Privacy Statement

This Privacy Statement describes how Western Union collects, uses, stores, protects, discloses, and shares your personal information or data when you use our Services online through our website, in retail, and through our mobile apps, as well as your choices about the way your information is collected and used. “Personal information” means all information or data relating to an identified or identifiable individual.

When you use our services, including our banking and money transfer services; contact us; access our websites or applications; or join our loyalty programs (collectively, the “Services”), we collect personal information about you and may use it along with other information collected or generated during our relationship with you. We collect different types of personal information relating to you, which may include:

• Your name, contact information (for example, your postal address, email address, telephone number), and other personal information that you provide to us when you use the Services such as your date of birth, gender, citizenship, occupation, marital status, and government or national identification numbers and accompanying documentation;
• Transaction information, including your money transfers, payments, deposits and the source/destination of funds for each;
• Name and contact information relating to recipients to whom you send or from whom you request money or with whom you otherwise choose to transact when using the Services;
• Business-related information that helps us provide our Services to you, such as relating to membership in our loyalty programs, information about how you use of our Services, bank and credit information, employer information, and information regarding permissions to contact you or your marketing choices;
• Compliance information, including for fraud prevention, identity verification, and sanction checks;
• Technical information, including the host from which you access the internet, your IP address or device advertising ID, geolocation if enabled, information about your device (such as device properties, settings, applications, storage and usage information), mobile application, browser and operating system software, social profile and network information, the date and time you access our websites, and the address of the site from which you linked to our website when you visit us. We collect personal information on your online activities as described in the section titled “INTERNET TECHNOLOGIES.” (Please note that if you use facial recognition or fingerprint sensor technology (such as Touch ID or Face ID) on your device, Western Union does not collect or otherwise process personal information associated with your use of those device features.);
• For WU+ account holders only: when you elect to have your identity verified using facial recognition technology (provided by a third party service provider of Western Union), the photograph of you that you provide to us (“selfie”) and biometric information processed using facial recognition technology that allows Western Union to compare your selfie to the photograph in your identification document or other documents in order to verify your identity is for the purpose of fulfilling Western Union’s Know Your Customer, anti-money laundering, and related legal and compliance obligations.

In order to open and maintain a WU+ bank account, conduct a money transfer, or use other payment services, you must provide certain information required by Western Union to provide the financial services requested and to enable us to comply with our legal obligations associated with transferring money. Failure to provide some of your personal information may affect our ability to provide our Services to you. This may include information about the form of identification used to request financial services (where required by law) including the identification or a copy of the identification document, transaction activity, bank account, and payment information.

Western Union collects your personal information in several ways:

• Through transaction forms and your interactions with Western Union Agents and partners;
• Through online forms, including registrations for WU+ bank accounts and/or loyalty and rewards programs or competitions, and other online Services we offer (some of which may be managed by third parties on behalf of Western Union);
• While providing customer support or consultation, including using email, postal mail, call centers, or live chat;
• Through the process of maintaining and upgrading our Services;
• Through automated means such as communications protocols, email communications, and cookies or similar INTERNET TECHNOLOGIES;
• Through our mobile applications (some of which may be managed by third parties on behalf of Western Union);
• Through your use of social media or other public data sources; and
• Through your interest in Western Union advertisements placed on third party sites.

In addition to the personal information we collect from you, we may also collect your personal information from the person to whom you send and/or receive money, as well as our Agents, vendors, business partners, identity verification companies, payments and fraud risk management companies, law enforcement bodies, and commercial and public data sources.

We endeavor to use organizational, technical, and administrative safeguards that comply with applicable government laws and regulations to secure your personal information. We also endeavor to restrict access to the personal information that we process to only our employees, Agents, and representatives that have a business need to know it. Despite our efforts, third parties may unlawfully intercept or access transmissions sent to us or may wrongly instruct you to disclose personal information to them while posing as Western Union.

While Western Union is committed to securing the Services and related systems, you are responsible for providing accurate and current information to Western Union and for maintaining the security of the passwords and account and/or registration information that you use to access the Services. Please contact us immediately in accordance with the “CONTACTING US” section if you have reason to believe your personal information held by Western Union may be at risk.

