Privacy Notice

Privacy Notice

Privacy Notice

Effective Date: September 20, 2017

Mastercard's Priceless Causes Privacy Notice

Mastercard Asia/Pacific Pte. Ltd (“Mastercard”) respects your privacy. Mastercard is the entity responsible for the processing of your personal data in the context of Mastercard's Priceless Causes program ("Priceless Causes"), which provides the channel to donate to selected charities and causes identified on this website (the "Site"). This Privacy Notice describes the types of personal data we collect in connection with Priceless Causes, the purposes for which we collect such personal data and with whom we may share it. This Privacy Notice also describes the measures we take to protect the security of the personal data. We also tell you how you can reach us to update your contact information or get answers to questions you may have about our privacy practices.

This Privacy Notice applies to this website (the "Site") in connection with your participation in Priceless Causes and it does not cover the collection and use of your personal data on any other Mastercard branded websites or by your Mastercard issuers (e.g. your bank) or any other information or communications that may refer to Mastercard outside this Program (e.g. communications from banks). For more information about Mastercard's privacy practices outside the scope of Priceless Causes, please visit our Global Privacy Policy.

Your visit to the Site is subject to this Privacy Notice and the Terms of Use.

This Privacy Notice is subject to the Mastercard Priceless Causes Terms and Conditions.

1. Information We Collect About You

In connection with your participation in Priceless Causes and use of the Site, we ask for certain personal data such as your:

• E-mail Address
• First Name
• Last Name
• Password
• Personal Account Number (PAN)
• Country
• Postal Code
• Expiration Month
• Expiration Year
• Details of consents you have given relating to Priceless Causes (including your agreement to the Terms of Use and the Privacy Policy)

We collect personal data about you from the following sources:

• Information we receive directly from you, upon registration and via your subsequent interactions with us in connection with Priceless Causes; and
• Information we obtain in the course of processing transactions in respect of the donations you make via the Website; and
• Information from the acquiring bank(s) which process(es) transactions in respect of your donations .

If you do not provide us with your personal data when requested, this may mean we are not able to register you for, or properly administer your participation in Priceless Causes, and you may not be able to make donations to Priceless Causes. We may also not be able to respond to your enquiries or requests for assistance in connection with Priceless Causes if you do not provide us with relevant personal data.

2. How Do We Use the Information We Collect

We may use the information we obtain about you to

• Create and manage your online account, identify your eligible transactions, calculate the donation amount and respond to your inquiries;
• Communicate with you regarding Priceless Causes and future donation campaigns;
• Validate your payment card information;
• Protect against and prevent fraud, unauthorized transactions, claims and other liabilities, and manage risk exposure and franchise quality;
• Operate, evaluate and improve our business (including developing new products and services; analyzing our products, services and websites; facilitating the functionality of our websites; and performing accounting, auditing, billing, reconciliation and collection activities);
• Monitor the use of and improve our interactive assets;
• As authorized by law and to comply with applicable legal requirements and industry standards and our policies;
• Perform auditing, research and analysis in order to maintain, protect and improve our services; and
• Anonymize personal information and prepare and furnish aggregated data reports showing anonymized information, (including, but not limited to, the following: compilations, analyses, analytical and predictive models and rules, and other aggregated reports) for the purpose of advising our issuing and acquiring institutions, merchants and other customers and partners regarding past and potential future patterns of spending, fraud, and other insights that may be extracted from this data.

We may also use the information in other ways for which we provide specific notice at the time of collection.

3. Information We Share

We do not sell or otherwise disclose personal data we collect about you, except as described herein or otherwise disclosed to you at the time the data is collected:

• We share information to operate Priceless Causes and this Site with our headquarters and affiliates, including Mastercard International Inc.

