Privacy Notice
1. Background and scope
FlightCentre Travel Group is one of the world's largest travel agency groups. We need to collect, use and disclose personal information in order to perform ourbusiness functions and activities, including making and managing travel bookings on behalf of our customers. We are firmly committed to protecting the privacy and confidentiality of personal information/personal data and tomaintaining various physical, electronic and procedural safeguards to protectpersonal information in our care.
ThisPrivacy Notice (“Notice”) sets out how this Flight Centre Travel Group businessor application processes and protects the privacy of your personal information.It applies to all individuals with the exception of residents of California(see section 2).
For the purposes of the General Data Protection Regulation 2016/679 (“GDPR”) and other similarly situated legislation we are a “data controller” (or equivalent) for the processing of personal information you provide to us in connection with:
· our provision of business travel products and services;
· event management services;
· the provision of leisure travel products and services; and
· for the purpose of all our marketing activities.
There may be instances where your local data protection laws impose more restrictive information handling practices than the practices set out in this Notice. Where this occurs, we will adjust our information handling practices in your jurisdiction to comply with your local data protection laws.
2. California PrivacyNotice and Rights
Residents of California must refer to our California Consumer Privacy Act (“CCPA”) Privacy Notice, accessed via this link. Our CCPA PrivacyNotice sets out how Flight Centre processes personal information in compliancewith California law including the CCPA.
3. What personalinformation do we collect?
Personal information has the meaning given under your local data protection law and, where the GDPR applies, the meaning of personal data given under the GDPR.Personal information generally means information which relates to a living individual who can be identified from that information, or from that information and other information in a person’s possession, including any expression of opinion, whether true or not, and whether recorded in material form or not, about an identified or reasonably identifiable individual, and any indication of intention in respect of an individual.
Generally, the type of personal information we collect about you is the information thatis needed to facilitate your travel arrangements and bookings and to arrangetravel related products and/or services on your behalf.
Wetherefore typically process the following types of personal information about you:
· Identifiers
o contact information (such as name, residential/mailing address, telephone number, email address);
o date of birth;
o passpor tdetails, national identity card details, driver’s license details;
o online identifiers (such as IP address, device data, and network information);
o loyalty program / frequent flyer details;
· Commercial Information, including records of products or services purchased, obtained, orconsidered, or other purchasing or consuming histories or tendencies;
· Biometric information;
· Internetor other electronic network activity (such as the device and network you areusing to connect with us), as further described in section 12;
· Geolocation data;
· Audio (such voice recordings for quality control, service improvement, training anddispute resolution), electronic and visual information (such as videosurveillance footage) used for security purposes,
· Professional or employment-related information;
· Payment account information (credit/debit card details, including card type, card number, security number and expiry date and other financial details necessary to process various transactions);
· Health information such as your dietary requirements and health issues (if any); and
· Other details relevant to your travel arrangements or required by the relevant travel service provider(s) (e.g., airlines and accommodation or tour providers).
When you contact us for other purposes, we may also collect personal information about you in relation to those purposes. For example, we may collect your personal information so we can contact you about a competition you have entered (e.g., if you win), or to respond to an enquiry or complaint you have made, or feedback you have provided to us. We also collect information that is required for use in the business activities of Flight Centre and our related entities, including for example, financial details necessary to process various transactions, and other relevant personal information you may elect to provide to us. We may process this information using Artificial Intelligence technologies (“AI”) to better understand your preferences and improve orautomate our services
In some circumstances, we may collect personal information from you which may be regarded as sensitive information under your local data protection laws. Sensitive information may include (without limitation) your racial or ethnic origin, philosophical or religious beliefs oraffiliations, sexual orientation, membership ofpolitical, professional or trade associations (for use in booking special rates), biometric and genetic information, passwords, financial information and healthinformation. Please note that, when necessary for travel arrangements, we may collect from a responsible adult personal information relating to a child of any age, but we do not knowingly collect any such information directly from children.
We will only collect sensitive information in compliance with your local data protection laws, with your explicit, voluntary consent and where it isreasonably necessary for, or directly related to, one or more of our functions or activities (e.g., to provide travel-related products and services), unless weare otherwise required or authorised to do so by law. To the extent permittedor required under your local data protection laws, you voluntarily consent to us using and disclosing your sensitive information for the purpose for which it was collected. For example, if you provide health information to us in connection with a travel insurance application you would like to make, you voluntarily consent to us using and disclosing that health information in connection with arranging that travel insurance on your behalf. A further example is if you disclose your religious beliefs to us because you are interested in, for example, certain holiday packages, in which case you voluntarily consent to us using and disclosing that information in connection with facilitating your request. We will not use or disclose sensitive information for purposes other than those for which it was collected, unless we subsequently request and receive your voluntary consent to use it for another purpose.
