The notice carries a revision label, not an effective date
The notice is labelled "Rev. 11/2023". The saved text states no effective date, no date of last update beyond this label, and no date on which any listed practice began or ends.
Details not recorded for this card
Supporting quotations
Rev. 11/2023
Qualifications & exceptions
The label appears as the first line of the saved text, before the "FACTS" heading.
Not stated here
The source does not say what "Rev." means beyond its position as a revision label, nor whether a later version exists.
Legal Rights & Agreement Rules · Context
Why the notice exists: federal law, sharing and limits
The notice opens by saying that financial companies choose how they share personal information, that federal law gives consumers the right to limit some but not all sharing, and that federal law also requires American Express to tell you how it collects, shares and protects personal information. It asks you to read the notice carefully.
Details
Who
American Express ("us")
Why
Tell consumers how personal information is collected, shared and protected
Supporting quotations
Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information.
Qualifications & exceptions
This is the "Why?" row of the opening box under the heading "WHAT DOES AMERICAN EXPRESS DO WITH YOUR PERSONAL INFORMATION?".
Not stated here
The notice says "Federal law" without naming the statute or regulation.
Data Access & Collection · Company practice
Types of personal information collected and shared
The kinds of personal information American Express collects and shares depend on the product or service you have with it. The notice says this information can include Social Security number and income, transaction history and account history, and insurance claim history and credit history.
Details
What it covers
Social Security number and income; transaction history and account history; insurance claim history and credit history
Condition
Depends on the product or service you have with American Express
Supporting quotations
The types of personal information we collect and share depend on the product or service you have with us. This information can include: ● Social Security number and income ● transaction history and account history ● insurance claim history and credit history
Qualifications & exceptions
"can include" introduces examples, so the list is not stated to be complete.
Which items apply to you depends on your product or service.
Not stated here
The source does not say which products or services collect which items.
Data Access & Collection · Company practice
How American Express collects personal information
American Express says it collects personal information, for example, when you open an account or pay your bills, give it your income information or contact information, or use your credit card. It also collects personal information from others, such as credit bureaus, affiliates, or other companies.
Details
What it does
Collects personal information directly when you open an account, pay bills, give income or contact information, or use your credit card
What it does
Also collects personal information from credit bureaus, affiliates or other companies
Supporting quotations
We collect your personal information, for example, when you ● open an account or pay your bills ● give us your income information or give us your contact information ● use your credit card We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Qualifications & exceptions
"for example" and "such as" mark both lists as illustrative, not exhaustive.
Not stated here
The source does not name which other companies are sources, or what information comes from each.
Sharing & Disclosure · Context
How the sharing list is organized
The notice explains that all financial companies need to share customers' personal information to run their everyday business. It then lists, in rows, the reasons financial companies can share, whether American Express shares for each reason, and whether you can limit that sharing. The column headings are "Reasons we can share personal information", "Does American Express share?" and "Can you limit this sharing?".
Details not recorded for this card
Supporting quotations
All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons American Express chooses to share; and whether you can limit this sharing.
| Reasons we can share personal information | Does American Express share? | Can you limit this sharing? |
Qualifications & exceptions
Each row of the sharing list is read as reason, then "Does American Express share?", then "Can you limit this sharing?". The saved text keeps each row on one line separated by vertical bars.
Not stated here
The saved text shows rows as bar-separated lines; the original page layout is not otherwise visible.
Sharing & Disclosure · Company practice
Sharing for everyday business purposes: yes, cannot limit
For its everyday business purposes, such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus, American Express shares personal information. The "Can you limit this sharing?" column says No.
Details
What it does
Shares personal information
Why
Everyday business purposes such as processing transactions, maintaining accounts, responding to court orders and legal investigations, reporting to credit bureaus
Condition
You cannot limit this sharing
Supporting quotations
For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | Yes | No
Qualifications & exceptions
The examples after "such as" are illustrative, not an exhaustive list of everyday business purposes.
Row reading: share = Yes; can you limit = No.
Not stated here
The source does not say with whom the information is shared for these purposes.
Sharing & Disclosure · Company practice
Sharing for American Express's own marketing: yes, no limit in this row
For its own marketing purposes, to offer its products and services to you, American Express shares personal information. The "Can you limit this sharing?" column says No, followed by a pointer to the "To limit direct marketing" box for additional privacy choices.
