Common use of Privacy Statement Clause in Contracts

Privacy Statement. What is this document? This privacy statement describes how American Express collects, uses and shares information about you. If you interact with us online, there is a separate Online Privacy Statement available at xxxxxxxxxxxxxxx.xx.xx that describes how we collect and use information about you in that context, including where information provided online is combined with personal information which is collected as described in this privacy statement. We therefore ask that you also take time to consider the Online Privacy Statement. Information Collected We will collect information about you (Personal Information) from: • your Card Account (Account) application form and other forms you provide to us; • checks at credit reference agencies and fraud prevention agencies including personal and business records (if relevant); • you, in order to manage your Account and through the way you use your Account and our other services including transactions made using your Account with merchants or ATM operators; • surveys and statistical research; • third parties, such as in marketing lists which we lawfully obtain. We may also obtain Personal Information from the parties listed in the 'Information Disclosed' section below. Information Disclosed We may disclose Personal Information (which may include details of goods and/or services you purchase) to: • companies within the worldwide American Express group of companies including our joint ventures and joint ventures of our group, both current and in the future, as we develop new business either on our own or with others (our Group), third parties who process transactions submitted by merchants on the American Express network where you use your Card (worldwide); • parties who distribute the card; • any other co-branded partner set out in the agreement governing use of your Account; • any party approved by you, including any loyalty partners that you connect to your Membership Rewards account and, dependant on your card product, any partners available in your card benefits programme with whom you choose to enrol; • our processors and suppliers; • the providers of services and benefits associated with your Account; • collection agencies and lawyers for the purpose of collecting debts on your Account. • parties who accept the card in payment for goods and/or services purchased by you; and • anyone to whom we may transfer our contractual rights. Use of Information We may use Personal Information, including aggregated or combined with other information for any of the following purposes: Delivering our products and services to you This will include: • processing applications for our products including making decisions about whether to approve your application; • helping us better understand your financial circumstances and behaviour so that we may make decisions about how we manage your Account, such as whether to approve transactions, including transactions that you make using digital card wallet technologies on mobile devices; • administering and managing your Account including to process transactions you make on your Account; • communicating with you, including by e-mail, SMS or any other electronic method about any American Express accounts, products, and services which you hold (including for the purpose of servicing and by way of Account alerts); • giving you important information about updated and new features and benefits; • answering questions and responding to your requests; and • administering, servicing and managing any benefits or insurance programmes provided alongside your card; We may use Personal Information to prepare reports for third party business partners about Account usage. Reports only contain aggregated and anonymised data and we will not disclose any information which identifies you. Improving our products and services and to conduct research and analysis This will include: • learning about you and other customers, including your needs, preferences and behaviours; • analysing the effectiveness of our ads, promotions and offers; and • conducting testing (when we update our systems), data processing, website administration and information technology systems support and development • conducting market research including to give you the opportunity to provide feedback, ratings or reviews of our products and services, and those of our third party business partners, including through transaction experience surveys; and • producing data analytics, statistical research and reports including on an aggregated basis Advertising and marketing our products and services, and those of our third party business partners This will include any of the following (with your consent, where necessary): • sending you promotions and offers by email, SMS, any other electronic method, direct mail and through telemarketing in accordance with your marketing preferences; • personalising our communications and offers for you; and • determining whether you would be interested in new products or services. We do not provide your contact details to our third party business partners without your express consent. However, we may send you offers on their behalf. Keep in mind that, if you take advantage of an offer from a business partner and become their customer, they may independently send communications to you. In this case, you will need to inform them separately if you wish to decline receiving future communications from them. Managing risks relating to our business, including credit risk, fraud risk and operational risk This will include: • making decisions about how we manage specific customers’ accounts, such as whether to approve individual transactions; • developing risk management policies, models and procedures used in the management of customers’ accounts and our business generally; • reporting information to and receiving information from credit reference agencies and fraud management agencies including personal and business records. Your data may also be used for other purposes for which you give your specific permission or, in very limited circumstances, when required by law or where permitted under the terms of the Data Protection Act 1998. Supplementary Cardmembers The provisions of this privacy statement also apply to any Supplementary Cardmember(s) approved to use your Account. Where you have approved the issue of a Supplementary Card: • you consent to us disclosing to the Supplementary Cardmember details about the status of your Account including details of transactions, the total Account balance and details of any overdue payments; • you consent to the Supplementary Cardmember providing us with personal information about you for additional identity authentication purposes when they contact us in relation to the use of their card including to activate cards, to register for on-line services and to access enhanced and new services as they are introduced; and • Supplementary Cardmembers will not be permitted to make any alteration to any of your information or details held unless you have provided us with your express consent for them to do so. Third Party Consents Where you provide us with information relating to a third party (including Supplementary Cardmembers), or where you purchase goods and/or services on behalf of a third party, you confirm that you have informed and obtained consent, if necessary, of that third party to the processing of his or her information by American Express and third parties as described in this privacy statement and that you have brought this privacy statement, and our Online Privacy Statement to their attention prior to providing their information to us. In respect of Supplementary Cardmembers, this may include the use of his or her details for our Group marketing purposes or disclosure for the purposes set out in detail in the "Credit Reference Agencies and Fraud Prevention" section below. Marketing We and other companies within our Group may: • have access to and use information about you and how you use your Account to identify goods and services in which you may be interested; • market offers to you (by mail, e-mail, telephone, SMS, via the internet or using other electronic means) in relation to goods and services which are similar to any American Express accounts, products, and services which you hold that we think you may be interested in; and • market other offers to you (by mail, email, telephone, SMS or via the internet) in relation to other products and services that we think you may be interested in. If you wish to opt out of receiving marketing from us and other companies within our group at any time, we recommend you go to xxxxxxxxxxxxxxx.xx.xx, log in, and update your privacy preferences. If you prefer, you can call us using the telephone number on the back of your card or write to us at the address below in the 'Query or Complaint' section of this privacy statement. We will also, from time to time, contact you to ensure that the information we hold about your marketing preferences is up to date. The information used to develop marketing lists may be obtained from: • your application form; • transactions made using your card with merchants; and; • surveys and research (which may involve, where allowed, contacting you by mail, email, telephone, SMS or via the internet); and • from external sources such as merchants or marketing organisations, to the extent permitted by law. Credit Reference Agencies and Fraud Prevention We will exchange Personal Information with credit reference agencies. You agree that we may obtain Personal Information about you from these agencies, including where relevant, your spouse, and any business in which you are involved (including details of your directors or partners in business). For the purposes of this Agreement, you may be treated as financially linked to such persons ("financial associates") and you will be assessed with reference to their "associated records". When you apply If you are a director, we will seek confirmation from credit reference agencies that the residential address that you provide is the same as that shown on the restricted register of directors’ usual addresses at Companies House. Credit reference agencies will record information about your business and its proprietors and may create a record of the name and address of your business and its proprietors if there is not one already. During the lifetime of your Account We will continue to make searches at credit reference agencies to assist in managing your Account and this will include looking at the associated records of your financial associates. These searches will not be seen or used by other organisations to assess your ability to obtain credit. We will also carry out further credit checks whilst any money is owed by you on your Account (including contacting your bank, building society or any referee approved by you). We may tell credit reference agencies the current balance on your Account and we may tell them if you do not make payments when due. They will record this information on your personal and business credit files (as applicable) and it may be shared with other organisations for the purpose of assessing applications from you, and applications from any other party with a financial association with you, for credit or other facilities, for other risk management purposes and for preventing fraud and tracing debtors. Records shared with credit reference agencies remain on file for 6 years after they are closed whether settled by you or defaulted. We will analyse Personal Information to assist in managing your Account and to prevent fraud or any other unlawful activity. We and other organisations may access and use your Personal Information to prevent fraud and money laundering, for example, when: • checking details on applications for insurance, credit and credit related or other facilities; • managing credit, credit related accounts or facilities, and insurance policies; • recovering debt; • checking details on applications, proposals and claims for all types of insurance; or • checking details of job applicants and employees. We and other organisations may access and use from other countries the information recorded by fraud prevention agencies. For security, anti-fraud measures and regulatory purposes we may also share personal data about you, your Account and the details of any payments you make to us with third parties, such as with your bank, building society or payment card issuer and with local regulatory authorities. You are entitled to access your personal records held by credit and fraud prevention agencies. If you wish to do this, or to receive details of the relevant UK fraud prevention and credit reference agencies, please write to us at the following address and we will supply the names and addresses of the agencies we have used: American Express Services Europe Ltd, New Accounts Dept (OCU), P.O. Box 149, Brighton BN88 1AH. Further information about how your Personal Information may be used by credit reference agencies and fraud prevention agencies is available upon request.