We use internet technologies like cookies, tags, and web beacons on our websites, in mobile applications, or when you visit a third-party website for which Western Union provides online Services for a variety of purposes, including, but not limited to, those identified in the section titled “HOW WESTERN UNION USES THE PERSONAL INFORMATION IT COLLECTS”.

Western Union has implemented the capability for the user to manage cookies on our websites. We will only read or write cookies based on your preference level.

Do Not Track (DNT) is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third-parties. We do not respond to DNT signals.

For more information on how Western Union uses cookies please click the “Cookie Information” link in the footer of the applicable Western Union webpage.

Western Union utilizes the personal information it collects for the following commercial purposes:

• Performing the Services: To assist us in providing Services to you, to help you to receive a personalized experience, to assist you in carrying out transactions and accessing account information, and to associate your personal information when you use multiple Services (for example, when you create a WU+ account, to link to your loyalty program information or transactions that you made before you created your WU+ account);
• Authentication: To recognize you and to allow you to remain signed-in during your use of the Services without having to re-enter your password;
• Analytics: To perform analytics on understanding our customers, improving their experience;
• Web Traffic Analysis: To determine whether you came to Western Union from a banner ad or an Affiliate;
• Advertising: To deliver information specific to your interests on non-Western Union websites and applications;
• Analysis of Promotions: To better understand the effectiveness of our promotional campaigns and whether you acted on our promotional messages;
• Prevention of Fraud, Financial Crime (including money laundering), and Other Unlawful Activity: To promote safety, reduce financial risk, and combat fraud across our Services and, as necessary, to ensure the effectiveness of our compliance processes aimed at such prevention of criminal activity.

Western Union may use your personal information as explained elsewhere in this Statement for each of the following legal bases:

• We use your personal information to provide our Services to you: This includes using personal information necessary for providing banking services (when you open a WU+ account), conducting money transfers, payment services, prepaid cards, or loyalty programs. We may use this information in the performance of a contract with you or for taking steps to enter into a contract for any of the above or for any other Western Union products or services.
• We use your personal information for legitimate business purposes: This includes using personal information to analyze and improve our products, locations, services, operations, the running of this site and your customer experience, and for measuring marketing return on investment and brand satisfaction. This may include using your information to conduct market research surveys. We may also use your personal information to provide customer services and to help protect the security and integrity of our technology, systems, and services.
• We use your personal information for legal and compliance purposes: This includes using personal information needed to comply with legal and regulatory duties related to anti-money laundering and counter-terrorist financing; detection, prevention and prosecution of fraud and theft as well as preventing illegitimate or prohibited use of our Services or other illegal or wrongful activity. This may also include establishing, exercising, or defending legal rights and claims of Western Union and others, and monitoring and reporting compliance issues. This may further include using your personal information to validate and authenticate your identity and utilizing third parties to help us do so.
• We may process your personal information based on your consent as outlined in this Statement: This includes consent for receiving marketing communications, for enabling your WU+ profile to be visible to others, or where otherwise required by applicable law. If we request your consent, we will inform you of the intended purposes for which your information will be processed.
• We will inform you when your information is required to provide the Services you request or is required by law. In certain cases, such as performing money transfer and banking services, we may be unable to provide you with our Services unless you provide certain personal information.

Western Union will also, subject to your preferences, notify you of offers, promotions, and updates regarding our products and Services. These may include offers by email, telephone, postal mail, SMS, social media, and other communication or digital channels.

You can opt out of receiving marketing communications at any time. If you no longer want to receive marketing-related communications from us, you may opt out by following the instructions in the relevant electronic communication or by contacting us as described in the “CONTACTING US” section.

Please note that if you opt out of receiving marketing-related communications from us, we may still send you important service, administrative, or transaction-related communications.

Western Union does not direct our Services or products at children under the age of 18. Western Union does not knowingly collect or maintain information from our retail, website, or mobile apps from persons under the age of 18

Western Union’s websites may be linked to or from third party websites. Western Union has not reviewed, does not control, and is not responsible for the content or privacy practices employed by websites that are linked to or from our website. Western Union does not assume responsibility for any of these sites, their content, or their privacy policies. Western Union does not endorse third party websites or make any warranties about any information, software, or other products or materials you may find there, or any results that may be obtained from using them.