Details
Why
Marketing purposes: to offer American Express products and services to you
Condition
The "No" in the limit column is qualified by additional privacy choices in the "To limit direct marketing" box
Supporting quotations
For our marketing purposes – to offer our products and services to you | Yes | No (but please see the "To limit direct marketing" box below for information about additional privacy choices)
Qualifications & exceptions
Row reading: share = Yes; can you limit = No, with a pointer to additional choices for direct marketing communications.
The additional choices described in the referenced box concern email and direct mail communications about offers; see the direct marketing choices card.
Not stated here
The source does not say with whom the information is shared for American Express's own marketing.
Cross-references
qualified by (model-proposed): Choices to limit direct marketing by email or mail — The marketing row says No in the limit column but points to the "To limit direct marketing" box, which describes email and direct mail choices.
Use & Processing · User right or choice
Choices to limit direct marketing by email or mail
American Express says it provides additional privacy choices to customers. To tell it that you do not want your personal information used to communicate with you about offers by email and/or direct mail, you can click the unsubscribe link at the bottom of the email communication(s) and follow the instructions, or follow the instructions at the bottom of the direct mail communication. Privacy elections made for one product or service may not automatically apply to other products and services.
Details
What it does
Unsubscribe link in email, or instructions on direct mail
What it covers
Use of personal information to communicate about offers by email and/or direct mail
Condition
Elections for one product or service may not automatically apply to others
Supporting quotations
We provide additional privacy choices to customers. Privacy elections you make for any one product or service may not automatically be applied to other products and services. To let us know if you do not want us to use your personal information to communicate with you about offers by email and/or direct mail: ● Click on the unsubscribe link found at the bottom of the email communication(s) and follow the instructions provided. ● Follow the instructions provided on the bottom of the direct mail communication.
Qualifications & exceptions
The choice described covers email and/or direct mail offers, not other channels.
"may not automatically be applied to other products and services" means an election for one product or service might need to be made again for another.
Not stated here
The source does not describe choices for other channels such as phone, text or in-app messages.
The source does not say which products and services share a single election.
Sharing for joint marketing with other financial companies: yes, cannot limit
For joint marketing with other financial companies, American Express shares personal information. The "Can you limit this sharing?" column says No.
Details not recorded for this card
Supporting quotations
For joint marketing with other financial companies | Yes | No
Qualifications & exceptions
Row reading: share = Yes; can you limit = No.
"Joint marketing" is defined in the Definitions section; see the joint marketing definition card.
Not stated here
The source does not name the partner financial companies.
Cross-references
defined by (model-proposed): Definition: Joint marketing — The Definitions section explains "joint marketing", the term used in the joint marketing row.
Sharing & Disclosure · Company practice
Affiliates' everyday business purposes (transactions and experiences): yes, cannot limit
For its affiliates' everyday business purposes involving information about your transactions and experiences, American Express shares personal information. The "Can you limit this sharing?" column says No.
Details not recorded for this card
Supporting quotations
For our affiliates' everyday business purposes – information about your transactions and experiences | Yes | No
Qualifications & exceptions
Row reading: share = Yes; can you limit = No. The row is limited to information about your transactions and experiences.
"Affiliates" is defined in the Definitions section; see the affiliates definition card.
Not stated here
The source does not describe what the affiliates' everyday business purposes are.
Cross-references
defined by (model-proposed): Definition: Affiliates — The Definitions section explains "affiliates", the term used in the affiliates' everyday business purposes row.
Sharing & Disclosure · Company commitment
Affiliates' everyday business purposes (creditworthiness): no
For its affiliates' everyday business purposes involving information about your creditworthiness, American Express says it does not share. The "Can you limit this sharing?" column says "We don’t share".
Details not recorded for this card
Supporting quotations
For our affiliates' everyday business purposes – information about your creditworthiness | No | We don’t share
Qualifications & exceptions
Row reading: share = No; can you limit = We don’t share. The row is limited to information about your creditworthiness.
The Vermont paragraph near the end separately says Vermont-billing-address accounts are automatically treated as if you had told American Express not to share creditworthiness information with its Affiliates; see the Vermont card.
Not stated here
The source does not define "creditworthiness" beyond the row wording.
American Express says it does not share personal information for its affiliates to market to you. The "Can you limit this sharing?" column says "We don’t share".
Details not recorded for this card
Supporting quotations
For our affiliates to market to you | No | We don’t share
Qualifications & exceptions
Row reading: share = No; can you limit = We don’t share.
