Header background image Second header background image Background image

Priceless Global Privacy Notice

Effective Date: 06.06.2024.


Mastercard International Inc., Mastercard Europe SA and their affiliates and other entities within the Mastercard Group of companies (collectively, “Mastercard”, “we”, “us”, or “our”) respect your privacy. 


This Global Priceless Privacy Notice (“Privacy Notice”) applies to our processing of Personal Information in the context of Priceless solutions for which we act as a data controller (“Priceless Services”). Our Priceless solutions give eligible cardholders the opportunity to access experiences, enter prize draws and take advantage of other promotional offers and relevant content (collectively “Offers”). They include our B2C Priceless website (https://www.priceless.com/) and our B2B Priceless solutions.  


Please note that when we process Personal Information on behalf of and under the instructions of our business customers in the context of some of our B2B Priceless solutions, we act as a data processor and the processing of your Personal Information in these contexts is not governed by this Privacy Notice. Similarly, when a merchant processes your Personal Information to provide you with a specific Offer, they are the data controllers for their processing of your Personal Information. Please refer to their respective privacy policies for more information regarding the processing of your Personal Information in these contexts. 


This Privacy Notice describes the types of Personal Information we process in in the context of the Priceless Services, the purposes for which we collect that Personal Information, the other parties with whom we may share it, including merchants that provide Offers, and the measures we take to protect the security of the Personal Information. It also tells you about your rights and choices with respect to your Personal Information, and how you can reach us to update your contact information or answer questions you may have about our privacy practices. 


Children and minors (under the age of 18) are not eligible to use the Priceless Services. For more information about Mastercard’s privacy practices in other contexts, please visit Mastercard’s Global Privacy Notice at https://www.mastercard.us/en-us/about-mastercard/what-we-do/privacy.html or other applicable privacy notices.  


Our privacy practices may vary among the countries in which we operate to reflect local practices and legal requirements. If you are a resident in the European Economic Area, Switzerland, the United Kingdom, Turkey or Israel, this Privacy Notice is provided to you by Mastercard Europe SA, which acts as the data controller for the processing of your Personal Information in the context of the controller services. If you reside in the United States, “Section 11. U.S. Privacy Addendum” supplements the information contained in this Privacy Notice for certain states as indicated in that Section. 

“Personal Information” means any information relating to an identified or identifiable individual. We may collect the following categories of Personal Information:


  • Registration information and contact details.
  • Your payment information, such as your credit or debit card number (the 16 digit payment card number).
  • Any other content or information you provide in connection with priceless™.
  • Information related to your use of priceless™ collected via cookies and other similar technologies.

We May Use Your Personal Information to:


  • Communicate with you.
  • Provide, improve, and develop priceless™.
  • Ensure safety and security.
  • Send you marketing materials.
  • Provide you with personalized services and recommendations.
  • Serve other purposes for which we provide specific notice at the time of collection, and as otherwise authorized or required by law.
  • Generate anonymized and aggregated data to prepare insights to advise Mastercard’s customers and partners regarding spending patterns, fraud and other trends.
  • Learn more about you, including your preferences or other characteristics. We treat these inferences as Personal Information where required under applicable law.
  • Operate, evaluate and improve our business, including anonymization and analytics.
  • Perform data analysis.
  • Serve other purposes for which we provide specific notice at the time of collection.
  • Enforce our Terms of Use and comply with our legal obligations.


Where required under applicable law, we will only use your Personal Information with your consent; as necessary to provide you with products and services; to comply with a legal obligation; or when there is a legitimate and overriding interest that necessitates the use.

We May Share Personal Information with:


  • Mastercard’s headquarters in the U.S., our affiliates and other entities within Mastercard’s group of companies.
  • Service providers acting on our behalf.
  • Other participants in the payment ecosystem, including financial institutions, and merchants.
  • Third parties for fraud monitoring and prevention purposes, or other purposes required by law. 
  • Third parties whose feature you use in connection with our products and services or with your consent.


Other entities as required under applicable law or in the event of a sale or transfer of our business or assets

Depending on your country, you may have the right or choice to:


  • Opt out of some collection or uses of your Personal Information, including the use of cookies and similar technologies, the use of your Personal Information for marketing purposes, and the anonymization of your Personal Information for data analyses.
  • Access your Personal Information, rectify it, restrict or object to its processing, or request its deletion or anonymization.
  • Receive the Personal Information you provided to us to transmit it to another company.
  • Withdraw any consent provided.
  • Where applicable, lodge a complaint with your supervisory authority.


You can exercise your rights on Mastercard’s “My Data Center” portal. You may also submit a request as described in the “How to Contact Us” section below.

Mastercard is a global business. We may transfer your Personal Information to the United States and other countries which may not have the same data protection laws as the country in which you initially provided the information, but we will protect your Personal Information in accordance with this Privacy Notice, or as otherwise disclosed to you.


If you are located in the EEA, we will process your Personal Information in accordance with our Binding Corporate Rules and other data transfer mechanisms.

We maintain appropriate security safeguards to protect your Personal Information and only retain it for a limited period of time.

Our websites may include links to other third-party websites, social media tools, widgets or plug-ins, permitting sharing web content including IP address, with third parties and social media providers. These social media providers may learn of your visit even if you are not logged in to your social media account or if you do not have an account with them. To the extent any linked websites or features you visit or use are not owned or controlled by Mastercard, we suggest that you review their own privacy notices or policies.

The Priceless Services are not directed to or intended for children under the age of 16. However, Mastercard may process Personal Information about children below 16 years of age with the parent or guardian’s consent or based on another legal basis in accordance with applicable law. If you learn that Mastercard is processing children’s Personal Information in violation of this Privacy Notice, then you may alert us at privacyanddataprotection@mastercard.com

This Privacy Notice may be updated periodically to reflect changes in our privacy practices.

You can e-mail us, and our Data Protection Officer at privacyanddataprotection@mastercard.com. If you are located in the EEA or Switzerland, Mastercard Europe SA is the data controller and you may submit your request to exercise your rights to your Personal Information on Mastercard’s “My Data Center” portal.