For any of the purposes listed in this Statement, Western Union may disclose applicable personal information including, but not limited to, your name, contact information, national identification number and/or related documentation, customer ID number, address, transaction details and patterns, and bank account information to the following types of organizations or parties:

• Western Union group companies and affiliates, including those listed in the section titled “WESTERN UNION LEGAL ENTITIES”;
• Required local remittance licensing entities relevant to a transaction, including those listed in the section titled: “NON-AFFILATE LOCAL LICENSING ENTITIES”;
• Our Agents or business partners who facilitate the money transfer or payment transaction or other specific Services you have requested;
• Vendors, payments processors, banking partners, and data processors contracted to provide business and customer services;
• Customer services, based on your consent where applicable, including marketing, advertising, and customer satisfaction and market research on our behalf. Such sharing may include, subject to your consent, sharing with third parties (such as social media companies) to facilitate more relevant and targeted advertising;
• Vendors and data processors contracted to help us validate the accuracy of the information provided by you, and to authenticate your identity and manage risks related to security, fraud, and identity.
• Third parties that you have authorized to access your account and/or your account information in order to perform Services for you, such as account information service providers and payment initiation service providers. If you are a WU+ customer and you have chosen to make your WU+ profile publicly visible, this may also include sharing limited personal details such as name, available currencies of your WU+ account, and the fact that you are a WU+ customer in order to make it more convenient for WU+ customers to transact with each other. Also, if you are a WU+ customer, other WU+ customers are also able to search for you with your phone number as well as utilize a QR code you may provide in order to transact with you.

We may transmit personal information we possess in connection with a sale or transfer of all or part of our business. We may also disclose your personal information globally, as required or permitted by applicable laws and regulations, to regulatory and financial authorities, credit reporting agencies, law enforcement bodies, courts, governments, or government agencies to meet compliance and legal obligations or to assert or defend the rights and interests of Western Union or others.

We transfer your information to parties in countries outside the country it was collected, including but not limited to the USA, as permitted or required by applicable law, regulatory authorities, law enforcement, and government agencies. Additionally, when you send or receive money to or from another country, we will also be required to share some of your personal information with that country as required or permitted by law. We transfer certain personal information about you to our data centers located in the USA or within a region as required by local law and process it to fulfil our legal and compliance obligations which apply to our Services. We also store certain personal information we collect based on your marketing choices in our US data center. By using Western Union’s Services, you acknowledge that such transfers of information outside of your country of residence may occur.

Personal information transferred outside the EEA, the UK, and Switzerland to countries that the European Commission has not found to provide adequate protection will be protected by appropriate standard contractual clauses or other EU-approved mechanisms, as required by law.

Your personal information will be retained in accordance with statutory periods contained in regulations applicable to financial transactions including those in anti-money laundering, anti-terrorist financing and other laws applicable to us. Otherwise, we will retain your information only if necessary for the specific purposes for which it was collected, or to resolve any query you may raise. We will typically keep your information for no longer than necessary for the purpose(s) for which it was obtained, unless we have a legal obligation to keep it for a longer period or retention is advisable for Western Union’s legal position (for example, regarding applicable statutes of limitations, litigation or regulatory investigations).

You have the right to know if we are processing your personal information and to ask us for a copy of your information free of charge. You have the right to request a structured and machine-readable copy of certain information you have provided to us. We may charge you a reasonable fee for providing the information, or not act upon your request, if the request is manifestly unfounded or excessive. If you are a WU+ customer, you may log into your account at any time to access your statements, transactional information, and certain personal information.

You have the right to stop us from sending you marketing communications. You have the right to ask us to correct information about you that is incomplete, inaccurate or out-of-date. You have the right to ask us to delete certain information about you, to restrict certain uses of information relating to you, and to object to certain uses of it. To the extent we are processing personal information based on your consent, you may withdraw your consent as permitted by applicable law. If you are a registered user of westernunion.com as a digital money transfer consumer, you may also visit westernunion.com and edit your profile settings to change your marketing communications and third-party data sharing preferences. You also have the right to lodge a complaint with a relevant data protection regulator or supervisory authority about our processing of personal information. When we receive a request, we may ask for additional information from you to verify your identity and as a security measure to protect your personal information. In some situations, we may refuse to act or may impose limitations on your rights, as permitted by applicable law. To exercise these rights, please visit our Individual Rights Request Portal or contact Western Union through the section titled “CONTACTING US”. We will endeavor to respond to your request within 30 days, but response time may vary depending on the laws and regulations applicable to your request, and we may be entitled to extend this period in certain circumstances. We will comply with your request to the extent required by applicable law.

