California Privacy Notice
Last Updated: 22 April 2024
California residents have certain rights with respect to personal information under the California Consumer Privacy Act (“CCPA”). Please note that privacy practices relative to consumers including passengers and loyalty program members are regulated by federal aviation consumer protection rules and requirements of U.S. Department of Transportation, rather than under individual state laws such as the CCPA. As a courtesy, we respond to consumer requests for access and deletion, as set forth below.
For purposes of this California Privacy Notice, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, and “sensitive personal information” refers to certain types of personal information that are deemed particularly sensitive (for example, government identification numbers, health or biometric information, account access credentials, precise geolocation, or racial or ethnic origin). For purposes of this California Privacy Notice, references to personal information include sensitive personal information, unless otherwise indicated.
California residents have the right to know the categories of personal information we collect, the categories of third parties to whom the personal information is disclosed for a business purpose or “sold” or “shared” (as those terms are defined under the CCPA), and the purpose for collecting, disclosing, and/or selling/sharing such personal information. In the preceding 12 months, we collected, disclosed for a business purpose, and/or sold the following categories of personal information:
|
Category of personal information |
How we disclose, sell, and share it |
|---|---|
|
Identifiers (such as name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, cookie information or other similar identifiers) |
Disclosing for a business purpose:
|
|
Personal Information categories listed in the California Customer Records statute Cal. Civ. Code § 1798.80(e)) (such as name, physical characteristics or description, address, telephone number, medical information, or health insurance information) |
Disclosing for a business purpose:
Selling/Sharing: To selected partners to enable them to better tailor offers, promotions and other direct marketing to you |
|
Protected classification characteristics under California or federal law (such as age, national origin, medical condition, sex, marital status or disability) |
Disclosing for a business purpose:
|
|
Commercial information (such as products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies) |
Disclosing for a business purpose:
|
|
Internet or other similar network activity (such as browsing history, search history, information on a consumer’s interaction with a website, application or advertisement) |
Disclosing for a business purpose:
|
|
Geolocation data (such as your physical location) |
Disclosing for a business purpose:
|
|
Professional or employment related information (such as current or past job history or performance evaluations) |
Disclosing for a business purpose: We may share with service providers who process personal information on our behalf in order to perform background checks or verify statements made in your job application |
|
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)) (such as education records, including grades, transcripts) |
Disclosing for a business purpose: We may share with service providers who process personal information on our behalf in order to perform background checks or verify statements made in your job application |
|
Inferences drawn from other personal information (such as a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, and attitudes) |
Disclosing for a business purpose:
Selling/Sharing: To selected partners to enable them to better tailor offers, promotions and other direct marketing to you |
We collect personal information from the following sources:
- Directly from you or persons authorised by you to act on your behalf;
- Collected automatically and indirectly from you;
- From entities within the SIA Group;
- From service providers that provide services to you on our behalf
- From our partners including airline partners and KrisFlyer programme partners; and
- From third party sources, such as social media platforms when you interact with our social media channels or analytics providers.
We use personal information in the following ways and for the following business and commercial purposes:
- To provide and improve our services;
- To process and assist you with any transactions related to your booking;
- To maintain your KrisFlyer. Registered Customer, and/or KrisPay accounts;
- To maintain your company’s HighFlyer account;
- To notify you about changes to our services or other updates;
- To administer and improve our website and mobile application;
- To respond to your inquiries;
- For security and fraud prevention;
- For marketing and advertising;
- For statistical analysis; and
- To process job applications with SIA, or to reach out regarding positions we think may be of interest to you.
We only use and disclose sensitive personal information for the purposes specified in the CCPA.
The criteria we use to determine how long to retain your personal information is described in Section 10 (Retention) of our Privacy Policy located here.
You may request that we disclose what personal information we collect, the categories of sources from which we collect personal information, and the business or commercial purpose for collecting, using, disclosing and selling/sharing personal information. You also have the right to request the specific pieces of personal information we have collected about you, as well as information about our sale/sharing or disclosure for business purposes of your personal data to third parties. Once we receive, verify and confirm your consumer request, we will endeavor to disclose to you the information you have requested.
You may request the deletion of any of your personal information that we have collected from you and retained. Please note that this is a limited right as we may be able to retain certain personal information subject to an exception under the CCPA or another lawful obligation. Once we receive, verify and confirm your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
You may request the correction of inaccurate personal information that we maintain about you. We may require you to provide documentation or other relevant information to enable us to review and consider your request, and we may deny a request if we determine that the contested personal information is more likely than not accurate based on the totality of the circumstances. Once we receive, verify and confirm your request, we will use commercially reasonable efforts to correct the inaccurate personal information.
You may opt-out of the sale/sharing of your personal information to third parties. Under the CCPA, “sell” includes the transfer or communication of personal information to another business in such a way that conveys value to the recipient business, even if that value is not monetary. This means that sharing for a number of common business activities may be considered a “sale” under the CCPA, even if there is no exchange of money. If you would like to opt-out of the sale of your personal information to third parties, please submit a request via email at dpo@singaporeair.com.sg or you may also submit a request here.
We do not knowingly sell/share the personal information of consumers under the age of 16 without affirmative authorization.
You have the right to not be discriminated against for exercising any of these rights.
If you are a California resident, you may make a request, once a year, for information regarding the disclosure of your personal information to third parties for those third parties’ direct marketing purposes. To make this request, please submit a request via email at dpo@singaporeair.com.sg.
Your browser settings may allow you to transmit a “do not track” signal, “opt-out preference” signal, or other mechanism for exercising your choice regarding the collection of your information when you visit various websites. For information about “Do Not Track,” please visit http://allaboutdnt.com/
.
In order to process your request promptly, we kindly ask you to include the necessary identification details with your request as well as any other information necessary to confirm your identity or to process your request. Such information may include the following:
- Full Name;
- Mailing Address;
- Email Address
- Contact Number;
- A copy of an official identity document (e.g. Identity Card or Passport information) with all information apart from your full name and address redacted (if applicable); and
- KrisFlyer or HighFlyer number (if applicable).
All data privacy requests should be sent to dpo@singaporeair.com.sg. Alternatively, you may wish to make a request by contacting your local Singapore Airlines office. Please note that requests sent in via other channels or which do not contain sufficient supporting information may take longer to process and/or we may not be able to respond within the prescribed timelines.
We may need you to provide additional information to verify your request, such as providing certain data elements so that we can confirm they match the personal information already maintained by us. We will not use this additional information for anything other than handling your request. You may designate an authorized agent to make a request in certain circumstances on your behalf. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.
We may reject your request to exercise the above rights if it would interfere with another’s rights (e.g. where providing the Customer Data we hold about you would reveal information about another person) or where another exemption under applicable laws or regulations applies or where applicable laws requires otherwise. An explanation of reason will be provided to you in case of our rejection. If you have further questions to such rejection, please contact through the email: dpo@singaporeair.com.sg.
We will endeavor to fulfill your request within 45 days of receiving that request. If we require additional time, we will inform you of the reason and extension period in writing.