Privacy Statement. What is this document? This privacy statement describes how American Express collects, uses and shares information about you. If you interact with us online, there is a separate Online Privacy Statement available at xxxxxxxxxxxxxxx.xx.xx that describes how we collect and use information about you in that context, including where information provided online is combined with personal information which is collected as described in this privacy statement. We therefore ask that you also take time to consider the Online Privacy Statement. Information Collected We will collect information about you (Personal Information) from: • your Card Account (Account) application form and other forms you provide to us; • checks at credit reference agencies and fraud prevention agencies including personal and business records (if relevant); • you, in order to manage your Account and through the way you use your Account and our other services including transactions made using your Account with merchants or ATM operators; • surveys and statistical research; • third parties, such as in marketing lists which we lawfully obtain. We may also obtain Personal Information from the parties listed in the 'Information Disclosed' section below. Information Disclosed We may disclose Personal Information (which may include details of goods and/or services you purchase) to: • companies within the worldwide American Express group of companies including our joint ventures and joint ventures of our group, both current and in the future, as we develop new business either on our own or with others (our Group), third parties who process transactions submitted by merchants on the American Express network where you use your Card (worldwide); • parties who distribute the card; • any other co-branded partner set out in the agreement governing use of your Account; • any party approved by you, including any loyalty partners that you connect to your Membership Rewards account and, dependant on your card product, any partners available in your card benefits programme with whom you choose to enrol; • our processors and suppliers; • the providers of services and benefits associated with your Account; • collection agencies and lawyers for the purpose of collecting debts on your Account. • parties who accept the card in payment for goods and/or services purchased by you; and • anyone to whom we may transfer our contractual rights. Use of Information We may use Personal Information, including aggregated or combined with other information for any of the following purposes: Delivering our products and services to you This will include: • processing applications for our products including making decisions about whether to approve your application; • helping us better understand your financial circumstances and behaviour so that we may make decisions about how we manage your Account, such as whether to approve transactions, including transactions that you make using digital card wallet technologies on mobile devices; • administering and managing your Account including to process transactions you make on your Account; • communicating with you, including by e-mail, SMS or any other electronic method about any American Express accounts, products, and services which you hold (including for the purpose of servicing and by way of Account alerts); • giving you important information about updated and new features and benefits; • answering questions and responding to your requests; and • administering, servicing and managing any benefits or insurance programmes provided alongside your card; We may use Personal Information to prepare reports for third party business partners about Account usage. Reports only contain aggregated and anonymised data and we will not disclose any information which identifies you. Improving our products and services and to conduct research and analysis This will include: • learning about you and other customers, including your needs, preferences and behaviours; • analysing the effectiveness of our ads, promotions and offers; and • conducting testing (when we update our systems), data processing, website administration and information technology systems support and development • conducting market research including to give you the opportunity to provide feedback, ratings or reviews of our products and services, and those of our third party business partners, including through transaction experience surveys; and • producing data analytics, statistical research and reports including on an aggregated basis Advertising and marketing our products and services, and those of our third party business partners This will include any of the following (with your consent, where necessary): • sending you promotions and offers by email, SMS, any other electronic method, direct mail and through telemarketing in accordance with your marketing preferences; • personalising our communications and offers for you; and • determining whether you would be interested in new products or services. We do not provide your contact details to our third party business partners without your express consent. However, we may send you offers on their behalf. Keep in mind that, if you take advantage of an offer from a business partner and become their customer, they may independently send communications to you. In this case, you will need to inform them separately if you wish to decline receiving future communications from them. Managing risks relating to our business, including credit risk, fraud risk and operational risk This will include: • making decisions about how we manage specific customers’ accounts, such as whether to approve individual transactions; • developing risk management policies, models and procedures used in the management of customers’ accounts and our business generally; • reporting information to and receiving information from credit reference agencies and fraud management agencies including personal and business records. Your data may also be used for other purposes for which you give your specific permission or, in very limited circumstances, when required by law or where permitted under the terms of the Data Protection Act 1998Xxx 0000. Supplementary Cardmembers The provisions of this privacy statement also apply to any Supplementary Cardmember(s) approved to use your Account. Where you have approved the issue of a Supplementary Card: • you consent to us disclosing to the Supplementary Cardmember details about the status of your Account including details of transactions, the total Account balance and details of any overdue payments; • you consent to the Supplementary Cardmember providing us with personal information about you for additional identity authentication purposes when they contact us in relation to the use of their card including to activate cards, to register for on-line services and to access enhanced and new services as they are introduced; and • Supplementary Cardmembers will not be permitted to make any alteration to any of your information or details held unless you have provided us with your express consent for them to do so. Third Party Consents Where you provide us with information relating to a third party (including Supplementary Cardmembers), or where you purchase goods and/or services on behalf of a third party, you confirm that you have informed and obtained consent, if necessary, of that third party to the processing of his or her information by American Express and third parties as described in this privacy statement and that you have brought this privacy statement, and our Online Privacy Statement to their attention prior to providing their information to us. In respect of Supplementary Cardmembers, this may include the use of his or her details for our Group marketing purposes or disclosure for the purposes set out in detail in the "Credit Reference Agencies and Fraud Prevention" section below. Marketing We and other companies within our Group may: • have access to and use information about you and how you use your Account to identify goods and services in which you may be interested; • market offers to you (by mail, e-mail, telephone, SMS, via the internet or using other electronic means) in relation to goods and services which are similar to any American Express accounts, products, and services which you hold that we think you may be interested in; and • market other offers to you (by mail, email, telephone, SMS or via the internet) in relation to other products and services that we think you may be interested in. If you wish to opt out of receiving marketing from us and other companies within our group at any time, we recommend you go to xxxxxxxxxxxxxxx.xx.xx, log in, and update your privacy preferences. If you prefer, you can call us using the telephone number on the back of your card or write to us at the address below in the 'Query or Complaint' section of this privacy statement. We will also, from time to time, contact you to ensure that the information we hold about your marketing preferences is up to date. The information used to develop marketing lists may be obtained from: • your application form; • transactions made using your card with merchants; and; • surveys and research (which may involve, where allowed, contacting you by mail, email, telephone, SMS or via the internet); and • from external sources such as merchants or marketing organisations, to the extent permitted by law. Credit Reference Agencies and Fraud Prevention We will exchange Personal Information with credit reference agencies. You agree that we may obtain Personal Information about you from these agencies, including where relevant, your spouse, and any business in which you are involved (including details of your directors or partners in business). For the purposes of this Agreement, you may be treated as financially linked to such persons ("financial associates") and you will be assessed with reference to their "associated records". When you apply If you are a director, we will seek confirmation from credit reference agencies that the residential address that you provide is the same as that shown on the restricted register of directors’ usual addresses at Companies House. Credit reference agencies will record information about your business and its proprietors and may create a record of the name and address of your business and its proprietors if there is not one already. During the lifetime of your Account We will continue to make searches at credit reference agencies to assist in managing your Account and this will include looking at the associated records of your financial associates. These searches will not be seen or used by other organisations to assess your ability to obtain credit. We will also carry out further credit checks whilst any money is owed by you on your Account (including contacting your bank, building society or any referee approved by you). We may tell credit reference agencies the current balance on your Account and we may tell them if you do not make payments when due. They will record this information on your personal and business credit files (as applicable) and it may be shared with other organisations for the purpose of assessing applications from you, and applications from any other party with a financial association with you, for credit or other facilities, for other risk management purposes and for preventing fraud and tracing debtors. Records shared with credit reference agencies remain on file for 6 years after they are closed whether settled by you or defaulted. We will analyse Personal Information to assist in managing your Account and to prevent fraud or any other unlawful activity. We and other organisations may access and use your Personal Information to prevent fraud and money laundering, for example, when: • checking details on applications for insurance, credit and credit related or other facilities; • managing credit, credit related accounts or facilities, and insurance policies; • recovering debt; • checking details on applications, proposals and claims for all types of insurance; or • checking details of job applicants and employees. We and other organisations may access and use from other countries the information recorded by fraud prevention agencies. For security, anti-fraud measures and regulatory purposes we may also share personal data about you, your Account and the details of any payments you make to us with third parties, such as with your bank, building society or payment card issuer and with local regulatory authorities. You are entitled to access your personal records held by credit and fraud prevention agencies. If you wish to do this, or to receive details of the relevant UK fraud prevention and credit reference agencies, please write to us at the following address and we will supply the names and addresses of the agencies we have used: American Express Services Europe Ltd, New Accounts Dept Dept. (OCU), P.O. Box 149X.X. Xxx 000, Brighton BN88 1AHXxxxxxxx XX00 0XX. Further information about how your Personal Information may be used by credit reference agencies and fraud prevention agencies is available upon request.

