you have a Masterpass wallet account other than a Masterpass by Mastercard wallet account, the collection and processing of your personal data through that wallet will be explained in that wallet’s privacy notice. This Privacy Notice only covers the Masterpass by Mastercard Wallet Services and the Masterpass Websites.
B.Merchants: This Privacy Notice does not cover the collection and use of your personal data by merchants using the Masterpass by Mastercard Wallet Services and the Masterpass Websites. Please make sure to review your merchant’s privacy disclosures to understand how they are collecting and using your personal data.
C.Financial Institutions: This Privacy Notice also does not cover the collection and use of your personal data by your financial institution. Please make sure to review your financial institution(s) privacy disclosures to understand how they are collecting and using your personal data.
D.Other Mastercard Products and Services: This Privacy Notice does not cover the collection and use of your personal data on other Mastercard branded websites or products, or any other information or communications that may reference Mastercard outside the Masterpass by Mastercard Wallet Services or the Masterpass Websites. For more information about Mastercard’s privacy practices, visit Mastercard’s Global Privacy Notice.
The entities responsible for the collection and use of your personal data in the context of the Masterpass by Mastercard Wallet Services and Masterpass Websites are:
Mastercard Europe SA | Mastercard International Incorporated | |
Chaussée de Tervuren 198A | Attn: Global Privacy & Data Usage Officer | |
B-1410, Waterloo | 2000 Purchase Avenue | |
Belgium | Purchase NY 10577 | |
U.S.A. |
Please note that for those consumers who reside in France, Mastercard France (and not Mastercard Europe SA) will be the appropriate entity responsible for the collection and use of your personal data in the context of the Masterpass by Mastercard Wallet Services and Masterpass Websites. Reference may be made to Mastercard International Incorporated as the parent company of Mastercard France.
Mastercard France
Service Marketing
112, Avenue Kléber
75784 PARIS CEDEX 16
France
We collect Personal Data about you through the Masterpass Websites and in connection with your use of the Masterpass by Mastercard Wallet Services. By personal data we mean “any information relating to an identified or identifiable natural person.”
The following sections provide a summary of:
A. Personal Data Collected through the Masterpass Websites
  1.Personal Data Provided By Your Financial Institutions
In some instances, we may receive data about you from your financial institution in order to help ensure you create the correct Masterpass wallet. For example, your financial institution may provide us with your email address or phone number. This will be used to help you create the appropriate Masterpass wallet with a participating financial institution.
  2.Personal Data Provided By You
When you register to create any Masterpass wallet account (whether a Masterpass by Mastercard wallet with Mastercard, a Masterpass wallet through a financial institution or with another party) or attempt to sign in to any Masterpass wallet account through the Masterpass portal, we may ask you for certain personal data, including email address, phone number and payment card information. The provision of this personal data is voluntary. However, withholding this personal data will mean that you cannot take advantage of the Masterpass Wallet services.
We use this data for the following purposes:
B. Personal Data Collected and Presented through the Masterpass by Mastercard Wallet Services
We collect data in a number of ways when you use the Masterpass by Mastercard Wallet Services: personal data provided by you; personal data provided by participating merchants; personal data provided by the issuer of your payment cards or other financial institutions; and personal data provided by you in connection with other Masterpass wallets on your device. That data collection is described below.
If you have more than one Masterpass wallet mobile application with an active account on your mobile device, we may also present data from each Masterpass account to you when making a purchase at a participating merchant to help you choose how you would like to pay. To learn more, see Section 3(B)(4), below.
In addition, we automatically collect personal data through your use of the Masterpass by Mastercard Wallet Services. That is described in more detail in Section 3(C), below.
  1.Personal Data Provided by You
In connection with your use of Masterpass by Mastercard Wallet Services, we may ask you for certain personal data upon registration, or on applications forms or other forms, such as your name, home address, billing address, shipping address, telephone number, email address, national identity card number in some instances, user name, password, answers to our security questions, loyalty card information and payment card information. The provision of your personal data for the purposes listed below is voluntary. However, in some circumstances, withholding your personal data will mean that you cannot take advantage of certain products or services.
  2.Personal Data Provided by Participating Merchants in Connection with Your Use of the Masterpass Wallet
We receive certain data from merchants about your transactions using the Masterpass by Mastercard Wallet Services, including but not limited to, stock-keeping unit data, description of items, quantity, price and subtotal and payment cards registered with the Masterpass by Mastercard Wallet Services, merchant name, currency, amount, date and time of order and information about whether or not the order was completed. If you have an account on file with the merchant, they may also provide us with your shipping address.
  3.Personal Data Provided by the Issuer of Your Registered Payment Card or Other Financial Institution
When you register a payment card with the Masterpass by Mastercard Wallet Services, we may send information to the issuer of that card to validate the card, authenticate your identity and tokenize your payment credentials to make your payments more secure. This information may include your name, payment card information, billing address, information about your mobile device and information about how you registered your payment cards in your Masterpass by Mastercard Wallet. To facilitate the validation/authentication/tokenization process, we may receive personal data about you back from the issuer of your payment card. In addition, when you make payments using tokenized credentials via the Masterpass by Mastercard Wallet Services, we receive data about the token and the transaction back from the issuer of your payment card.
