Skyscanner privacy policy

We use the term ‘personal data’ a lot in this Policy. It means any information relating to you as an identifiable individual. This may include information such as your name, contact details, trip itinerary, internet protocol (“IP”) address, cookie strings or device IDs, as well as information that we store alongside such identifiers, such as how you use our Platforms. It also is inclusive of the term “personal information”.

We can only speak for ourselves, so this Policy doesn’t cover the collection or use of your information by the other companies whose products and services we feature on our Platforms, such as airlines, travel agents, hotels, car hire companies, activity providers, carbon offsetting providers, insurers and travel compensation specialists (“Travel Providers”).

When you make a booking or purchase with a Travel Provider, your information will be processed by them in accordance with their own privacy notice and terms and conditions. If you make a booking or purchase with a Travel Provider on the Skyscanner Platforms, please access the linked documents available so you can read them before you complete your booking or purchase.

Please note that our Platforms are not intended for children under 18 years of age, and nobody under the age of 18 should provide any information to Skyscanner via our Platforms or otherwise. We don’t knowingly collect personal data from anybody under 18, and we will delete any personal data that we learn has not been provided by, other with express authorisation of, the child’s parent or legal guardian.

We will update this Policy from time to time, so please make sure that you check this page occasionally to review the current version. If we make material changes to the statement, we will provide notice or obtain consent regarding such changes as may be required by law.

We collect personal data about you in various ways, including information you provide directly, information collected automatically, information we create or generate, and information from third-party sources:

You give it to us

We collect personal data you provide to us. For example:

• Name and contact Information. We collect name, username or alias, address, email address, and telephone number.
• Payment Information. Such as payment card number, expiry date and verification code.
• Commercial Information. Such as:
• • booking references or order numbers, booking and purchase history, passenger name record (known as “PNR”), travel itinerary and other information relating to the goods or services purchased;
  • where you are redirected to a Travel Provider’s platform to complete a booking or purchase, information about the booking or purchase made with that Travel Provider.
  • content you upload to our Platforms or which relate to our Platforms (such as comments, photos, videos, recommendations, preferences, reviews and prompts you enter into AI-powered language models we may make available to you on our Platforms) and information about the content, such as the time and date associated with that content;
  • your engagement with us on social media platforms (such as Instagram, Twitter or Facebook) including comments, photos, videos, and publicly available information about your social media account (such as your username). If we love your content, we might reach out to you to ask whether you’re happy for us to repost your content or use it on other platforms.
  • loyalty scheme information.
• Electronic information. We collect communications you share with us and our customer service team.
• Sensitive Personal Data. We don’t routinely collect special category or sensitive personal data (these are more sensitive types of data, such as information relating to your health, religion, or ethnic origin). However, you may need to provide us with this information to enable the services you’ve requested, or you may choose to provide us with information which reveals this type of data. The categories of sensitive personal data we may collect are as follows:
• • Government ID. Passport or other ID information, which may contain information like your name, address, gender, nationality, and date of birth.
  • Precise Geolocation. Specific location data derived from your mobile device (if you choose to grant us access to this).
  • Health data. If you contact our customer services team to inform us that you are not fit to fly, have dietary requirements or may need accommodations to be made for you. You may also choose to provide us with this information if you participate in relevant types of market research or user testing - for example, if you provide feedback on the accessibility of our Platforms.
  • Account access information. We collect information such as a username or account number in combination with a security or access code, or other credential that allows access to an account.

It’s always up to you whether you choose to give us these types of personal data, but if you decide not to provide certain categories of personal data then aspects of our Platforms and other services won’t work (for example, you cannot sign-up to price alerts without providing us with your contact details).

We collect it automatically

When you use our services, we collect some information automatically. For example:

• Name and Contact Information. If you choose to create a Skyscanner account via a third-party platform (for example, Apple, Google or Facebook), we may automatically receive personal data about you from that third party, such as your email address, name and other contact details. The personal data we receive will vary depending on the information that you have provided to the third party and your preferences within the third-party platform (for example, you may have enabled Apple’s ‘Hide My Email’ functionality). Please refer to the relevant third party’s privacy notice for further information.
• Identifiers and Device Information. When you visit our websites, our web servers automatically log your Internet Protocol (IP) address and information about your device, including device identifiers (such as MAC address); device type; and your device’s operating system, browser, and other software including type, version, language, settings, and configuration. As further described in our Cookies, Web Beacons, and Other Technologies section, our websites and online services store and retrieve cookie identifiers, mobile IDs, and other data.
• Geolocation data. We collect non-specific location based on your IP address.
• Internet and network activity. Such as how you interact with our Platforms and communications, including time you spend on our Platforms, searches performed, and the pages, features or functionality you have accessed, links you have clicked to be redirected to or from our Platforms (including, for example, the identity of the Travel Provider you are redirecting to and the type of travel service you have selected). Depending on the Platform you are using and your privacy settings, some of this data will be collected or generated using cookies - for more information, see our Cookies, Web Beacons, and Other Technologies section.
• Communications Information. Such as:
• • The content of communications we send to and receive from you, including feedback, help requests and queries;
  • Information about those communications, such as time and date sent; and how you interact with communications we send to you (for example open rate and click-through rate).

We create or generate it

• We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). For example, we infer your general geographic location (such as city, state, and country) based on your IP address. We also combine information that we collect, generate, or receive (as described above) to understand you and your interests better, so that we can personalise our Platforms, services and advertising for you. We do this by drawing inferences about your preferences and interests from the combined data.

We receive it from third-party sources

• Third-party partners. Sometimes we’re given information about you from third-party partners - for example, if you come to our Platforms via a promotional partner, or when you log into your Skyscanner account using our social network login feature. If you make a booking or purchase with a Travel Provider on our Platforms or the Travel Provider’s platform, we may receive information from them about the travel option you book or purchase. Depending on the type of booking or purchase you make, we may also receive information about you from fraud prevention partners we cooperate with, to prevent misuse of personal data and protect our systems.
• Co-branding/marketing partners. We might also receive personal data from third parties with which we collaborate for marketing and advertising purposes, depending on the initiative.
• Data brokers. Data brokers and aggregators from which we obtain data to supplement the data we collect.
• Service providers. Third parties that collect or provide data in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address.
• Publicly available sources. Public sources of information such as open government databases.

We may use cookies and other technologies on your device for some of these purposes, as explained in more detail in our Cookies, Web Beacons, and Other Technologies section below.

Making our Platforms work.

• We generate results in response to your search queries, for example providing you with a list of the flight, hotel or car-hire options that best meet your requirements;
• We ensure that our Platforms and services are accessible and usable (for example, making sure that we display our services correctly based on the type of device you are using).
• Categories of Personal Data:
• • Name and contact information, demographic data, communications information, commercial information, identifiers and device information, geolocation data, Internet and network activity, inferences.

Facilitate bookings and purchases. Where you find a travel option that you’d like to book or purchase, we either:

• Redirect you to the Travel Provider’s platform along with the information necessary to enable them to recognise you and the travel option you had selected on our Platforms. This information includes details of your travel search and data about your browser/device; or
• Enable you to make your booking or purchase on our Platforms, in which case we collect any personal data necessary for your booking or purchase to be processed and share this with the Travel Provider.
• Categories of Personal Data:
• • Name and contact information, demographic data, payment information, communications information, commercial information, identifiers and device information, geolocation data, Internet and network activity, inferences.
  • Sensitive Information: government ID, health data (as described above for things like dietary restrictions or if you inform us you aren’t fit to fly).

Send you important communications. We will send you communications about:

• Your booking or purchase;
• Your Skyscanner account;
• Other essential information, such as important changes or updates to our services
• Categories of Personal Data:
• • Name and contact information, demographic data, payment information, communications information, commercial information, identifiers, and device information, geolocation data.

Provide customer services. We respond to communications you send us about our services, your account, or a booking or purchase you’ve made.

• Categories of Personal Data:
• • Name and contact information, communications information, commercial information, identifiers and device information, geolocation data.

Maintain your Skyscanner account. We create and maintain your Skyscanner account (if you have one) and provide you with the benefits associated with having an account, such as remembering your account details and using these during your checkout process, so that you can make bookings more quickly.

• Categories of Personal Data:
• • Name and contact information, demographic data, payment information, communications information, commercial information identifiers and device information, geolocation data, Internet and network activity, inferences.
  • Sensitive Information: account access information.

Run competitions. If you choose to enter any competition, sweepstake, or similar run by Skyscanner, we will use the personal data you provide to administer the competition and deliver prizes to winners.

• Categories of Personal Data:
• • Name and contact information, communications information, commercial information, identifiers and device information, geolocation data.

