Privacy Disclosures
At American Express, we value your trust and respect your privacy.
Explore our Privacy Disclosures to learn more about our privacy policies, principles, and notices.
Effective Date: October 21, 2024
At American Express, we are committed to safeguarding your privacy. We want you to know how we may collect, use, share, and keep information about you and the choices that are available to you.
When we provide American Express products or services to you, we may also give you specific additional details about how we will use your Personal Information. If you have an American Express product or service that is not provided by American Express (such as a card issued by one of our partner banks), please review the relevant privacy notice that covers such product or service or contact your product or service provider for information about their privacy practices.
This online privacy statement applies to American Express websites, online applications ("apps") that run on smart phones, tablets, and other devices that link to this statement. It does not apply to those websites that have their own online privacy statements including the American Express Network website, amexnetwork.com.
Our websites and apps are not intended for children under 13 years of age. We do not knowingly solicit data online from, or market online to, children under 13 years of age.
Since we may change this online privacy statement, we recommend that you check the current version available from time to time. If we make changes to this statement, we will update the “Effective Date” at the top of this page.
- Visit or use our website or apps;
- Receive or reply to electronic communications from us;
- View or click on our ads or other online content; and
- Interact with us through social media websites and other websites and applications.
Some Online Information is Personal Information.
In this statement, we also explain how we may combine Online Information with Other Information and how we then use the combined information.
The types of information we collect depends on which product or service you use.
Sometimes you give information directly to us (or to our Service Providers). For example, you might give us your name, account number, email, mailing address, biometric data, phone number, or date of birth when you:
- fill out an online form or survey, including when you book travel with us;
- register, log into or update the settings on your account using our online services;
- enter a competition or register for a marketing offer; or
- sign up for our products and services.
We (and our Service Providers or Advertising Partners ) also collect information including Personal Iinformation through Cookies and Similar Technologies for purposes such as keeping our site secure, remembering website preferences, enhancing site functionality, analyzing site traffic, and customizing advertising. For example, if you click Remember Me when you log in to our website, a cookie will store your username.
We (and our Service Providers or Advertising Partners) may collect information using Cookies and Similar Technologies about:
- the device, operating system, and browser version you use, such as when you are to browsing our websites, accessing our apps, or opening electronic communications from us;
- the IP address and information related to that IP address (such as domain information, your internet provider and general geographic location);
- browsing history on our website or in our apps (such as what you search for, the pages you view, how long you stay, and how often you come back);
- how you search for our website, from which websites you arrive, and which of our Business Partners’ websites you visit;
- which ads or online content from us and our Business Partners you view, access, or click on;
- your browsing and app use activities over time, and across websites and apps, (Service Providers or Advertising Partners perform such activities on our behalf);
- the likely associations among different browsers and devices; such as whether two devices are associated with the same individual;
- whether you open our electronic communications and which parts you click on;
- and the location of your mobile device (for example, when you use mobile websites or apps to register to receive location-based content).
- We (and our Service Providers or Advertising Partners) may also collect information made available through third-party platforms and apps (such as online social media platforms), through online databases or directories, or that is otherwise legitimately obtained. This information may be governed by the privacy notice(s) provided by the third party at the time of collection.
See the “What are your choices?” section below to learn more about your choices regarding the collection and use of your information, including through Cookies and Similar Technologies.
- deliver products and services, including to:
- recognize you when you return to our websites or use our apps across multiple devices;
- complete transactions;
- tell you about updates to your accounts, products, and services;
- update you about new features and benefits;
- answer questions and respond to your requests made through our websites and through third-party websites (including social media);
- use the location of your mobile device for location-based services that you may request;
- determine how to best provide services to you and manage your accounts, such as the best way and time to contact you;
- improve our websites or apps and make them easier to use;
- advertise and market our products and services – and those of our Business Partners – including to:
- present content or ads online that are tailored to your interests, including Targeted Advertising, across multiple devices; send or provide you with ads, promotions, and offers;
- analyze whether our ads, promotions, and offers are effective;
- help us determine whether you may be interested in new products or services;
- provide location-based content and advertising personalization;
- conduct research and analysis, including to:
- better understand our customers and our website visitors or app users;
- allow you to give feedback by rating and reviewing our products and services and those of our Business Partners;
- produce data analytics, statistical research, and reports;
- review and change our products and services; manage fraud and security risk, including to:
- detect and prevent fraud or criminal activity;
- safeguard the security of your information;
- assess credit risks relating to our business, including to:
- evaluate and process your applications for our products and services and manage your existing accounts; and
- use it in other ways as required or permitted by law or with your consent.
