Disclosures | Card Member Privacy Statement

AMERICAN EXPRESS AUSTRALIA LIMITED CARD MEMBER PRIVACY STATEMENT

Effective October 2019

About American Express

American Express Australia Limited holds an Australian Credit Licence number 291313.

You can contact American Express in the following ways:

Mail: American Express Australia Limited

GPO Box 1582

SYDNEY NSW 2001

Telephone: 1300 132 639 (in Australia) or +61 2 9271 8664 (if overseas)

This Card Member Privacy Statement describes how American Express collects, uses, shares and keeps your credit information and personal information in accordance with the Privacy Act and the Australian Privacy Principles. If you do not agree to our use of your credit information and personal information in this way, we may be unable to provide our products and services to you.

In addition to this Card Member Privacy Statement, we also have more specific information available regarding how we handle your:

Online Information. Please see our Online Privacy Statement, which describes how we handle information we collect about you from your use or access of American Express websites, online applications and any of our online services or content. Our Online Privacy Statement is available at: americanexpress.com.au/privacy
Credit Reporting Information. Please see our Credit Reporting Policy for further detail about when, how and why we access Credit Reports about you, which credit reporting bodies American Express is likely to disclose your credit information, and how you may complain about a failure by American Express to comply with the Privacy Act and how American Express will deal with a complaint. Our Credit Reporting Policy is available at: www.americanexpress.com.au/creditinfo

Collection use and sharing of credit information by American Express

American Express may obtain both consumer and commercial credit reports about you from a credit reporting body. We will use this information along with other information we hold about you (including Online Information) for purposes including:

assessing your credit worthiness • assessing this application
collecting overdue payments
American Express’ internal management purposes relating to the provision or management of consumer credit or commercial credit as relevant
helping you to avoid defaulting on your obligations with American Express
to determine if you’re ineligible for certain marketing offers from us
for any other use in connection with your account as permitted under the Privacy Act 1988

American Express may disclose information about you to credit reporting bodies before, during or after credit is provided to you. This includes:

that you have applied for a Card, including the account credit limit
that American Express is a credit provider to you, including the type of credit, account opening and closing dates, and credit limit
24 months of repayment history on your Card account
default information related to payments that are at least 60 days overdue (and advice that overdue payments have been paid in full)
that you have committed a serious credit infringement
that you have made a request to correct your personal information
any other information as permitted under the Privacy Act 1988

American Express may exchange information about you with credit providers named in your application or in a credit report issued by a credit reporting body. Among other things, this is to:

assess your credit worthiness, this application and any subsequent application for credit
notify other credit providers of a default by you
exchange information about your account when you are in default with other credit providers
complete any approval process for any transactions you wish to make on your account
administer your Card account
notify that you have made a request to correct your account

American Express may also exchange credit information about you with any person considering whether to act as a guarantor in relation to this and future applications by you for credit.

For more information about how we use credit information, see our Credit Reporting Policy at www.americanexpress.com.au/creditinfo .

Collection of personal information

Generally, if you are applying for a Card account we collect your personal details (such as name, date of birth and address), details about your employment, financial circumstances and other information relevant to your Card account.

American Express collects information about you in a number of ways, including:

directly from you, such as in your credit application or when you enter one of our competitions or promotions
from your use of our products and services, such as when you make a purchase using your Card account
from your use of or access to American Express websites, mobile applications any of our other online services or products (such as your IP Address and location, device type and browser version) (‘Online Information’) – For more information about how we collect and use Online Information see our Online Privacy Statement at www.americanexpress.com.au/privacy.
from credit reporting bodies, as described above for credit information or for identity verification
from people or companies named in your credit application (for example your employer)
from other information providers and sources that we may contact to verify your identity and financial information (such as, data aggregators, companies that process or administer your superannuation contributions, payroll providers, financial institutions and government bodies and agencies).

Using personal information

We may use the information we collect about you (including Online Information) on its own or combine it with other information to:

deliver products and services, including:

- for the same purposes as for credit information listed above

- issuing your Card

- verify your identify when you contact us

- manage your Card account and your transactions

- tell you about new features, benefits and updates to your accounts, products, and services

advertise and market our products and services – and those of our business partners – including to:

- send or provide you with marketing, promotions and offers

- analyse whether our marketing, promotions and offers are effective

- help us determine whether you may be interested in new products or services

conduct research and analysis, including to:

- better understand our customers - allow you to rate and review our products and services

- produce data analytics, statistical research, and reports

- review and improve our products and services and make them easier to use

- develop new products and services

manage fraud, security and credit risks, including to:

- detect and prevent fraud or criminal activity

- safeguard the security of your information

- assess your credit worthiness, and make decisions about whether or not to approve your application for credit

- to manage your existing accounts and credit limits

verify your identify and your financial details, including to:

- verify your income;

- verify your identity and your identification documents.