Additional rights may also be available in various jurisdictions under local laws. These will be accessible via the means provided above.

If you have a question or complaint about how we handle your personal information, we ask that you put your inquiry in writing. We will investigate your inquiry and generally respond to you in writing within 30 days of receipt. You can also contact us, including our Data Protection Officer, at wuprivacy@westernunion.com.

To contact us via a toll-free or local phone number, please click the “Contact Us” link in the footer of the applicable Western Union webpage to find contact information specific to your region.

Western Union reserves the right to modify this Privacy Statement. Updated privacy statements will be posted on this Website when amendments occur. We urge you to review this Privacy Statement when you visit to obtain the most current statement.

For consumers in the USA (including those in California, Nevada, North Dakota, Texas and Vermont) please follow this link to Western Union’s Privacy Notice.

For California residents, please see the California Resident Addendum to this Privacy Statement.

For consumers in Mexico, see the Mexican Resident Addendum to this Privacy Statement.

For consumers resident in Japan, notwithstanding any other provisions contained in this Privacy Statement, we will treat your Japanese Personal Identification Number (“My Number”) and its supporting documents in compliance with any applicable laws and regulations as described in this section.

We collect your My Number and supporting documents designated by us for the purpose of confirming your My Number as required by and in compliance with the Act on Submission of Statement of Overseas Wire Transfers for Purpose of Securing Proper Domestic Taxation of Japan (Act No. 110 of 1997, as amended).

For a list of local Western Union legal entities, please see below: “WESTERN UNION LEGAL ENTITIES.”

• You: we may collect information directly from you, for example, through transaction forms and your interactions with Western Union Agents and partners or through providing customer support or consultation, including using email, postal mail, call centers or live chat;
• Your Use of Our Website: we may collect information from you or your device through your use of our Website, including online forms, registrations for loyalty and rewards programs or competitions, and other online Services we offer (some of which may be managed by third parties on behalf of Western Union) or through automated means such as communications protocols, e-mail communications and cookies or similar technologies as described in the Privacy Statement section titled “INTERNET TECHNOLOGIES”;
• Affiliates, Subsidiaries or Vendors: we may collect information about you from our affiliates, subsidiaries, or vendors who provide services on our behalf;
• Your Use of Mobile Applications: we may collect information from you or your device through your use of mobile applications (some of which may be managed by third parties on behalf of Western Union);
• Social Media Networks or Publicly Available Sources: we may collect information about you from social media or other public data sources; and
• Advertising Networks: we may collect information about you from advertising networks so we can serve you with advertisements we believe may be of interest to you.

• Auditing: related to our interactions with you and any concurrent transactions, including, but not limited to, counting ad impressions, verifying positioning and quality of ad impressions, and auditing compliance with applicable standards;
• Security Purposes: detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
• Debugging: debugging to identify and repair errors that impair the intended functionality of our systems;
• Short-term use: short term, transient use, including, but not limited to, the contextual customization of ads shown as part of your interactions with us;
• Performing the Services: in addition to the purposes described in the Privacy Statement, maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying your information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services;
• Internal R&D: undertaking internal research for technological development and demonstration; and
• Quality Purposes: undertaking activities to verify or maintain the quality or safety of the Services and to improve, upgrade, or enhance the Services.

• Government entities: government entities including law enforcement agencies;
• Professional services organizations: professional services organizations, such as law firms and independent auditors;
• Advertising and social networks: advertising and social networks (who may combine your personal information with their own records, and records available from other sources for their own marketing purposes);
• Internet service providers;
• Data analytics providers;
• Operating systems and platforms; and
• Our affiliates and subsidiaries.

