Rev. 4/2018

• Notice covers American Express AMEX Assurance products Legal Rights & Agreement Rules

FACTS

WHAT DOES AMERICAN EXPRESS, IN CONNECTION WITH THE AMEX ASSURANCE PRODUCTS IT OFFERS, DO WITH YOUR PERSONAL INFORMATION?

• Notice covers American Express AMEX Assurance products Legal Rights & Agreement Rules
• AMEX Assurance customers: possible right to access and correct Account & Service Control

| Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |

• Notice covers American Express AMEX Assurance products Legal Rights & Agreement Rules

| What? | The types of personal information we collect and share depend on the product or service you have with us. This information can include: ● Social Security number and insurance claim history ● payment history and transaction history |

• Types of information collected and shared depend on the product Data Access & Collection

| How? | All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons American Express chooses to share; and whether you can limit this sharing. |

• How to read the sharing table Sharing & Disclosure

| Reasons we can share personal information | Does American Express share? | Can you limit this sharing? |

• How to read the sharing table Sharing & Disclosure

| For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | Yes | No |

• Everyday business sharing cannot be limited Sharing & Disclosure

| For our marketing purposes – to offer our products and services to you | Yes | No (but please see the "To limit direct marketing" box below for information about additional privacy choices) |

• Own marketing: shared, no sharing opt-out, but marketing choices exist Sharing & Disclosure

| For joint marketing with other financial companies | Yes | No |

• Joint marketing with other financial companies Sharing & Disclosure

| For our affiliates' everyday business purposes – information about your transactions and experiences | Yes | No |

• Affiliates' everyday business: transactions and experiences, no opt-out Sharing & Disclosure

| For our affiliates' everyday business purposes – information about your creditworthiness | Yes | Yes |

• Creditworthiness information to affiliates: you can limit it Sharing & Disclosure

| For our affiliates to market to you | Yes | Yes |

• Affiliates marketing to you: you can limit it Sharing & Disclosure

| For nonaffiliates to market to you | No (although we may share aggregated or de-identified data) | We don't share personal information |

• Nonaffiliates marketing to you: not shared Sharing & Disclosure

| To limit our sharing | Call us at 1-800-228-6855 Please note: If you are a new customer, we can begin sharing your personal information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your personal information as described in this notice. However, you can contact us at any time to limit our sharing. |

• Creditworthiness information to affiliates: you can limit it Sharing & Disclosure
• How to limit sharing and when sharing can begin Account & Service Control

| To limit direct marketing | We provide additional privacy choices to customers. Privacy elections you make for any one product or service may not automatically be applied to other products and services. To let us know if you do not want us to use your personal information to communicate with you about offers by mail, telephone, and/or e-mail: • Call us at 1-800-228-6855 |

• Own marketing: shared, no sharing opt-out, but marketing choices exist Sharing & Disclosure
• Limiting direct marketing is by phone and per product Use & Processing

| Questions? | Call 1-800-228-6855 or go to www.americanexpress.com/contact. |

• Where to ask questions Account & Service Control

| Who we are |

| Who is providing this notice? | American Express Travel Related Services Company, Inc. and other American Express Affiliates that provide financial products or services, including American Express National Bank and AMEX Assurance Company. |

• Who is providing the notice Legal Rights & Agreement Rules

| What we do |

| How does American Express protect my personal information? | To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. |

• Security measures Security & Safeguards

| How does American Express collect my personal information? | We collect your personal information, for example, when you • open an account or apply for insurance • give us your contact information or file an insurance claim • tell us where to send the money We also collect your personal information from others, such as affiliates or other companies. |

• How personal information is collected Data Access & Collection

| Why can't I limit all sharing of personal information? | Federal law gives you the right to limit only • sharing for affiliates' everyday business purposes - information about your creditworthiness • affiliates from using your information to market to you • sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law. |

• Affiliates marketing to you: you can limit it Sharing & Disclosure
• Why not all sharing can be limited; state law may add rights Legal Rights & Agreement Rules
• California billing address: sharing limited to what California law permits Sharing & Disclosure

| What happens when I limit sharing for an account I hold jointly with someone else? | We don’t offer joint accounts. |

• No joint accounts Account & Service Control

| Definitions |

| Affiliates | Companies related by common ownership or control. They can be financial and nonfinancial companies. • Our affiliates include companies with the American Express name, including financial companies such as American Express Travel Related Services Company, Inc. and nonfinancial companies. Affiliates may also include other companies related by common ownership or control, such as AMEX Assurance Company, a provider of American Express Card-related insurance services. |

• Affiliates' everyday business: transactions and experiences, no opt-out Sharing & Disclosure
• Vermont billing address: creditworthiness not shared with affiliates Sharing & Disclosure

| Nonaffiliates | Companies not related by common ownership or control. They can be financial and nonfinancial companies. • Nonaffiliates with which we share personal information include service providers, including, for example, direct marketers, that perform services or functions on our behalf. |

• Nonaffiliates that receive information include service providers Sharing & Disclosure

| Joint marketing | A formal agreement between nonaffiliated companies that together market financial products or services to you. • Our joint marketing partners include financial companies. |

• Joint marketing with other financial companies Sharing & Disclosure

Other important information

We may transfer personal information to other countries, for example, for customer service or to process transactions.

• Personal information may be transferred to other countries Use & Processing

AMEX Assurance Company customers: You may have the right to access and correct recorded personal information. Personal information may be disclosed by us to detect fraud or misrepresentation, to verify insurance coverage, to an insurance regulatory authority, law enforcement or other governmental authority pursuant to law, or to a group policyholder for purposes of reporting claims experience or conducting an audit. Personal information related to insurance claim activity obtained from a report prepared by an insurance-support organization on our behalf may be retained by such organization and disclosed as required by law. State law may be more protective than federal law.

• AMEX Assurance customers: possible right to access and correct Account & Service Control
• AMEX Assurance customers: when information may be disclosed Sharing & Disclosure
• Insurance-support organization may retain claim information Retention & Deletion

California: If your American Express account has a California billing address, we will not share your personal information except to the extent permitted under California law.

• Why not all sharing can be limited; state law may add rights Legal Rights & Agreement Rules
• California billing address: sharing limited to what California law permits Sharing & Disclosure

Vermont: If your American Express account has a Vermont billing address, we will automatically treat your account as if you have directed us not to share information about your creditworthiness with our affiliates.

• Creditworthiness information to affiliates: you can limit it Sharing & Disclosure
• Why not all sharing can be limited; state law may add rights Legal Rights & Agreement Rules
• Vermont billing address: creditworthiness not shared with affiliates Sharing & Disclosure