Privacy Statement. What is this document? This privacy statement describes how American Express collects, uses and shares information about you. If you interact with us online, there is a separate Online Privacy Statement available at xxxxxxxxxxxxxxx.xx.xx that describes how we collect and use information about you in that context, including where online information provided online is combined with personal information which is collected as described in this privacy statement. We therefore ask that you also take time to consider the Online Privacy Statement. Information Collected We will collect information about you (Personal Information) from: • your Card Account (Account) application form and other forms you provide to us; • checks at credit reference agencies and fraud prevention agencies including personal and business records (if relevant)records; • you, in order to manage your Account and through the way you use your Account and our other services including transactions made using your Account with merchants or ATM operators; • surveys and statistical research; • third parties, such as in marketing lists which we lawfully obtain. • We may also obtain Personal Information from the parties listed in the 'Information Disclosed' section below. Information Disclosed We may disclose Personal Information (which may include details of goods and/or services you purchase) to: • companies within the worldwide American Express group of companies including our joint ventures and joint ventures of (our group, both current and in the future, as we develop new business either on our own or with others (our Group), third parties who process transactions submitted by merchants on the American Express network where you use your Card (worldwide); • parties who distribute the card; • any other co-branded partner set out in the agreement governing use of your Account; • any party approved by you, including any loyalty partners that you connect to your Membership Rewards account and, dependant on your card product, any partners available in your card benefits programme with whom you choose to enrol; • our processors and suppliers; • the providers of services and benefits associated with your Account; • collection agencies and lawyers for the purpose of collecting debts on your Account. ; • parties who accept the card Card in payment for goods and/or services purchased by you; and • anyone to whom we may transfer our contractual rights. Use of Information We may use Personal Information, including aggregated or combined with other information for any of the following Information purposes: Delivering our products and services to you This will include: • processing applications for our products including making decisions about whether to approve your application; • helping us better understand your financial circumstances and behaviour so that we may make decisions about how we manage your Account, such as whether to approve transactions, including transactions that you make using digital card wallet technologies on mobile devices; • administering and managing manage your Account including to process transactions you make on your Account; • communicating with you, including by e-mailemail and SMS, SMS or any other electronic method about any American Express accounts, products, and services which you hold (including for the purpose of servicing and by way of Account account alerts); • giving you important information about updated and new features and benefits; • answering questions and responding to your requests; and • administering, servicing and managing any benefits or insurance programmes provided alongside your card; Card. • We may use Personal Information to prepare reports for third party business partners about Account usage. Reports only contain aggregated and anonymised data and we will not disclose any information which identifies you. Improving our products and services and to conduct research and analysis This will include: • learning about you and other customers, including your needs, preferences and behaviours; • analysing the effectiveness of our ads, promotions and offers; and • conducting testing (when we update our systems), data processing, website administration and information technology systems support and development development; • conducting market research including to give you the opportunity to provide feedback, ratings or reviews of our products and services, and those of our third party business partners, including through transaction experience surveys; and • producing data analytics, statistical research and reports including on an aggregated basis basis. • Advertising and marketing our products and services, and those of our third party business partners 13 This will include any of the following (with your consent, where necessary): • sending you promotions and offers by email, SMS, any other electronic method, direct mail and through telemarketing in accordance with your marketing preferences; • personalising our communications and offers for you; and • determining whether you would be interested in new products or services. We do not provide your contact details to our third party business partners without your express consent. However, we may send you offers on their behalf. Keep in mind that, if you take advantage of an offer from a business partner and become their customer, they may independently send communications to you. In this case, you will need to inform them separately if you wish to decline receiving future communications from them. Managing risks relating to our business, including credit risk, fraud risk and operational risk This will include: • making decisions about how we manage specific customers’ accounts, such as whether to approve individual transactions; • developing risk management policies, models and procedures used in the management of customers’ accounts and our business generally; • reporting information to and receiving information from credit reference agencies and fraud management agencies including personal and business records. Your data may also be used for other purposes for which you give your specific permission or, in very limited circumstances, when required by law or where permitted under the terms of the Data Protection Act 1998Xxx 0000. Supplementary Cardmembers The provisions of this privacy statement also apply to any Supplementary Cardmember(s) approved to use your Account. Where you have approved the issue of a Supplementary Cardsupplementary card: • you consent to us disclosing to the Supplementary Cardmember details about the status of your Account including details of transactions, the total Account outstanding balance and details of any overdue payments; • you consent to the Supplementary Cardmember providing us with personal information about you for additional identity authentication purposes when they contact us in relation to the use of their card Card including to activate cardsCards, to register for on-line online services and to access enhanced and new services as they are introduced; and • Supplementary Cardmembers will not be permitted to make any alteration to any of your information or details held unless you have provided us with your express consent for them to do so. Third Party Consents Where you provide us with information relating to a third party (including Supplementary Cardmembers), or where you purchase goods and/or services on behalf of a third party, you confirm that you have informed and obtained consent, if necessary, of that third party to the processing of his or her information by American Express and third parties as described in this privacy statement and that you have brought this privacy statement, and our Online Privacy Statement to their attention prior to providing their information to us. In respect of Supplementary Cardmembers, this may include the use of his or her details for our Group marketing purposes or disclosure for the purposes set out in detail in the "Credit Reference Agencies and Fraud Prevention" Prevention section below. Marketing We and other companies within our Group group may: • have access to and use information about you and how you use your Account to identify goods and services in which you may be interested; • market offers to you (by mail, e-mailemail, telephone, SMS, via the internet or using other electronic means) in relation to goods and services which are similar to any American Express accounts, products, and services which you hold that we think you may be interested in; and • market other offers to you (by mail, email, telephone, SMS or via the internet) in relation to other products and services that we think you may be interested in. If you wish to opt opt-out of receiving marketing from us and other companies within our group at any time, we recommend you go to xxxxxxxxxxxxxxx.xx.xx, log in, and update your privacy preferences. If you prefer, you can call us using the telephone number on the back of your card Card or write to us at the address below in the 'Query or Complaint' section part of this privacy statement. We will also, from time to time, contact you to ensure that the information we hold about your marketing preferences is up to date. The information used to develop marketing lists may be obtained from: • your the application form; • transactions made using your card the Card with merchants; and; • surveys and research (which may involve, where allowed, contacting you by mail, email, telephone, SMS or via the internet); and • from external sources such as merchants or marketing organisations, to the extent permitted by law. Credit Reference Agencies and Fraud Prevention We will exchange Personal Information with credit reference agencies. You agree that we may obtain Personal Information about you from these agencies, including where relevant, your spouse, and any business in which you are involved (including details of your directors or partners in business). For the purposes of this Agreement, you may be treated as financially linked to such persons ("financial associates") and you will be assessed with reference to their "associated records". When you apply If you are a director, we will seek confirmation from credit reference agencies that the residential address that you provide is the same as that shown on the restricted register of directors’ usual addresses at Companies House. Credit reference agencies will record information about your business and its proprietors and may create a record of the name and address of your business and its proprietors if there is not one already. During