Not stated here
The source does not say whether affiliates may market to you using information they obtain in other ways.
Sharing & Disclosure · Company commitment
Nonaffiliates marketing to you: no personal information shared
American Express says it does not share for nonaffiliates to market to you, with a parenthetical that it may share aggregated or de-identified data. The "Can you limit this sharing?" column says "We don't share personal information".
Details
Exception
May share aggregated or de-identified data
Supporting quotations
For nonaffiliates to market to you | No (although we may share aggregated or de-identified data) | We don't share personal information
Qualifications & exceptions
Row reading: share = No, qualified by "although we may share aggregated or de-identified data"; can you limit = "We don't share personal information".
The Definitions section lists service providers, including direct marketers, among the nonaffiliates with which American Express shares personal information; see the nonaffiliates definition card.
Not stated here
The source does not define "aggregated" or "de-identified" data or say who receives it.
The source does not say how sharing with service providers that are direct marketers relates to this "No" row; the row concerns nonaffiliates marketing to you.
Cross-references
contrast (model-proposed): Definition: Nonaffiliates — The nonaffiliates marketing row says No and "We don't share personal information", while the Definitions section says nonaffiliates with which American Express shares personal information include service providers such as direct marketers acting on its behalf. The two statements concern different activities (nonaffiliates marketing to you versus service providers acting on American Express's behalf), but the notice does not say how they fit together.
Legal Rights & Agreement Rules · Context
Who is providing this notice
The notice is provided by American Express Travel Related Services Company, Inc. and other American Express Affiliates that provide financial products or services, including American Express National Bank and AMEX Assurance Company.
Details
Who
American Express Travel Related Services Company, Inc.; American Express National Bank; AMEX Assurance Company; other American Express Affiliates providing financial products or services
Supporting quotations
American Express Travel Related Services Company, Inc. and other American Express Affiliates that provide financial products or services, including American Express National Bank and AMEX Assurance Company.
Qualifications & exceptions
The statement is limited to Affiliates that provide financial products or services.
Not stated here
The source does not list every American Express Affiliate covered by the notice.
How American Express says it protects personal information
To protect your personal information from unauthorized access and use, American Express says it uses security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
Details
What it does
Uses security measures that comply with federal law, including computer safeguards and secured files and buildings
Why
Protect personal information from unauthorized access and use
Supporting quotations
To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
Qualifications & exceptions
"include" means the listed measures are examples.
Not stated here
The source does not describe the specific safeguards or name the federal law.
Legal Rights & Agreement Rules · User right or choice
What federal law lets you limit, and other possible rights
The notice says federal law gives you the right to limit only three kinds of sharing: sharing for affiliates' everyday business purposes involving information about your creditworthiness; affiliates using your information to market to you; and sharing for nonaffiliates to market to you. It adds that state laws and individual companies may give additional rights to limit sharing and refers to a later part for rights under state law.
Details
What it covers
Sharing for affiliates' everyday business purposes (creditworthiness); affiliates marketing to you; nonaffiliates marketing to you
Condition
Federal law gives the right to limit only these; state laws and individual companies may give additional rights
Supporting quotations
Federal law gives you the right to limit only ● sharing for affiliates' everyday business purposes - information about your creditworthiness ● affiliates from using your information to market to you ● sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law.
Qualifications & exceptions
This answers why you cannot limit all sharing: the three federal rights listed are the only ones stated here.
The state-law material referred to by "See below" appears at the end of the notice and is analyzed separately: AMEX Assurance Company customers, California and Vermont.
Not stated here
The source does not say which additional rights individual companies give, beyond the direct marketing choices described elsewhere in the notice.
Cross-references
refers to (model-proposed): State law may be more protective than federal law — The federal-rights row points "below" for rights under state law; the state-law paragraph near the end carries the state-specific statements.
Account & Service Control · Restriction or exception
Joint accounts: your choices apply to everyone on the account
If you limit sharing for an account you hold jointly with someone else, the notice says your choices will apply to everyone on your account.
Details
Condition
Account held jointly with someone else
What it does
Your choices apply to everyone on the account
Supporting quotations
Your choices will apply to everyone on your account.
Qualifications & exceptions
The statement is about choices to limit sharing for a jointly held account.
Not stated here
The source does not say how conflicting choices from joint holders are handled.
