• What information does this online privacy statement cover?
• What information do we collect online and how do we collect it?
• How do we use the information we collect about you?
• How do we share your information?
  • How we treat your Personal Information
  • How we handle aggregate and de-identified information
• How do we keep and safeguard your information?
• Glossary

What information does this online privacy statement cover?

This online privacy statement describes how we (and our Service Providers) may collect, process, use, share, transfer, and keep information that we get about you online. We gather Online Information if you:

• Visit or use our recruitment sites or applications;
• Receive or reply to electronic communications from us;

In this statement, we also explain how we may combine Online Information with Other Information we collect from you and how we then use the combined information.

What information do we collect online and how do we collect it?

Sometimes you give information directly to us (or to our Service Providers). For example, you might give us your name, email, mailing address, phone number, or date of birth when you:

• register for job notifications;
• create a profile by submitting your CV/resume;
• apply for a job.

Cookies and Similar Technologies

We (and our Service Providers) collect information through Cookies and Similar Technologies. Most Cookies and Similar Technologies will only collect De-identified Information such as how you arrive at our website or your general location. However, certain Cookies and Similar Technologies do collect personal information. For example, if you click Remember Me when you log in to our website, a cookie will store your username.

We (and our Service Providers) may collect information using Cookies and Similar Technologies about:

• the device you use to browse our sites (for example, we may collect information about the operating system or the browser version and the type of computer or mobile device);
• the IP Address and information related to that IP Address (such as domain information, your internet provider and general geographic location);
• browsing history on our site (such as what you search for, the pages you view, how long you stay, and how often you come back);
• how you search for our site, from which sites you link to our site;

We (and our Service Providers) may also collect information made publicly available through third-party platforms (such as online social media platforms), through online databases or directories, or that is otherwise legitimately obtained.

Email Address

If you provide us with your E-mail address, we may send you E-mails about your recruitment enquiry, job application or to request details about your resume / CV, and job alerts, where you have enrolled in this service.

We may be able to identify information about your E-mail address, such as whether you can read graphic-rich html E-mails. If your E-mail address is html-enabled, we may choose to send you graphic-rich html E-mails.

Please note that we do not provide your E-mail address to third party business partners without your consent.

SMS

If you provide us with your mobile number, we may send you SMS alerts where you have enrolled in this service. For more information about our use of personal information generally, please read the American Express Privacy Principles.

How do we use the information we collect about you?

We may use Online Information we collect about you on its own or combine it with Other Information we have about you for the following purposes:

• if you register for notifications,
  • to contact you with notifications and announcements about new jobs at American Express;
• if you submit your resume,
  • to hold your resume and related Personal Information on file in accordance with our record retention schedule,
  • to review your online candidate profile from time to time to consider you for relevant job opportunities at American Express;
• to protect your information;
• to conduct research and analysis, including to better understand our job applicants and site visitors;
• in other ways as required or permitted by law or with your consent;
• if you apply for employment and are subsequently offered a position, subject to applicable law and where appropriate, we may also use information in support of our background screening process. The particulars of the checks are set forth in the separate authorisations that applicants sign before the screening commences.

How do we share your information?

Some Online Information is personal information.

How we treat your Personal Information

We do not share personal information with anyone except as described below. However, we may share Personal Information as required or as permitted by law, such as:

• with regulatory authorities, courts, and governmental agencies to comply with legal orders, legal or regulatory requirements, and government requests;
• with our Service Providers, regulatory authorities, and governmental agencies to detect and prevent fraud or criminal activity, and to protect the rights of American Express or others;
• Globally, within the American Express Group of Companies;
• with our Service Providers who perform services for us and help us operate our business (we require Service Providers to safeguard personal information and only use your Personal Information for the purposes we specify);
• for specific services, when you have given your consent.

We may transfer personal information to companies within the American Express Group of Companies or to our Service Providers throughout the world, for example, to search for suitable positions or to process your application. Regardless of where we process your information, we still protect it in the manner described in this online privacy statement and according to the applicable laws.

How we handle aggregate and de-identified information

Aggregate Information or De-identified Information does not identify you individually; it helps us to analyze patterns among groups of people. We may share Aggregate Information or De-identified Information for the same reasons as we might share Personal Information.

How do we keep and safeguard your information?

We use advanced administrative technical and physical security measures to protect your Personal Information. These measures include computer safeguards and secured files and facilities. We take reasonable steps to securely destroy or permanently de-identify Personal Information when we no longer need it in accordance with applicable law.

We will keep your Online Information only as long as we must, to process your application or inform you about future opportunities, unless we are required by law or regulation or for litigation and regulatory investigations to keep it.

What are your rights?

You may request access to update, change, or correct your Personal Information held by American Express at any time. You may request information on the Personal Information held by American Express about you through a subject access request, free of charge. If you wish to do so, or if you have any questions about how we process your Personal Information, please contact AsiaPacLeaderAdvice@aexp.com.

Do you have questions about this online privacy statement or want to make a complaint?

If you have questions about our online recruitment privacy statement, please contact AsiaPacLeaderAdvice@aexp.com

Glossary

Aggregate Information — data or information relating to multiple people which has been combined or aggregated. Aggregate Information includes information that we create or compile from various sources, including data from Cookies and Similar Technologies.

American Express (we, our, us), — the American Express company as identified at the beginning of this online privacy statement.

American Express Group of Companies — any affiliate and subsidiary of, and any company owned or controlled by, the American Express Company.

Business Partners — any third parties with which we conduct business and have a contractual relationship. Business Partners typically are not Service Providers.

Cookies and Similar Technologies — Cookies are small text files which are placed on your computer (or Smartphone or other device used to access the internet) whenever you visit a website in order to store information that may be used for different reasons, including to enhance your visit to our website, e.g. keep you logged in when you navigate between pages, to store your user ID and password securely, to store preferences and personalize home pages, to identify which parts of a site you have visited, or to keep track of your selections in a 'shopping cart'.

The cookies we place on your computer cannot be used to retrieve any other data from your hard drive, to pass viruses to your computer, or capture your e-mail address. Each cookie is unique to your web browser and device. Some of the functions that cookies perform can also be achieved using alternative technology. We use the term 'cookies' in this policy to mean cookies and all similar mechanisms.

De-identified Information — data or information used in a way that does not identify you to a third party. We often derive De-Identified Information from Personal Information. It includes information that we may collect from Cookies and Similar Technologies.

IP Address — a number assigned to a device when connecting to the Internet.

Online Information — data or information collected on the American Express sites and applications as well as on sites and applications of third parties relating to topics about our business, which may include Personal Information, Aggregated Information and De-Identified Information.

Other Information — American Express internal information and other online and offline information, which may combine Personal Information, Aggregated Information and De-Identified Information.

Personal Information — information that can identify a person, such as name, address, telephone number, email address and previous employment history.

Service Providers — any vendor, third party and/or company that performs business operations on our behalf, such as recruitment, printing, mailing, and other communications services (email, direct mail, etc.), data processing, servicing.