American Express U.S. Online Recruitment Privacy Statement

Effective Date: December 31, 2022

At Americanexpress.com, we are committed to safeguarding your privacy. Our Data Protection and Privacy Principles describe our high-level commitment to privacy, globally. We want you to know how we may collect, use, share, and keep information about you and the choices that are available to you.

This Online Recruitment Privacy Statement (“Statement”) specifically applies to information we collect through American Express websites or other services which link to this Statement. This Statement applies to job applicants, contractors, and current and former employees. However, please note that if you accept a job with us, we may provide you with additional privacy notices upon commencement of your employment.


This Statement does not apply to those websites, apps, or services that have their own online privacy statements such as the American Express website, americanexpress.com. It does not apply to information we collect to provide products and services. Please note that third-party services, such as social media websites, have additional terms that explain how operators of those services handle your information. Please review the terms of the specific online services you use.


Our websites and services are not intended for children under 13 years of age. We do not knowingly collect information online from, or market online to, children under 13 years of age.


Information We Collect

Generally, you provide your information directly to us (or to our Service Providers). when you register for job notifications, create a profile by submitting your résumé/CV or apply for or accept a job. For example, you may give us Personal Information, such as your name, email, mailing address, phone number, or date of birth.


If you accept an employment offer from us, we will collect additional Personal Information from you during the onboarding process and throughout your employment with us. This additional information may include:


  • Additional contact information, including address, email address, Social Security Number, driver’s license number or state ID card number, passport number, and other unique personal identifiers;

  • Educational, professional, and employment-related information, including employment and education history, professional licenses, marital or domestic partner status, age, gender, classifications protected under state or federal Equal Employment Opportunity laws (such as race or national origin), health and safety information, medical condition or information, and health insurance information and policy number;

  • Other geolocation data, including badge access information;

  • Audio, electronic, or similar information;

  • Biometric information, such as imagery of the face, hand, or palm that can be used to establish identity and/or enable access to our facilities; and

  • Financial information, including bank account and routing number.

We (and our Service Providers) also collect information through Cookies and Similar Technologies. The information we collect using Cookies and Similar Technologies may include:

  • the device you use (for example, we may collect information about the operating system, browser version, and the type of device you use to open electronic communications from us);
  • the IP Address and related information (such as domain information, your internet provider, and general geographic location);
  • browsing history on our website (such as what you search for, the pages you view, how long you stay, and how often you come back);
  • how you search for our website and from which websites you came from; and
  • whether you open our electronic communications and which parts you click on.

We (and our Service Providers) may also collect other information and combine it with the information we collected about you under this Statement.


The information we collect may be Personal Information, Aggregated Information or Anonymized Information. Aggregated Information or Anonymized Information does not identify you individually; it helps us to analyze patterns among groups of people.


Use of Information

We use information we collect from job applicants in a number of ways, including:


  • to contact you with notifications and announcements about new jobs at American Express, if you register for these alerts;
  • if you submit your résumé/CV, we may retain your resume/CV for a limited period of time and review your online candidate profile periodically to consider you for relevant job opportunities at American Express;
  • to conduct research and analysis, including to better understand our job candidates and site visitors;
  • to support our background screening process if you apply for employment and are subsequently offered a position, subject to applicable law and where appropriate (we will provide you with additional information before we do such a screening); and
  • use it in other ways as required by law such as to verify your employment eligibility.

If you accept an employment offer from us, we may process the information we collect from you for the following purposes:


  • to manage compensation, benefits, and employment-related expenses;
  • to manage professional development, performance, and conduct;
  • to protect the company against illegal activity and other misconduct; and
  • to fulfill other operational, business, and legal purposes.

Disclosure of Information

We may disclose information about you as required or permitted by applicable law, including:

  • with regulatory authorities, courts, and governmental agencies to comply with legal orders, legal or regulatory requirements, and government requests;
  • with our Service Providers, law enforcement and governmental agencies to detect and prevent fraud or criminal activity, and to protect the rights of American Express or others;
  • within the American Express Family of Companies; and
  • with our Service Providers who perform services for us and help us operate our business, including our recruitment processes.