American Express has relationships with several third-party advertising networks and social media partners (also known as Advertising Partners) that allow us to serve you with Targeted Advertising that is relevant to you when you are on a third-party website. To opt out of certain disclosures of your Personal Information to Advertising Partners for Targeted Advertising purposes, please click the “Do Not Sell or Share My Personal Information” link at the footer of this site.
Many Advertising Partners provide their own advertising-related opt-outs to consumers. We encourage you to learn more about Targeted Advertising and the choices you have by referring to the respective privacy statements of relevant Advertising Partners.
How do we treat your Personal Information?
We may share Personal Information as required or as permitted by law, with:
- credit bureaus and similar institutions to report or ask about your financial circumstances, and to report or collect debts you owe;
- regulatory authorities, courts, and governmental agencies to comply with legal orders, legal or regulatory requirements, and government requests pursuant to valid legal process;
- our Service Providers, regulatory authorities, and governmental agencies to detect and prevent fraud or criminal activity, and to protect the rights of American Express or others;
- the American Express Family of Companies;
- our Service Providers who perform services for us and help us operate our business (we require Service Providers to safeguard Personal Information and only use your Personal Information for the purposes we specify);
- Our Advertising Partners, such as through Cookies and Similar Technologies, for purposes of serving you Targeted Advertising. To opt out of certain disclosures of your Personal Information to Advertising Partners for Targeted Advertising purposes, please click the “Do Not Sell or Share My Personal Information” link at the footer of this site.
- financial institutions or Co-brand Partners with whom we jointly offer or develop products and services, in connection with those joint offering; or
- necessary parties in the context of a sale of all or part of the American Express Family of Companies or their assets.
We may also share Personal Information with other third parties for their own use with your consent, or, if applicable, as otherwise described in the Business Card Privacy Notice.
We may transfer Personal Information to Service Providers or companies within the American Express Family of Companies throughout the world, for example, to process transactions and provide you with our products or services. Regardless of where we process your information, we still protect it in the manner described in this online privacy statement and according to the applicable laws.
How do we handle Aggregated and De-identified Information?
De-identified Information is information that cannot be reasonably linked to or associated with you. Aggregated Information is data or information relating to multiple people, which has been combined or aggregated and which likewise does not identify you individually; We may share Aggregated Information or De-identified Information in several ways, for example:
- for the same reasons as we might share Personal Information
- with Business Partners to help develop and market products or services or
- with Business Partners to conduct analysis and research about customers and website visitors;
We use administrative technical and physical security measures to protect your Personal Information. These measures include computer safeguards and secured files and facilities. We take reasonable steps to securely destroy or permanently de-identify Personal Information when we no longer need it. We will keep your Online Information only as long as we must to deliver our products and services, unless we are required by law or regulation or for litigation and regulatory investigations to keep it.
You have choices about how American Express uses and discloses your information, such as how we market to you or how we use Cookies and Similar Technologies.
To opt out of certain disclosures of your Personal Information for Targeted Advertising purposes, please click the “Do Not Sell or Share My Personal Information” link at the footer of this site.
We also participate in the Digital Advertising Alliance (DAA) self-regulatory program and adhere to the DAA principles for Online Behavioural Advertising. Click here to learn more about the DAA and your choices related to Targeted Advertising. If you do not want to receive Targeted Advertising from American Express on websites, Click here. If you do not want to receive Targeted Advertising from American Express in apps, you can turn off mobile device ad tracking or reset the advertising identifier in your device setting, where these tools are available from your device platform, on each of the devices that you use. If you do not want to receive Targeted Advertising using precise location data, you can turn off location-based services in your device settings.
What are your choices about how we directly market to you?
You can choose how you would like to receive direct marketing communications - whether we send them to you through postal mail, email and/or telephone. If you choose to not receive marketing communications from us, we will honor your choice. Please be aware that if you choose not to receive such communications, certain offers attached to the product or services you have chosen may be affected. We will still communicate with you in connection with servicing your account, fulfilling your requests, or administering any promotion or any program in which you have elected to participate.
Card Members:
- Log in to americanexpress.com/communications to update your privacy preferences; or
- Call 1-855-AXP-PRIV and select option 1 (does not apply for e-mail opt-out).
