Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
The company's privacy policy indicates significant risks related to data sharing for targeted advertising (data_use-1) and the broad collection of your personal data from various third-party sources. The company also retains your personal data for extended periods (risk_flags-3) and may transfer it outside your jurisdiction, including to the US, where data protection laws may differ (risk_flags-1). Furthermore, the policy outlines broad disclosure rights for legal and business purposes and explicitly does not respond to "Do Not Track" signals (gotchas-1).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
3 findings
Clauses that can create a significant risk of harm to the user, either financial, privacy, or other material issues. These are often difficult to reverse.
Not clearly stated: The policy mentions that security measures are commercially reasonable, but provides no definitive guarantee of security, as no measures are absolute. This is a common and reasonable disclaimer, so it is not flagged as a full concern.
high95% confidence
Data Transfer to the US
Your personal data may be transferred, stored, and used outside of your state, province, or country, specifically to the United States for processing, where data protection laws may differ.
Why it matters: Your personal data may be transferred to and processed in the United States, where the data protection laws might be different from those in your jurisdiction. This could mean your personal data may be subject to access requests from governments, courts, law enforcement agencies, or regulatory agencies in the US.
We may transfer, store, and use information we collect and maintain about you, including personal data outside of your state, province, country or other governmental jurisdiction. For example, if you are located outside the United States and choose to provide information to us, please note that we transfer personal data to United States and process it there. The data protection laws in the jurisdiction in which we process personal data may differ from those of your jurisdiction, and in certain circumstances, your personal data may be subject to access requests from governments, courts, law enforcement agencies or regulatory agencies in those other jurisdictions.
6\. Data Transfers, paragraph 1 · Citation strength: strong
medium85% confidence
One-Sided Right to Change Privacy Policy
The company states it may change the Privacy Policy and will update the "Last Updated" date. Material changes will be communicated via email and/or a prominent notice on the site, prior to them becoming effective.
Why it matters: The company can change its Privacy Policy at any time. While material changes will be announced via email or site notice, these updates can go into effect quickly, potentially altering how your data is handled without your explicit consent or a long window for you to review and react.
From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage. We will let you know about material changes via email and/or a prominent notice on our Site, prior to the changes becoming effective and will update the “Last Updated” date at the top of this Privacy Policy. Changes to this Policy are effective when they are posted on this page. We recommend reviewing this Privacy Policy periodically.
Personal data is retained as long as necessary to fulfill collection purposes, comply with legal obligations, resolve disputes, and enforce legal agreements and policies. Some data may be retained for internal analysis for a shorter period, unless needed for security, service improvement, or legal obligations requiring longer retention.
Why it matters: Your personal data might be kept for an extended period, depending on various factors like ongoing relationships, legal obligations, or potential litigation. This means your data may be retained even after you stop using the services or if the initial purpose for collection is fulfilled.
We retain your personal data for as long as necessary to fulfill the purposes for which we collect it, to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. We will also retain certain personal data for internal analysis purposes. This information is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Services, or we are legally obligated to retain this data for longer time periods.
[Back to Top](https://www.amctheatres.com/privacy-policy#top), paragraph 2 · Citation strength: strong
Data Use
3 findings
How the company collects, uses, and shares your data.
Not clearly stated: The policy states that the use and disclosure of aggregated, de-identified, and anonymized information is not personal data or subject to this Privacy Policy. This is a common claim, but the level of actual de-identification can be difficult to verify and may still carry residual re-identification risks.
medium90% confidence
Broad Data Sharing with Third-Party Ad Platforms
The company may "sell" and/or "share" personal data with third-party advertising platforms and analytics providers for purposes of providing targeted behavioral advertising on those platforms. Categories such as Identifiers, Internet or Other Electronic Network Activity Information, Geolocation Data, Commercial Information, Characteristics of Protected Classifications, and Inferences have been sold or shared.
Why it matters: Your personal data, including identifiers, browsing history, location, commercial information, demographic characteristics, and inferred preferences, may be shared or sold to advertising and analytics platforms for targeted advertising. This means third parties could use your data to show you personalized ads based on your online activities, potentially increasing ad exposure.
