Online Privacy Statement and Disclosures

Use & Processing · Company practice

Some Online Information is Personal Information and may be combined with Other Information

The statement says some Online Information is Personal Information, and that it also explains how American Express may combine Online Information with Other Information and how it then uses the combined information. In the use section, American Express (or Service Providers acting on its behalf) says it may use the Online Information it collects on its own or combine it with Other Information for the purposes listed there.

Supporting quotations

Some Online Information is Personal Information.

In this statement, we also explain how we may combine Online Information with Other Information and how we then use the combined information.

we collect about you on its own or combine it with

Qualifications & exceptions

• The Glossary defines Other Information as including American Express internal information, such as card transaction data and customer call records.

Not stated here

• This passage does not say which kinds of Online Information count as Personal Information.
• The defined terms link to Glossary entries on the same page, which are carded separately; this card does not rely on any other linked document.

Use & Processing · Company practice

Online Information may be used to deliver and improve services, from recognizing devices to contacting you

American Express (or Service Providers assisting it or acting on its behalf) may use the Online Information it collects about you, on its own or combined with Other Information, to deliver and improve its products, services and systems. The listed examples are: recognizing you when you return to its websites or use its apps across multiple devices; completing transactions, including at retail stores and through digital channels (such as websites, apps and digital wallets); telling you about updates to your accounts, products and services; updating you about new features and benefits; answering questions and responding to requests made through its websites, third-party websites (including social media) and customer contact channels; using the location of your mobile device for location-based services that you may request; and determining how best to provide services and manage your accounts, such as the best way and time to contact you.

Supporting quotations

we collect about you on its own or combine it with

Deliver and improve our products, services, and systems, including to:

recognize you when you return to our websites or use our apps across multiple devices;

complete transactions, including at retail stores and through digital channels (such as websites, apps, digital wallets, etc.);

tell you about updates to your accounts, products, and services;

update you about new features and benefits;

answer questions and respond to your requests made through our websites, through third-party websites (including social media), and through our customer contact channels;

use the location of your mobile device for location-based services that you may request;

determine how to best provide services to you and manage your accounts, such as the best way and time to contact you;

Qualifications & exceptions

• The sentence says "may use", so these are permitted uses rather than commitments to do each one; "including to" introduces examples.
• Location-based services are described as services "that you may request".

Not stated here

• The terms Online Information, Other Information and Service Providers link to Glossary entries on the same page, which are carded separately.

Use & Processing · Company practice

Online Information may be used to advertise and market, including tailored ads across devices

American Express may use Online Information to advertise and market its products and services, and those of its Business Partners, including to present online content or ads tailored to your interests, including Targeted Advertising, across multiple devices. The statement adds that some Advertising Partners are third-party advertising networks and social media partners that allow American Express to serve you Targeted Advertising that is relevant to you when you are on a third-party website or app. It points to the "What are your choices?" section for how to opt out of having your Personal Information shared with Advertising Partners for Targeted Advertising, as well as opt-outs that may be provided directly by the Advertising Partners.

Supporting quotations

advertise and market our products and services

present content or ads online that are tailored to your interests, including Targeted Advertising, across multiple devices;

Some of our Advertising Partners are third-party advertising networks and social media partners that allow us to serve you with Targeted Advertising that is relevant to you when you are on a third-party website or app.

See the “What are your choices?” section below to learn more about how you can opt out of having your Personal Information shared with AdvertisingPartners for Targeted Advertising purposes as well as opt-outs that may be provided directly by our Advertising Partners.

Qualifications & exceptions

• Targeted Advertising and Advertising Partners are defined terms in the Glossary (carded separately); opt-out choices are described in the choices section.

Not stated here

• The statement does not name every Advertising Partner here.

Use & Processing · Company practice

Online Information may be used for research, analytics, feedback features and product review

American Express may use Online Information to conduct research and analysis, including to better understand its customers across all of its communication channels (customer contact centers, websites and apps); allow you to give feedback by rating and reviewing its products and services and those of its Business Partners; produce data analytics, statistical research and reports; and assess, review and change its products, services and systems.

Supporting quotations

conduct research and analysis, including to:

better understand our customers across all of our communication channels, including our customer contact centers, our websites and apps;

allow you to give feedback by rating and reviewing our products and services and those of our Business Partners;

produce data analytics, statistical research, and reports;

assess, review and change our products, services, and systems;

Use & Processing · Company practice

Personal Information may be processed by people and by automated methods, including AI

American Express may process Personal Information for the purposes described above using manual (human) and automated methods of processing, including artificial intelligence (AI), in accordance with applicable laws.

