Effective Date: December 1, 2017
Mastercard's Priceless Causes Privacy Notice
Mastercard Asia/Pacific Pte. Ltd (“Mastercard”) respects your privacy. Mastercard is the entity responsible for the processing of your personal data in the context of Mastercard's Priceless Causes program ("Priceless Causes") which provides the channel to donate to the World Food Programme (WFP) on this website (the "Site"). This Privacy Notice describes the types of personal data we collect in connection with Priceless Causes, the purposes for which we collect such personal data and with whom we may share it. This Privacy Notice also describes the measures we take to protect the security of the personal data. We also tell you how you can reach us to update your contact information or get answers to questions you may have about our privacy practices.
1. Information We Collect About You
In connection with your participation with Mastercard's Priceless Causes and use of the Site, we ask for certain personal information such as your:
- E-mail Address
- First Name
- Last Name
- Personal Account Number (PAN)
- Postal Code
- Expiration Month
- Expiration Year
We collect personal data about you from the following sources:
- Information we receive directly from you, upon registration and via your subsequent interactions with us in connection with Priceless Causes;
- Information we obtain in the course of processing transactions in respect of the donations you make via the Site; and
- Information from the acquiring bank(s) which process(es) transactions in respect of your donations.
If you do not provide us with your personal data when requested, this may mean we are not able to register you for, or properly administer your participation in Priceless Causes, and you may not be able to make donations to Priceless Causes. We may also not be able to respond to your enquiries or requests for assistance in connection with Priceless Causes if you do not provide us with relevant personal data.
2. How Do We Use the Information We Collect
We may use the information we obtain about you to:
- Create and manage your online account, identify your eligible transactions, calculate the donation amount and respond to your inquiries;
- Communicate with you regarding Priceless Causes and future donation campaigns;
- Validate your payment card information;
- Protect against and prevent fraud, unauthorized transactions, claims and other liabilities, and manage risk exposure and franchise quality;
- Operate, evaluate and improve our business (including developing new products and services; analyzing our products, services and websites; facilitating the functionality of our websites; and performing accounting, auditing, billing, reconciliation and collection activities);
- Monitor the use of and improve our interactive assets;
- As authorized by law and to comply with applicable legal requirements and industry standards and our policies;
- Perform auditing, research and analysis in order to maintain, protect and improve our services; and
- Anonymize personal information and prepare and furnish aggregated data reports showing anonymized information, (including, but not limited to, the following: compilations, analyses, analytical and predictive models and rules, and other aggregated reports) for the purpose of advising our issuing and acquiring institutions, merchants and other customers and partners regarding past and potential future patterns of spending, fraud, and other insights that may be extracted from this data.
We may also use the information in other ways for which we provide specific notice at the time of collection.
3. Information We Share
We do not sell or otherwise disclose personal information we collect about you, except as described herein or otherwise disclosed to you at the time the data is collected:
- We share information to operate Priceless Causes and this Site with our headquarters and affiliates, including Mastercard International Inc.
- We also share information regarding your donation with the Priceless Causes which you select to receive your donations ("Donation Recipients"). The information we share with Donation Recipients includes: your name, your registered email address, your country and details of your donation. Donation Recipients may use this information to contact you to thank you for your donation and provide you with information regarding their activities (including the use the Donation Recipient proposes to make, or has made, of your donation) and any tax receipts or certificates which may be required in connection with your donation;
- We also share information with acquirers who process donations made to Priceless Causes. The information we share with Acquirers includes: your country, your credit card details and details of your donation. Acquirers use this information to process transactions in respect of your donations made via the Priceless Causes website;
- We also may share the information with our service providers who perform services on our behalf. We do not authorize these service providers to use or disclose the information except as necessary to perform certain services on our behalf or comply with legal requirements. We require these service providers by contract to appropriately safeguard the privacy and security of personal data they process on our behalf;
- We also may disclose information about you (i) if we are required or authorized to do so by law or legal process, (ii) to law enforcement authorities or other government officials, or (iii) when we believe disclosure is necessary or appropriate to respond to an emergency, or prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity; and
- We also reserve the right to transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets. Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use personal data you have provided to us in a manner that is consistent with this Privacy Notice. Following such a sale or transfer, you may contact the entity to which we transferred your personal data with any inquiries concerning the processing of that information.
4. Transfer of Personal Data
Mastercard may transfer or disclose personal data to recipients outside of your country, including Singapore and the United States. The transfer or disclosure of personal data outside your country may be subject to restrictions, and Mastercard will take all necessary steps to ensure compliance with applicable data protection law, in particular, the legal requirements on adequate protection for data transfers to countries outside your country. Please note however that the countries which Mastercard transfers or discloses the personal data to may not have the same data protection laws as the country in which you initially provided the information, and you may not have access to mechanisms to protect the data under the data protection law in that country.
5. How We Hold and Protect Personal Data
We may hold personal data about you in electronic or hard copy form. We restrict access to non-public personal information about you to those employees who need to know that information to provide products or services to you. We maintain reasonable administrative, technical and physical safeguards that comply with state and federal regulations to protect the nonpublic personal information we have about you.
We only retain personal data for as long as needed to fulfill the purposes for which they were collected, unless otherwise provided by law. We take measures to destroy or permanently de-identify personal information when there is no longer a business need to keep the information. The types of measures we take vary with the type of information, and how it is collected and stored.
6. Your Rights and Choices
You have the right to receive information about the data stored about you and to access your personal data by using the contact information provided in the "How to Contact Us" section below. You may also request at any time that your personal data be rectified, blocked or deleted if it is incorrect, inaccurate or outdated. Following any data request for access, rectification or deletion, we will accommodate your enquiry as required by applicable law.
If you decide you no longer want Mastercard to process your personal data, at your request we will delete your account, and any reference to you will be deleted. Please note that if we delete all your personal data, you will no longer have access to MasterCard's Priceless Causes. We will not use any technical mechanism to subject you to a decision which produces legal effects and which is based solely on automated processing of data.
7. Links to Other Websites
Our Site may provide links to other websites for your convenience and information. These websites may operate independently from Mastercard. Linked sites may have their own privacy notices or policies, which we strongly suggest you review if you visit any linked websites. To the extent any linked websites you visit are not owned or operated by Mastercard, we are not responsible for the websites' content, any use of the websites, or the privacy practices of the websites.
9. Updates to this Privacy Notice
This Privacy Notice may be updated periodically to reflect changes in our personal data practices. We will post a notice on this Site to notify you of any significant changes to our Privacy Notice and indicate at the top of the notice when it was most recently updated.
10. How to Contact Us
If you would like to update the information we have about you or your preferences, you may do so by accessing the data you have already entered on the Site and modifying it directly. If you have any questions, comments or complaints about this Privacy Notice, or about our handling of your personal data, you can contact us by e-mail: firstname.lastname@example.org or by writing to:
Mastercard Asia/Pacific Pte. Ltd.
Attn. Global Privacy & Data Usage Officer
152 Beach Road #35-00
The Gateway East
To assist Mastercard in responding to your request, please give full details of the issue. Mastercard will review and respond to all complaints within a reasonable time. If you are not satisfied with how Mastercard responds, you may take your complaint to the applicable regulator in your jurisdiction.