Improve our services. We identify and correct faults with areas of our Platforms, including through the use of any specific feedback you choose to provide to us from time to time.

• Categories of Personal Data:
• • Name and contact information, communications information, identifiers and device information, Internet and network activity, geolocation data.

Perform analytics and improve our Platforms. For example:

• We evaluate how, when and why people use the Skyscanner Platforms. For example, we identify which travel routes and Travel Providers are most popular, which features on our Platforms are interacted with most often, and how people engage with our communications;
• We use this information to identify travel trends and to analyse and improve the Platforms and travel options we offer;
• We also make information about travel trends available to Travel Providers and other third parties who want to use these insights to inform decisions about their own products and services.
• Categories of Personal Data:
• • Name and contact information, communications information, commercial information, identifiers and device information, Internet and network activity, inferences, geolocation data.

Personalise your Skyscanner experience. We want to make our Platforms as helpful and relevant as possible. For example:

• We show you information or travel options that we believe are most relevant to you;
• We use your location to predict which airport you are likely to want to depart from or arrive back to;
• We tailor marketing communications and adverts to reflect what we believe will be of interest to you. See ‘How is personal data used for advertising?’ for more information.
• Categories of Personal Data:
• • Name and contact information, demographic information, commercial information, identifiers and device information, Internet and network activity, inferences, geolocation data.

Personalisation involves us creating a profile for you based on information you provide to us – such as when making a booking or purchase, when populating your account profile, or when subscribing to flight alerts. For example, where we know that you’ve recently booked a flight to Barcelona on one of our Platforms, we may display a message to you asking whether you’d like to search for a hotel in Barcelona, or include information about hotels in Barcelona in your next email newsletter.

To make sure that our personalisation and search results are as relevant and helpful as possible, we use personal data to train our machine learning algorithms (for example, in providing relevant car hire results based on the driver age-range you provide). We will not use directly identifying information such as your contact details or payment data for these purposes.

These profiling and machine learning activities do not have legal or other significant effects on you.

Ensure Security and Prevent Fraud. We implement security measures on our Platforms and conduct fraud-prevention activities. For example:

• If you make a booking or purchase on one of our Platforms, we store a subset of your payment card information (such as a tokenised version of card number and IP address) along with information submitted by you during the checkout process (such as name and contact details) to identify suspicious activity;
• We use information about your device (such as brand, model, operating system, settings and browser) and the network you are connected to (such as IP address, domain, carrier) to identify suspicious activity.
• Categories of Personal Data:
• • Name and contact information, communications information, identifiers and device information, Internet and network activity, geolocation data.

For these purposes, we might make automated decisions about you which may result in us or the relevant Travel Provider blocking your booking or purchase. If you are affected in this way and wish to discuss or appeal an automated decision then please contact us.

Perform Customer Satisfaction Surveys, User Research and Market Research. For example:

• We may contact you to invite you to participate in customer satisfaction surveys, market research or user research;
• We will facilitate your participation in customer satisfaction surveys, market research or user research and record and share any feedback that you choose to provide to us.
• Categories of Personal Data:
• • Name and contact information, communications information, commercial information, identifiers and device information, Internet and network activity, geolocation data.
  • Sensitive Information: health data (as described above for things like participating in accessibility surveys).

Send Travel Alerts and Marketing Communications. For example:

• We will send you alerts and updates if you ask to receive these – such as travel price alerts;
• We will send you marketing communications which we think will be of interest to you.
• Categories of Personal Data:
• • Name and contact information, communications information, commercial information, identifiers and device information, Internet and network activity, geolocation data.

You can ask us to stop sending these at any time.

Keep Records and Run our Business..

• We use information for internal administrative and reporting purposes
• We use information that we collect directly from you and information provided to us by Travel Providers about your booking or purchase to calculate any fees due to Skyscanner by the Travel Provider.
• To otherwise operate our business, such as billing, accounting, translating, improving our internal operations, securing our systems, detecting fraudulent or illegal activity, and meeting our legal obligations.
• Categories of Personal Data:
• • Name and contact information, demographic data, payment information, communications information, commercial information, identifiers and device information, geolocation data, Internet and network activity, inferences.
  • Sensitive Information: government ID, and account access information.