Supporting quotations

We may process Personal Information for the purposes described above using manual (human) and automated methods of processing, including artificial intelligence (AI), in accordance with applicable laws.

Not stated here

• The statement does not say which processing uses AI, what the AI does, or whether any decisions are made solely by automated means.

Use & Processing · Context

Glossary: De-identified Information is often derived from Personal Information, including from card transactions

The Glossary defines De-identified Information as data or information which cannot be reasonably linked to or associated with you. It says American Express often derives De-identified Information from Personal Information, and that it includes information that may be collected from various sources, such as card transactions.

Supporting quotations

data or information which cannot be reasonably linked to or associated with you.

We often derive De-identified Information from Personal Information. It includes information that we may collect from various sources, such as card transactions.

is information that cannot be reasonably linked to or associated with you.

Not stated here

• The statement does not describe how the de-identification is done.

Use & Processing · Company commitment

Principles: tell you how data is processed where not apparent, and process only for stated, permitted or lawful purposes

The Principles say that where it is not apparent from the products or services you require or the nature of your relationship with American Express, it will tell you how your personal data will be processed and which companies in the American Express Group are responsible. It will process your personal data fairly and only for purposes it has told you, purposes permitted by you or purposes permitted by applicable law. You may object to certain types of processing as expressly permitted by applicable law.

Supporting quotations

Personal data means any information that relates to an identified or identifiable individual.

Where it is not apparent from the products or services you require or the nature of your relationship with us, we will tell you how your personal data will be processed and which companies in the American Express Group are responsible for that processing. We will process your personal data fairly and only for those purposes we have told you, for purposes permitted by you or as permitted by applicable law. In addition, you may object to certain types of processing as expressly permitted by applicable law.

Qualifications & exceptions

• The duty to tell you applies only "where it is not apparent" from the products or services you require or the nature of your relationship.
• The right to object is limited to types of processing where applicable law expressly permits it.

Not stated here

• The Principles do not say how or when American Express tells you, or which types of processing you may object to; that depends on applicable law.

Use & Processing · User right or choice

Principles: option to have personal data included in or removed from marketing lists, as required by applicable law

The Principles say American Express gives customers the option of having their personal data included in or removed from lists used for marketing, as required by applicable law. This covers product and service offers from American Express and those made in conjunction with its business partners. Each of its businesses will continue to send customers information about the products or services they receive from that business.

Supporting quotations

We give customers the option of having their personal data included or removed from lists used for marketing as required by applicable law. This includes product and service offers from American Express and those made in conjunction with our business partners. Of course each of our businesses will continue to send customers information about the products or services they receive from that business.

Qualifications & exceptions

• The option is stated "as required by applicable law".

Not stated here

• The Principles do not say how to exercise this option; the online statement's choices section is carded separately and the page does not say how the two connect.

Use & Processing · User right or choice

Principles: on request, explain processing, allow inquiries, give access as your country's law requires

The Principles say that if you ask, American Express will inform you about how your personal data is processed and the rights and remedies you have under the Principles. You may inquire about the nature of the personal data stored or processed about you. You will be provided access as is required by law in your country, regardless of where the data is processed and stored. If any data is inaccurate or incomplete, you may request that it be amended.

Supporting quotations

If you ask, we will inform you about how your personal data is processed and the rights and remedies you have under these Principles. You may inquire as to the nature of the personal data stored or processed about you by American Express. You will be provided access as is required by law in your country, regardless of the location of the data processing and storage. If any data is inaccurate or incomplete, you may request that the data be amended.

Qualifications & exceptions

• Access is "as is required by law in your country", so it depends on local law.
• You "may request" an amendment; the passage does not promise that every request will be granted.

Not stated here

• The Principles do not say how to make these requests or how long a response takes.

Use & Processing · Company commitment

Principles: tell you if data may leave your country where not apparent, and transfer only in line with applicable law

The Principles say that where it is not apparent from the international products or services you require or the nature of your relationship with American Express, it will inform you if your personal data may be transferred outside your country, and will ensure such transfer is only performed in accordance with applicable law. Regardless of where personal data is transferred, it is protected by the Principles.

Supporting quotations

Where it is not apparent from the international products or services you require or the nature of your relationship with us, we will inform you if your personal data may be transferred outside of your country and ensure that such transfer is only performed in accordance with applicable law. Regardless of where your personal data is transferred, your personal data is protected by these Principles.

Qualifications & exceptions

• The duty to inform applies only "where it is not apparent" from the international products or services or the relationship.

Not stated here

• The Principles do not name the countries or the legal mechanisms used for transfers.

