California Privacy Notice

Legal Rights & Agreement Rules · Context

Who this notice is for

This California Privacy Notice gives information to California residents whose personal information is processed under the California Consumer Privacy Act (CCPA). It says it applies to personal information collected from California residents who have a business relationship with American Express, and also from individuals who are prospective customers. It defines personal information as information that identifies or could reasonably be linked with a particular individual or household, and says that definition leaves out information that is publicly available or has been de-identified or aggregated. The notice says it describes the categories of personal information collected, the purposes of collection, a summary of rights and how to exercise them. It also points readers to its "Your CA Privacy Rights" section if the notice applies to their relationship with American Express.

Supporting quotations

California Privacy Notice

Effective Date: February 19, 2026

This California Privacy Notice (the “CA Privacy Notice”) provides information to California residents whose personal information is processed pursuant to the California Consumer Privacy Act (“CCPA”).

It applies to personal information collected from CA residents (“you” or “your”) who have a business relationship with American Express (“we” or “us”), as well as individuals who are prospective customers.

Personal information is information that identifies or could reasonably be linked with a particular individual or household; it does not include information that is publicly available or has been de-identified or aggregated.

If this CA Privacy Notice applies to your relationship with us, please see the section below titled “Your CA Privacy Rights” to learn more about the rights you may have under California law.

Qualifications & exceptions

• Coverage is limited by the exclusions in the next card: information protected under the Gramm-Leach-Bliley Act and job applicant or employee information are outside this notice.
• The notice is stated to be effective February 19, 2026; it does not say it replaces an earlier version or announce a successor.

Not stated here

• The notice does not define "business relationship" beyond this sentence, and does not list which American Express products or services create one.

Cross-references

• narrowed by (model-proposed): What this notice does not cover — The exclusions narrow the coverage described in the scope card: the notice says a person using a product primarily for personal, family or household purposes would not be covered, even though it also says it applies to people with a business relationship and prospective customers.

Legal Rights & Agreement Rules · Restriction or exception

What this notice does not cover

The notice does not apply to personal information protected under the Gramm-Leach-Bliley Act (GLBA), a federal financial privacy law; the notice says that information is dealt with in American Express's U.S. Consumer Privacy Notice. It also does not apply to personal information about job applicants or employees, which it says is governed by the U.S. Online Recruitment Privacy Statement. The notice gives an example: someone using an American Express product or service primarily for personal, family or household purposes, or who has applied for a job at American Express, would not be covered by this notice. The rights section later repeats that its rights do not apply to individuals whose personal information is protected under the GLBA.

Supporting quotations

This CA Privacy Notice does not apply to personal information that is protected under the Gramm-Leach-Bliley Act, a federal financial privacy law, as set out in our U.S. Consumer Privacy Notice.

It also does not apply to personal information relating to job applicants or employees as governed by our U.S. Online Recruitment Privacy Statement.

For example, if you are using our product or service primarily for personal, family or household purposes or you have applied for a job at American Express, you would not be covered by this CA Privacy Notice.

As outlined above, these rights do not apply to individuals whose personal information is protected under the Gramm-Leach-Bliley Act, as described in our U.S. Consumer Privacy Notice.

Qualifications & exceptions

• The personal, family or household example is given by the notice itself as an illustration of who would not be covered; the notice does not list every kind of person or data that falls outside it.

Not stated here

• The notice does not explain how its statement that personal, family or household users are not covered fits with the earlier statement that it applies to people with a business relationship and to prospective customers, so the notice does not make clear which individuals it reaches.
• The U.S. Consumer Privacy Notice and the U.S. Online Recruitment Privacy Statement are named but not supplied in this document.

Cross-references

• narrows (model-proposed): Who this notice is for — The exclusions narrow the coverage described in the scope card: the notice says a person using a product primarily for personal, family or household purposes would not be covered, even though it also says it applies to people with a business relationship and prospective customers.

Legal Rights & Agreement Rules · Context

Affiliates and non-American Express sites may have their own notices

The notice says American Express's affiliates, and its web properties that are not branded as American Express, may provide their own privacy notice to California residents. It tells readers to check those websites to understand their privacy practices, which means this notice should not be read as describing those affiliates or properties.

Supporting quotations

Our affiliates (and our web properties that are not branded as American Express) may provide their own privacy notice to CA residents. Please check their websites to better understand their privacy practices.

Not stated here

• The notice does not name the affiliates or web properties that have their own notices.

