California Privacy Notice


Last Updated: 08 July 2024

California residents have certain rights with respect to personal information under the California Consumer Privacy Act (“CCPA”). Please note that privacy practices relative to consumers including passengers and loyalty program members are regulated by federal aviation consumer protection rules and requirements of U.S. Department of Transportation, rather than under individual state laws such as the CCPA. As a courtesy, we respond to consumer requests for access and deletion, as set forth below.

WHAT IS PERSONAL INFORMATION

For purposes of this California Privacy Notice, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, and “sensitive personal information” refers to certain types of personal information that are deemed particularly sensitive (for example, government identification numbers, health or biometric information, account access credentials, precise geolocation, or racial or ethnic origin). For purposes of this California Privacy Notice, references to personal information include sensitive personal information, unless otherwise indicated.

INFORMATION WE COLLECT

California residents have the right to know the categories of personal information we collect, the categories of third parties to whom the personal information is disclosed for a business purpose or “sold” or “shared” (as those terms are defined under the CCPA), and the purpose for collecting, disclosing, and/or selling/sharing such personal information. In the preceding 12 months, we collected, disclosed for a business purpose, and/or sold the following categories of personal information:

Category of personal informationHow we disclose, sell, and share it
Identifiers  (such as name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, cookie information or other similar identifiers) Disclosing for a business purpose:
  • Within the SIA group of companies, which include Scoot Pte. Ltd. (“Scoot”) Limited, Singapore Airlines Limited (“SIA”), Kris+ Pte. Ltd., KrisShop Pte. Ltd., and Encounters Pte. Ltd. (collectively, the “SIA Group”) for internal business purposes
  • With service providers who process personal information on our behalf in order to help us provide our services
  • With advertisers and advertising networks that require the data to select and serve relevant adverts to you
  • With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies
  • With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes or where such disclosure may be reasonably necessary to comply with any legal obligation, to enforce our rights and to prevent fraud or technical issues.

Selling/Sharing:

To selected partners to enable them to better tailor offers, promotions and other direct marketing to you

Personal Information categories listed in the California Customer Records statute Cal. Civ. Code § 1798.80(e) (such as name, physical characteristics or description, address, telephone number, medical information, or health insurance information) Disclosing for a business purpose:
  • Within the SIA Group
  • With service providers who process personal information on our behalf in order to help us provide our services
  • With advertisers and advertising networks that require the data to select and serve relevant adverts to you
  • With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies
  • With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes

Selling/Sharing:

To selected partners to enable them to better tailor offers, promotions and other direct marketing to you

Protected classification characteristics under California or federal law (such as age, national origin, medical condition, sex, marital status or disability)Disclosing for a business purpose:
  • Within the SIA Group
  • With service providers who process personal information on our behalf in order to help us provide our services
  • With advertisers and advertising networks that require the data to select and serve relevant adverts to you
  • With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies
  • With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes

Selling/Sharing:

To selected partners to enable them to better tailor offers, promotions and other direct marketing to you

NOTE: Not all examples listed are disclosed to these third parties here. For example, we do not disclose medical conditions to partners who help us facilitate promotions.

Commercial information (such as products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies)Disclosing for a business purpose:
  • Within the SIA Group
  • With service providers who process personal information on our behalf in order to help us provide our services
  • With advertisers and advertising networks that require the data to select and serve relevant adverts to you
  • With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies
  • With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes

Selling/Sharing:

To selected partners to enable them to better tailor offers, promotions and other direct marketing to you

Biometric information (such as facial recognition information used to compare your image to your travel documents)Sharing for a business purpose:
  • Within the SIA Group
  • With service providers who process personal information on our behalf in order to help us provide our services
Internet or other similar network activity (such as browsing history, search history, information on a consumer’s interaction with a website, application or advertisement)Disclosing for a business purpose:
  • Within the SIA Group
  • With service providers who process personal information on our behalf in order to help us provide our services
  • With advertisers and advertising networks that require the data to select and serve relevant adverts to you
  • With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies
  • With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes

Selling/Sharing:

To selected partners to enable them to better tailor offers, promotions and other direct marketing to you

Geolocation data (such as your physical location)Disclosing for a business purpose:
  • Within the SIA Group
  • With service providers who process personal information on our behalf in order to help us provide our services
  • With advertisers and advertising networks that require the data to select and serve relevant adverts to you
  • With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies
  • With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes

Selling/Sharing:

To selected partners to enable them to better tailor offers, promotions and other direct marketing to you

Professional or employment related information (such as current or past job history or performance evaluations)Disclosing for a business purpose:

We may share with service providers who process personal information on our behalf in order to perform background checks or verify statements made in your job application

Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)) (such as education records, including grades, transcripts)Disclosing for a business purpose:

We may share with service providers who process personal information on our behalf in order to perform background checks or verify statements made in your job application.

