As a leading provider of payment management services to hundreds of thousands of online businesses around the world, privacy and data protection are of the utmost importance to Cybersource Corporation and its subsidiaries, including Authorize.Net LLC, Cybersource Limited, Cybersource NI Ltd., CYBS Singapore Pte. Ltd., Cybersource K.K., Cybersource Payment Solutions Pty Ltd and other subsidiaries (collectively "Cybersource").
This Privacy Statement details Cybersource’s policies with respect to the handling of personally identifiable information ("Personal Information") submitted to or otherwise collected by Cybersource via Cybersource's website(s), mobile application(s), and/or in the course of providing its payment processing, payment security and fraud management solutions and services (collectively the “Services”). Cybersource will use and disclose Personal Information in accordance with the terms of this Privacy Statement.
Personal Information is any information that we can use to identify, locate or contact you. It also includes other information that may be associated with your Personal Information. We collect Personal Information any time the Services are used. The Personal Information collected includes information provided to us directly by individuals and that is provided to us by merchants or financial institutions. The collection of Personal Information described herein is necessary for use of the Services. This information includes but is not limited to:
We also collect or compile other information about you (such as enrolment numbers or demographic group information) which does not identify you. We may use or share any other information with third parties for any lawful purpose.
To find out more about cookies, including browser-specific instructions on how to restrict or block cookies, go to http://www.allaboutcookies.org. Remember, though, without cookies, users may not be able to take full advantage of all of our website features.
We may also use locally stored objects (sometimes referred to as “Flash cookies”) for security and fraud detection purposes. Flash cookies are not managed through web browser settings. Please visit Adobe’s Flash Player Help website for help with managing Flash cookies.
Usage and disclosure of Personal Information varies based on a party’s relationship with Cybersource. Cybersource primarily uses this information to provide the Services and related features and to:
We will only share Personal Information as described in this policy. Specifically, we may share Personal Information:
Please note that any information posted to public areas such as on our social media pages may be seen by other visitors.
Users can choose not to provide us Personal Information when you use our website(s) or mobile application(s). However if the information request is not identified as optional and a user chooses to not provide required Personal information, then the user may not be able to use the features of the website or mobile application.
Users can opt out of receiving promotional email from Cybersource by following the unsubscribe link in those email messages. Users can opt out of receiving SMS text messages from Cybersource by replying STOP to any message.
Users can learn more about Cybersource’s use of online behavioral advertising and how it can manage its choices for online behavioral advertising by clicking here
Users can configure its browser to reject cookies, or to notify it when a cookie is set. However, if you reject cookies, the Services may not operate properly.
Cybersource may be contacted at the email address at the bottom of this policy to request access to or that we update, or correct the Personal Information collected by our Services. Please note, that consistent with local law, Cybersource may retain Personal Information for auditing purposes, to troubleshoot problems, assist with investigations, enforce our policies or comply with legal requirements. Please note that we are not responsible for permitting the review, or the updating or deleting Personal Information provided to a third party, including any mobile application, social media platform, or wireless service provider.
Cybersource is not responsible for the collection, usage and disclosure policies and practices (including the data security practices) of other organizations, including any Personal Information disclosed to other organizations through or in connection with the Services.
The inclusion of a link on the Cybersource website does not imply endorsement of the linked site or service by Cybersource.
We use physical, technical, organizational, and administrative safeguards to help protect your Personal Information from unauthorized access or loss. For example, we use technology like encryption to protect sensitive Personal Information (such as your account number) during transmission. We will retain your Personal Information for as long as the information is needed for the purposes listed above and for any additional period that may be required or permitted by law.
Our websites and applications are not directed to children under 16 and we do not knowingly collect any Personal Information directly from children under 16.
We may also receive Personal Information about children from merchants, such as when children are authorized users of payment cards. If you believe that we are processing information pertaining to a child inappropriately, please contact us using the information provided under the contact us section below so that we may investigate and restrict the data.
