This Code should be read in conjunction with our Online Privacy Statement which is part of the Code and addresses how Amex Canada collects, uses and safeguards the personal information you provide to us online. The Online Privacy Statement describes and provides illustrative descriptions and examples to help you understand how we collect, use, disclose and safeguard information online including through websites, mobile applications and other online communications and content.
This Code and our Online Privacy Statement are available on our website. We may update this Code and the Online Privacy Statement and the most recent version will be available at www.americanexpress.ca/privacy.
In this Code “personal information” means any information which relates to an individual and allows that individual to be identified (“Information”).
1. We collect only customer Information that is needed and we tell customers how we use it.
We limit the collection, use, retention, and disclosure of Information about individuals who are customers to what we need to know:
We tell our customers about the purposes for which we collect, disclose, use and process Information we collect. We also provide our customers with illustrative descriptions and examples to help them understand the nature of this Information and how it relates to the purposes. For example, the Online Privacy Statement describes and provides illustrative descriptions and examples to help you understand how we collect, use, disclose and safeguard information online including through websites, mobile applications and other online communications and content. If requested by the customer, we will provide further explanation.
Nature of Information Collected
The Information we collect will vary by product and can change over time. Here are some examples of the type of Information we collect and how they relate to certain purposes.
The Information we collect from time to time may include:
We collect Information from various sources including from you directly through applications, correspondence or other communications, through the products and services you use online and offline, from others with your consent such as credit reporting agencies and other lenders, third party databases (including registries, licensing authorities, identification services, telecom providers), references provided by you or other permitted sources.
We will review and analyze Information in various ways. For example, we monitor transactions using proprietary techniques to help identify transactions that may be of risk from a credit, fraud or money laundering and terrorist financing perspective.
This involves our understanding you and your ordinary use of our products and services in order to identify unusual activity. It also includes assessing Information in relation to information from other sources including our own records to detect suspicious patterns or connections.
We are required by law to determine whether we have customers who are politically exposed persons and comply with certain legal requirements. We use Information, publicly available information and commercial database(s) to determine whether a customer is politically exposed. More information is available at the website fintrac.gc.ca.
When, with your consent, we promote and market to you products and services offered by us or from other well-established companies (“promotions”), each promotion is carefully developed to ensure that it meets our standards. We try to make sure these promotions reach only those customers most likely to take advantage of them. To do this, we develop lists for use by us based on Information you have provided us on your applications, in surveys and other communications, Information derived from how you use our products that may indicate purchasing preferences and lifestyle, as well as Information available from external sources including consumer reports. We may also use that Information, along with noncredit information from external sources, to develop lists that are used by us. The lists used to send you promotions are developed under strict conditions designed to safeguard the privacy of customer Information.
2. We give customers choices about how their Information will be used.
We give customers the choice of not receiving promotions and marketing offers. These include product and service offers from American Express businesses and those made by other well established companies. This will not limit information we may provide you when you contact us. In addition, we will continue to provide information to our customers in keeping with the nature of their relationship with us.
If you do not wish to receive promotions and marketing offers, please call us at 1-800-869-3016 or you can manage your marketing preferences through Online Services (if enrolled) at www.americanexpress.com/canada/prefEN. You can choose to be excluded from all promotions or from certain promotions based on the partial exclusions that we may make available. Your request will be processed promptly but may not be captured for promotions already in progress.
Subject to legal and contractual restrictions, you can withdraw your consent to our use of your Information at any time with reasonable notice. For example, as described above you may choose not to receive marketing offers or other promotional materials. If you refuse or withdraw your consent for any purpose that is required by us to fulfill our product or service contract with you, we will not be able to provide you, or continue to provide you, with the product or service. In some cases, certain consents are mandatory and cannot be withdrawn. For example, once you have a card or other credit product from us, you may not withdraw your consent relating to ongoing collection and disclosure of credit information. This is necessary to support and maintain the integrity of the credit granting process. Similarly, you cannot withdraw your consent on matters that are essential to the management of our businesses, including the disclosure of Information when we assign our rights to others such as for the sale or collection of debts.
3. We ensure Information quality.
We use advanced technology, documented procedures, and internal monitoring practices to help ensure that customer Information is processed promptly, accurately and completely. In addition, we prescribe standards of quality from the consumer reporting agencies and others who provide us with Information about prospective customers.
