Loyalty Notice

Effective Date: 6/6/2023

At Mastercard, we offer and support market-leading loyalty programs that allow you to earn points or rewards for purchases made with your eligible Mastercard card and to redeem those points or rewards for promotions, discounts, cashback, rebates, sweepstakes, special offers or other benefits (“Programs”). We recommend that you read this notice together with Mastercard's Global Privacy Notice.

1. SCOPE OF THIS NOTICE

This privacy notice (“Notice”) describes how Mastercard International Incorporated and its affiliates (collectively “Mastercard”, “us” or “we”) process Personal Information in connection with our Programs. “Personal Information” means any information relating to an identified or identifiable individual (“you”).

This Notice does not cover the processing by Mastercard in the context of other programs such as the priceless.com website. Please refer to the Priceless privacy notice for information about how we process your Personal Information when you use priceless.com. This Notice also does not cover the processing where we act on behalf of and under the instructions of financial institutions (e.g., the bank that issued your Mastercard card), merchants and other partners which act as data controllers when they offer loyalty programs. Please refer to their privacy notices for information about the processing of your Personal Information in such cases.

2. WHAT PERSONAL INFORMATION WE PROCESS FOR THE PROGRAMS

Under the Programs, we may collect the following types of Personal Information relating to you:

Account information and contact details, such as full name, email address, payment card number(s) you choose to register for a Program, expiry date, CVC2, login credentials, accrued total of points or rewards and points or rewards redemption history. Depending on the program, you may also choose to provide additional details, such as your address, phone number, date of birth, tax ID number, and gender where permitted by law.
Transaction information related to the card(s) enrolled in a Program, such as date / time of payment(s), personal account number, name of merchant, commercial and transaction code, currency and amount of a purchase, and a tokenized ID generated to identify whether your purchases are eligible for the Programs.
Your preferences for or interest in specific offers.
Your geographic location (if you choose to enable the sharing of your location to see offers near you).
Information provided when completing voluntary surveys.
Information provided in connection with our customer support, such as date, time and content of your message.
Device-related information (e.g., device ID, device model, browser type, operating system, referring URL, IP address, location data) and information about your interaction with our Programs on our websites (e.g., dates and times of action). We collect such information via cookies and similar technologies (such as web beacons and other trackers), as described in the consent tools provided on our websites.

We obtain the above categories of Personal Information from various sources: from third parties such as financial institutions, loyalty program operators and merchants, directly from you, or from your interaction with cookies and similar technologies.

3. HOW WE USE YOUR PERSONAL INFORMATION

We may use your Personal Information for the purposes set out below. Depending on the country in which you are located, we will only process your Personal Information when we have a legal basis for the processing, as identified in the table below. However, please note that even though this table does not list consent as a legal basis for each processing activity, in some countries consent is the only or most appropriate legal basis for the processing of Personal Information, and in those countries we rely on consent.