  4. Personal Data Presented from Your Other Masterpass Wallets on the Device
If you are using the Masterpass by Mastercard Wallet Services on an eligible device, when you click on the “Buy With Masterpass” button to make a payment using a participating merchant’s mobile application, we may scan your mobile device to see if any certified Masterpass wallet mobile applications are loaded on the device. If so, during the checkout flow at the participating merchant, you will be presented with a list of each such Masterpass wallet and the registered payment cards for such wallets so you can choose which Masterpass wallet and payment card you would like to use for that transaction.
C. Personal Data We Collect Automatically
We may use the personal data we obtain about you to:
We also may use the information in other ways for which we provide specific notice at the time of collection.
We do not sell or otherwise disclose personal data we collect about you, except as described in this Privacy Notice or otherwise disclosed to you at the time the data is collected. In particular, your personal data may be shared:
In addition, we also may share aggregated or anonymized data with third parties for any lawful purpose.
You may have certain rights under applicable law regarding the personal data we maintain about you. We offer you certain choices about what personal data we collect from you, how we use that information, and how we communicate with you.
Where required by law, Mastercard obtains your prior opt-in consent at the time of collection for the processing of (i) personal data for marketing purposes,(ii) personal data deemed sensitive pursuant to applicable law, or (iii) personal data to be used for other data processing activities for which your consent may be required.
Subject to applicable law, you may have the right to request access to and receive information about the personal data we maintain about you, update and correct inaccuracies in your personal data, to object to the processing of your personal data and have the information blocked or deleted, as appropriate. The right to access personal information may be limited in some circumstances by local law requirements. To update your preferences, ask us to remove your information from our mailing lists or submit an access or correction request, please contact us as specified in the “How to Contact Us” section below.
We maintain appropriate administrative, technical and physical safeguards to protect personal data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the personal data in our possession. The types of measures we take vary with the type of data, and how it is collected and stored.
When you provide personal data online, we use the industry standard for encryption on the Internet – Secure Socket Layer (SSL) technology – to help protect the data that you provide. This Internet encryption standard scrambles data as it travels from your device to our server. You will know that you are in a secure area of the Site when a lock icon appears on your screen that the “http” prefix of our URL address changes to “https. ” The “s” represents “secure”. We also use digital certificates to ensure that you are connected to the authentic Site.
We will never ask you for your password in any unsolicited communication (including unsolicited correspondence, such as letters, phone calls or e-mail messages). If you believe your user name and password have been compromised, please contact us by following the instructions provided in the section "How to Contact Us" below.
We also take measures to destroy or permanently de-identify personal data when there is no longer a business need to keep the information and in any case, for no longer than 13 months from the last time you have accessed your account.
We may transfer personal information to countries other than the country in which the data was originally collected. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your personal information to other countries, we will protect that information as described in this Privacy Notice.
Mastercard is a global business. To offer our services, we may need to transfer your personal information among several countries, including the United States, where we are headquartered. We comply with applicable legal requirements providing adequate safeguards for the transfer of personal information to countries outside of the European Economic Area or Switzerland.
On the Masterpass Websites or via the Masterpass by Mastercard Wallet Services, you may choose to use certain features for which we partner with other entities or click on links to other websites for your convenience and information. These features, which may include social networking and geographic location tools, and other websites may operate independently from Mastercard. They may have their own privacy notices or policies, which we strongly suggest you review. To the extent any features or linked websites you visit are not owned or operated by Mastercard, we are not responsible for the sites’ content, any use of the sites, or the privacy practices of the sites.
Although the Masterpass by Mastercard Wallet Services and the Masterpass Websites currently do not have a mechanism to recognize the various web browser Do Not Track signals, we may offer users of our Masterpass by Mastercard Wallet Services and visitors to the Masterpass Websites choices to manage their preferences via our Cookie Consent Tool we will honor your preferences. To learn more about browser tracking signals and Do Not Track, please visit http://www.allaboutdnt.com.
This Privacy Policy may be updated periodically to reflect changes in our personal data practices. We will post a prominent notice on our websites to notify you of any significant changes to our Privacy Policy and indicate at the top of the notice when it was most recently updated and/or take any other actions as required by law. In addition, in the event of a material change to the Privacy Notice, you may be asked to reaccept the Privacy Notice when signing in to your account.
If you have any questions or comments about this Privacy Policy or our data protection procedures or if you would like to exercise your rights or to update the information we have about you or your preferences, please click here. You may also contact us by writing to:
Global Privacy & Data Usage Officer
Mastercard International Incorporated
2000 Purchase Street
Purchase, New York 10577
USA
Or:
Global Privacy & Data Usage Officer
Mastercard Europe SA
Chaussee de Tervuren 198A
B-1410, Waterloo
Belgium
Or
For those consumers who reside in France, please contact:
Mastercard France
Service Marketing
112, Avenue Kléber
75784 PARIS CEDEX 16
France