• We also share information regarding your donation with the Priceless Causes which you select to receive your donations ("Donation Recipients"). The information we share with Donation Recipients includes: your name, your registered email address, your country and details of your donation. Donation Recipients may use this information to contact you to thank you for your donation and provide you with information regarding their activities (including the use the Donation Recipient proposes to make, or has made, of your donation) and any tax receipts or certificates which may be required in connection with your donation. Please note that local law may require the Donation Recipient to disclose your information in order to enable you to claim any tax credit or deduction;

• We also share information with acquirers who process donations made to Priceless Causes. The information we share with Acquirers includes: your country, your credit card details and details of your donation. Acquirers use this information to process transactions in respect of your donations made via the Priceless Causes website;

• We also may share the information with our service providers who perform services on our behalf. We do not authorize these service providers to use or disclose the information except as necessary to perform certain services on our behalf or comply with legal requirements. We require these service providers by contract to appropriately safeguard the privacy and security of personal data they process on our behalf;

• We also may disclose information about you (i) if we are required to do so by law or legal process, (ii) to law enforcement authorities or other government officials, or (iii) when we believe disclosure is necessary or appropriate to respond to an emergency, or prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity; and

• We also reserve the right to transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets. Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use personal data you have provided to us in a manner that is consistent with this Privacy Notice. Following such a sale or transfer, you may contact the entity to which we transferred your personal data with any inquiries concerning the processing of that information.

4. Transfer of Personal Data

Mastercard may transfer or disclose personal data to recipients outside of your country, including the United States of America. The transfer or disclosure of personal data outside your country may be subject to restrictions, and Mastercard will take all necessary steps to ensure compliance with applicable data protection law, in particular, the legal requirements on adequate protection for data transfers to countries outside your country. Please note however that the countries which Mastercard transfers or discloses the personal data to may not have the same data protection laws as the country in which you initially provided the information, and you may not have access to mechanisms to protect the data under the data protection law in that country.;

5. How We Protect Personal Data

We restrict access to nonpublic personal data about you to those employees and contractors who need to know that information to perform their duties. We maintain reasonable administrative, technical and physical safeguards that comply with applicable data protection law to protect the nonpublic personal data we have about you.
We only retain personal data for as long as needed to fulfill the purposes for which they were collected, or as otherwise notified to you or in respect of which you have consented, unless otherwise provided by law. We take measures to destroy personal data when there is no longer a business need to keep the information. The types of measures we take vary with the type of information, and how it is collected and stored.

6. Your Rights and Choices

You have the right to receive information about the data stored about you and to access your personal data by using the contact information provided in the "How to Contact Us" section below. You may also request at any time that your personal data be rectified, blocked or deleted if it is incorrect, inaccurate or outdated. Following any data request for access, rectification or deletion, we will accommodate your enquiry as required by applicable law.
If you decide you no longer want Mastercard to process your personal data, at your request we will delete your account, and any reference to you will be deleted. Please note that if we delete all your personal data, you will no longer have access to Mastercard's Priceless Causes. We will not use any technical mechanism to subject you to a decision which produces legal effects and which is based solely on automated processing of data.

7. Links to Other Websites

Our Site may provide links to other websites for your convenience and information. These websites may operate independently from Mastercard. Linked websites may have their own privacy notices or policies, which we strongly suggest you review if you visit any linked websites. To the extent any linked websites you visit are not owned or operated by Mastercard, we are not responsible for the websites' content, any use of the websites, or the privacy practices of the websites.

8. Use of Cookies

We sometimes use cookie technology on the Site to provide information and services to Site visitors. Cookies are pieces of information that a website transfers to your computer's hard disk for record keeping purposes and are a necessary part of facilitating online transactions. Most web browsers are set to accept cookies. Cookies are useful to estimate our number of visitors and determine overall traffic patterns through the website. Our website provider uses session cookies stored on your machine to perform hit counting and similar analysis of Site traffic, and also to provide Site functionality. If you do not wish to receive any cookies you may set your browser to refuse cookies. This may mean you will not be able to take full advantage of the services on the Site.

9. Updates to this Privacy Notice

This Privacy Notice may be updated periodically to reflect changes in our personal data practices. We will post a notice on this Site to notify you of any significant changes to our Privacy Notice and indicate at the top of the notice when it was most recently updated.

10. How to Contact Us

If you would like to update the information we have about you or your preferences, you may do so by accessing the data you have already entered on the Site and modifying it directly. If you have any questions, comments or complaints about this Privacy Notice, or about our handling of your personal data, you can contact us by e-mail: privacyanddatausage@mastercard.com or by writing to:

Global Privacy & Data Usage Officer
Mastercard Asia/Pacific Pte. Ltd.3
Fraser Street Level 17
DUO Tower
Singapore 189352

To assist Mastercard in responding to your request, please give full details of the issue. Mastercard will review and respond to all complaints within a reasonable time. If you are not satisfied with how Mastercard responds, you may take your complaint to the applicable regulator in your jurisdiction.