Use & Processing · Company commitment

Participates in the Digital Advertising Alliance program and adheres to its Online Behavioral Advertising principles

American Express says it participates in the Digital Advertising Alliance (DAA) self-regulatory program and adheres to the DAA principles for Online Behavioral Advertising. It links to the DAA to learn more about the DAA and your choices related to Targeted Advertising.

Supporting quotations

We also participate in the Digital Advertising Alliance (DAA) self-regulatory program and adhere to the DAA principles for Online Behavioral Advertising.

Not stated here

• The DAA principles are described in a linked outside resource that is not supplied here, so this card cannot say what they require.

Use & Processing · User right or choice

Targeted Advertising controls: third-party sites, mobile ad tracking, location settings, partner opt-outs

To exercise choices about Targeted Advertising from American Express on third-party websites, the statement links to an opt-out page. For Targeted Advertising from American Express in third-party apps, it says you can turn off mobile device ad tracking or reset the advertising identifier in your device settings on each of the devices you use. If you do not want Targeted Advertising using precise location data, you can turn off location-based services in your device settings. Many Advertising Partners provide their own advertising-related opt-outs, and American Express encourages you to read the privacy statements of the relevant Advertising Partners.

Supporting quotations

If you want to exercise choices related to Targeted Advertising from American Express on third-party websites, click here. For Targeted Advertising from American Express in third-party apps, you can turn off mobile device ad tracking or reset the advertising identifier in your device settings on each of the devices that you use.

If you do not want to receive Targeted Advertising using precise location data, you can turn off location-based services in your device settings.

Many Advertising Partners provide their own advertising-related opt-outs to consumers. We encourage you to learn more about Targeted Advertising and the choices you have by referring to the respective privacy statements of relevant Advertising Partners.

Qualifications & exceptions

• The device-based steps must be taken on each device you use.

Not stated here

• The third-party opt-out page and the Advertising Partners' privacy statements are not supplied here, so what they offer is not known from this text.

Use & Processing · User right or choice

You can choose postal, email and/or phone marketing; opting out may affect offers, but servicing messages continue

You can choose how you would like to receive direct marketing communications, whether American Express sends them by postal mail, email and/or telephone. If you choose not to receive marketing communications, American Express says it will honor your choice, but certain offers attached to the product or services you have chosen may be affected. It will still communicate with you in connection with servicing your account, fulfilling your requests, or administering any promotion or any program in which you have elected to participate.

Supporting quotations

Direct Marketing Choices

You can choose how you would like to receive direct marketing communications - whether we send them to you through postal mail, email and/or telephone. If you choose to not receive marketing communications from us, we will honor your choice. Please be aware that if you choose not to receive such communications, certain offers attached to the product or services you have chosen may be affected. We will still communicate with you in connection with servicing your account, fulfilling your requests, or administering any promotion or any program in which you have elected to participate.

Not stated here

• The passage does not say which offers may be affected by opting out.

Use & Processing · Procedure

Ways to exercise choices: account preferences, 1-855-AXP-PRIV, unsubscribe links and the National Do Not Call List

If you are a Card Member, a Merchant, or use another product or service, the statement lists these ways to exercise your choices: log in to americanexpress.com/communications to update product-specific privacy preferences, or call 1-855-AXP-PRIV and follow the prompts. You can also exercise certain choices by clicking the Unsubscribe link at the bottom of marketing emails (or going to americanexpress.com/preferences), or by registering for the National Do Not Call List. It also tells you to consult the Privacy Notice associated with your specific product to understand the choices that may be available to you.

Supporting quotations

If you are a Card Member, a Merchant, or use another product or service, you may exercise your choices in the following ways:

Log in to americanexpress.com/communications to update the product specific privacy preferences;

Call 1-855-AXP-PRIV and follow the prompts.

You can also exercise certain choices by:

Clicking on the Unsubscribe link on the bottom of marketing e-mails and following the instructions or going to americanexpress.com/preferences;

Registering for the National Do Not Call List

Please consult the Privacy Notice associated with your specific product to understand the choices that may be available to you.

Qualifications & exceptions

• The second group of ways is described as exercising "certain" choices.

Not stated here

• The product-specific Privacy Notices are not supplied here, so the choices they offer are not known from this text.

Use & Processing · Context

Glossary: Aggregated Information can be compiled from various sources, including card transactions

The Glossary defines Aggregated Information as data or information relating to multiple people that has been combined or aggregated and does not identify you individually. It says Aggregated Information includes information that American Express creates or compiles from various sources, including card transactions.

Supporting quotations

data or information relating to multiple people which has been combined or aggregated and which does not identify you individually. Aggregated Information includes information that we create or compile from various sources, including card transactions.