the lifetime of your Account We will continue to make searches at credit reference agencies to assist in managing your Account and this will include looking at the associated records of your financial associates. These searches will not be seen or used by other organisations to assess your ability to obtain credit. We will also carry out further credit checks whilst any money is owed by you on your Account (including contacting your bank, building society or any referee approved by you). We may tell credit reference agencies the current balance on your Account and we may tell them if you do not make payments when due. They will record this Fraud Prevention information on your personal and business credit files (as applicable) and it may be shared with other organisations for the purpose of assessing applications from you, and applications from any other party with a financial association with you, for credit or other facilities, for other risk management purposes and for preventing fraud and tracing debtors. Records shared with We will carry out credit reference agencies remain on file for 6 years after they are closed whether settled checks whilst any money is owed by you on your Account (including contacting your bank, building society or defaultedany referee approved by you). We will carry out further credit checks, including at credit reference agencies, and analyse Personal Information to assist in managing your Account and to prevent fraud or any other unlawful activity. These credit reference agency searches will not be seen or used by other organisations to assess your ability to obtain credit. If you are a director, we will seek confirmation, from credit reference agencies, that the residential address that you provide is the same as that shown on the restricted register of directors’ usual addresses at Companies House. Credit reference agencies will record information on your business and its proprietors and may create a record of the name and address of your business and its proprietors if there is not one already. We will check your details with fraud prevention agencies. If false or inaccurate information is provided by you and we suspect any unlawful activity such as fraud or fraud is identified, this will be recorded, and we may pass details to fraud prevention agencies. Law enforcement agencies may access and use this information. We and other organisations may also access and use your Personal Information this information to prevent fraud and money laundering, for example, when: • checking details on applications for insurance, credit and credit related or other facilities; • managing credit, credit related accounts or facilities, and insurance policies; • recovering debt; • checking details on applications, proposals and claims for all types of insurance; or • checking details of job applicants and employees. We and other organisations may access and use from other countries the information recorded by fraud prevention agencies. For security, anti-fraud measures and regulatory purposes we may also share personal data about you, your Account and the details of any payments you make to us with third parties, such as with your bank, building society or payment card issuer and with local regulatory authorities. You are entitled to access your personal records held by credit and fraud prevention agencies. If you wish to do this, or to receive details of the relevant UK fraud prevention and credit reference agencies, please write to us at the following address and we will supply the names and addresses of the agencies we have used: American Express Services Europe Ltd, New Accounts Dept (OCU), P.O. Box 149X.X. Xxx 000, Brighton BN88 1AHXxxxxxxx XX00 0XX. Further information about how your Personal Information may be used by credit reference agencies and fraud prevention agencies is available upon request.

Privacy Statement. What is this document? This privacy statement describes how American Express collects, uses and shares information about you. If you interact with us online, there is a separate Online Privacy Statement available at xxxxxxxxxxxxxxx.xx.xx that describes how we collect and use information about you in that context, including where online information provided online is combined with personal information which is collected as described in this privacy statement. We therefore ask that you also take time to consider the Online Privacy Statement. Information Collected We will collect information about you (Personal Information) from: • your Card Account (Account) application form and other forms you provide to us; • checks at credit reference agencies and fraud prevention agencies including personal and business records (if relevant)agencies; • you, in order to manage your Account and through the way you use your Account and our other services including transactions made using your Account with merchants or ATM operators; • surveys and statistical research; • third parties, such as in marketing lists which we lawfully obtain. We may also obtain Personal Information from the parties listed in the 'Information Disclosed' section below. Information Disclosed We may disclose Personal Information (which may include details of goods and/or services you purchase) to: • companies within the worldwide American Express group of companies including our joint ventures and joint ventures of (our group, both current and in the future, as we develop new business either on our own or with others (our Group), third parties who process transactions submitted by merchants on the American Express network where you use your Card (worldwide); • parties who distribute the card; • any other co-branded partner set out in the agreement governing use of your AccountAccount credit agreement; • any party approved by you, including any loyalty partners that you connect to your Membership Rewards account and, dependant on your card product, any partners available in your card benefits programme with whom you choose to enrol; • our processors and suppliers; • the providers of services and benefits associated with your Account; • collection agencies and lawyers for the purpose of collecting debts on your Account. • parties who accept the card in payment for goods and/or services purchased by you; and • anyone to whom we may transfer our contractual rights. Use of Information We may use Personal Information, including aggregated or combined with other information for any of the following purposes: Delivering our products and services to you This will include: • processing applications for our products including making decisions about whether to approve your application; • helping us better understand your financial circumstances and behaviour so that we may make decisions about how we manage your Account, such as whether how much credit to approve transactions, including transactions that you make using digital card wallet technologies on mobile devicesgrant to you; • administering and managing manage your Account including to process transactions you make on your Account; • communicating with you, including by e-mailmail and SMS, SMS or any other electronic method about any American Express accounts, products, and services which you hold (including for the purpose of servicing and by way of Account account alerts); • giving you important information about updated and new features and benefits; • answering questions and responding respond to your requests; and • administering, servicing and managing any benefits or insurance programmes provided alongside your card; We may use Personal Information to prepare reports for third party business partners about Account usage. Reports only contain aggregated and anonymised data and we will not disclose any information which identifies you. Improving our products and services and to conduct research and analysis This will include: • learning about you and other customers, including your needs, preferences and behaviours; • analysing the effectiveness of our ads, promotions and offers; and • conducting testing (when we update our systems), data processing, website administration and information technology systems support and development • conducting market research including to give you the opportunity to provide feedback, ratings or reviews of our products and services, and those of our third party business partnersBusiness Partners, including through transaction experience surveys; and • producing data analytics, statistical research and reports including on an aggregated basis Advertising and marketing our products and services, and those of our third party business partners (business partners) This will include any of the following (with your consent, where necessary): • sending you promotions and offers by email, SMS, any other electronic method, direct mail and through telemarketing in accordance with your marketing preferences; • personalising our communications and offers for you; and • determining whether you would be interested in new products or services. Managing risks relating to our business, including credit risk, fraud risk and operational risk This will include: • making decisions about how we manage specific customers’ accounts, such as how much credit to grant to customers (where relevant) and whether to approve individual transactions; • developing risk management policies, models and procedures used in the management of customers’ accounts and our business generally; • reporting information to and receiving information from credit reference agencies and fraud management agencies. We do not provide your contact details to our third party business partners without your express consent. However, we may send you offers on their behalf. Keep in mind that, if you take advantage of an offer from a business partner and become their customer, they may independently send communications to you. In this case, you will need to inform them separately if you wish to decline receiving future communications from them. Managing risks relating to our business, including credit risk, fraud risk and operational risk This will include: • making decisions about how we manage specific customers’ accounts, such as whether to approve individual transactions; • developing risk management policies, models and procedures used in the management of customers’ accounts and our business generally; • reporting information to and receiving information from credit reference agencies and fraud management agencies including personal and business records. Your data may also be used for other purposes for which you give