Cross-Border Transfers of Personal Information

 

We may transfer your information to companies within the American Express Family of Companies or to our Service Providers throughout the world, for example, to search for suitable positions or to process your application. Regardless of where we process your information, we still protect it in the manner described in the Data Protection and Privacy Principles, this Statement and in accordance with applicable laws.

 

Security and Retention

We use administrative, technical and physical security measures to protect Personal Information. These measures include technological safeguards and appropriate access controls to files and facilities. We take reasonable steps to securely destroy or anonymize Personal Information when we no longer need it. We keep Personal Information for only so long as necessary for the recruitment process, employment, and for the purposes described in this Statement. The criteria that impact retention include the duration of our relationship with you and any business requirements to retain your Personal Information in light of legal and compliance obligations and for litigation or regulatory investigations.

 

Your Rights

You have the right to withdraw your request to receive job notifications or to be considered for job applications at any time. If you decide to withdraw your job application, we will not further process your application for the job. You also have the right to ask us to rectify incorrect Personal Information we may have about you.

 

Contacting Us

If you are an applicant and would like to update your Personal Information, please contact us at RecruitmentOperationsServicing@aexp.com

If you have questions or wish to make a complaint, please contact globalcolleagueprivacy@aexp.com

 

Additional Disclosures for California Residents

California ("CA") residents may receive additional protections for Personal Information under the California Consumer Privacy Act ("CCPA"). Please refer to the “Information We Collect” section above for more information about the categories of Personal Information, including the categories of sensitive Personal Information (as defined by the CCPA), that we may have collected about you in the preceding 12 months. Additionally, please refer to the “Use of Information” and “Security and Retention” sections above for more detailed information regarding our use of Personal Information, the sources of Personal Information, and the length of time we retain Personal Information.


We do not use or disclose sensitive Personal Information for purposes that require us to provide you with the right to limit the use or disclosure of your sensitive Personal Information. Sensitive Personal Information includes, but is not limited to, your Social Security Number, driver’s license, state identification card or passport number, your racial or ethnic origin, and your biometric information.


We do not sell your Personal Information. Additionally, we do not share Personal Information with third parties in order to serve you advertisements that are relevant to you, based on your interests inferred from your activity across other sites (“cross-context behavioral advertising”). Similarly, we do not sell or share the Personal Information of individuals under the age of 16. However, we may have disclosed the categories of Personal Information described above with third parties during the preceding 12 months for the purposes described in the “Disclosure of Information” section.


Additional Rights for CA Residents


As a California resident, you may have certain rights over the Personal Information we have about you. You may have the right to request:

We will not discriminate against you in the event you choose to exercise any of these rights. These rights are subject to limitations, such as when we are retaining Personal Information to comply with our own legal obligations.


CA residents may exercise these rights by visiting our Privacy Center or by calling us at 1(855) 783-4772. We may need to validate certain information about you to verify your identity before we can fulfill your request. If you are making a request on behalf of another person, we may require you to provide proof that you have been designated as their authorized agent.

 

 

Changes to This Statement

We may change this Statement from time to time. When we make changes, we will update the “Effective Date” at the top of this page. Any changes to this Statement will become effective when posted.

 

Glossary

 

Aggregated Information-- information relating to multiple people which has been combined or aggregated such that individuals cannot be re-identified. Aggregated Information includes information that we create or compile from various sources, including certain information from Cookies and Similar Technologies.

 

American Express (we, our, us)-- the American Express Company as identified at the beginning of this Statement.

 

American Express Family of Companies-- any affiliate and subsidiary of, and any company owned or controlled by, the American Express Company.

 

Cookies and Similar Technologies -- a Cookie is a small data file that a website transfers to your computer. Similar Technologies include clear GIFs, web beacons, and pixel tags, which are typically transparent images on websites.

 

Anonymized Information--information used in a way that does not identify you to a third party. We often derive Anonymized Information from Personal Information. It includes information that we may collect from Cookies and Similar Technologies.

 

IP Address-- a number assigned to a device when connecting to the Internet.

 

Personal Information-- information that relates to an identified or identifiable natural person, such as name, address, telephone number, email address, previous employment history and other information associated with that individual such as demographic details.

 

Service Providers -- any vendor, third party and/or company that performs business operations on our behalf, such as recruitment, printing, mailing, and other communications services (email, direct mail, etc.), data processing, and outsourced technology, auditors, consultants and professional advisors.