Effective August 2004

Recent changes include updates to comply with California statute.

AMERICAN EXPRESS INCENTIVE SERVICES, L.L.C PRIVACY STATEMENT
TYPES OF PERSONALLY IDENTIFIABLE INFORMATION COLLECTED ON OUR WEB SITES
HOW WE USE PERSONALLY IDENTIFIABLE INFORMATION
HOW WE USE YOUR EMAIL ADDRESS
TRACKING
SECURITY
SECURITY Q & A
ACCEPTING AND DECLINING E-MAIL OFFERS
COMPANY COMMITMENT TO PRIVACY

AMERICAN EXPRESS INCENTIVE SERVICES, L.L.C PRIVACY STATEMENT
Protecting your privacy is important to us. The following statement is intended to help you understand how American Express Incentive Services, L.L.C. "(AEIS"), a joint venture of Maritz and American Express, collects, uses, and safeguards the personally identifiable information ("PII") you provide to us on our websites.

TYPES OF PERSONALLY IDENTIFIABLE INFORMATION COLLECTED ON OUR WEB SITES
When you become a registered user of any of our Web sites, and enroll in online products or services provided by AEIS, you provide us with PII such as your name, address, card number, e-mail address and telephone number.

Becoming a registered Web user enables you to review confidential account information for the service(s) in which you are enrolled, and to perform other confidential transactions. After you have become a registered Web user we may obtain additional PII, such as information we have about you as an AEIS customer, your usage of our site, and your usage of the American Express online services in which you enroll.

Whether or not you are a registered user on our site, if you purchase or apply for AEIS products or services on aeis.com, we may request that you provide your name, address, telephone number, e-mail address, and other PII in order to provide the product or service to you or to process your application for the product or service. And, if you receive an e-mail offer from AEIS, we record whether or not you "click through" to view the email, content attached, and respond to the offer.

HOW WE USE PERSONALLY IDENTIFIABLE INFORMATION
We use information collected on our site to process transactions you conduct on our Web site, and to process applications and deliver the products and services you enroll in or for which you apply. To do this, it is often necessary to share this information with carefully selected vendors and business partners with whom we work, such as companies that manage accounts and companies that perform marketing services or other business operations for us. We also use it, together with information we have about you as an AEIS customer, publicly available information, and preferences you indicate, to customize your online experience and to provide you with more relevant offers and updates.

HOW WE USE YOUR EMAIL ADDRESS
We may use your e-mail address to send you the following types of e-mail messages:

• Service notifications related to your account(s).
• Occasional updates about our products and services as well as marketing offers.
• Regularly scheduled e-mail newsletters related to the AEIS products or services in which you are enrolled. 

[Back to Top]

You may decline to receive non-service related e-mail offers from AEIS at any time by clicking here, or the appropriate link contained within each email.

We do not share your e-mail address with other companies for them to market their products or services to you. When we hire vendors to deliver e-mails to you on our behalf, they cannot use your e-mail address for any other purpose. To make our e-mail offers more relevant to you, we may use information you provided in your initial transaction with us, in surveys, from information we have about you as an AEIS customer - such as purchasing preferences or lifestyle - and information available from external sources such as census bureau data.

When we send e-mail to you, we may be able to identify information about your e-mail address, such as whether you can view graphic-rich HTML e-mail. If your e-mail address is HTML-enabled, we may choose to send you graphic-rich HTML e-mail messages.

TRACKING
When you browse our websites and have not registered for any online service from AEIS, personally identifiable information-such as your name, address, phone number, and e-mail address-is not collected. However, we track how our site is used by both visitors and our registered customers. AEIS uses WebTrends On-Demand service to collect and analyze our web traffic data. Click here to read the WebTrends Privacy Policy.

[Back to Top]

SECURITY
When sending PII to us on an AEIS website, we establish a "secure session" using Secure Socket Layer (SSL), or Secure Electronic Transaction (SET) protocol when available.

Some of our websites may require that you provide us with PII. Before this data is transmitted, these sites will first establish a "secure session" using SSL. SSL technology encodes information as it is being sent over the Internet between your computer and our systems, helping to ensure that the information remains confidential. For further information about SSL and how we safeguard PII data transmission over the Internet, please read our Security Q & A below.

Your browser will contain an indicator of whether or not you are transmitting data in a secure session. For example, a key or lock symbol may appear in the bottom bar to indicate you are visiting a secure site. Refer to your browser's help feature to find out more about how your browser indicates that a secure session has been established.

AEIS realizes how important security is to you, and we take seriously our responsibility to protect the PII you may provide us over the Internet.

