Privacy Statement

Effective Date: 11/2023

American Express Company, its subsidiaries and affiliates ("American Express") is committed to protecting your privacy. Our global set of Data Protection and Privacy Principles outline our commitment to the privacy of all our customers.

This Online Privacy Statement outlines what information we collect online, why we collect it, and how we access, use, disclose, and protect it. This includes information we collect online through:

Online services we operate – such as our websites and mobile apps.
Services or content we provide to third party platforms – such as online communications, social media pages, voice assistant apps, and digital ads.
All other services or content that link to or reference this statement.

Our websites and apps are not intended for use by persons under 18 years of age. We don’t knowingly collect information online from – or market online to – persons under 18 years of age.

Here’s something to keep in mind

We may provide you with more details about how we use your information, depending on the product or service you use. In this case, we’ll provide additional Terms & Conditions, privacy statements, or notices.

Third-party services – such as social media sites – have additional terms that explain how they handle your information. Please take a moment to review the terms of any other online services you use, to ensure your security.

What’s in this statement?

A. Information We Collect

B. Use of Information

C. Disclosure of Information

D. Aggregated and Anonymized Information

E. Security

F. Your Choices

G. Changes to This Statement

A. INFORMATION WE COLLECT

The type of information we collect depends on the product or service you use.

We collect Cookies through this website and personal information to the extent Cookies can be considered personal information or able to collect personal information based on the law applicable in the country. Please refer to the section below on Cookies and Similar Technologies and to our Cookie Policy for more information. The additional information contained in this Privacy Statement are meant to better outline our Data Protection and Privacy Principles but are to be construed only in relation to personal information collected through Cookies, as applicable.

Cookies and Similar Technologies

We collect information through Cookies and Similar Technologies when you use our online services or access content online.

A cookie is a small data file that a website transfers to your computer. Similar technologies include clear GIFs, web beacons, and pixel tags, which tend to be transparent images on websites. Our Cookies and Similar Technologies collect information about your device, operating system, and web browser. They also collect information about your use of the device.

Cookies and Similar Technologies collects information that includes:

Information related to your IP address, such as your domain, internet provider, and general geographic location.
How you use our websites and apps, such as what you search for on our websites and apps, the pages you view, how long you stay, and how often you visit them.
How you search for our websites or apps, which website or apps directed you to us, and, in some cases, if you’ve visited a website operated by one of our business or commercial partners.
Ads or online content created by American Express or our business and commercial partners that you view, access, or click.
If you use your mobile device to access our products or services, we may collect information related to that device, such as your location.

B. USE OF INFORMATION

We use information about you in a number of ways. We’ll use it to:

Recognize you and your device in order to better communicate more effectively.
Determine whether you may be interested in new products or services.
Advertise and market our products and services, along those of our commercial and business partners. See the Digital Advertising section below for more information.
Conduct research to better understand our online visitors.
Analyze the effectiveness of our advertising and marketing campaigns.
We’ll also perform other duties required or permitted by law, or with your consent.

Digital Advertising

We advertise through our websites and apps, as well as third-party platforms. We may use your information to serve your devices marketing content or ads across tailored to your interests and general geographic location. Here are some ways this works:

We use online behavioral advertising to collect information through Cookies and Similar Technologies regarding your online behavior over time and across different websites. Then, we use this information to serve you content or ads tailored to your interests.
We may also provide content on social media sites and participate in targeted advertising campaigns on these platforms.
Keep in mind, we don’t own these websites and apps, and are required to use your information only in ways that are consistent with the privacy policies and Terms & Conditions of these platforms.

C. DISCLOSURE OF INFORMATION

We may disclose information about you when necessary. We could disclose information to:

Providers who perform services for us that include printing, mail, advertising and marketing. We require all of such service providers to protect personal information according to our standards and use it only for the purposes we allow.
Regulatory authorities, courts, and governmental agencies, in order to comply with legal or regulatory requirements, assist in legal or regulatory investigations, and protect the rights of American Express or others.
Companies within the American Express group.
Business or commercial partners – other financial institutions, loyalty programs, travel partners, and certain advertising partners with whom we offer or develop products and services.
Necessary parties involved in the sale of all or part of a company in the American Express group, or its assets.
Other relevant third parties, as required or permitted by law or with your consent.

Cross-Border Transfers of Personal Information

We may need to transfer personal information to other countries with different data protection laws, in order to provide you with our products or services, unless it’s restricted by applicable law. Keep in mind, no matter where we process personal information about you, we’ll always protect it in the manner described in the Data Protection and Privacy Principles, this Statement, and in accordance with applicable laws.

D. AGGREGATED AND ANONYMIZED INFORMATION

We sometimes process information so that it no longer identifies any individual. This is referred to as aggregated and anonymized information. We use aggregated and anonymized information to:

Analyze patterns among groups of people, such as online users.
Create business insights or statistical research reports.
Improve our advertising and our business.

