Visa Inc · Privacy Policy

Visa U.S. State Privacy Laws Supplementary Notice (Effective July 1, 2026)

This notice applies to U.S. residents in states with consumer privacy laws (like California's CCPA). It covers a narrower slice of Visa's data practices than its full Global Privacy Notice — specifically information collected when you sign up for Visa marketing, attend Visa events, take surveys, use Visa websites or apps, or use consumer-facing products like Click-to-Pay or Visa Payment Passkey Services. Most of Visa's core payment-network data is already regulated by federal financial privacy law and is not covered here.

What Visa collects and how it's used: Visa gathers contact and marketing-related information to run loyalty programs, send promotional emails, personalize ads, and improve its services. It shares this data with advertising partners through cookies on its websites — but only with your consent on most Visa sites. Visa explicitly states it does not sell your personal information for money, and it will not use this data to train AI large language models.

Your rights: Depending on your state, you can access, correct, delete, or export your data. You can also opt out of targeted advertising (personalized ads based on your browsing across sites). For U.S. Visa websites, Visa honors the Global Privacy Control (GPC) browser signal as an opt-out of ad tracking. You can exercise rights via an online portal, by phone (1-844-909-1620), or by email. Visa will verify your identity — typically using your email address — before acting on requests.

Important limitations: If you're a cardholder wanting to access payment data, Visa will redirect you to your card issuer, since Visa often acts as a behind-the-scenes service provider in those relationships. Deleting your data may mean you lose access to loyalty programs tied to that information. Some sensitive data elements (like card numbers) may be withheld even from your own access reports.