Data Access & Collection · Company practice

Categories of personal information that may have been collected

The notice says that, depending on the nature of your relationship with American Express, it may have collected the categories of personal information listed in the next cards, including sensitive personal information, about you during the preceding 12 months. This is framed as what American Express may have collected, not a statement that every category was collected from every person.

Supporting quotations

Categories of Personal Information We Collect

Depending on the nature of your relationship with us, we may have collected the following categories of personal information, including sensitive personal information, about you during the preceding 12 months:

Qualifications & exceptions

• The wording is "may have collected" and depends on the nature of your relationship with American Express.

Not stated here

• The notice does not say which categories apply to which kinds of relationship, or which of the listed categories it treats as sensitive personal information.

Data Access & Collection · Company practice

Identity and financial identifiers

Two listed categories cover identity and financial details. The first, identifiers, includes name, postal address, email address, account name, Social Security number, driver's license or state identification card number, passport number or telephone number. The second covers information that identifies, relates to or could be associated with a particular individual, such as name, passport number, driver's license or credit card number, bank account number or other financial information. The notice presents these as examples ("such as"), so the lists are illustrative rather than complete.

Supporting quotations

Identifiers such as name, postal address, email address, account name, social security number, driver’s license or state identification card number, passport number or telephone number;

Information that identifies, relates to or is capable of being associated with, a particular individual, such as name, passport number, driver’s license or credit card number, bank account number or other financial information;

Qualifications & exceptions

• The examples are introduced with "such as", so they are illustrations, not a closed list.

Data Access & Collection · Company practice

Protected classifications and biometric information

The notice lists characteristics of protected classifications under California or federal law, such as date of birth, sex/gender or marital status, among the categories it may have collected. It also lists biometric information, such as information about your physiological or behavioral characteristics.

Supporting quotations

Characteristics of protected classifications under California or federal law such as date of birth, sex/gender or marital status;

Biometric information such as information regarding your physiological or behavioral characteristics;

Qualifications & exceptions

• Both are categories that may have been collected depending on the relationship; the notice does not say each applies to every person.

Not stated here

• The notice does not say what biometric information is collected, in which products or settings, or for what specific purpose.

Data Access & Collection · Company practice

Online activity and device location data

The notice lists internet or other electronic network activity information, such as browsing history, search history or other information as described in the Online Privacy Statement. It also lists geolocation data available through your device, including precise geolocation data, if enabled.

Supporting quotations

Internet or other electronic network activity information such as browsing history, search history or other information as described in the Online Privacy Statement;

Geolocation data, available through your device, including precise geolocation data, if enabled;

Qualifications & exceptions

• The geolocation entry is qualified by "if enabled"; the notice does not say where or by whom it is enabled.

Not stated here

• The Online Privacy Statement, which the notice says describes other internet activity information, is not supplied in this document.

Data Access & Collection · Company practice

Commercial, audio, professional and education information

The list also includes commercial information such as records of personal property or your purchase history; audio, electronic or similar information; professional or employment-related information; and education information.

Supporting quotations

Commercial information such as records of personal property or your purchase history;

Audio, electronic, or similar information;

Professional or employment-related information;

Education information;

Not stated here

• The notice gives no examples for audio, electronic or similar information and does not say what it covers or when it is collected.

Inference & Profiling · Company practice

Other information and inferences

The notice also lists other personal information as described to you in the applicable disclosures available through American Express's Privacy Center, or otherwise at the point of collection. Its final category is inferences drawn from some of the information in the list, including about your preferences.

Supporting quotations

Other personal information, as described to you in the applicable disclosures available through our Privacy Center, or otherwise at the point of collection; and

Inferences drawn from some of the information identified above, including about your preferences.

Qualifications & exceptions

• Inferences are drawn from "some of" the listed information, not necessarily all of it.

Not stated here

• The Privacy Center disclosures are not supplied, so what the "other personal information" category contains is not known from this document.
• The notice does not say which listed information inferences are drawn from.

Use & Processing · Company practice

Business purposes for using information: serving and managing accounts

Under its list of reasons for collecting information, American Express says it may use information about you to deliver and improve its products and services. The examples it gives are processing your application for a card or other products and services, completing transactions, updating you about new features and benefits and managing your accounts; recognizing you and your device and communicating with you better; and determining whether you may be interested in new products or services.