your specific permission or, in very limited circumstances, when required by law or where permitted under the terms of the Data Protection Act 1998. Supplementary Cardmembers The provisions of this privacy statement also apply to any Supplementary Cardmember(ssupplementary cardmember(s) approved to use your Account. Where you have approved the issue of a Supplementary Cardsupplementary card: • you consent to us disclosing to the Supplementary Cardmember supplementary cardmember details about the status of your Account including details of transactions, the total Account outstanding balance and details of any overdue payments; • you consent to the Supplementary Cardmember supplementary cardmember providing us with personal information about you for additional identity authentication purposes when they contact us in relation to the use of their card including to activate cards, to register for on-line services and to access enhanced and new services as they are introduced; and • Supplementary Cardmembers supplementary cardmembers will not be permitted to make any alteration to any of your information or details held unless you have provided us with your express consent for them to do so. Third Party Consents Where you provide us with information relating to a third party (including Supplementary Cardmemberssupplementary cardmembers), or where you purchase goods and/or services on behalf of a third party, you confirm that you have informed and obtained consent, if necessary, of that third party to the processing of his or her information by American Express and third parties as described in this privacy statement and that you have brought this privacy statement, and our Online Privacy Statement to their attention prior to providing their information to us. In respect of Supplementary Cardmemberssupplementary cardmembers, this may include the use of his or her details for our Group marketing purposes or disclosure for the purposes set out in detail in the "Credit Reference Agencies and Fraud Prevention" Prevention section below. Marketing We and other companies within our Group group may: • have access to and use information about you and how you use your Account to identify goods and services in which you may be interested; • market offers to you (by mail, e-mail, telephone, SMS, via the internet or using other electronic means) in relation to goods and services which are similar to any American Express accounts, products, and services which you hold that we think you may be interested in; and • market other offers to you (by mail, email, telephone, SMS or via the internet) in relation to other products and services that we think you may be interested in. If you wish to opt opt-out of receiving marketing from us and other companies within our group at any time, we recommend you go to xxxxxxxxxxxxxxx.xx.xx, log in, and update your privacy preferences. If you prefer, you can call us using the telephone number on the back of your card or write to us at the address below in the 'Query or Complaint' section part of this privacy statement. We will also, from time to time, contact you to ensure that the information we hold about your marketing preferences is up to date. The information used to develop marketing lists may be obtained from: • your the application form; • transactions made using your the card with merchants; and; • surveys and research (which may involve, where allowed, contacting you by mail, email, telephone, SMS or via the internet); and • from external sources such as merchants or marketing organisations, to the extent permitted by law. Credit Reference Agencies and Fraud Prevention We will exchange Personal Information with credit reference agencies. You agree that we may obtain Personal Information about you from these agencies, including where relevant, your spouse, and any business in which you are involved (including details of your directors or partners in business). For the purposes of this Agreement, you may be treated as financially linked to such persons ("financial associates") and you will be assessed with reference to their "associated records". When you apply If you are a director, we will seek confirmation from credit reference agencies that the residential address that you provide is the same as that shown on the restricted register of directors’ usual addresses at Companies House. Credit reference agencies will record information about your business and its proprietors and may create a record of the name and address of your business and its proprietors if there is not one already. During the lifetime of your Account We will continue to make searches at credit reference agencies to assist in managing your Account and this will include looking at the associated records of your financial associates. These searches will not be seen or used by other organisations to assess your ability to obtain credit. We will also carry out further credit checks whilst any money is owed by you on your Account (including contacting your bank, building society or any referee approved by you). We may tell credit reference agencies the current balance on your Account and we may tell them if you do not make payments when due. They will record this information on your personal and business credit files (as applicable) and it may be shared with other organisations for the purpose of assessing applications from you, and applications from any other party with a financial association with you, for credit or other facilities, for other risk management purposes and for preventing fraud and tracing debtors. Records shared with credit reference agencies remain on file for 6 years after they are closed whether settled by you or defaulted. We will analyse Personal Information to assist in managing your Account and to prevent fraud or any other unlawful activity. We and other organisations may access and use your Personal Information to prevent fraud and money laundering, for example, when: • checking details on applications for insurance, credit and credit related or other facilities; • managing credit, credit related accounts or facilities, and insurance policies; • recovering debt; • checking details on applications, proposals and claims for all types of insurance; or • checking details of job applicants and employees. We and other organisations may access and use from other countries the information recorded by fraud prevention agencies. For security, anti-fraud measures and regulatory purposes we may also share personal data about you, your Account and the details of any payments you make to us with third parties, such as with your bank, building society or payment card issuer and with local regulatory authorities. You are entitled to access your personal records held by credit and fraud prevention agencies. If you wish to do this, or to receive details of the relevant UK fraud prevention and credit reference agencies, please write to us at the following address and we will supply the names and addresses of the agencies we have used: American Express Services Europe Ltd, New Accounts Dept (OCU), P.O. Box 149, Brighton BN88 1AH. Further information about how your Personal Information may be used by credit reference agencies and fraud prevention agencies is available upon request.

Privacy Statement. What is this document? This privacy statement describes how American Express collects, uses and shares information about you. If you interact with us online, there is a separate Online Privacy Statement available at xxxxxxxxxxxxxxx.xx.xx that describes how we collect and use information about you in that context, including where online information provided online is combined with personal information which is collected as described in this privacy statement. We therefore ask that you also take time to consider the Online Privacy Statement. Information Collected We will collect information about you (Personal Information) from: • your Card Account (Account) application form and other forms you provide to us; • checks at credit reference agencies and fraud prevention agencies including personal and business records (if relevant)agencies; • you, in order to manage your Account and through the way you use your Account and our other services including transactions made using your Account with merchants or ATM operators; • surveys and statistical research; • third parties, such as in marketing lists which we lawfully obtain. We may also obtain Personal Information from the parties listed in the 'Information Disclosed' section below. Information Disclosed We may disclose Personal Information (which may include details of goods and/or services you purchase) to: • companies within the worldwide American Express group of companies including our joint ventures and joint ventures of (our group, both current and in the future, as we develop new business either on our own or with others (our Group), third parties who process transactions submitted by merchants on the American Express network where you use your Card (worldwide); • parties who distribute the card; • any other co-branded partner set out in the agreement governing use of your AccountAccount credit agreement; • any party approved by you, including any loyalty partners that you connect to your Membership Rewards account and, dependant on your card product, any partners available in your card benefits programme with whom you choose to enrol; • our processors and suppliers; • the providers of services and benefits associated with your Account; • collection agencies and lawyers for the purpose of collecting debts on your Account. • parties who accept the card in payment for goods and/or services purchased by you; and • anyone to whom we may transfer our contractual rights. Use of Information We may use Personal Information, including aggregated or combined with other information for any of the following purposes: Delivering our products and services to you This will include: • processing applications for our products including making decisions about whether to approve your application; • helping us better understand your financial circumstances and behaviour so that we may make decisions about how we manage your Account, such as whether how much credit to approve transactions, including transactions that you make using digital card wallet technologies on mobile devicesgrant to you; • administering and managing manage your Account including to process transactions you make on your Account; • communicating with you, including by e-mailmail and SMS, SMS or any other electronic method about any American Express