You should be aware that e-mail is not a completely secure channel of communication at present. Please do not use e-mail to send us PII and other sensitive information such as account numbers, social security numbers, PIN numbers, mother's maiden name, or passwords, home address or phone number.

We are continually seeking technical solutions to assure the confidentiality and security of all the information you provide to us online. We will keep you informed on our websites when we implement significant new safety enhancements.

SECURITY Q & A
AEIS realizes how important security is to you, so we've taken a number of steps that help enhance the safety and confidentiality of transmissions of PII and other confidential information sent from AEIS over the Internet.

Q. Is my confidential information secure?
A. Whenever AEIS asks you to send PII or other confidential information over the Internet, such as card numbers, ID and Passwords, we require that a "secure session" using SSL first be established.

Q. What is a "secure session" and how does it help keep my information safe?
A. During a secure SSL session, data passed back and forth between your computer and AEIS systems is secured by using public key cryptography. Your computer exchanges key information with AEIS computers in a "private conversation" that only your computer and AEIS systems can understand.

Q. What specifically is SSL?
A. Any time you access or supply card account information or PII in one of our secure online areas, that information is encrypted by a technology called Secure Socket Layer, often abbreviated as SSL. SSL technology secretly encodes information as it is being sent over the Internet between your computer and AEIS systems, helping to ensure that the information remains confidential. The use of SSL requires two components: an SSL-compatible browser and a web server to perform the "key-exchange" that establishes an SSL connection to AEIS web server systems.

Q. What type of browser do I need?
A. To benefit from SSL technology, you will need a browser with SSL capabilities. Examples of SSL browsers include Netscape 2.0 and above, Microsoft's Internet Explorer 2.0 and above, and the web browser for America Online version 3.0 for Windows and above. (Note that some older versions of browsers will not support SSL sessions.) If you don't already have a browser with SSL capabilities, you can download a SSL browser from the links below.

Netscape Navigator
Microsoft's Internet Explorer
AOL

In order to securely access your PII or confidential information via the Internet, we recommend that you use the latest browser versions available.

[Back to Top]

Q. What type of connection do I need?
A. Nearly all Internet Service Providers (ISPs) automatically enable the SSL session described above, as do most online services such as America Online, CompuServe, and SBC Prodigy. If you use your company's internal connection to access the Internet and you find you cannot access AEIS secured pages with an SSL browser described above, your company may be blocking access via a "firewall." Please speak to your firm's Internet access systems administrator for further details on your network's Internet access.

Q. When do I enter into a "secure SSL session?"
A. Secure SSL sessions are established in AEIS online service areas where clients are providing any type of ordering information online or cardholders are providing any type of card-related information (card number, card expiration, and card security identification number) or other PII online.

Q. Why do I need an ID and password?
A. Some areas require the use of an ID and password as an additional security measure that helps protect your PII and other confidential information.

Q. Why can I still see some of my secured information even after I have pressed the "Exit Secure Area" link?
A. Browser software often "caches" pages as you look at them, meaning that some pages are saved in your computer's temporary memory. Therefore, you may find that clicking on your back button shows you a saved version of a previously viewed page. Please keep in mind that caching in no way affects the security of your confidential User-ID or password. If you use your computer in a public place, please read "What should I do if I am using a 'public' computer?" below.

Q. What should I do if I am using a "public" computer?
A. If you use a computer on which others also work and you are uncomfortable that they may view "cached" pages after you have left the station, then please quit/exit your browser software before leaving the computer station. Exiting the software will decrease the possibility of anyone viewing your PII or other confidential information. Other users will not be able to access your card account information online without your User-ID and password.

[Back to Top]

ACCEPTING AND DECLINING E-MAIL OFFERS
Although most customers tell us they appreciate receiving notice of carefully designed opportunities, we recognize the importance of providing you with choices. At any time, you may request to discontinue receiving these offers from us by simply opting out.

• By opting out, you request AEIS not send you email communications concerning opportunities. We do, however, retain the right to provide service updates to you via email.
• By opting-in, you request AEIS send carefully designed email communications about opportunities and service offers to you at the email address you provide.
• You may opt-in or opt-out at any time by clicking here and entering your Fist Name, Last Name, Email Address and Opt-In or Opt-Out preferences.

COMPANY COMMITMENT TO PRIVACY
AEIS, in conjunction with American Express and Maritz, is actively involved with current industry initiatives to preserve individual privacy rights on the Internet and in all aspects of electronic commerce. This Internet Privacy Statement is currently applicable only to our United States customers and U.S. visitors to our website.

[Back to Top]