Supporting quotations

Why We Collect Personal Information

Depending on your relationship with us, we may use information about you for our business purposes, including to:

Deliver and improve our products and services, such as to: o Process your application for a card or other products and services, complete transactions, update you about new features and benefits and manage your accounts; o Recognize you and your device and to better communicate with you; and o Determine whether you may be interested in new products or services;

Qualifications & exceptions

• The examples are introduced with "such as"; the notice treats them as illustrations.

Cross-references

• qualified by (model-proposed): The listed purposes are examples; other uses are allowed by law or consent — The listed purposes are introduced as examples, and the notice adds that other uses are allowed as required or permitted by law or with consent.

Use & Processing · Company practice

Business purposes for using information: advertising and marketing

American Express says it may use information about you to advertise and market its products and services and those of its commercial and business partners. For how it uses cookies and similar technologies for advertising, the notice refers readers to its Online Privacy Statement.

Supporting quotations

Advertise and market our products and services, and those of our commercial and business partners. For more information on how we use cookies and similar technologies for advertising purposes, please see our Online Privacy Statement;

Not stated here

• The Online Privacy Statement is not supplied here, so how cookies and similar technologies are used for advertising is not described in this document.

Use & Processing · Company practice

Business purposes for using information: research and analysis

American Express says it may use information about you to research and analyze its online visitors, customers and business. Its examples are requesting feedback or reviews about its products and services and those of its commercial and business partners, and analyzing how effective its advertising and marketing campaigns are. For cookies and other technologies used for analytics, the notice refers readers to the Online Privacy Statement.

Supporting quotations

Conduct research and analysis to better understand our online visitors, customers and our business, including to: o Request feedback or reviews about our products and services and those of our commercial and business partners; and o Analyze the effectiveness of our advertising and marketing campaigns. For further information on how we use cookies and other technologies for analytics purposes, please see our Online Privacy Statement;

Not stated here

• The Online Privacy Statement is not supplied here, so analytics technologies are not described in this document.

Security & Safeguards · Company practice

Business purposes for using information: managing risk

American Express says it may use information about you to manage its business risks, such as fraud, credit and security risks. The examples are evaluating and processing your application for a product or service and managing the products or services you have, and detecting and preventing fraud or criminal activity and safeguarding your accounts.

Supporting quotations

Manage our business risks, such as fraud and credit and security risks, including to: o Evaluate and process your application for one of our products or services and manage existing products or services you have; and o Detect and prevent fraud or criminal activity and safeguard your accounts.

Use & Processing · Permission or license

The listed purposes are examples; other uses are allowed by law or consent

The purposes in this section are introduced as ones that "include" the listed items, so they are not stated as the only reasons American Express may use information. The notice adds that it may use information about you in other ways as required or permitted by law or with your consent.

Supporting quotations

we may use information about you for our business purposes, including to:

In addition, we may use information about you in other ways as required or permitted by law or with your consent.

Qualifications & exceptions

• Other uses are tied to what the law requires or permits, or to your consent.

Not stated here

• The notice does not say what other uses it has in mind.

Cross-references

• qualifies (model-proposed): Business purposes for using information: serving and managing accounts — The listed purposes are introduced as examples, and the notice adds that other uses are allowed as required or permitted by law or with consent.

Use & Processing · Company commitment

No option to limit use of sensitive personal information

The notice says American Express does not collect or process sensitive personal information for the purpose of inferring characteristics about you, and because of that it does not offer the choice to limit the use or disclosure of sensitive personal information. The statement is tied to that one purpose.

Supporting quotations

We do not collect or process sensitive personal information for the purpose of inferring characteristics about you and therefore do not offer the choice to limit the use or disclosure of sensitive personal information.

Qualifications & exceptions

• The statement is limited to the purpose of inferring characteristics; it does not say sensitive personal information is never used or disclosed for other purposes.

Not stated here

• The notice does not say which listed categories it treats as sensitive personal information, and its categories list says it may have collected sensitive personal information and inferences drawn from some listed information.

Sharing & Disclosure · Company practice

Sharing for cross-context behavioral advertising

The notice says American Express may share information about your internet activity and other personal information with third parties to serve "cross-context behavioral advertising", which it describes as advertisements targeted to your interests based on inferences from your browsing across other sites. It points readers to the opt-out instructions in the "How to Exercise Your CA Privacy Rights" section.

Supporting quotations

How We Share Your Personal Information

However, we may share information about your Internet activity and other personal information with third parties to serve “cross-context behavioral advertising,” i.e., advertisements that are targeted to your interests based on inferences made from your browsing activities across other sites.