Legal Rights & Agreement Rules · Context
Definition: Affiliates
The notice defines affiliates as companies related by common ownership or control, which can be financial and nonfinancial companies. It says American Express's affiliates include companies with the American Express name, including financial companies such as American Express Travel Related Services Company, Inc. and nonfinancial companies. Affiliates may also include other companies related by common ownership or control, such as AMEX Assurance Company, a provider of American Express Card-related insurance services.
Details
What it covers
Companies related by common ownership or control, financial and nonfinancial
Supporting quotations
Companies related by common ownership or control. They can be financial and nonfinancial companies. ● Our affiliates include companies with the American Express name, including financial companies such as American Express Travel Related Services Company, Inc. and nonfinancial companies. Affiliates may also include other companies related by common ownership or control, such as AMEX Assurance Company, a provider of American Express Card-related insurance services.
Qualifications & exceptions
The definition covers both financial and nonfinancial companies.
Not stated here
The source does not list the affiliates other than the examples named.
The notice defines nonaffiliates as companies not related by common ownership or control, which can be financial and nonfinancial companies. It says the nonaffiliates with which American Express shares personal information include service providers, including, for example, direct marketers, that perform services or functions on its behalf.
Details not recorded for this card
Supporting quotations
Companies not related by common ownership or control. They can be financial and nonfinancial companies. ● Nonaffiliates with which we share personal information include service providers, including, for example, direct marketers, that perform services or functions on our behalf.
Qualifications & exceptions
The sharing described is with service providers performing services or functions on American Express's behalf.
"include" and "for example" mean the examples are not exhaustive.
Not stated here
The source does not say which row of the sharing list covers sharing with these service providers.
Cross-references
contrast (model-proposed): Nonaffiliates marketing to you: no personal information shared — The nonaffiliates marketing row says No and "We don't share personal information", while the Definitions section says nonaffiliates with which American Express shares personal information include service providers such as direct marketers acting on its behalf. The two statements concern different activities (nonaffiliates marketing to you versus service providers acting on American Express's behalf), but the notice does not say how they fit together.
Sharing & Disclosure · Context
Definition: Joint marketing
The notice defines joint marketing as a formal agreement between nonaffiliated companies that together market financial products or services to you. It says American Express's joint marketing partners include financial companies.
Details not recorded for this card
Supporting quotations
A formal agreement between nonaffiliated companies that together market financial products or services to you. ● Our joint marketing partners include financial companies.
Qualifications & exceptions
"include" means financial companies are an example, not stated to be the only kind of partner.
For questions, the notice gives the phone number 1-800-528-4800 and the web address www.americanexpress.com/contact.
Details not recorded for this card
Supporting quotations
Call 1-800-528-4800 or go to www.americanexpress.com/contact.
Not stated here
The source does not say what the contact channels can do beyond answering questions.
Use & Processing · Permission or license
Personal information may be transferred to other countries
American Express says it may transfer personal information to other countries, for example, for customer service or to process transactions.
Details
What it does
May transfer personal information to other countries
Why
For example, customer service or processing transactions
Supporting quotations
We may transfer personal information to other countries, for example, for customer service or to process transactions.
Qualifications & exceptions
"may" states a permission, not a statement that every customer's information is transferred.
"for example" makes customer service and processing transactions illustrations, not a complete list of reasons.
Not stated here
The source does not name the countries, say who receives the information, or describe safeguards for transferred information.
Legal Rights & Agreement Rules · User right or choice
AMEX Assurance Company customers: possible right to access and correct
For AMEX Assurance Company customers, the notice says you may have the right to access and correct recorded personal information.
Details
Who
AMEX Assurance Company customers
What it does
May have the right to access and correct recorded personal information
Supporting quotations
AMEX Assurance Company customers. You may have the right to access and correct recorded personal information.
American Express Travel Related Services Company, Inc. and other American Express Affiliates that provide financial products or services, including American Express National Bank and AMEX Assurance Company.
Qualifications & exceptions
The statement is addressed to AMEX Assurance Company customers.
AMEX Assurance Company is named earlier among the entities providing the notice.
"may have" states a possible right, not a confirmed one.
Not stated here
The source does not say how to request access or correction, what records are covered, or what determines whether the right exists.
AMEX Assurance Company customers: permitted disclosures of personal information
For AMEX Assurance Company customers, the notice says personal information may be disclosed by American Express to detect fraud or misrepresentation, to verify insurance coverage, to an insurance regulatory authority, law enforcement or other governmental authority pursuant to law, or to a group policyholder for purposes of reporting claims experience or conducting an audit.