4. How do we collectpersonal information?
We will only collect personal information incompliance with your local data protection laws. We usually collect your personal information directly from you during the course of your relationship with us. We will collect this information directly from you unless it is unreasonable or impracticable to do so.
Generally, this collection will occur:
· when you deal with useither in person, by telephone, letter, email or AI chatbot;
· when you visit any of ourwebsites;
· when you use any of ourapps; or
· when you connect with us via social media.
We may collect personal information about you:
· when you purchase or make enquiries about travel arrangements or other travel-related products and services;
· when you enter competition sor register for promotions;
· when you subscribe to receive marketing from us (e.g., e-newsletters);
· when you request brochures or other information from us; or
· when you provide information, or use our services, on social media.
Unless you choose to do so using a pseudonym or anonymously, we may also collect your personal information (other than sensitive information) when you complete surveys or provide us with feedback.
In some circumstances, it may be necessary for us to collect personal information about you from a third party. This includes where a person makes a travel booking on your behalf which includes travel arrangements to be used by you (e.g., a family or group booking or a travel booking made for you by your employer). Where this occurs, we will rely on the authority of the person making the travel booking to act on behalf of any other traveller on the booking.
Where you make a travel booking on behalf of another person(s) (e.g., a family or group booking or a travel booking made for an employee), you agree to have obtained the voluntary and informed consent of the other person(s) for Flight Centre to collect, use and disclose the other person's personal information in accordance with this Notice and that you have otherwise made the other person(s) aware of this Notice.
You should let us know immediately if you become aware that your personal information has been provided to us by another person without your voluntary consent or if you did not obtain voluntary consent before providing another person's personal information to us.
We make every effort to maintain the accuracy and completeness of your personal information which we store and to ensure all your personal information is up to date. However, you can assist us with this considerably by promptly contacting us if there are changes to your personal information or if you become aware that we have inaccurate personal information relating to you (see section 15 below). We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal information that you, or a person acting on your behalf, provide to us.
Where the provision of services or other business processes is dependent upon you voluntarily consenting to the collection and subsequent processing of your personal data, if you choose not to provide your voluntary consent this may prevent us from providing specific services that rely upon the collection of personal data, or otherwise impact the quality of theservices, we can provide you.
Similarly, if you request that we restrict or stop using personal information we hold on you or withdraw a voluntary consent you have previously given to the processing of such personal information, this may affect our ability to provide services to you or negatively impact the services we can provide to you. For example, most travel bookings must be made under the traveller's full name and must include contact details and appropriate identification (e.g., passport details). We cannot make bookings for you without that information.
Any voluntary consent you provide for the collection,use and disclosure of your personal data will remain valid until such time as you withdraw your consent in writing. You may withdraw consent and request us to stop collecting, using and/or disclosing your personal data by submitting your request in writing using either the links provided in section 15, or by emailing/writing-to our Privacy teams via the contact details provided in section 15. Please note that withdrawing consent does not affect our right tocontinue to collect, use and disclose personal data where such collection, useand disclosure without consent is permitted or required under applicable laws.
For the retention of personal data, we may retain yourpersonal data for as long as it is necessary to fulfil the purposes for whichthey were collected, or as required or permitted by applicable laws. We willcease to retain your personal data, or remove the means by which the data canbe associated with you, as soon as it is reasonable to assume that suchretention no longer serves the purposes for which the personal data werecollected, and are no longer necessary for legal or business purposes.
5. How do we use your personal information?
We will only process your information, where:
· you have given your voluntary consent to such processing (which you may withdraw atany time, as detailed at section 4 above);
· the processing is necessary to provide our services to you;
· the processing is necessary for the performance of a contract to which you are aparty;
· the processing is necessary for compliance with our legal obligations; and/or
· the processing is necessary for our legitimate interests or those of any third party recipients that receive your personal information (as detailed in this section and section 6 below).