accounts, products, and services which you hold (including for the purpose of servicing and by way of Account account alerts); • giving you important information about updated and new features and benefits; • answering questions and responding respond to your requests; and • administering, servicing and managing any benefits or insurance programmes provided alongside your card; We may use Personal Information to prepare reports for third party business partners about Account usage. Reports only contain aggregated and anonymised data and we will not disclose any information which identifies you. Improving our products and services and to conduct research and analysis This will include: • learning about you and other customers, including your needs, preferences and behaviours; • analysing the effectiveness of our ads, promotions and offers; and • conducting testing (when we update our systems), data processing, website administration and information technology systems support and development • conducting market research including to give you the opportunity to provide feedback, ratings or reviews of our products and services, and those of our third party business partnersBusiness Partners, including through transaction experience surveys; and • producing data analytics, statistical research and reports including on an aggregated basis Advertising and marketing our products and services, and those of our third party business partners (business partners) This will include any of the following (with your consent, where necessary): • sending you promotions and offers by email, SMS, any other electronic method, direct mail and through telemarketing in accordance with your marketing preferences; • personalising our communications and offers for you; and Managing risks relating to our business, including credit risk, fraud risk and operational risk This will include: • making decisions about how we manage specific customers’ accounts, such as how much credit to grant to customers (where relevant) and whether to approve individual transactions; • developing risk management policies, models and procedures used in the management of customers’ accounts and our business generally; • determining whether you would be interested in new products or services. We do not provide your contact details to our third party business partners without your express consent. However, we may send you offers on their behalf. Keep in mind that, if you take advantage of an offer from a business partner and become their customer, they may independently send communications to you. In this case, you will need to inform them separately if you wish to decline receiving future communications from them. Managing risks relating to our business, including credit risk, fraud risk and operational risk This will include: • making decisions about how we manage specific customers’ accounts, such as whether to approve individual transactions; • developing risk management policies, models and procedures used in the management of customers’ accounts and our business generally; • reporting information to and receiving information from credit reference agencies and fraud management agencies including personal and business recordsagencies. Your data may also be used for other purposes for which you give your specific permission or, in very limited circumstances, when required by law or where permitted under the terms of the Data Protection Act 1998. Supplementary Cardmembers The provisions of this privacy statement also apply to any Supplementary Cardmember(ssupplementary cardmember(s) approved to use your Account. Where you have approved the issue of a Supplementary Cardsupplementary card: • you consent to us disclosing to the Supplementary Cardmember supplementary cardmember details about the status of your Account including details of transactions, the total Account outstanding balance and details of any overdue payments; • you consent to the Supplementary Cardmember supplementary cardmember providing us with personal information about you for additional identity authentication purposes when they contact us in relation to the use of their card including to activate cards, to register for on-line services and to access enhanced and new services as they are introduced; and • Supplementary Cardmembers supplementary cardmembers will not be permitted to make any alteration to any of your information or details held unless you have provided us with your express consent for them to do so. Third Party Consents Where you provide us with information relating to a third party (including Supplementary Cardmemberssupplementary cardmembers), or where you purchase goods and/or services on behalf of a third party, you confirm that you have informed and obtained consent, if necessary, of that third party to the processing of his or her information by American Express and third parties as described in this privacy statement and that you have brought this privacy statement, and our Online Privacy Statement to their attention prior to providing their information to us. In respect of Supplementary Cardmemberssupplementary cardmembers, this may include the use of his or her details for our Group marketing purposes or disclosure for the purposes set out in detail in the "Credit Reference Agencies and Fraud Prevention" Prevention section below. Marketing We and other companies within our Group group may: • have access to and use information about you and how you use your Account to identify goods and services in which you may be interested; • market offers to you (by mail, e-mail, telephone, SMS, via the internet or using other electronic means) in relation to goods and services which are similar to any American Express accounts, products, and services which you hold that we think you may be interested in; and • market other offers to you (by mail, email, telephone, SMS or via the internet) in relation to other products and services that we think you may be interested in. If you wish to opt opt-out of receiving marketing from us and other companies within our group at any time, we recommend you go to xxxxxxxxxxxxxxx.xx.xxxxxxxxxxxxxxxxx.xx.xx , log in, and update your privacy preferences. If you prefer, you can call us using the telephone number on the back of your card or write to us at the address below in the 'Query or Complaint' section part of this privacy statement. We will also, from time to time, contact you to ensure that the information we hold about your marketing preferences is up to date. The information used to develop marketing lists may be obtained from: • your the application form; • transactions made using your the card with merchants; and; • surveys and research (which may involve, where allowed, contacting you by mail, email, telephone, SMS or via the internet); and • from external sources such as merchants or marketing organisations, to the extent permitted by law. Credit Reference Agencies and Fraud Prevention We will exchange Personal Information with credit reference agencies. You agree that we may obtain Personal Information about you from these agencies, including where relevant, your spouse, and any business in which you are involved (including details of your directors or partners in business). For the purposes of this Agreement, you may be treated as financially linked to such persons ("financial associates") and you will be assessed with reference to their "associated records". When you apply If you are a director, we will seek confirmation from credit reference agencies that the residential address that you provide is the same as that shown on the restricted register of directors’ usual addresses at Companies House. Credit reference agencies will record information about your business and its proprietors and may create a record of the name and address of your business and its proprietors if there is not one already. During the lifetime of your Account We will continue to make searches at credit reference agencies to assist in managing your Account and this will include looking at the associated records of your financial associates. These searches will not be seen or used by other organisations to assess your ability to obtain credit. We will also carry out further credit checks whilst any money is owed by you on your Account (including contacting your bank, building society or any referee approved by you). We may tell credit reference agencies the current balance on your Account and we may tell them if you do not make payments when due. They will record this information on your personal and business credit files (as applicable) and it may be shared with other organisations for the purpose of assessing applications from you, and applications from any other party with a financial association with you, for credit or other facilities, for other risk management purposes and for preventing fraud and tracing debtors. Records shared with credit reference agencies remain on file for 6 years after they are closed whether settled by you or defaulted. We will analyse Personal Information to assist in managing your Account and to prevent fraud or any other unlawful activity. We and other organisations may access and use your Personal Information to prevent fraud and money laundering, for example, when: • checking details on applications for insurance, credit and credit related or other facilities; • managing credit, credit related accounts or facilities, and insurance policies; • recovering debt; • checking details on applications, proposals and claims for all types of insurance; or • checking details of job applicants and employees. We and other organisations may access and use from other countries the information recorded by fraud prevention agencies. For security, anti-fraud measures and regulatory purposes we may also share personal data about you, your Account and the details of any payments you make to us with third parties, such as with your bank, building society or payment card issuer and with local regulatory authorities. You are entitled to access your personal records held by credit and fraud prevention agencies. If you wish to do this, or to receive details of the relevant UK fraud prevention and credit reference agencies, please write to us at the following address and we will supply the names and addresses of the agencies we have used: American Express Services Europe Ltd, New Accounts Dept (OCU), P.O. Box 149, Brighton BN88 1AH. Further information about how your Personal Information may be used by credit reference agencies and fraud prevention agencies is available upon request.

