Privacy Policy

3/15/2011

Section 1 — Introduction

At Amtrak, we respect your privacy and value the trust and confidence you place in us. We are committed to safeguarding your privacy while you're using the (PASS) web site. This privacy policy (referred to on this page as the "Policy") describes our commitment to your privacy. By using the Amtrak.com web site (referred to here as "Amtrak.com" or the "site", and accessible on the Web at www.amtrak.com), you acknowledge that you understand and expressly agree to this Policy.

When you use Amtrak.com, we may collect information about your visit to the site and information that you provide.

Please note that this Policy only addresses Amtrak privacy practices concerning information we collect from the (PASS) web site (http://pass.amtrak.com) and not other sites or other sources. This policy does not apply to information that we may collect from any other source or from other Amtrak activities or programs.

Please carefully read this Policy before completing the PASS website registration form.

A Note About Changes to This Policy

Please note that this Policy may change without special notice to you. Please check back to review this Policy whenever you visit the site, as you will be deemed to have read, understood, received notice of, and agreed to any changes. This Policy supercedes all previous statements or policies concerning Amtrak's collection of personal information from the Amtrak.com website.

The date of the last update to this Policy is always indicated near the top of the page and any change in the date of this Policy since the last time you had visited the site shall constitute notice to you that the Policy has changed since the last time you visited the site. You may also see periodic statements displayed on the site notifying you that our Policy has changed, especially in places where we collect personal information from you. The last update to this Policy shall also be its effective date.

Section 2 — The Personal Information We Collect from You on Amtrak PASS.com and How We Collect It

We collect personal information in several ways from several different parts of the site. The information we collect includes two basic kinds: (1) information that can identify you as a specific individual, such as your name, telephone number, or e-mail address, and (2) information that we use only as data in the aggregate. We do not knowingly collect personal information from individuals under the age of 13. We ask for and collect personal information in the following circumstances:

1. When you register on Amtrak PASS.com

When you register on Amtrak PASS.com and create a registration card, we ask for the following personal information:
First name
Middle initial
Last name
Number and Street (or PO box)
City
State
Zip Code
Home telephone number
Mobile telephone number
E-mail address
Date of birth
Gender

2. When you contact us through the site

If you contact Amtrak.com through our 'Contact Us' page, we may keep a record of that correspondence which includes your e-mail address and any other information you provide to us in your correspondence.

3. When you browse and otherwise use the website (Cookies)

Each time you visit Amtrak PASS.com, we collect some information automatically about your computer by means of a "cookie". A cookie is a small amount of data that is sent to your browser from a web server and stored on your computer's hard drive. You can always choose not to receive cookies by setting your web browser's options to refuse to accept cookies.

Generally, we use cookies to:

• Remind us of who you are and to access your account information (stored on our secure servers) to deliver to you a better and more personalized service. This cookie is set when you begin the booking process or enter your login ID and password.
• Estimate our audience size. Each browser accessing the site is given a unique cookie, which is then used to determine the extent of repeat usage, usage by a registered user versus by an unregistered user, and to help target advertisements based on your interests and behavior.
• Measure and track certain traffic patterns, including information like the areas of the site you have visited, and your visiting patterns in the aggregate. We may use this information to better personalize the content, banners, and promotions that you and other users will see on the site.
• In addition, we collect certain technical information from your computer each time you request a page during a visit to the site. This information is collected from your computer's Web browser and may include your IP address, operating system and Web browser software (e.g., Internet Explorer or Netscape).

Section 3 — How We Use Your Personal Information

We use the information that you provide or that we otherwise collect while you are using the site in the following ways:

• To help us refine site design and layout, improve site content, and compile demographic information about site visitors.
• To help us understand how customers use our site.

Section 4 — With Whom We Share Your Personal Information

Your California Privacy Rights
If you are a California consumer, upon your request (see Section 8 of this Policy entitled “Contacting Us Regarding This Policy”), we will disclose to you what personal information of yours was shared with what third party business partners within the immediately preceding calendar year (including disclosing to you our partners' names and addresses) if such information was used by our partners for their marketing purposes.

Data in the Aggregate

We may disclose aggregated user statistics (for example, a statistic indicating that 45% of our users are female) to describe our services to prospective partners, selected third parties, and for other lawful purposes.

Reservation of Rights

We reserve the right to disclose personal information when we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be violating this Policy or who may be causing injury to or interference with (either intentionally or unintentionally) Amtrak's rights or property, other Amtrak users, or anyone else who could be harmed by such activities. We may disclose or access account information for administrative or other purposes that we deem necessary to maintain or improve our products, services or the operation of this site, for law enforcement purposes, or when we believe in good faith that the law requires it.

Other Sites May Collect Information

Please also be aware that when you click on an advertisement on another site that is linked to Amtrak.com, or when you otherwise use websites that link to the Amtrak PASS.com site, your personal information may be collected by those sites. This Policy does not cover the privacy practices of any such other websites, and we cannot accept responsibility or liability for the privacy practices of those other sites. Please refer to those sites' privacy policies for information about their practices.

Section 5 — What Security Precautions We Have in Place to Protect the Loss, Misuse, or Alteration of Your Personal Information

When you complete the registration form on the site, we use SSL ("Secure Sockets Layer") encryption technology to safeguard the confidentiality of your personal information as it travels over the Internet. Once we receive your information, it is stored offline in our secure data center. We protect against unauthorized access all of the customer data we collect by means of firewalls and other security measures.

Remember to sign out of your Amtrak PASS account and close your browser window when you have finished. This is to ensure that others cannot access your personal information and correspondence if you share a computer with someone else or are using a computer in a public place like a library or Internet "cafe."

When you give Amtrak personal information online, that information may be sent electronically to servers outside and separate from Amtrak and outside of the state where you originally entered the information. In addition, that information may be used, stored, and processed outside of Amtrak and outside of the state where you entered that information. Whenever we handle personal information as described above, regardless of where this occurs, we take steps to ensure that your personal information is treated securely.

Unfortunately, no data transmission over the Internet can be guaranteed to be absolutely secure. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security of any information you transmit to Amtrak PASS.com, and you do so at your own risk. Once we receive your transmission, we make our best effort to ensure its security on our systems. However, we cannot accept liability for disclosure of any personal information due to errors in transmission or unauthorized ads or errors and omissions of third parties.

Section 6 — Contacting Us Regarding This Policy and Regarding Your California Privacy Rights

California Civil Code § 1798.83 entitles residents of California to request information concerning with which third parties Amtrak has shared personal information in the immediately preceding calendar year for those third parties’ direct marketing purposes. California residents may submit one request per calendar year in the form of a report that details: (a) what types of information Amtrak shared, (b) with whom Amtrak shared such information and (c) the nature of the third parties’ businesses.
If you have questions or concerns regarding this Policy, you may use the form on the 'Contact Us' page at the top of most pages on the Amtrak.com website. Select California Privacy Rights from the drop-down menu on the page. Be certain to provide your complete mailing address on the form. You may access the 'Contact Us' page by clicking the link at the top of most pages on this site.

California residents may also submit their request for this report by mail to:

Amtrak Office of Customer Relations
60 Massachusetts Avenue, NE
Washington, DC 20002
Attention: California Privacy Rights Request