Processing Activity	Legal Basis for Processing
Determine eligibility to receive offers in connection with your card type as well as to identify transactions that may qualify for a point or reward.	You consented to or directed the use of your Personal Information; or The processing is necessary for entering into, or performance of a contract to which you are a party; or We, or a third party, have a legitimate interest in using your Personal Information to be able to determine and manage provide you with the Programs and their benefits.
Create and manage your Program account(s), provide our services, communicate with you about the Programs and respond to your inquiries.	You consented to or directed the use of your Personal Information; or The processing is necessary for entering into, or performance of a contract to which you are a party; or The processing is necessary for compliance with a legal or other regulatory obligation; or We, or a third party, have a legitimate interest in using your Personal Information to create and manage accounts, provide our services, and respond to your inquiries.
Process and fulfil purchases made on or through a Program.	You consented to or directed the use of your Personal Information The processing is necessary for entering into, or performance of a contract to which you are a party; or The processing is necessary for compliance with a legal or other regulatory obligation.
Protect against and prevent fraud and (cyber) threats, unauthorized transactions, abuse of the Programs, claims and other liabilities.	The processing is necessary for compliance with a legal or regulatory obligation; or The processing is necessary for entering into, or performance of a contract to which you are party; or We, or a third party, have a legitimate interest in using your Personal Information for the purpose of protecting against fraud, securing our Programs, our network, and the payment transactions that we process.
Send you push notifications and marketing communications about the Programs (including contests, sweepstakes, and any other marketing activities).	You consented to or directed the use of your Personal Information; or The processing is necessary for entering into, or performance of a contract to which you are party; or We, or a third party, have a legitimate interest in using your Personal Information for the purpose of marketing products and services.
Analyse your preferences, spending patterns, interests, use of and interaction with the Programs to provide you with relevant offers, personalised content and personalised recommendations in connection with a Program (e.g., we may present you offers that are in your geographic range or based on your purchase history).	You consented to or directed the use of your Personal Information; or The processing is necessary for entering into, or performance of a contract to which you are party; or We, or a third party, have a legitimate interest in using your Personal Information for the purposes of providing you with personalized content and recommendations.
Operate, evaluate, and improve our products and services, including the effectiveness of our offers and campaigns, and analyse our Program websites, mobile apps and any other digital assets to facilitate their functionality.	You consented to or directed the use of your Personal Information; or The processing is necessary for entering into, or performance of a contract to which you are party; or We, or a third party, have a legitimate interest in using your Personal Information to operate, evaluate, and improve our products or services and promote customer engagement with the Program.
Anonymize Personal Information and prepare aggregated reports for internal analysis and to advise our financial institutions, merchants and other customers and partners in relation to spending patterns, fraud, and other insights.	We, or a third party, have a legitimate interest in using your Personal Information to anonymize Personal Information and prepare aggregated data reports; or The processing is undertaken for statistical and/or research purposes (in jurisdictions where this legal basis is available).
Enforce applicable terms of use or as necessary to establish, exercise and defend legal rights.	The processing is necessary for entering into, or performance of a contract to which you are party; or The processing is necessary for compliance with a legal or regulatory obligation; or We, or a third party, have a legitimate interest in using your Personal Information to enforce Program terms of use and establish, exercise, and defend legal rights.
Comply with applicable laws or as requested by any judicial process, law enforcement or governmental agency having or claiming jurisdiction over Mastercard.	The processing is necessary for compliance with a legal or regulatory obligation; or We, or a third party, have a legitimate interest in using your Personal Information to respond to a judicial process, law enforcement or governmental agency.
Comply with industry standards and our policies.	You consented to or directed the use of your Personal Information; or The processing is necessary for compliance with a legal or regulatory obligation; or The processing is necessary for entering into, or performance of a contract to which you are party; or We, or a third party, have a legitimate interest in using your Personal Information to comply with industry standards and our policies.

4. HOW WE SHARE YOUR PERSONAL INFORMATION

We may share your Personal Information:

With Mastercard’s headquarters in the U.S., our affiliates, and other entities within Mastercard’s group of companies.
With marketing agencies and other service providers who perform services on our behalf and in connection with the purposes described in this Notice. We subject them to strict contractual data protection and security obligations.
With financial institution(s) (e.g., banks that issued the card(s) enrolled in a Program) or merchants to the extent necessary to support Program-related initiatives, and to handle complaints.
With third parties that operate or support a Program that you choose to join.
With redemption partners to process or fulfil purchases or transfers made through a Program.
When we believe disclosure is necessary to protect individuals’ vital interests, to protect Mastercard against harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.
As required under applicable law or legal process, or to respond to requests from law enforcement or governmental agencies. When receiving such requests, we will follow the process set out in our Binding Corporate Rules, where applicable.
In the event of the sale or transfer of our business or assets, in whole or in part. In such event, we will use reasonable efforts to direct the transferee to use the Personal Information you provided to us in a manner consistent with this Notice.

5. YOUR RIGHTS AND CHOICES, HOW TO CONTACT US, AND ADDITIONAL INFORMATION ABOUT OUR PRACTICES

You have certain rights and choices regarding the Personal Information we maintain about you. For more information about your rights, to contact us, or to learn more about how we share, transfer, retain or protect your Personal Information, please read our Global Privacy Notice. You, or a party authorized to act on your behalf, can exercise your rights that are detailed in the Global Privacy Notice by emailing us at: privacyanddataprotection@mastercard.com.

This Notice provides further information about certain aspects of the processing of Personal information covered by our Global Privacy Notice. For enquiries about your Mastercard card and your purchases, please contact your financial institution or merchant. More information about how to contact them can be found on their websites.