In detail: Where you contact us in relation to a travel booking or query, the purpose for which we collect your personal information is generally to provide you with travel advice and/or to assist you with booking travel and/or travel-related products and services. However, the purpose for collection may differ depending on the particular circumstances as disclosed in this Notice (e.g., collection of your personal information for the purpose of your participation in a competition, provision of feedback, etc.).
When you book or otherwise arrange travel-related products and services through us,we usually act as an agent for the relevant travel service providers (e.g., fora hotel). In this case, we process your personal information as necessary so asto provide the services you requested from us. This usually includes collecting personal information about you both for our internal purposes as described in this Notice and for the travel service provider for whom we act as agent (e.g.,to provide you with the booked services). For example, if you book a flight through us, then we use your personal information to enable your flight to bebooked and disclose it to the airline to enable the airline to provide theflight service to you.
Wemay therefore share your personal information with our travel service providers such as hotel, airline, car rental, or other providers, who fulfill your travel bookings. Please note that these travel service providers also may use your personal information asdescribed in their respective privacy policies and may contact you as necessaryto obtain additional information about you, facilitate your travel reservation, or provide you with your requested services. We encourage you to review the privacy policies of any third-party travel service providers whose products youpurchase through us. We will provide youwith copies of all available relevant travel service provider terms, conditionsand privacy policies on request.
Weact as agent for or on behalf of many thousands of travel service providers around the world, so it is not possible for us to set out in this Notice all ofthe travel service providers for whom we act or their locations. For more information about the disclosure of personal information to travel service providers located overseas, please refer to section7 below.
If you have any concerns regarding the transfer of your personal information to a travel service provider, or you wish to contact us for further information, please refer to the “Feedback / Complaints / Subject Access Requests /Contacts” section below (section 15).
Further purposes forwhich we process personal information include:
· providing you with services and tools you choose to use (for example, saving travelpreferences on our websites to a wish list or saving personal information toallow for pre-population of online forms);
· identification of errors;
· protecting against, deterring, detecting and investigating fraudulent, unauthorised orillegal activities;
· regulatory reporting and compliance;
· developing and improving our products and services and those of our related entities;
· using AI features to provide personalized travel recommendations, enhanced customer service, service improvements and service automation, with appropriate human oversight;
· servicing our relationship with you by, among other things, creating and maintaining acustomer profile to enable our brands to service you better or presentingoptions on our website we think may interest you based on your browsing and preferences;
· the provision of reports, analytics, and dashboards, to your employer on activitiescomprising their business travel programme as part of contracted businesstravel services;
· involving you in market research, gauging customer satisfaction and seeking feedbackregarding our relationship with you and/or the service we have provided;
· to facilitate your participation in loyalty programs;
· for research and analysis in relation to our business and services, including but not limited to trends and preferences in sales and travel destinations, and useof our websites;
· internal reporting, analytics, accounting and administration;
· to comply with our legal obligations, including complying with law enforcement or government authority requests, and any applicable customs/immigration requirements relating to your travel;
· to comply with a valid and authorised court order or other valid legal process;and
· other purposes as authorised or required by law (e.g., to prevent a threat to life, health or safety, or to enforce our legal rights).
Wemay use AI and automated processing as the mechanism by which to process personal information to meet the purposes set out herein. All such processing shall be undertaken in compliance with applicable AI laws and regulations.
Where permitted by your local data protection laws, we may use your personal information to send you targeted marketing activities relating to our products and services (and those of third parties) that we think may interest you,unless you have requested not to receive such information. These may include, but are not limited to, mail outs, electronic marketing and notifications as described below, and telephone calls. We will only use your personal information to send electronic marketing materials to you (including e-newsletters,email, SMS, MMS and iM) if you have opted-in to receive them or not opt-ed out of receiving them, depending upon the applicable law. You can subscribe to receive e-newsletters and other electronic promotional/marketing materials by following the relevant links on our website or requesting one of our consultants to do so for you.
Should you no longerwish to receive promotional/marketing material from us, participate in market research or receive other types of communication from us, please refer to the “Feedback/ Complaints / Subject Access Requests / Contacts” section below (section 15).You can unsubscribe from receiving electronic marketing materials by following the unsubscribe prompt in your email, SMS, MMS, iM or other forms of electronic marketing. Please also see the “Your rights” section of this Notice to learn about your ability, at any time, to opt out or limit the use of your browsing behaviour for online behavioural advertising purposes (section 9 below).