We may “sell” and/or “share” personal data with third-party advertising platforms and analytics providers for purposes of providing targeted behavioral advertising on those platforms. In the last 12 months (from the last updated date listed at the top of this Privacy Policy), we have “sold” or “shared” the following categories of personal data:
**C. Disclosure of Personal Data**, paragraph 2 · Citation strength: strong
medium90% confidence
Targeted Advertising and Marketing by Third Parties
The company discloses personal data to third-party advertising and analytics providers, including those who serve advertising about their services to others and third parties who use cookies for interest-based advertising and content on their platforms, which may be based on user preferences, location, and/or interests.
Why it matters: Your personal data is shared with third-party ad platforms to deliver targeted advertising and content to you on those platforms, which could increase the amount of personalized ads you see across different services and websites, based on your online activities and interests. This means your data is used for commercial profiling.
Additionally, in the last 12 months we have disclosed personal data to third-party advertising and analytics providers, including those who assist us in serving advertising regarding our Service to others who may be interested; and third parties who use cookies to serve interest-based advertising and content on their respective third-party platforms that may be based on your preferences, location and/or interests.
[Back to Top](https://www.amctheatres.com/privacy-policy#top), paragraph 3 · Citation strength: strong
medium85% confidence
Limited Control Over Third-Party Links
The site may contain links to other websites not under the company's control, and the company accepts no responsibility or liability for these external sites.
Why it matters: When you click on links that take you to external websites, you leave the company's site and are no longer protected by their policy. These third-party sites may have different privacy practices and security measures, potentially exposing your data or activities to risks outside the company's responsibility.
The Site and Services may contain links that will let you leave the Site and Services and access another website. Linked websites are not under our control. We accept no responsibility or liability for these other websites.
9\. Third Party Links, paragraph 1 · Citation strength: strong
Cancellation & Renewal
Not clearly stated
How to stop using the service and what happens when you do.
?
Not clearly stated
No cited billing terms — wording is unclear
The policy does not address auto-renewal explicitly, but does mention that if a user opts out of certain financial incentives, the value of those incentives will not be reduced if previously received. The policy also does not have any details regarding standard service cancellation details, such as how to cancel an account or service, any cancellation fees, prorated refunds, or if your data will be deleted upon cancellation.
Gotchas
2 findings
Unexpected or less common clauses that may be a surprise to users.
low85% confidence
No Response to Do Not Track Signals
The company does not interpret, respond to, or alter its practices when it receives "Do Not Track" signals from internet browsers.
Why it matters: The company does not acknowledge or respond to "Do Not Track" signals from your browser, meaning it will continue to track your online activity despite your browser's setting. This can contradict your privacy preferences, although other opt-out mechanisms are available.
Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the Site does not currently interpret, respond to, or alter its practices when it receives “Do Not Track” signals. However, as noted above, the Site does respond to GPC signals and you can otherwise opt out of our us of non-essential Cookies through [Your Privacy Choices.](https://www.amctheatres.com/your-privacy-choices)
**C. How You Can Opt Out of Cookies**, paragraph 4 · Citation strength: strong
low85% confidence
Fees for Excessive or Repetitive Requests
The company does not charge a fee for processing or responding to verifiable consumer requests unless the request is excessive, repetitive, manifestly unfounded, or in accordance with applicable law.
Why it matters: Should your privacy requests be deemed excessive or unfounded, you might incur a fee to have them processed. This could deter you from making multiple or frequent requests regarding your personal data.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, manifestly unfounded, or in accordance with applicable law. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. You may be limited in how many verifiable or authenticated consumer requests you make within a twelve (12) month period.
11\. Your Privacy Rights, paragraph 6 · Citation strength: strong
Protections
1 finding
Transparency and user-friendly commitments that benefit you.
Protection90% confidence
Right to Withdraw from Financial Incentives
Users have the right to withdraw from financial incentives, such as loyalty programs, at any time without reducing the value of previously received incentives.
Why it helps: You have the freedom to opt out of loyalty programs or other financial incentives when you choose, ensuring that your prior benefits remain intact. This protects you from losing accumulated value if you decide to stop participating.
You have the right to withdraw from the financial incentive at any time. If you opt out of receiving a financial incentive, we will not reduce the value of any financial incentives you previously received from us. If you wish to withdraw from receiving the financial incentive, you may submit such a request at any time by deleting your AMC Stubs loyalty account or submitting a request through our interactive webform [here](https://submit-irm.trustarc.com/services/validation/84511c21-bf8d-4b8a-9e74-78e087a30ea0) or by calling us at 1-800-576-7849.
**D. How long do we retain personal data?**, paragraph 5 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.