Important Information: New Zealand

Effective date: 1 May 2026.

  1. Introduction

    This New Zealand Privacy Supplement ("Supplement") supplements and should be read in conjunction with the Visa Global Privacy Notice (the "Primary Notice").

    Where there is any conflict or inconsistency between this Supplement and the Primary Notice, this Supplement shall take precedence for individuals whose Personal Information is collected in New Zealand or who are otherwise entitled to the protections under the New Zealand Privacy Act 2020 (the “Act”).

    For the purposes of this Supplement:

    • "Visa", "we", "us" or "our" means Visa Inc. and its affiliated entities (including Visa Europe Limited), being the entities responsible for collecting and holding Personal Information about you;
    • "you" or "your" refers to any individual whose Personal Information is collected by Visa in New Zealand, whether directly or indirectly;
    • "Personal Information" shall be deemed to include Personal Information as defined under the New Zealand Privacy Act 2020.

  2. Information that has been Indirectly Collected

    Where permitted by law, Visa may collect Personal Information about you from sources other than yourself (i.e. indirect collection), as described under the section on “Sources of Personal Information” in the Primary Notice. For example, we may collect your Personal Information from data aggregators, social media companies, and other publicly available sources; we may also collect your Personal Information from your financial institutions, payment card issuer, merchants, acquirers and other partners when you use a Visa-branded payment product.

  3. Purposes of Indirect Collection

    The purposes for which we collect Personal Information indirectly as described under the section on “Why We Collect Personal Information and How We Use It” and “General Purposes for Processing Personal Information” in the Primary Notice. For example, we may use your indirectly collected Personal Information for account management, quality control, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance, analytics and research, enforcement of contracts and other contract management, and the provision of requested products and services.

  4. Intended Recipients

    In addition to the recipients indicated in the sections described above, we may also disclose your Personal Information to the categories of recipients described under the section on “Categories of Third Parties and Our Disclosure of Personal Information” in the Primary Notice. for example, we may disclose your indirectly collected Personal Information to third parties who help us to detect and prevent fraudulent transactions.

    While the categories described should reflect our current practices, specific recipients may change over time. For the most current information, please contact us using the details in Section 8.

  5. Collecting and Holding Agency Details

    For the purposes of IPP3A of the Act, the agency collecting your Personal Information indirectly may be Visa and/or any of its Affiliate(s) as defined in the Primary Notice. Further contact information is available under the section “How to Contact the Visa Privacy Office” in the Primary Notice.

    The address of each Visa entity may be found here.

  6. Legal Authorisation for Collection

    We may process your indirectly collected Personal Information to fulfil a contract to which you are a party, to comply with the laws and regulations that are applicable to us around the world, for the purposes of our own legitimate interests or for the legitimate interests of you or others, or with your consent if required.

    The legal basis for processing your Personal Information, where required under applicable law, is detailed under the section on “Why We Collect Personal Information and How We Use It – Legal Basis for Processing” in the Primary Notice.

  7. Rights of Access and Correction

    If you would like to exercise your rights of access to, or correction of, your personal information under the Act, please see the contact details provided under the section “How to Contact the Visa Privacy Office” in the Primary Notice.

  8. Changes to This Supplement

    Visa may update this Supplement from time to time to reflect changes in our practices, applicable law, or regulatory guidance. The effective date at the top of this Supplement indicates when it was last updated.