For more information about how you can opt-out of the sharing of your personal information for cross-context behavioral advertising, please see the “How to Exercise Your CA Privacy Rights” section, below.

Qualifications & exceptions

• The wording is "may share"; the notice does not say that every person's information is shared.
• Sharing for this purpose is not done for individuals under 16 (see the no-sale card) and the notice says it is not done from the American Express mobile application (see the mobile application card).
• You can opt out as described in the opt-out card.

Not stated here

• The notice does not name the third parties or the categories of information shared for this advertising beyond internet activity and "other personal information".

Cross-references

• qualified by (model-proposed): No sale of personal information; no sale or sharing for under-16s — The no sale or sharing statement for individuals under 16 limits the general statement that American Express may share information for cross-context behavioral advertising.

Sharing & Disclosure · Company commitment

No sale of personal information; no sale or sharing for under-16s

American Express says it does not sell personal information. It also says it does not sell or share the personal information of individuals under the age of 16.

Supporting quotations

We do not sell personal information.

Please note, we do not sell or share the personal information of individuals under the age of 16.

Qualifications & exceptions

• The statement that it does not sell is separate from the statement that it may share for cross-context behavioral advertising, which the notice describes as sharing rather than a sale.

Not stated here

• The notice does not say how American Express determines that an individual is under 16.

Cross-references

• qualifies (model-proposed): Sharing for cross-context behavioral advertising — The no sale or sharing statement for individuals under 16 limits the general statement that American Express may share information for cross-context behavioral advertising.

Sharing & Disclosure · Company practice

Disclosures to third parties in the past 12 months

For each category of personal information listed in the collection section, the notice refers readers to the Online Privacy Statement for additional information about the sources of personal information and the categories of third parties to whom it may disclose personal information. It says American Express may have disclosed each category of personal information to third parties during the preceding 12 months for the business purposes listed in the notice and in the Online Privacy Statement.

Supporting quotations

For each of the categories of personal information described above in “Categories of Personal Information We Collect,” please see our Online Privacy Statement for additional information about the sources of personal information and the categories of third parties with whom we may disclose personal information.

We may have disclosed each category of personal information with third parties during the preceding 12 months for the business purposes described above in “Why We Collect Personal Information” and in our Online Privacy Statement.

Qualifications & exceptions

• The wording is "may have disclosed", and it covers each listed category without saying which categories went to which third parties.

Not stated here

• The Online Privacy Statement is not supplied, so the sources of personal information and the categories of third parties are not stated in this document.

Retention & Deletion · Company practice

How long personal information is kept

American Express says it keeps personal information only for as long as necessary for the business purposes described in the Online Privacy Statement. It names two criteria that affect retention: how long your relationship with American Express lasts, and any requirements to retain personal information to meet legal and regulatory obligations.

Supporting quotations

Retention of Personal Information

We keep personal information for only as long as necessary for the business purposes described in the Online Privacy Statement.

The criteria that impact retention include the duration of your relationship with us and any requirements to retain your personal information to fulfill our legal and regulatory obligations.

Qualifications & exceptions

• The criteria are introduced with "include", so they are not stated as the only factors.

Not stated here

• The notice gives no specific retention periods, and the business purposes it refers to are described in the Online Privacy Statement, which is not supplied.

Legal Rights & Agreement Rules · User right or choice

Who has the California privacy rights

The notice tells California residents they may have certain rights over their personal information under the CCPA. It says those rights do not apply to individuals whose personal information is protected under the Gramm-Leach-Bliley Act, as described in the U.S. Consumer Privacy Notice, and that exclusion matches the notice's earlier statement of what it does not cover.

Supporting quotations

Your CA Privacy Rights

As a California resident, you may have certain rights over the personal information we have about you pursuant to the CCPA.

these rights do not apply to individuals whose personal information is protected under the Gramm-Leach-Bliley Act, as described in our U.S. Consumer Privacy Notice.

This CA Privacy Notice does not apply to personal information that is protected under the Gramm-Leach-Bliley Act, a federal financial privacy law, as set out in our U.S. Consumer Privacy Notice.

Qualifications & exceptions

• The wording is "may have" rights, and the rights are subject to the limitations described in the limitations card.

Not stated here

• The U.S. Consumer Privacy Notice is named but not supplied, so which personal information it treats as protected under the Gramm-Leach-Bliley Act is not stated here.

Cross-references

• qualifies (model-proposed): Rights to access, delete and correct personal information — The rights apply to California residents but not to individuals whose personal information is protected under the Gramm-Leach-Bliley Act.