use it in other ways as required or permitted by law or with your consent

When we might share your Personal Information

We do not share Personal Information with anyone except as described below. We only share Personal Information as required or as permitted by law as follows:

people you authorise to use or access your account (for example, additional Card Members)
with credit reporting bodies, for the same purposes as for credit information listed above
the provider of any payment service you use to make payments to American Express
with regulatory authorities, courts, and governmental agencies to check your identity, comply with legal orders, legal or regulatory requirements, and government requests and to detect and prevent fraud or criminal activity, and to protect the rights of American Express or others
within the American Express Family of Companies
with government agencies (such as official record holders or document issuers) to verify your identity;
with other information providers and sources (such as, data aggregators, companies that process or administer your superannuation contributions, payroll providers and financial institutions) that we may contact to verify your identity and financial information.
with Service Providers who perform services for us and help us operate our business (for example, card manufacturers, collection agents, mail houses and reward redemption partners). We require Service Providers to safeguard Personal Information and only use your Personal Information for the purposes we specify
share and exchange information with business partners and co-brand partners with whom we jointly offer or develop products and services for marketing, planning, product development and research purposes (but they may not use your Personal Information - in particular your email address - to independently market their own products or services to you unless you provide your consent)
with third parties in the context of a sale of all or part of the American Express Family of Companies or their assets
any other purpose you have consented to

Aggregated and De-identified Information

Aggregated or de-identified Information is not personal information and does not identify you individually; however, it may be derived from personal information. It helps us to analyse patterns among groups of people. We may share aggregated or de-identified Information in several ways, for example:

for the same reasons as we might share Personal Information
with any Business Partners to help develop and market programs, products or services and present targeted content and marketing
with Business Partners to conduct analysis and research about customers

Recording Phone Calls

American Express may also monitor and record your telephone conversations with us for staff training and service quality control purposes.

Direct Marketing

From time to time, American Express, its agents and business partners (including insurance companies) will send you and any additional Card Members information about products, services, offers and other promotions on offer from American Express or jointly with its business partner. These communications may be sent electronically (for example by email, mobile message or push notification), by phone or by post. You can opt-out from receiving direct marketing at any time by calling 1300 132 639. You can also adjust your communication preferences using our Online Preferences or opt-out of email marketing by clicking ‘unsubscribe’ in the footer of our emails. This will continue until you opt-out or until twelve months after you cease being an American Express Card member.

Transfer of your personal information and credit information overseas

American Express is a global organisation and we may use international entities to help our business functions. As a result, American Express may need to share your information outside of Australia. It is impracticable for American Express to list out each and every country that we may share your information to, but such countries include the United States of America, Malaysia, India and the United Kingdom. American Express will ensure that any transfer of your personal information is subject to appropriate conditions of confidentiality to ensure your information is handled consistently with the Australian Privacy Principles.

How we store your personal information

American Express stores personal information in a combination of secure computer storage facilities and paper-based files and other records. American Express has taken a number of steps to protect the personal information we hold from misuse, loss and unauthorised access, modification or disclosure. American Express uses generally accepted technology and security so that we are satisfied that your information is transmitted safely to us through the internet or other electronic means. American Express will take reasonable steps to securely destroy or permanently de-identify personal information when we no longer need it.

Information about other persons

If you provide personal information about someone else to American Express, you must make sure that the individual has seen, understood and agreed to:

their personal information being collected, used and disclosed by American Express in accordance with this notice
their ability to access that information in accordance with the Privacy Act 1988 and to advise American Express if they think the information is inaccurate, incomplete or out-of-date
the contact details of the American Express Privacy Officer

Complaints, Access and Corrections

We endeavour to provide you reasonable access to the personal information we hold about you where it is legal, reasonable and feasible for us to do so. There is no fee to request access to your personal information, however we may charge a fee to collate and provide your personal information with your consent.

If you think any of the information we hold about you is inaccurate, incomplete or out-of-date, you can ask us to update it or correct it.

To request access to your personal information, request a correction or make a complaint, please call us on 1300 132 639 or write to:

The Privacy Officer

American Express Australia Limited

GPO Box 1582

SYDNEY NSW 2001

In the event we refuse to give you access to your personal information, or do not consider that your information needs correcting we will provide you a written explanation of our decision and your options of review. You may ask us to include a statement alongside your personal information which says that you think your personal information is inaccurate, incomplete, misleading or out of date.

Where you make a complaint we will confirm in writing that it has been received by us within seven days. We endeavour to resolve your complaint within 30 days and where we are unable to we will contact you to explain why and request more time.

Where you are unsatisfied with the way we have handled your complaint you may escalate your complaint to the Australian Financial Complaints Authority (AFCA) who facilitates a free dispute resolution service. AFCA will generally ask if you have tried to resolve the issue with us first. You may contact AFCA on 1800 931 678, through www.afca.org.au or at GPO Box 3, Melbourne, VIC, 3001.