Prepaid Products:
- Log in to the website associated with your prepaid product, and edit your profile to update your privacy preferences; or
- Call 1-855-AXP-PRIV for prepaid products including Bluebird, select option 2; or for Serve, select option 5 then option 3
Merchants:
- Log in to americanexpress.com/merchant and edit profile and setting to update your marketing communications preferences; or
- Call 1-855-AXP-PRIV for Merchants, select option 5, then option 4
Others:
- Call 1-855-AXP-PRIV for Personal Savings, select option 3; or
- for Premium Return Protection, select option 4; or for Single Identity, select option 5 then option 1; or
- for American Express Travel Insurance, select option 5 then option 2.
What other choices do you have?
You can also:
- Click to unsubscribe on the bottom of e-mails and follow the instructions or go to americanexpress.com/preferences;
- Register for the National Do Not Call List at donotcall.gov/default.aspx
- Register with the Association of National Advertisers (ANA) mail suppression service: dmachoice.org/register.php. If you have questions about our online privacy statement, call us at the number on the back of your Card or call us at the number for your product at contact us.
Other Information
How can you update your Personal Information
Card Members can log in to their Card accounts at americanexpress.com to correct or update their Personal Information. They can also call the number on the back of their Card. Non Card Members can call the customer service number associated with their product.
Advertising Partners - social media and online partners, such as Facebook and Google that provide technology to place ads on websites and apps and track how ads perform.
Aggregated Information - data or information relating to multiple people which has been combined or aggregated and which does not identify you individually. Aggregated Information includes information that we create or compile from various sources, including card transactions.
American Express (we, our, us) - the American Express Company as identified at the beginning of this online privacy statement.
American Express Family of Companies - any affiliate and subsidiary of, and any company owned or controlled by, the American Express Company.
Business Partners- any third parties with whom we conduct business and have a contractual relationship, such as a business that accepts American Express branded cards.
Co-brand Partners - businesses we partner with to offer cards featuring both brand logos.
Cookies and Similar Technologies - we and our Service Providers and Advertising Partners may use cookies, pixels, web beacons, Software Development Kits (“SDKs”), gifs, tags, Device ID technology and other similar technologies (collectively, “Cookies and Similar Technologies”) on our websites and apps, including to help keep our site secure, analyze site traffic, and customize advertising. Cookies, for example, are small data files that a website transfers to your computer's hard drive, while SDKs are snippets of code embedded in websites or apps, both of which collect information about your activity. We and our Service Providers and Advertising Partners may place Cookies and Similar Technologies when you visit our website or websites where our ads appear or when you make purchases, request information, or register for certain services. If you accept the cookies used on our website, websites that are “powered by” another company on our behalf, or websites where our ads appear, you may give us access to information about your interests. We may use that information to personalize your experience.
De-identified Information - data or information which cannot be reasonably linked to or associated with you. We often derive De-identified Information from Personal Information. It includes information that we may collect from various sources, such as card transactions.
IP Address - a number assigned to a device when connecting to the Internet.
Online Information- data or information collected on the American Express websites and apps as well as on websites and apps of third parties relating to topics about our business.
Other Information- American Express internal information (for example, Card transaction data), external data that financial companies use to process applications and complete transactions, and other online and offline information we collect from or about you, including information from your wireless carrier about your wireless account and device, if available, to help them identify you or your wireless device and to prevent fraud.
Personal Information- information that can identify a person, such as name, address, telephone number, and email address.
Service Providers- any vendor, third party and/or company that performs business operations on our behalf, such as printing, mailing, and other communications services (email, direct mail, etc.), marketing, data processing, servicing, collections, or ad management.
Targeted Advertising- Ads that we, our Service Providers, or our Advertising Partners display on websites or in apps outside the American Express Family of Companies based on the preferences or interests inferred from data collected from a computer or device regarding viewing behaviors or app use over time and across different websites or apps. Targeted Advertising may occur across browsers or mobile devices that have been associated together.
You may enforce these Principles in your country against any company in the American Express Group that is responsible for your personal data, as a third party contractual beneficiary to these Principles. If you have a complaint that we have breached these Principles and have attempted in good faith to resolve the complaint through our customer service process, but the complaint was not resolved by us within a reasonable amount of time, then you may enforce these Principles against us. If you complain to your local data protection authority and the data protection authority finds that we have breached these Principles, we will abide by the findings of the data protection authority, but we reserve the right to challenge or appeal such findings. These Principles do not affect any rights you have under applicable law, the requirements of any applicable regulatory data protection authority, or any other type of agreement that you may have with us.
These Principles emphasize our commitment to protect your personal data. They are binding on all companies in the American Express Group, demonstrating our commitment to privacy. In addition, each company in the American Express Group that holds personal data may maintain its own additional rules and practices for particular products or services, consistent with these Principles. If you have questions or comments about these Principles, please contact us at American Express.