4. We give customers rights to access and correct their Information.
Customers have access to Information that is reasonably available and retrievable in the ordinary course of business. Upon written specific request, we will disclose to customers Information about them that is entered in our records, and customers may correct Information that is inaccurate or incomplete. We will respond to a customer’s request, and advise the customer in advance of any charges for copies. Some information may not be accessed if it refers to others, is subject to legal privilege, contains confidential information, cannot be retrieved using a customer’s name or account number, cannot be disclosed for legal reasons, or as otherwise permitted by law.
It should be noted that we do not record in customers’ individual files when Information was disclosed to third parties for routine purposes such as cheque printing, data processing, storage and regular updating of credit information to credit bureaus.
If we are informed and it is determined that a customer’s Information in our files is inaccurate, we will correct it.
Customers may access their Information by writing to: Compliance Department, Protection of Personal Information at our head office at PO Box 3204 STN F, Toronto, ON M1W 3W7. We will respond to a written request from you within 30 days of its receipt. If for any reason we do not grant you access, we will provide you with written reasons.
With your consent, in dealing with you we may obtain and consult credit reports on you prepared by credit reporting agencies. You have rights of access and correction in relation to the files held on you by these agencies by contacting them. Please write us at the above address Attention: Compliance Department, Protection of Personal Information if you wish to obtain the name and address of the agency or agencies from whom we have obtained a credit report about you.
5. We use prudent Information security safeguards.
We limit access to customer Information to those who need the Information to conduct their business responsibilities, to meet our customer servicing commitments, for the purposes set out in this Code or as otherwise disclosed to customers. We employ safeguards designed to protect the confidentiality and security of our customer Information.
6. We limit the disclosure of customer Information.
We will not disclose customer Information to entities other than the Amex Canada entity that collected the Information and its affiliates, and their agents and service providers, unless we have previously informed the customer, have been authorized by the customer, or are permitted or required to do so by law or other regulatory authority.
We are part of a global payment and travel network with affiliates, service providers and agents located both within and outside of Canada. As a result, customer Information may be processed and stored in other countries including the United States. While we use contractual and other measures to ensure protection of customer Information, governments, courts, law enforcement or regulatory agencies in these other countries may be able to obtain disclosure of customer Information through the laws of these countries.
We may disclose customer Information in order to manage our businesses including when we assign our rights to others. This encompasses disclosing on a confidential basis customer Information to parties that may be participating in a proposed or an actual business transaction with us including financings, securitizations, insurance, or the assignment of our rights such as for the sale or collection of debts.
7. We are responsive to customers’ requests for explanations.
If we deny an application for our services or end a customer’s relationship with us, if requested and to the extent permitted by applicable laws, we provide an explanation. We state the reasons for the action taken and the Information upon which the decision was based, unless the issue involves potential criminal activity.
8. We hold ourselves responsible for our Privacy Code.
Each Amex Canada employee is personally responsible for maintaining customer confidence in the company. We provide training and communications programs designed to educate employees about the meaning and requirements of this Code.
We conduct a combination of compliance self-assessments, internal audits, and may commission outside-expert reviews of our compliance with the Code and the specific policies and practices that support the Code.
Employees who violate the Code or other company policies and practices are subject to disciplinary action, up to and including dismissal. Employees are expected to report violations – and may do so confidentially – to their managers, to their business unit’s compliance officer, or by contacting the reporting hotline.
9. We extend the protection under this Privacy Code to our business relationships.
We require companies we select as our business partners to agree to keep our customer Information confidential and secure, to protect the Information against unauthorized access, use, or disclosure by the recipient company, and limit its use to the purposes for which it was disclosed. We also encourage our business partners to respect their customers’ Information by adopting strong and effective privacy policies and practices.
In addition, we participate actively in industry associations to advocate development of comprehensive privacy policies and implementation strategies.
10. Our customers’ privacy concerns are important to us.
Our Chief Privacy Officer is responsible for ensuring that our day-to-day procedures comply with our Privacy Code.
Questions and Concerns:
If a customer has any questions or concerns, the customer can take the following actions:
About American Express in Canada
American Express in Canada operates as Amex Bank of Canada and Amex Canada Inc. Both companies are wholly owned subsidiaries of the New-York based American Express Travel Related Services Company, Inc., the largest operating unit of American Express Company.
Amex Bank of Canada issues American Express Cards in Canada, provides American Express merchant services in Canada and provides other financial services.
Amex Canada Inc. is a provider of business travel related services in Canada and assists companies in managing and controlling their business and travel expenses.
American Express Travel Services locations in Canada are independently owned and operated.
Our address is 2225 Sheppard Avenue East, Suite 100, Toronto, ON M2J 5C2. However, you can contact us by writing to the address provided at the bottom of this page or by calling the number on the back of your card or listed here.