Privacy Statement. What is this document? This privacy statement describes how American Express collects, uses and shares information about you. If you interact with us online, there is a separate Online Privacy Statement available at xxxxxxxxxxxxxxx.xx.xx that describes how we collect and use information about you in that context, including where information provided online is combined with personal information which is collected as described in this privacy statement. We therefore ask that you also take time to consider the Online Privacy Statement. Information Collected We will collect information about you (Personal Information) from: • your Card Account (Account) application form and other forms you provide to us; • checks at credit reference agencies and fraud prevention agencies including personal and business records (if relevant); • you, in order to manage your Account and through the way you use your Account and our other services including transactions made using your Account with merchants or ATM operators; • surveys and statistical research; • third parties, such as in marketing lists which we lawfully obtain. We may also obtain Personal Information from the parties listed in the 'Information Disclosed' section below. Information Disclosed We may disclose Personal Information (which may include details of goods and/or services you purchase) to: • companies within the worldwide American Express group of companies including our joint ventures and joint ventures of our group, both current and in the future, as we develop new business either on our own or with others (our Group), third parties who process transactions submitted by merchants on the American Express network where you use your Card (worldwide); • parties who distribute the card; • any other co-branded partner set out in the agreement governing use of your Account; • any party approved by you, including any loyalty partners that you connect to your Membership Rewards account and, dependant on your card product, any partners available in your card benefits programme with whom you choose to enrol; • our processors and suppliers; • the providers of services and benefits associated with your Account; • collection agencies and lawyers for the purpose of collecting debts on your Account. • parties who accept the card in payment for goods and/or services purchased by you; and • anyone to whom we may transfer our contractual rights. Use of Information We may use Personal Information, including aggregated or combined with other information for any of the following purposes: Delivering our products and services to you This will include: • processing applications for our products including making decisions about whether to approve your application; • helping us better understand your financial circumstances and behaviour so that we may make decisions about how we manage your Account, such as whether to approve transactions, including transactions that you make using digital card wallet technologies on mobile devices; • administering and managing your Account including to process transactions you make on your Account; • communicating with you, including by e-mail, SMS or any other electronic method about any American Express accounts, products, and services which you hold (including for the purpose of servicing and by way of Account alerts); • giving you important information about updated and new features and benefits; • answering questions and responding to your requests; and • administering, servicing and managing any benefits or insurance programmes provided alongside your card; We may use Personal Information to prepare reports for third party business partners about Account usage. Reports only contain aggregated and anonymised data and we will not disclose any information which identifies you. Improving our products and services and to conduct research and analysis This will include: • learning about you and other customers, including your needs, preferences and behaviours; • analysing the effectiveness of our ads, promotions and offers; and • conducting testing (when we update our systems), data processing, website administration and information technology systems support and development • conducting market research including to give you the opportunity to provide feedback, ratings or reviews of our products and services, and those of our third party business partners, including through transaction experience surveys; and • producing data analytics, statistical research and reports including on an aggregated basis Advertising and marketing our products and services, and those of our third party business partners This will include any of the following (with your consent, where necessary): • sending you promotions and offers by email, SMS, any other electronic method, direct mail and through telemarketing in accordance with your marketing preferences; • personalising our communications and offers for you; and • determining whether you would be interested in new products or services. We do not provide your contact details to our third party business partners without your express consent. However, we may send you offers on their behalf. Keep in mind that, if you take advantage of an offer from a business partner and become their customer, they may independently send communications to you. In this case, you will need to inform them separately if you wish to decline receiving future communications from them. Managing risks relating to our business, including credit risk, fraud risk and operational risk This will include: • making decisions about how we manage specific customers’ accounts, such as whether to approve individual transactions; • developing risk management policies, models and procedures used in the management of customers’ accounts and our business generally; • reporting information to and receiving information from credit reference agencies and fraud management agencies including personal and business records. Your data may also be used for other purposes for which you give your specific permission or, in very limited circumstances, when required by law or where permitted under the terms of the Data Protection Act 1998. Supplementary Cardmembers The provisions of this privacy statement also apply to any Supplementary Cardmember(s) approved to use your Account. Where you have approved the issue of a Supplementary Card: • you consent to us disclosing to the Supplementary Cardmember details about the status of your Account including details of transactions, the total Account balance and details of any overdue payments; • you consent to the Supplementary Cardmember providing us with personal information about you for additional identity authentication purposes when they contact us in relation to the use of their card including to activate cards, to register for on-line services and to access enhanced and new services as they are introduced; and • Supplementary Cardmembers will not be permitted to make any alteration to any of your information or details held unless you have provided us with your express consent for them to do so. Third Party Consents Where you provide us with information relating to a third party (including Supplementary Cardmembers), or where you purchase goods and/or services on behalf of a third party, you confirm that you have informed and obtained consent, if necessary, of that third party to the processing of his or her information by American Express and third parties as described in this privacy statement and that you have brought this privacy statement, and our Online Privacy Statement to their attention prior to providing their information to us. In respect of Supplementary Cardmembers, this may include the use of his or her details for our Group marketing purposes or disclosure for the purposes set out in detail in the "Credit Reference Agencies and Fraud Prevention" section below. Marketing We and other companies within our Group may: • have access to and use information about you and how you use your Account to identify goods and services in which you may be interested; • market offers to you (by mail, e-mail, telephone, SMS, via the internet or using other electronic means) in relation to goods and services which are similar to any American Express accounts, products, and services which you hold that we think you may be interested in; and • market other offers to you (by mail, email, telephone, SMS or via the internet) in relation to other products and services that we think you may be interested in. If you wish to opt out of receiving marketing from us and other companies within our group at any time, we recommend you go to xxxxxxxxxxxxxxx.xx.xx, log in, and update your privacy preferences. If you prefer, you can call us using the telephone number on the back of your card or write to us at the address below in the 'Query or Complaint' section of this privacy statement. We will also, from time to time, contact you to ensure that the information we hold about your marketing preferences is up to date. The information used to develop marketing lists may be obtained from: • your application form; • transactions made using your card with merchants; and; • surveys and research (which may involve, where allowed, contacting you by mail, email, telephone, SMS or via the internet); and • from external sources such as merchants or marketing organisations, to the extent permitted by law. Credit Reference Agencies and Fraud Prevention We will exchange Personal Information with credit reference agencies. You agree that we may obtain Personal Information about you from these agencies, including where relevant, your spouse, and any business in which you are involved (including details of your directors or partners in business). For the purposes of this Agreement, you may be treated as financially linked to such persons ("financial associates") and you will be assessed with reference to their "associated records". When you apply If you are a director, we will seek confirmation from credit reference agencies that the residential address that you provide is the same as that shown on the restricted register of directors’ usual addresses at Companies House. Credit reference agencies will record information about your business and its proprietors and may create a record of the name and address of your business and its proprietors if there is not one already. During the lifetime of your Account We will continue to make searches at credit reference agencies to assist in managing your Account and this will include looking at the associated records of your financial associates. These searches will not be seen or used by other organisations to assess your ability to obtain credit. We will also carry out further credit checks whilst any money is owed by you on your Account (including contacting your bank, building society or any referee approved by you). We may tell credit reference agencies the current balance on your Account and we may tell them if you do not make payments when due. They will record this information on your personal and business credit files (as applicable) and it may be shared with other organisations for the purpose of assessing applications from you, and applications from any other party with a financial association with you, for credit or other facilities, for other risk management purposes and for preventing fraud and tracing debtors. Records shared with credit reference agencies remain on file for 6 years after they are closed whether settled by you or defaulted. We will analyse Personal Information to assist in managing your Account and to prevent fraud or any other unlawful activity. We and other organisations may access and use your Personal Information to prevent fraud and money laundering, for example, when: • checking details on applications for insurance, credit and credit related or other facilities; • managing credit, credit related accounts or facilities, and insurance policies; • recovering debt; • checking details on applications, proposals and claims for all types of insurance; or • checking details of job applicants and employees. We and other organisations may access and use from other countries the information recorded by fraud prevention agencies. For security, anti-fraud measures and regulatory purposes we may also share personal data about you, your Account and the details of any payments you make to us with third parties, such as with your bank, building society or payment card issuer and with local regulatory authorities. You are entitled to access your personal records held by credit and fraud prevention agencies. If you wish to do this, or to receive details of the relevant UK fraud prevention and credit reference agencies, please write to us at the following address and we will supply the names and addresses of the agencies we have used: American Express Services Europe Ltd, New Accounts Dept (OCU), P.O. Box 149, Brighton BN88 1AH1NH. Further information about how your Personal Information may be used by credit reference agencies and fraud prevention agencies is available upon request.

