Important information: Hong Kong

Effective date: October 27, 2026

Visa is providing this supplemental privacy notice to give individuals in Hong Kong the additional information required by the Personal Data (Privacy) Ordinance (Cap. 486) (the “PDPO”). These provisions, which should be read together with the statements in the Visa Global Privacy Notice, explain our practices with regard to data privacy in Hong Kong. To the extent of any inconsistency between this notice and the Global Privacy Notice in respect of Hong Kong data subjects, this notice prevails.

For the purposes of the PDPO, the office responsible for handling data access and correction requests on behalf of Visa for individuals in Hong Kong is:

Visa Global Privacy Office
900 Metro Center Blvd.
Foster City, CA 94404, USA
Email: [email protected]

The supply of personal data to Visa is generally voluntary. Where Visa cannot provide a requested product or service, or respond to an enquiry, without certain personal data, this will be indicated at the point of collection.

In certain circumstances, the provision of personal data may be obligatory. Examples include:

information required to verify your identity for anti-money laundering, sanctions, or other regulatory screening purposes;
information required to process a payment transaction through the Visa network;
information required to respond to a lawful request from a regulator, government authority, or law enforcement body; and
information required to verify your identity in order to confirm eligibility for, or entitlement to, a prize, reward, or benefit under a Visa promotion, contest, or loyalty programme (which may include a government-issued identification number).

Where the provision of personal data is obligatory, this will be indicated at the point of collection. If you do not provide the required data in such cases, Visa may be unable to provide the relevant service to you.

Under the PDPO, Visa requires your consent to use your personal data for direct marketing purposes. Visa will generally obtain your consent through an “opt-in” or “opt-out” tick box or similar mechanism when it collects your personal data.

As stated in the General Privacy Notice, the types of personal data Visa may use for direct marketing purposes are:

contact information;
transaction and financial information;
relationship information;
interaction information;
biometric identifiers;
business customer data;
inferred and derived information;
online and technical information;
audio and visual information;
geolocation information; and
compliance data.

The classes of marketing subjects which Visa may send you direct marketing about are:

payment products and services;
digital payment solutions;
loyalty and rewards programmes;
consumer promotions, contests, and sweepstakes;
travel and lifestyle benefits;
merchant offers and discounts; and
Visa-branded or co-branded products and services offered with our partners.