Inferences drawn from other personal information (such as a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, and attitudes)Disclosing for a business purpose:
  • Within the SIA Group
  • With service providers who process personal information on our behalf in order to help us provide our services
  • With advertisers and advertising networks that require the data to select and serve relevant adverts to you
  • With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies
  • With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes

Selling/Sharing:

To selected partners to enable them to better tailor offers, promotions and other direct marketing to you

 

We collect personal information from the following sources:

  • Directly from you or persons authorised by you to act on your behalf;
  • Collected automatically and indirectly from you;
  • From entities within the SIA Group;
  • From service providers that provide services to you on our behalf
  • From our partners including airline partners and KrisFlyer programme partners; and
  • From third party sources, such as social media platforms when you interact with our social media channels or analytics providers.


HOW WE USE PERSONAL INFORMATION

We use personal information in the following ways and for the following business and commercial purposes:

  • To provide and improve our services;
  • To process and assist you with any transactions related to your booking;
  • To maintain your KrisFlyer, Registered User, and/or KrisPay accounts;
  • To maintain your company's HighFlyer account;
  • To notify you about changes to our services or other updates;
  • To administer and improve our website and mobile application;
  • To respond to your inquiries;
  • For security and fraud prevention;
  • For marketing and advertising;
  • For statistical analysis; and
  • To process job applications with SIA, or to reach out regarding positions we think may be of interest to you.

We only use and disclose sensitive personal information for the purposes specified in the CCPA.

The criteria we use to determine how long to retain your personal information is described in Section 10 (Retention) of our Privacy Policy located here.

RIGHT TO KNOW

You may request that we disclose what personal information we collect, the categories of sources from which we collect personal information, and the business or commercial purpose for collecting, using, disclosing and selling/sharing personal information. You also have the right to request the specific pieces of personal information we have collected about you, as well as information about our sale/sharing or disclosure for business purposes of your personal data to third parties. Once we receive, verify and confirm your consumer request, we will endeavor to disclose to you the information you have requested.

RIGHT TO DELETE

You may request the deletion of any of your personal information that we have collected from you and retained. Please note that this is a limited right as we may be able to retain certain personal information subject to an exception under the CCPA or another lawful obligation. Once we receive, verify and confirm your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

RIGHT TO CORRECT

You may request the correction of inaccurate personal information that we maintain about you. We may require you to provide documentation or other relevant information to enable us to review and consider your request, and we may deny a request if we determine that the contested personal information is more likely than not accurate based on the totality of the circumstances. Once we receive, verify and confirm your request, we will use commercially reasonable efforts to correct the inaccurate personal information.

RIGHT TO OPT-OUT OF SALE/SHARING

You may opt-out of the sale/sharing of your personal information to third parties. Under the CCPA, “sell” includes the transfer or communication of personal information to another business in such a way that conveys value to the recipient business, even if that value is not monetary. This means that sharing for a number of common business activities may be considered a “sale” under the CCPA, even if there is no exchange of money.  If you would like to opt-out of the sale of your personal information to third parties, please submit a request via email at privacy@flyscoot.com or you may also submit a request here.

We do not knowingly sell/share the personal information of consumers under the age of 16 without affirmative authorization.

RIGHT TO NON-DISCRIMINATION

You have the right to not be discriminated against for exercising any of these rights.

YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you may make a request, once a year, for information regarding the disclosure of your personal information to third parties for those third parties’ direct marketing purposes.  To make this request, please submit a request via email at dpo@singaporeair.com.sg.

ADDITIONAL INFORMATION

Your browser settings may allow you to transmit a “do not track” signal, “opt-out preference” signal, or other mechanism for exercising your choice regarding the collection of your information when you visit various websites. For information about “Do Not Track,” please http://allaboutdnt.com/.

HOW TO EXERCISE YOUR CCPA PRIVACY RIGHTS

In order to process your request promptly, we kindly ask you to include the necessary identification details with your request as well as any other information necessary to confirm your identity or to process your request. Such information may include the following:

• Full Name;

• Mailing Address;

• Email Address;

• Contact Number;

• A copy of an official identity document (e.g. Identity Card or Passport information) with all information apart from your full name and address redacted (if applicable); and 

• KrisFlyer or HighFlyer number (if applicable).

All data privacy requests should be sent to privacy@flyscoot.com. Please note that requests sent in via other channels or which do not contain sufficient supporting information may take longer to process and/or we may not be able to respond within the prescribed timelines.

We may need you to provide additional information to verify your request, such as providing certain data elements so that we can confirm they match the personal information already maintained by us. We will not use this additional information for anything other than handling your request. You may designate an authorized agent to make a request in certain circumstances on your behalf.  Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. 

We may reject your request to exercise the above rights if it would interfere with another’s rights (e.g. where providing the Customer Data we hold about you would reveal information about another person) or where another exemption under applicable laws or regulations applies or where applicable laws requires otherwise. An explanation of reason will be provided to you in case of our rejection. If you have further questions to such rejection, please contact through the email: privacy@flyscoot.com.

We will endeavor to fulfill your request within 45 days of receiving that request. If we require additional time, we will inform you of the reason and extension period in writing.