Western Union does not sell your personal information to third parties in exchange for money. Western Union does participate in advertising, marketing and analytic programs from which we and third parties with whom we contract may derive value; such exchanges may constitute a “sale” under applicable law. While participating in the above programs, in the 12 months prior to the effective date of the Privacy Statement, Western Union may have “sold” your personal information to a third party including:

• Identifiers: contact information, for example your name, e-mail address, and telephone number; and
• Internet and Other Electronic Network Activity Information: including the host from which you access the Internet, your IP address or device advertising ID, information about your device (such as device properties, settings, applications, storage and usage information), mobile application, browser and operating system software, social profile and network information, the date and time you access our websites and the address of the site from which you linked to our website when you visit us.

California residents have the right to request that their personal information not be sold to third parties. To exercise your right to opt-out of the sale of your personal information, please follow this link [URL] or submit a personal information request as described above in the section of our Privacy Statement entitled “ACCESSING, DELETING AND CORRECTING YOUR PERSONAL INFORMATION AND CHANGING YOUR CHOICES”.

In addition, if you are a California resident, you may have the right to request, twice in a 12-month period, the categories of personal information we have collected about you during the past 12 months and, for each category of personal information, the following information:

• the categories of sources from which we collected that information;
• our business or commercial purpose(s) for collecting that information;
• the categories of third parties to whom that information was sold or disclosed for a business purpose; and
• the business or commercial purpose(s) for which we sold or disclosed that information.

You also may have the right to request the deletion of the personal information we have collected from you. Once you have confirmed you are a California resident, you may submit a personal information request in accordance with the Privacy Statement section entitled “ACCESSING, DELETING AND CORRECTING YOUR PERSONAL INFORMATION AND CHANGING YOUR CHOICES” twice in any 12-month period. Upon receiving a request, Western Union will confirm receipt of the request within 10 days and will provide information on how we will verify your identity and process you request. We will then respond to the request within 45 days.

Western Union cannot connect individual consumers to passive website visits which may affect our ability to respond to certain requests. Western Union has implemented the capability for the user to manage cookies on our websites and will only read or write cookies based on your preference level. When you visit our website, you will be presented with a banner instructing you how to manage your preferences.

You may also designate an authorized agent to make a personal information request on your behalf. If you choose to designate an agent, you may be required to provide the authorized agent with written permission to make your request and verify your own identity directly with us. We may deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf.

You have the right not to be discriminated against because you exercise any right described in the Privacy Statement or this Addendum.

If you have previously transacted with Western Union, you have rights separate from those described above which are explained here.

Contact for More Information: for questions or concerns about our Privacy Statement and privacy practices, please contact us as specified in the “Contacting Us” section of the Privacy Statement

MEXICAN RESIDENT ADDENDUM TO THE WESTERN UNION GLOBAL PRIVACY STATEMENT

We care about the privacy of our Mexican consumers and are committed to collecting, using, storing, protecting, disclosing and sharing your personal information in accordance with Mexico’s Federal Act on the Protection of Personal Data held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de Particulares). This Mexican Resident Addendum to the Western Union Global Privacy Statement (“Addendum”) is applicable to residents of Mexico and, in conjunction with the Privacy Statement, is intended to address the requirements of the Mexico’s Federal Act on the Protection of Personal Data held by Private Parties. Within Mexico, the applicable Western Union data controllers are Grupo Dinámico Empresarial S.A. de C.V., Servicios de Apoyo GDE SA de CV, Operaciones Internacionales OV S.A. de C.V. and Servicio Integral de Envíos, S.A. de C.V. with legal address at Av. Paseo de la Reforma No. 505, piso 17, Colonia Cuauhtémoc, Delegación Cuauhtémoc, C.P. 06500, Ciudad de México.

HOW WESTERN UNION PROCESSES YOUR PERSONAL INFORMATION

We process your personal information for the following Primary Purposes:

• To provide our services to you: such as conducting money transfers, payment services, prepaid cards, and loyalty programs; sending you important service-related, administrative or transaction-related communications; and performing existing contracts with you or entering into additional Western Union products or services with you.
• For legitimate business purposes: such as analyzing and improving your experience regarding our products, locations, services, and operations; the running of our websites and apps; measuring marketing returns on investment and brand satisfaction (including by conducting market research surveys); providing you with customer services; and helping to protect the security and integrity of our technology, systems, and services.
• For legal and compliance purposes: such as complying with legal and regulatory duties related to anti-money laundering and counter-terrorist financing; detection, prevention and prosecution of fraud and theft as well as preventing illegitimate or prohibited use of our services or other illegal or wrongful activity. This may also include establishing, exercising, or defending legal rights and claims of Western Union and others, and monitoring and reporting compliance issues as well as using your Personal Data to validate and authenticate your identity, and utilizing third parties to help us do so. In certain cases, such as performing money transfer services, we may be unable to provide you with our Services unless you provide the necessary Personal Data.