Account & Service Control · User right or choice

Rights to access, delete and correct personal information

Under the CCPA, the notice says you may have the right to request access to your personal information in a portable format, or other information about American Express's data processing practices; deletion of the personal information it has collected from you; and correction of the personal information it has collected about you.

Supporting quotations

Under the CCPA, you may have the right to request:

Access to your personal information in a portable format, or other information about our data processing practices;

Deletion of the personal information we have collected from you;

Correction of the personal information we have collected about you; and

Qualifications & exceptions

• These are rights you "may have"; the notice says they are subject to limitations (see the limitations card) and do not extend to individuals whose information is protected under the Gramm-Leach-Bliley Act.

Not stated here

• The notice does not say how long American Express takes to respond to a request or what format a portable copy takes.

Cross-references

• qualified by (model-proposed): Who has the California privacy rights — The rights apply to California residents but not to individuals whose personal information is protected under the Gramm-Leach-Bliley Act.
• qualified by (model-proposed): Limits on these rights — The rights to access, delete and correct are subject to limitations, such as retaining personal information to comply with legal obligations.

Sharing & Disclosure · User right or choice

Right to opt out of sharing for cross-context behavioral advertising

The notice lists, among the rights you may have under the CCPA, the right to opt out of the sharing of your personal information with third parties for cross-context behavioral advertising. How to use it is explained in the opt-out card.

Supporting quotations

Under the CCPA, you may have the right to request:

Opt-out of the sharing of your personal information with third parties for the purposes of cross-context behavioral advertising.

Qualifications & exceptions

• This is a right you "may have" under the CCPA.

Account & Service Control · Company commitment

No discrimination for exercising these rights

American Express says it will not discriminate against you if you choose to exercise any of these rights. It says you have the right to keep receiving similar goods or services from it, at similar prices or rates and at the same level or quality as before.

Supporting quotations

We will not discriminate against you if you choose to exercise any of these rights, and you have the right to continue to receive similar goods or services from us, at similar prices or rates, and at the same level or quality as you received them previously.

Qualifications & exceptions

• The limitations on these rights, described in the next card, are stated in the sentence that follows.

Legal Rights & Agreement Rules · Restriction or exception

Limits on these rights

The notice says these rights are subject to limitations, and gives one example: when American Express is retaining personal information to comply with its own legal obligations.

Supporting quotations

In addition, these rights are subject to limitations, such as when we are retaining personal information to comply with our own legal obligations.

Qualifications & exceptions

• The legal-obligations case is given as an example ("such as"), so other limitations may exist.

Not stated here

• The notice does not list the other limitations.

Cross-references

• qualifies (model-proposed): Rights to access, delete and correct personal information — The rights to access, delete and correct are subject to limitations, such as retaining personal information to comply with legal obligations.

Linking & Identification · Context

Other choices are in the Online Privacy Statement

The notice says the Online Privacy Statement provides additional information about other choices that may be available to you, including choices related to cookies and similar technologies.

Supporting quotations

Our Online Privacy Statement provides additional information about other choices that may be available to you, including those related to cookies and similar technologies.

Not stated here

• The Online Privacy Statement is not supplied, so those choices are not described in this document.

Sharing & Disclosure · Procedure

How to opt out: footer link and Global Privacy Control

You can opt out of having your personal information shared for cross-context behavioral advertising by clicking the "Do Not Sell or Share My Personal Information" link in the footer of the American Express website. The notice also says American Express honors the Global Privacy Control, a browser-based opt-out preference signal that tells the websites you visit about your privacy preferences.

Supporting quotations

How to Exercise Your CA Privacy Rights

Right to Opt-Out of Sharing of Personal Information for Cross Context Behavioral Advertising

You can opt-out of having your personal information shared for cross-context behavioral advertising by clicking the “Do Not Sell or Share My Personal Information” link in the footer of the American Express website.

We also honor the Global Privacy Control, which is a browser-based opt-out preference signal that communicates your privacy preferences to the websites you visit.

Qualifications & exceptions

• The footer link is on the American Express website; the notice says there is no opt-out link inside the mobile application (see the mobile application card).
• The Global Privacy Control choice applies per browser (see the next card).

Not stated here

• The notice says more information about the Global Privacy Control "may be found here", but the link target is not part of the supplied text.