6. Is personalinformation disclosed to third parties?
We do not and willnot sell, rent out or trade your personal information. We will only disclose your personal information to third parties in the ways set out in this Notice and, in particular, as set out below, and in accordance with your local data protection laws. Notethat, in this Notice, where we say “disclose”, this includes to transfer, share (including verbally and in writing), send, or otherwise make available or accessible your personal information to another person or entity.
Your personal information may be disclosed to the following types of third parties:
· our independent contractors, suppliers and service providers, including without limitation:
o in each of the circumstances setout in section 5 (“How do we use your personal information?”);
o suppliers of IT based solutions that assist us in providing products and services to you (such as any external data hosting providers we may use);
o publishers, printers and distributors of marketing material;
o event and expo organisers;
o marketing, market research, research and analysis and communications agencies;
o mailing houses, freight services,courier services; and
o external business advisers (suchas lawyers, accountants, auditors and recruitment consultants);
· our relatedentities and brands;
· travel-related service providers such as travel wholesalers, tour operators, airlines, hotels, car rental companies, transfer handlers, travel risk management companies, travel insurance companies, and other related service providers;
· any third party to whom we assign or novate any of our rights or obligations;
· financial institutions such as banks, when processing financial transactions;
· credit providers, issuers and payment service providers;
· a person making your travel booking on your behalf, where you are travelling on abooking made on your behalf by another person (for example, a family member, friend or work colleague);
· your employer, where you are an employee of one of our corporate, business or government clients and you are participating in an event or travelling for workpurposes;
· third parties who provide services to our business travel clients, in order to facilitate the delivery of those services;
· a person whocan verify to us that they have a relationship with you (e.g., a family member)where you are not contactable, the person correctly answers our requiredsecurity questions and the request is, in our opinion, in your interest (for example, where the person is concerned for your welfare or needs to undertakeaction on your behalf due to unforeseen circumstances);
· as required or authorised by applicable law, and to comply with our legal obligations;
· customs and immigration to comply with our legal obligations and any applicablecustoms/immigration requirements relating to your travel;
· government agencies and public authorities to comply with a valid and authorised request, including a court order or other valid legal process;
· various regulatory bodies and law enforcement officials and agencies, including to protect against fraud and for related security purposes;
· enforcement agencies where we suspect that unlawful activity has been or may be engaged inand the personal information is a necessary part of our investigation orreporting of the matter; and
· third-party services or applications when you use these to log into your account (e.g., ifyou use a third-party service or application (e.g., Facebook, Google) to log into your Flight Centre account, we share certain personal information withthat third party).
Where FCTG chooses to divest some element of the existing group to a third party, whether this be a brand, legal entity or some part thereof, personalinformation that is being processed by that impacted element, and that isnecessary for the operation of that element, may be transferred to the thirdparty as part of the wider divestment.
When you engage us to book flights on your behalf, we will provide your personal information (i.e., name, email address and/or mobilenumber) to the relevant airline. This enables airlines to advise passengers of irregular flight operations and disruptions (e.g., flight cancellations,schedule changes) directly. Similarly, when booking rail journeys we will provide your personal information to the relevant rail provider where required.
Other than the above, we will not disclose your personal information without your voluntary consent unless we reasonably believe thatdisclosure is necessary to lessen or prevent a threat to life, health or safety of an individual or to public health or safety or for certain action to beundertaken by an enforcement body (e.g., prevention, detection, investigation, prosecution or punishment of criminal offences), or where such disclosure is authorised or required by law (including applicable privacy / data protection laws).
On our websites, you may choose to use certain features that can be accessed through, or for which we partner with, other entities thatare not otherwise affiliated with us. These features, which include social networking and geo-location tools, are operated by third parties, including social networks, and are clearly identified as such. These third parties may use or share personal information in accordance with their own privacy policies. We strongly suggest you review the third parties’ privacy policies ifyou use the relevant features.
7. Is personal information transferred overseas?
We may disclose your personal information to certain overseas recipients, as setout below. We will ensure that any such international transfers are necessary for the performance of a contract between you and the overseas recipient, and/or are made subject to appropriate or suitable safeguards as required by your local data protection laws (e.g., GDPR,China cybersecurity law, etc.).