We also process your personal information for the following non-essential, Secondary Purposes:

• For marketing purposes: such as, subject to your consent, notifying you of offers, promotions and updates regarding our products and Services. These may include offers by email, telephone, postal mail, SMS, social media and other communication or digital channels. You can opt out of receiving these marketing communications at any time. If you no longer want to receive marketing-related communications from us on a going-forward basis, you may opt-out by following the instructions in the relevant electronic communication or by contacting us as described in the “CONTACTING US” section. Please note that if you opt-out of receiving marketing-related communications from us, we may still send you important service, administrative or transaction-related communications.
• To assist us in providing our Services to you and help you to receive a personalized experience and assist you in carrying out transactions and accessing account information;
• To recognize you and allow you to remain signed-in during your use of our websites and/or applications without having to re-enter your password;
• To perform analytics on understanding our customers, improving their experience;
• To determine whether you came to Western Union from a banner ad or an Affiliate;
• To deliver information specific to your interests on non-Western Union websites and applications;
• To better understand the effectiveness of our promotional campaigns and whether you acted on our promotional messages;
• To promote safety, reduce financial risk and combat fraud.

Western Union will never collect or use your sensitive personal information while we provide our Services to you.

In addition to the personal data mentioned above, we also inform you that at the moment you decide to hire the Western Union Money Transfer Service through our mobile application, the Manager will also collect and process your biometric data, which refer to your physical and physiological characteristics, such as your face for facial recognition and fingerprints. Said biometric data, together with the photograph of their official identification, will be sent by the Manager to the competent authorities in Mexico for their respective validation.

With the validation of your biometric information and the official identification presented, the Responsible party complies with the obligation to know and verify the identity of you as a sender of a money transfer in Mexico, in accordance with the regulation that is applicable as Money Transmitter

As owner of the personal information, you may at any moment exercise your rights to access, rectify, cancel and/or oppose the processing of your personal information (the “ARCO Rights”) as well as to revoke your consent regarding the processing of any personal information which violates the terms of this Privacy Statement, via a written request to our Data Privacy Department at wuprivacy@westernunion.com, insofar as the requested opposition and/or revocation poses no harm to third parties’ rights and in accordance with article 34 of the Law.

Your request must include: i) the name of the owner of the personal information, ii) an address whereby the request may be answered, iii) official documents that establish the identity of the data owner, or, where applicable, proof of legal representation of the Personal Data’s owner, and iv) a clear and precise description of the personal information for which you wish to exercise your ARCO rights.

Requests for rectification of personal information must include the modifications which you wish to be made and evidence to support such petition; requests regarding the revocation of your consent must communicate in a clear manner that you wish to revoke your consent regarding the processing of certain personal information, and where applicable, the reasons for such revocation.

Upon receipt of your request, We shall have a term of 20 (twenty) business days to inform you of the relevant solution, with such solution being effective as of 15 (fifteen) business days following the date on which such resolution was informed to you in writing or via e-mail. The aforementioned terms may be extended once, insofar as proper justification for the extension is given.

You, as the owner of the Personal Data, declare having read and agree to the terms and conditions provided of this Privacy Notice that is available for you, knowing that the purpose of the collection and treatment of your Personal Data and the Generated Personal Data, as well as the procedure to exercise your ARCO rights and the revocation of your consent.

I consent and authorize that my personal data and biometric data (fingerprints and facial recognition), be collected and processed by Servicio Integral de Envíos, S.A. de C.V. and Operaciones Internacionales OV, S.A. de C.V., in accordance with the provisions of this Privacy Notice.

Your Personal Data will be treated in compliance with the safeguard levels required by Law.