Details
Who
American Express ("us")
What it does
May disclose personal information
Why
Detect fraud or misrepresentation; verify insurance coverage; respond to insurance regulatory authorities, law enforcement or other governmental authorities pursuant to law; report claims experience or conduct an audit for a group policyholder
Supporting quotations
Personal information may be disclosed by us to detect fraud or misrepresentation, to verify insurance coverage, to an insurance regulatory authority, law enforcement or other governmental authority pursuant to law, or to a group policyholder for purposes of reporting claims experience or conducting an audit.
Qualifications & exceptions
The sentence follows the "AMEX Assurance Company customers." lead-in in the same paragraph; the saved text does not mark where that audience statement ends.
"may be disclosed" states a permission.
Disclosure to authorities is stated as "pursuant to law".
Not stated here
The source does not say whether this sentence is limited to AMEX Assurance Company customers or applies more widely.
The source does not describe the information disclosed in each case or how it relates to the sharing list near the start of the notice.
Insurance claim information held by an insurance-support organization
The notice says personal information related to insurance claim activity, obtained from a report prepared by an insurance-support organization on American Express's behalf, may be retained by that organization and disclosed as required by law.
Details
What it covers
Personal information related to insurance claim activity from a report prepared by an insurance-support organization on American Express's behalf
Condition
Retained by the organization and disclosed as required by law
Supporting quotations
Personal information related to insurance claim activity obtained from a report prepared by an insurance-support organization on our behalf may be retained by such organization and disclosed as required by law.
Qualifications & exceptions
The sentence appears in the paragraph that begins "AMEX Assurance Company customers."
The information described is limited to insurance claim activity obtained from a report prepared on American Express's behalf.
Disclosure by the organization is stated as "as required by law".
Not stated here
The source does not name the insurance-support organization or say how long it may retain the information.
The notice says state law may be more protective than federal law. It follows the AMEX Assurance Company customer sentences in the same paragraph and leads into the California sentence.
Details not recorded for this card
Supporting quotations
State law may be more protective than federal law.
State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law.
Qualifications & exceptions
"may" is a possibility, not a statement that any particular state law is more protective.
An earlier row says state laws and individual companies may give additional rights to limit sharing and points "below" for rights under state law; the saved text does not mark which later paragraphs the pointer refers to.
Not stated here
The source does not say whether this sentence refers to the AMEX Assurance Company customer sentences, the California sentence, or the notice generally, and does not name any state law.
Cross-references
referred to by (model-proposed): What federal law lets you limit, and other possible rights — The federal-rights row points "below" for rights under state law; the state-law paragraph near the end carries the state-specific statements.
California billing address: sharing limited to what California law permits
If your American Express account has a California billing address, American Express says it will not share your personal information except to the extent permitted under California law.
Details
Where
Accounts with a California billing address
Condition
Sharing only to the extent permitted under California law
Supporting quotations
California: If your American Express account has a California billing address, we will not share your personal information except to the extent permitted under California law.
Qualifications & exceptions
The statement applies to accounts with a California billing address.
The limit is expressed by reference to what California law permits; the content of that law is not in the source.
Not stated here
The source does not say how this commitment changes the Yes answers in the sharing list for California-billing-address accounts, or what California law permits.
Vermont billing address: no sharing of creditworthiness information with Affiliates
If your American Express account has a Vermont billing address, the notice says American Express will automatically treat your account as if you have directed it not to share information about your creditworthiness with its Affiliates.
Details
Where
Accounts with a Vermont billing address
What it does
Treats the account as if you directed American Express not to share creditworthiness information with its Affiliates
Supporting quotations
Vermont: If your American Express account has a Vermont billing address, we will automatically treat your account as if you have directed us not to share information about your creditworthiness with our Affiliates.
Companies related by common ownership or control. They can be financial and nonfinancial companies.
Qualifications & exceptions
The statement applies to accounts with a Vermont billing address.
The treatment is automatic: it is described as if you had directed American Express not to share, so no action by you is described.
The sharing list near the start of the notice already says American Express does not share creditworthiness information for its affiliates' everyday business purposes.
Not stated here
The source does not say whether the Vermont paragraph adds anything beyond the sharing list's "No" for creditworthiness.
Cross-references
refers to (model-proposed): Affiliates' everyday business purposes (creditworthiness): no — The Vermont paragraph addresses sharing of creditworthiness information with Affiliates, the subject of the affiliates' creditworthiness row, which already says No.