Flight Centre Travel Group (USA),Inc. d/b/a FCM, Corporate Traveler and FCM Meetings & Events and WhereTo,Inc. (collectively, the “Flight Centre USA corporate brands”) comply with theEU-U.S. Data Privacy Framework (EU-U.S. DPF) the UK Extension to the EU-U.S.DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth bythe U.S. Department of Commerce. The Flight Centre USA corporate brandshave certified to the U.S. Department of Commerce that they adhere to (i) theEU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regardto the processing of personal data received from the European Union in relianceon the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance onthe UK Extension to the EU-U.S. DPF, and (ii) the Swiss-U.S. Data PrivacyFramework Principles (Swiss-U.S. Principles) with regard to the processing ofpersonal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms inthis Notice and the EU-U.S. DPF Principles or Swiss-U.S. DPF Principles, thePrinciples shall govern. To learn more about the Data Privacy Framework(DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/. The Flight Centre USA corporate brands shall remain liable under the DPFPrinciples if its agent processes your personal information in a mannerinconsistent with the DPF Principles, unless the Flight Centre USA corporatebrands prove that they are not responsible for the event giving rise to thedamage.
It is possible thatinformation will be transferred to an overseas recipient (other than any of our overseasrelated entities) located in ajurisdiction where you will not be able to seek redress under your local dataprotection laws and that does not have an equivalent level of data protectionas in your jurisdiction. To the extent permitted by your local data protectionlaws, we will not be liable for how these overseas recipients handle, store,and otherwise process your personal information.
Wewill ensure that any such international transfers are either necessary for theperformance of a contract between you and the overseas recipient or are madesubject to appropriate or suitable safeguards as required by your local laws.
Weuse key service providers located in India, Indonesia, Philippines, Hong Kong,USA, United Kingdom, and Australia. We also deal with many different serviceproviders all over the world, so it is not possible for us to set out in thisNotice all of the different countries to which we may send your personalinformation. However, if you have any specific questions about where or to whomyour personal information will be sent, please refer to the “Feedback / Complaints / Subject Access Requests /Contacts” section below (section 15).
(a) Our overseas relatedentities
Flight Centre operatesa global business, including operations in Australia, New Zealand, Canada,United States, United Kingdom, South Africa, Hong Kong, India, China,Singapore, Japan, the United Arab Emirates, Kingdom of Saudi Arabia, Ireland,the Netherlands, Malaysia, Mexico, the Dominican Republic, Costa Rico, Germany,Norway, Sweden, Denmark, Finland, Spain, France and Switzerland. Your personalinformation may be disclosed to our overseas related entities in connectionwith facilitation of your travel booking and/or to enable the performance ofadministrative, advisory and technical services, including the storage andprocessing of such information. This includes enabling “single sign-on”allowing you to login to a shared account across our brands using a single setof log-in credentials, which allows us to, for example, show your reservationsand bookings made through the websites, applications, and services of our groupcompanies on your account page, and allow our group companies to showinformation in your respective account(s) with them.
(b) Travel serviceproviders located overseas
Inproviding our services to you, it may be necessary for us to disclose personalinformation to relevant overseas travel service providers. We deal with many different travel service providersall over the world, so the location of a travel service provider relevant toyour personal information will depend on the travel services being provided. The relevant travelservice providers will in most cases receive your personal information in thecountry in which they will provide the services to you or in which theirbusiness or management is based.
(c) Our third-partyservice providers located overseas
Wemay also disclose your personal information to third-parties located overseasfor the purpose of performing services for us, including the storage andprocessing of such information. Generally, we willonly disclose your personal information to these overseas recipients inconnection with facilitation of your travel booking and/or to enable theperformance of administrative and technical services by them on our behalf.
(d) China cyber securitylaw requirements
Personalinformation which is collected and generated within the territory of thePeople's Republic of China shall only be transferred outside this territory forbusiness reasons or other authorized reasons. These include the followingsituations:
1. where the international transfer is required or authorized by thetraveler;
2. when you use our platforms or online booking tools to book overseashotels, airlines, and travel related services or products;
3. to provide reports, analytics,and dashboards of your travel to your employer for activities comprising theirbusiness travel programme as part of contracted travel services; or
4. to otherwise fulfil the purposes set out in section 5 above.
8. Security ofinformation
We are committed tosafeguarding and protecting personal information and will implement andmaintain appropriate technical and organisational measures to ensure a level ofsecurity appropriate to protect any personal information provided to us fromaccidental or unlawful destruction, loss, alteration, unauthorised disclosureof, or access to, personal information transmitted, stored or otherwiseprocessed. Flight Centre has implemented various physical, electronic and organisationalsecurity procedures in order to protect the personal information it holds fromloss and misuse, and from unauthorised access, modification, disclosure andinterference. Flight Centre regularly reviews security technologies and willstrive to protect your personal information as fully as we protect our ownconfidential information. Flight Centre is not responsible for any third-party’sactions or their security controls with respect to information that third-partiesmay collect or process via their websites, services or otherwise.