Cross-references

• qualified by (model-proposed): A Global Privacy Control opt-out applies only to that browser — The Global Privacy Control opt-out applies only to the browser where it was set unless enabled elsewhere.
• has exception (model-proposed): No opt-out link in the mobile application — The mobile application has no opt-out link because the notice says no information from the application is shared for cross-context behavioral advertising; the footer link is on the website.

Sharing & Disclosure · Restriction or exception

A Global Privacy Control opt-out applies only to that browser

Because the Global Privacy Control is a browser-based mechanism, the notice says your opt-out preference will apply only to the browser from which you exercised that choice. It adds that you may enable the Global Privacy Control on all of your browsers and devices that are currently compatible with the feature.

Supporting quotations

Note that because the Global Privacy Control is a browser-based mechanism, your opt-out preference will apply only to the browser from which you exercised that choice. However, you may enable the Global Privacy Control on all of your browsers and devices that are currently compatible with this feature.

Qualifications & exceptions

• This limit is stated for the Global Privacy Control; the notice does not say the footer-link opt-out is limited in the same way.

Cross-references

• qualifies (model-proposed): How to opt out: footer link and Global Privacy Control — The Global Privacy Control opt-out applies only to the browser where it was set unless enabled elsewhere.

Sharing & Disclosure · Company commitment

No opt-out link in the mobile application

American Express says it does not share personal information from its mobile application for cross-context behavioral advertising, and therefore does not offer the opt-out link within the mobile application.

Supporting quotations

We do not share personal information from the American Express mobile application for the purpose of cross-context behavioral advertising and, therefore, do not offer the opt-out link within the mobile application.

Qualifications & exceptions

• The statement is limited to personal information from the mobile application and to the cross-context behavioral advertising purpose.

Cross-references

• exception to (model-proposed): How to opt out: footer link and Global Privacy Control — The mobile application has no opt-out link because the notice says no information from the application is shared for cross-context behavioral advertising; the footer link is on the website.

Account & Service Control · Procedure

How to ask to delete, access or correct information

To request deletion, access or correction of your personal information, or to ask questions or raise concerns, the notice tells you to visit the American Express Privacy Center, contact American Express at 1 (800) 528-4800, or call the number on the back of your card.

Supporting quotations

The Right to Delete, Access, or Correct Personal Information

If you would like to make a request to delete, access, or correct your personal information or have any questions or concerns, please visit our Privacy Center, contact us at 1 (800) 528-4800, or call the number on the back of your card.

Not stated here

• The notice does not describe the Privacy Center request process or how long a response takes.

Account & Service Control · Restriction or exception

Identity checks and authorized agents

The notice says American Express may need to validate certain information about you to verify your identity before it can fulfill your request. If you make an access or deletion request on behalf of another person, it may require you to provide proof that you have been designated as their authorized agent.

Supporting quotations

We may need to validate certain information about you to verify your identity before we can fulfill your request.

If you are making a request for access or deletion rights on behalf of another person, we may require you to provide proof that you have been designated as their authorized agent.

Qualifications & exceptions

• The wording is "may need" and "may require".

Not stated here

• The notice does not say what information is validated or what counts as proof of authorized agent status, and it names access and deletion but does not mention correction requests made through an agent.

Linking & Identification · Context

Where to find other privacy notices

The notice tells you to visit the American Express Privacy Center to view the privacy notice associated with your product or service, the U.S. Consumer Privacy Notice, the Online Privacy Statement, and to learn about its Data Protection and Privacy Principles.

Supporting quotations

More Information

Please visit the American Express Privacy Center to view the privacy notice associated with your product and/or service, the U.S. Consumer Privacy Notice, our Online Privacy Statement and learn about our Data Protection and Privacy Principles.

Not stated here

• None of these documents are supplied in this source, so their terms are not described here.

Linking & Identification · Context

Job applicants and employees: separate statement

If you are a job applicant or employee, the notice says you can find additional information about American Express's privacy practices in its U.S. Online Recruitment Privacy Statement.

Supporting quotations

If you are a job applicant or employee, you can find additional information about our privacy practices in our U.S. Online Recruitment Privacy Statement.

Not stated here

• The U.S. Online Recruitment Privacy Statement is not supplied in this source.

Legal Rights & Agreement Rules · Context

CCPA record-keeping disclosure

The notice says American Express's disclosure under the CCPA record-keeping requirement can be viewed by clicking a link at the end of the notice.

Supporting quotations

To view American Express’ disclosure under the CCPA record-keeping requirement, please click here.

Not stated here

• The link target is not part of the supplied text, so the content of that disclosure is not known from this document.