We sometimes share aggregated and anonymized information with third parties, for many of the same reasons mentioned above.

E. SECURITY

We use administrative, organizational, technical, and physical security measures to protect the confidentiality, integrity, and availability of your personal information. Here’s what you should know:

These measures include technological safeguards and appropriate access controls to data and facilities.
We take reasonable steps to securely destroy or de-identify your personal information when we no longer need it.
We keep personal information for only as long as necessary to provide you with products or services – unless we’re required or permitted to keep it for longer by law, regulation, or for litigation or regulatory investigations.

F. YOUR CHOICES

You have the power to make choices about how American Express uses your information for marketing and advertising purposes. We work with a range of advertising partners including ad networks, ad servers, and social media platforms to serve you our ads online. Your choices may vary, depending on whether we’re serving you ads through websites, email, apps, or social media.

You can change your cookie preferences in your Browser (for example, Chrome, Safari, Microsoft Edge or Internet Explorer) or your mobile device settings to limit the ways in which cookies may be used to collect and use information about you. Click here for more information.
You can adjust how we use your information through your mobile device settings – for example, you can turn off location-based services and device ad tracking.

G. CHANGES TO THIS STATEMENT

We may change this statement when necessary. Depending what we change, we may let you know in advance. Whenever we make any changes, we’ll update the “Effective Date” at the top of this page. Any changes to this statement will become effective immediately when posted. When you continue to use our products and services following an update, it will indicate that you accept the revised statement.

THE AMERICAN EXPRESS DATA PROTECTION & PRIVACY PRINCIPLES

1. COLLECTION

We will only collect personal data that is needed and by lawful and fair means.

2. NOTICE AND PROCESSING

Where it is not apparent from the products or services you require or the nature of your relationship with us, we will tell you how your personal data will be processed and which companies in the American Express Group are responsible for that processing. We will process your personal data fairly and only for those purposes we have told you, for purposes permitted by you or as permitted by applicable law. In addition, you may object to certain types of processing as expressly permitted by applicable law.

3. CHOICE

We give customers the option of having their personal data included or removed from lists used for marketing as required by applicable law. This includes product and service offers from American Express and those made in conjunction with our business partners. Of course each of our businesses will continue to send customers information about the products or services they receive from that business.

4. QUALITY

We use appropriate technology and well-defined employee practices to process your personal data promptly and accurately. We will not keep your personal data longer than is necessary, except as otherwise required by applicable law.

5. SECURITY AND CONFIDENTIALITY

We will eep your personal data confidential and limit access to your personal data to those who specifically need it to conduct their business activities, except as otherwise permitted by applicable law. We refer to industry standards and use reasonable administrative, technical and physical security measures to protect your personal data from unauthorized access, destruction, use, modification or disclosure. We require industry standard data security measures from those third parties who are authorized by us to process your personal data on our behalf.

6. DATA SHARING

We only share your personal data with third parties where it is necessary to provide you with products or services or as part of the nature of our relationship with you, where we have previously informed or been authorized by you, in connection with our efforts to reduce fraud or criminal activity, or as permitted by law.

7. OPENNESS AND DATA ACCESS

If you ask, we will inform you about how your personal data is processed and the rights and remedies you have under these Principles. You may inquire as to the nature of the personal data stored or processed about you by American Express. You will be provided access as is required by law in your country, regardless of the location of the data processing and storage. If any data is inaccurate or incomplete, you may request that the data be amended.

8. INTERNATIONAL TRANSFER

Where it is not apparent from the international products or services you require or the nature of your relationship with us, we will inform you if your personal data may be transferred outside of your country and ensure that such transfer is only performed in accordance with applicable law. Regardless of where your personal data is transferred, your personal data is protected by these Principles.

9. RESPONSIBILITY

Each company in the American Express Group and their employees may only process your personal data in accordance with these Principles. We conduct training and reviews of our compliance with these Principles. Employees who violate these Principles may be subject to disciplinary action, up to and including dismissal. Employees are expected to report violation of these Principles, and may do so to their managers, to their business unit's compliance officer, to the legal department, to the Privacy Office or to the company's Office of the Ombudsperson.

10. ACCOUNTABILITY

You may enforce these Principles in your country against any company in the American Express Group that is responsible for your personal data, as a third party contractual beneficiary to these Principles. If you have a complaint that we have breached these Principles and have attempted in good faith to resolve the complaint through our customer service process, but the complaint was not resolved by us within a reasonable amount of time, then you may enforce these Principles against us. If you complain to your local data protection authority and the data protection authority finds that we have breached these Principles, we will abide by the findings of the data protection authority, but we reserve the right to challenge or appeal such findings. These Principles do not affect any rights you have under applicable law, the requirements of any applicable regulatory data protection authority, or any other type of agreement that you may have with us.