We will destroy orde-identify personal information once we no longer require it for our businesspurposes, or as required by law.
9. Your rights in relation to the personal information we collect
If you wish to make a Subject Access Request:
· to access,update, modify, rectify, erase, object to, or obtain a copy of the personalinformation that we hold on you; or
· to restrictor stop us from using any of the personal information which we hold on you,including by withdrawing any voluntary consent you have previously given to theprocessing of such information; or
· where anypersonal information has been processed on the basis of your voluntary consentor as necessary to perform a contract to which you are a party, request a copyof such personal information in a suitable machine-readable format or have thatpersonal information transmitted by us to another controller; or
· where we use automated decision-making or AI processing that significantly affects you, and you have the right to request human intervention and to challenge such decisions.
You can request this by contacting us as set out in section 15 below. You will receiveacknowledgement of your request.We will always process your requests within thetimeframes set by applicable privacy laws. Please note we reserve the right toextend this period for complex requests or as otherwise permitted by applicablelaw.
We reserve the right to deny your access for any reason permitted under applicable laws. Suchexemptions may include national security, corporate finance and confidentialreferences. If we deny access or correction, we will provide you with writtenreasons for such denial unless it is unreasonable to do so and, where requiredby local data protection laws, will note your request and the denial of same inour records.
Depending on applicable privacy laws, you may have the right to lodge a complaint with a relevantsupervisory authority.
Further correspondence regarding your request should only be made in writing to the applicable ChiefPrivacy Officer as set out in section 15 below.
You must always provide accurate information and you agree to update it whenever necessary. You also agree that, in the absence of any update, we can assume that the information submitted to us is correct, unless we subsequently become aware that it is not correct.
You can at any time tell us not to send you marketing communications by email by clicking on the unsubscribe link within the marketing emails you receive from us or by contacting us as indicated below (section 15).
In any of the situations listed above, we may request that you prove your identity by providing us with a copy of a valid means of identification in order for us to comply with our security obligations and to prevent unauthorised disclosure of personal information.
To the extent permissible by law, we reserve the right to charge you a reasonable administrative fee for any manifestly unfounded or excessive requests concerning your access to your personal information, and for any additional copies of the personal information you request from us.
10. Singapore Requirements
This section pertains only to the processing of personal data byus that falls specifically within the scope of the Singapore Personal DataProtection Act (“PDPA”).
Where voluntary consent to the processing of personal data has not been obtained, we will collect, use and disclose personal data pursuant to anexception under the PDPA or as required/authorised under any other written law.
Upon receipt of a written request to withdraw your voluntary consent,we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed andfor us to notify you of the consequences (including any legal consequenceswhich may affect your rights and liabilities to us) of us completing thisrequest. We will never delay our processing of such requests, and in any event will process them in accordance with the timelines set by the PDPA.
11. Social Media Integrations
Our websites and mobile applications may use social media features and widgets (such as “Like” and “Share”buttons/widgets) (“SM Features”).These are provided and operated by third-party companies (e.g., Facebook) and either hosted by a third-party or hosted directly on our website or mobile application. SM Features may collect information suchas the page you are visiting on our website/mobile application, your IPaddress, and may set cookies to enable the SM Feature to function properly.
If you are logged into your account with the third-partycompany, then the third-party may be able to link information about your visitto and use of our website or mobile application to your social media accountwith them. Similarly, your interactions with the SM Features may be recorded bythe third-party. In addition, the third-party company may send us informationin line with their policies, such as your name, profile picture, gender, friendlists and any other information you have chosen to make available, and we mayshare information with the third-party company for the purposes of servingtargeted marketing to you via the third-party social media platform. You canmanage the sharing of information and opt out from targeted marketing via yourprivacy settings for the third-party social media platform.
Your interactions with these SM Featuresare governed by the privacy policy of the third-party company providing them.For more information about the data practices of these third-party companies,and to find out more about what personal information is collected about you and how the third-party uses such personal information, please refer totheir privacy policy directly.
12. IP addresses
When you access our website, use any of our mobile applications or open electronic correspondence or communications from us, our servers may record data regardingyour device and the network you are using to connect with us, including your IP address. An IP address is a series of numbers which identify your computer, andwhich are generally assigned when you access the internet.