If you have questions or comments about our privacy practices, or would like help exercising your rights in accordance with this Privacy Notice, please
Email us: [email protected]
Mail us a letter:
Visa Global Privacy Office
900 Metro Center Blvd.
Foster City, CA, 94404
European Economic Area (EEA) - Privacy Notice
We are providing this supplemental privacy notice to give individuals in the European Economic Area (EEA) the additional information required by the EU General Data Protection Regulation. These provisions, together with the statements in the Privacy Statement above explain our practices with regard to EEA Personal Information.
Cybersource Corporation (“Cybersource”) is an Affiliate of Visa, Inc. This information is being provided by Cybersource and our Affiliates:
900 Metro Center Boulevard
Foster City, CA 94404
We are based in the United States. Our representative in the EEA is:
Visa Europe Limited
1 Sheldon Square
London, W2 6TT
Registration Number: Z8657396
You can contact the Visa Global Privacy Office by emailing [email protected] or writing to us at:
Visa Global Privacy Office
900 Metro Center Boulevard
Foster City, CA 94404
Our Privacy Statement explains the reasons why we process your Personal Information (as defined in our Privacy Statement). We only process Personal Information when we have a legal basis for the processing, as follows:
We may also process your Personal Information for the purposes of our own legitimate interests or for the legitimate interests of others, provided that processing does not and shall not outweigh your rights and freedoms. In particular, we will process your Personal Information as needed to:
We use profiling and analytics to understand how individuals use their payment cards and other products, for product development purposes and business intelligence purposes. These analytics help us understand and improve our products and better serve our clients and consumers. We also use analytics for security and anti-fraud purposes, such as to identify unauthorized use of payment cards.
We will not make automated-decisions about you that may significantly affect you, unless (1) the decision is necessary as part of a contract that we have with you or to fulfill a contract between you and a merchant or between you and the financial institution or other entity that issued your card, (2) we have your explicit consent, or (3) we are required by law to use the technology.
You are not required by law to provide any Personal Information to us. For example, you always decide whether to participate in our promotions or to use our services. You are required to provide certain Personal Information to enable us to enter into a contract with you so that you can use our products and services or participate in promotions. Our registration forms indicate which data elements are required for our contracts.
When we provide payment processing services or acts as a data processor, we receive your Personal Information from third parties as needed to provide services.
You have choices about how we use your Personal Information. You always have the right to object to our marketing communications.
We also respect the rights of EEA residents to access, correct and request erasure or restriction of their Personal Information as required by law. Where we are a data controller, this means:
To exercise these rights, please contact us via email to [email protected] or write to the Global Privacy Office at the address above and a member of our Privacy Team will assist you. Please understand that we may need to verify your identity before we can process your request.
If we are processing your Personal Information as a data processor, we will refer you to our client (such as to the merchant) for assistance with these requests. We support our clients in responding to requests as required by law.
If you believe that we have processed your Personal Information in violation of applicable law, you may also file a complaint with our Data Protection Officer, who can be reached by contacting the Visa Global Privacy Office, or with a supervisory authority.
Your Personal Information may be transferred to, stored at or processed in the United States, Singapore, Australia and other countries that may not have equivalent privacy or data protection laws.
We generally use approved Standard Contractual Clauses to assure that Personal Information is adequately protected when it is transferred out of the European Economic Area or Switzerland, but we may also make transfers to recipients with approved Binding Corporate Rules or to recipients in the United States who have certified to the EU-US and/or Swiss-US Privacy Shield Framework.
Please contact us via email to [email protected] if you would like more information about cross-border transfers or to obtain a copy of the Standard Contractual Clauses.
We will retain your Personal Information for as long as the information is needed for the purposes set forth above and for any additional period that may be required or permitted by law. The length of time your Personal Information is retained depends on the purpose(s) for which it was collected, how it’s used, and the requirements to comply with applicable laws. You may request that we delete your Personal Information by contacting us via email to [email protected] or writing to the Global Privacy Office at the address above. If we do not have a legal basis for retaining your information, we will delete it as required by applicable law.