Privacy Statement. What is this document? This privacy statement describes how American Express collects, uses and shares information about you. If you interact with us online, there is a separate Online Privacy Statement available at xxxxxxxxxxxxxxx.xx.xx that describes how we collect and use information about you in that context, including where information provided online is combined with personal information which is collected as described in this privacy statement. We therefore ask that you also take time to consider the Online Privacy Statement. Information Collected We will collect information about you (Personal Information) from: • your Card Account (Account) application form and other forms you provide to us; • checks at credit reference agencies and fraud prevention agencies including personal and business records (if relevant); • you, in order to manage your Account and through the way you use your Account and our other services including transactions made using your Account with merchants or ATM operators; • surveys and statistical research; • third parties, such as in marketing lists which we lawfully obtain. We may also obtain Personal Information from the parties listed in the 'Information Disclosed' section below. Information Disclosed We may disclose Personal Information (which may include details of goods and/or services you purchase) to: • companies within the worldwide American Express group of companies including our joint ventures and joint ventures of our group, both current and in the future, as we develop new business either on our own or with others (our Group), third parties who process transactions submitted by merchants on the American Express network where you use your Card (worldwide); • parties who distribute the card; • any other co-branded partner set out in the agreement governing use of your Account; • any party approved by you, including any loyalty partners that you connect to your Membership Rewards account and, dependant on your card product, any partners available in your card benefits programme with whom you choose to enrol; • our processors and suppliers; • the providers of services and benefits associated with your Account; • collection agencies and lawyers for the purpose of collecting debts on your Account. • parties who accept the card in payment for goods and/or services purchased by you; and • anyone to whom we may transfer our contractual rights. Use of Information We may use Personal Information, including aggregated or combined with other information for any of the following purposes: Delivering our products and services to you This will include: • processing applications for our products including making decisions about whether to approve your application; • helping us better understand your financial circumstances and behaviour so that we may make decisions about how we manage your Account, such as whether to approve transactions, including transactions that you make using digital card wallet technologies on mobile devices; • administering and managing your Account including to process transactions you make on your Account; • communicating with you, including by e-mail, SMS or any other electronic method about any American Express accounts, products, and services which you hold (including for the purpose of servicing and by way of Account alerts); • giving you important information about updated and new features and benefits; • answering questions and responding to your requests; and • administering, servicing and managing any benefits or insurance programmes provided alongside your card; We may use Personal Information to prepare reports for third party business partners about Account usage. Reports only contain aggregated and anonymised data and we will not disclose any information which identifies you. Improving our products and services and to conduct research and analysis This will include: • learning about you and other customers, including your needs, preferences and behaviours; • analysing the effectiveness of our ads, promotions and offers; and • conducting testing (when we update our systems), data processing, website administration and information technology systems support and development • conducting market research including to give you the opportunity to provide feedback, ratings or reviews of our products and services, and those of our third party business partners, including through transaction experience surveys; and • producing data analytics, statistical research and reports including on an aggregated basis Advertising and marketing our products and services, and those of our third party business partners This will include any of the following (with your consent, where necessary): • sending you promotions and offers by email, SMS, any other electronic method, direct mail and through telemarketing in accordance with your marketing preferences; • personalising our communications and offers for you; and • determining whether you would be interested in new products or services. We do not provide your contact details to our third party business partners without your express consent. However, we may send you offers on their behalf. Keep in mind that, if you take advantage of an offer from a business partner and become their customer, they may independently send communications to you. In this case, you will need to inform them separately if you wish to decline receiving future communications from them. Managing risks relating to our business, including credit risk, fraud risk and operational risk This will include: • making decisions about how we manage specific customers’ accounts, such as whether to approve individual transactions; • developing risk management policies, models and procedures used in the management of customers’ accounts and our business generally; • reporting information to and receiving information from credit reference agencies and fraud management agencies including personal and business records. Your data may also be used for other purposes for which you give your specific permission or, in very limited circumstances, when required by law or where permitted under the terms of the Data Protection Act 1998. Supplementary Cardmembers The provisions of this privacy statement also apply to any Supplementary Cardmember(s) approved to use your Account. Where you have approved the issue of a Supplementary Card: • you consent to us disclosing to the Supplementary Cardmember details about the status of your Account including details of transactions, the total Account balance and details of any overdue payments; • you consent to the Supplementary Cardmember providing us with personal information about you for additional identity authentication purposes when they contact us in relation to the use of their card including to activate cards, to register for on-line services and to access enhanced and new services as they are introduced; and • Supplementary Cardmembers will not be permitted to make any alteration to any of your information or details held unless you have provided us with your express consent for them to do so. Third Party Consents Where you provide us with information relating to a third party (including Supplementary Cardmembers), or where you purchase goods and/or services on behalf of a third party, you confirm that you have informed and obtained consent, if necessary, of that third party to the processing of his or her information by American Express and third parties as described in this privacy statement and that you have brought this privacy statement, and our Online Privacy Statement to their attention prior to providing their information to us. In respect of Supplementary Cardmembers, this may include the use of his or her details for our Group marketing purposes or disclosure for the purposes set out in detail in the "Credit Reference Agencies and Fraud Prevention" section below. Marketing We and other companies within our Group may: • have access to and use information about you and how you use your Account to identify goods and services in which you may be interested; • market offers to you (by mail, e-mail, telephone, SMS, via the internet or using other electronic means) in relation to goods and services which are similar to any American Express accounts, products, and services which you hold that we think you may be interested in; and • market other offers to you (by mail, email, telephone, SMS or via the internet) in relation to other products and services that we think you may be interested in. If you wish to opt out of receiving marketing from us and other companies within our group at any time, we recommend you go to xxxxxxxxxxxxxxx.xx.xx, log in, and update your privacy preferences. If you prefer, you can call us using the telephone number on the back of your card or write to us at the address below in the 'Query or Complaint' section of this privacy statement. We will also, from time to time, contact you to ensure that the information we hold about your marketing preferences is up to date. The information used to develop marketing lists may be obtained from: • your application form; • transactions made using your card with merchants; and; • surveys and research (which may involve, where allowed, contacting you by mail, email, telephone, SMS or via the internet); and • from external sources such as merchants or marketing organisations, to the extent permitted by law. Credit Reference Agencies and Fraud Prevention We will exchange Personal Information with credit reference agencies. You agree that we may obtain Personal Information about you from these agencies, including where relevant, your spouse, and any business in which you are involved (including details of your directors or partners in business). For the purposes of this Agreement, you may be treated as financially linked to such persons ("financial associates") and you will be assessed with reference to their "associated records". When you apply If you are a director, we will seek confirmation from credit reference agencies that the residential address that you provide is the same as that shown on the restricted register of directors’ usual addresses at Companies House. Credit reference agencies will record information about your business and its proprietors and may create a record of the name and address of your business and its proprietors if there is not one already. During the lifetime of your Account We will continue to make searches at credit reference agencies to assist in managing your Account and this will include looking at the associated records of your financial associates. These searches will not be seen or used by other organisations to assess your ability to obtain credit. We will also carry out further credit checks whilst any money is owed by you on your Account (including contacting your bank, building society or any referee approved by you). We may tell credit reference agencies the current balance on your Account and we may tell them if you do not make payments when due. They will record this information on your personal and business credit files (as applicable) and it may be shared with other organisations for the purpose of assessing applications from you, and applications from any other party with a financial association with you, for credit or other facilities, for other risk management purposes and for preventing fraud and tracing debtors. Records shared with credit reference agencies remain on file for 6 years after they are closed whether settled by you or defaulted. We will analyse Personal Information to assist in managing your Account and to prevent fraud or any other unlawful activity. We and other organisations may access and use your Personal Information to prevent fraud and money laundering, for example, when: • checking details on applications for insurance, credit and credit related or other facilities; • managing credit, credit related accounts or facilities, and insurance policies; • recovering debt; • checking details on applications, proposals and claims for all types of insurance; or • checking details of job applicants and employees. We and other organisations may access and use from other countries the information recorded by fraud prevention agencies. For security, anti-fraud measures and regulatory purposes we may also share personal data about you, your Account and the details of any payments you make to us with third parties, such as with your bank, building society or payment card issuer and with local regulatory authorities. You are entitled to access your personal records held by credit and fraud prevention agencies. If you wish to do this, or to receive details of the relevant UK fraud prevention and credit reference agencies, please write to us at the following address and we will supply the names and addresses of the agencies we have used: American Express Services Europe Ltd, New Accounts Dept Dept. (OCU), P.O. Box 149Xxx 000, Brighton BN88 1AHXxxxxxxx XX00 0XX. Further information about how your Personal Information may be used by credit reference agencies and fraud prevention agencies is available upon request.