We may use IP addresses for system administration, investigation of security issues and compiling anonymised data regarding usage of our website and/or mobile applications. We may also link IP addresses to other personal informationwe hold about you and use it for the purposes described above (e.g., to better tailor our marketing and advertising materials, provided you have opted in to receive electronic marketing).
13. Tracking Technologies / Cookies
We may use third-party web analytics services on our websites and mobile apps, such as those listed inour Cookies Policy. The analytics providers that administer these services use technologies such as cookies and web beacons to help us analyse how visitorsuse our websites and apps.
For information regarding our use of cookies and tracking technologies, refer to our Cookies Policy on our website.
14. Linked Sites
Our websites may contain links to third-party websites over which we have no control. We are not responsible for the privacy practices or the content of such websites. We encourage you to read the privacy policies of any linked third-party websites you visit as their privacy policy and practices may differ from ours.
15. Feedback / Complaints / Subject Access Requests / Contacts
You can direct any questions or complaints about theuse or disclosure of your personal information to the contact informationbelow.
Wherever you are in the world, if you wish to make a Subject Access Request to inform us of a change or correction to your personal information, request a copy of theinformation we collect on you, request deletion of your information or wouldlike to restrict the further processing of your data, please use the Subject Access Request Link below. We will respond to these requests within the time period required by the applicable jurisdiction.
Global Subject Access Requests
Similarly, if you have any enquiries, comments or complaints about this Notice or ourhandling of your personal information, please contact your consultant or the Chief Privacy Officer using the details set out below and we will respond as soon aspracticable.
Africa
Block 8, 299 Pendoring street, Pendoring office park, Johannesburg, 2195
Americas
(877) 867-2907
Chief Privacy Officer, 35 McCaul St, 7th Floor, Toronto ON, M5T 1V7
Asia
Chief Privacy Officer, 30 Cecil Street, #22-01/08, Prudential Tower, Singapore, 049712
Australia
Chief Privacy Officer, 275 Grey Street, South Brisbane, Queensland 4101
Discova
Buffalo Tours (Singapore) Pte Ltd, 50 Armenian Street, #04-04 Wilmer Place, Singapore 179938
or
Olympus Tours, Yaxchilan SM 17 Mz 2 Lt 13, Cancun, Quintana Roo, Mexico
Europe & Middle East
data.protection@flightcentre.co.uk
Chief Privacy Officer, Flight Centre (UK) Limited 4th Floor, 120 The Broadway, Wimbledon, London, SW19 1RH
New Zealand
Privacy Officer, 124 Vincent Street, Auckland, 1010
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S.DPF and and the Swiss-U.S. DPF the Flight CentreUSA corporate brands commit to resolve DPF Principles-related complaints aboutour collection and use of your personal information. EU, UK and Swiss individuals with enquiriesor complaints regarding our handling of personal data received in reliance onthe EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Flight Centreat privacy@am.flightcentre.com.
Incompliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, the Flight Centre USA corporate brands commit torefer unresolved complaints concerning our handling of personal data receivedin reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and theSwiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in theUnited States,the United Kingdom and/or Switzerland (as applicable). Ifyou do not receive timely acknowledgment of your DPF Principles-relatedcomplaint from us, or if we have not addressed your DPF Principles-relatedcomplaint to your satisfaction, please visit Data Privacy Framework Resolution | JAMS Mediation,Arbitration, ADR Services (https://www.jamsadr.com/DPF-Dispute-Resolution) for more information or to file a complaint. The services of JAMS are provided at no cost to you. In addition, you may, under certainconditions, be able to invoke binding arbitration for complaints regarding DPFcompliance not resolved by any of the other DPF mechanisms. Please see Annex I for additional information: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction
The U.S. Department of Transportation hasjurisdiction over the Flight Centre USA corporate brands’ compliance with theEU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DataPrivacy Framework (Swiss-U.S. DPF)..
16. Changes to our Notice
Wemay amend this Notice from time to time. If we make a change to the Notice, therevised version will be posted on our website. We will post a prominent noticeon our website to notify you of any significant changes to our Notice andindicate at the end of the Notice when it was most recently updated. It is yourresponsibility, and we encourage you, to check the website from time to time inorder to determine whether there have been any changes.
ThisPrivacy Notice was last updated on 02 January 2026.