Where we are required to obtain consent, you will be informed and asked for your consent in advance. If you choose to give your consent, you can withdraw it at any time by using the relevant functionality provided within our Platforms where possible (for example, using the ‘unsubscribe’ link in marketing emails, changing your privacy settings or amending your account settings), or by submitting request for DO NOT SELL OR SHARE my information using this form. If you withdraw your consent, you may not benefit from promotions and offers from us. Note also that withdrawing your consent will not affect any processing which has already taken place at that time or processing that does not rely on consent as the lawful basis for processing.

We may also need to use your personal data in connection with legal claims, or for compliance and regulatory purposes. For example, we will use, share or retain personal data where we are required by law, a court order or regulatory body. When you exercise any applicable legal rights you have to access, amend, or delete your personal data, we may request personal data from you for the purpose of confirming your identity. To verify your identity we may ask you to respond to an email confirming you are the owner of the account. We may also request documents like a utility bill or passport to confirm your name and residence.

Our Disclosure of Personal Data

We disclose personal data with your consent or as we determine necessary to complete your transactions or provide the services you have requested or authorized. In addition, we disclose each of the categories of personal data described above, to the types of vendors described below, for the following business purposes:

• Payment processors. These are engaged by us to store or handle payments information, including payment card details, required for facilitating bookings or purchases with Travel Providers;
• Providers of email management and distribution tools. For example, if you sign up to receive Skyscanner newsletters or other marketing messages we will send these to you using a third-party email distribution tool;
• Providers of security and fraud prevention services. For example, we use these providers to identify automated software agents that might disrupt our services or to prevent misuse of our APIs;
• Providers of data aggregation and analytics software services.
• Providers of tracking tools. For example, we use these tools to identify when you click on a link on the Skyscanner Platforms and redirect to a Travel Provider’s platform;
• Providers of customer service software platforms. These assist us in communicating with you and providing customer services to you – for example, via our online help centre. These may use machine-learning to improve the quality of the customer support we provide to you;
• Providers of customer satisfaction and market research services. These assist us in inviting you to participate in these surveys or research, recording your feedback (if you choose to provide it) and helping us to understand your feedback;
• Providers of online cloud storage services and other essential IT support services. These enable us to operate our business and run our internal and external services;
• Travel Providers.
• • If you make a booking or purchase with a Travel Provider on one of our Platforms, personal data you submit as part of your booking or purchase will be disclosed to the relevant Travel Provider (or third parties providing services on their behalf) so that your booking or purchase can be processed. If you agree to receive marketing communications from the Travel Provider or join their loyalty programme, we will also disclose personal data for these purposes. We may also disclose personal data to Travel Providers to assist you with queries or issues you raise with our customer services team. You’ll be able to review the Travel Provider’s privacy policy and terms and conditions first to understand how the Travel Provider will use your information in advance of making your booking or purchase.
  • When you search for car hire results, we may share your IP address with certain Travel Providers. This allows them to prevent and detect fraud, and also ensure the pricing results they share are available to you in your market.
  • When you contact our customer services, if appropriate we may share your communications to relevant Travel Providers.
• Fraud Prevention Partners. In order to prevent and detect fraud, we may disclose information about you with the fraud prevention services providers we cooperate with. We may also disclose personal data to Travel Providers for their, or our, verification and fraud-detection purposes.
• Advertising Partners. Depending on the Platform you are using and the privacy choices you make, certain information may be collected from you by third parties such as advertisers, marketing networks and affiliates using cookies and other technologies. We may also collaborate with selected companies to understand more about our travellers’ interests, for example, by identifying how Skyscanner travellers engage with third-party brands or to improve our advertising campaigns. You can find out more in our Cookies, Web Beacons, and Other Technologies and How do we advertise? sections.
• Brand Collaborations. We will disclose personal data to third parties with which we collaborate on joint initiatives, such as promotions or competitions. These third parties may send you electronic direct marketing communications (for example, promotional emails), if you choose to consent to this.
• Disclosing information for legal and other reasons. We will disclose personal data where necessary to enforce our Terms of Service or other agreements, or as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets. We may also disclose personal data if necessary to prevent, detect or prosecute unlawful (or suspected unlawful) activities, including fraud, or where necessary to respond to legally binding requests (for example, from law enforcement agencies), legal claims or to enforce our own legal rights and remedies.
• Other companies within the Skyscanner group. Personal data is disclosed to other entities in the Skyscanner group which assist us with the purposes described in this Policy and for group-wide purposes, including delivery of our services to you, security and fraud-prevention, and internal reporting and administration.
• Loyalty Partners. Where you redirect to the Skyscanner Perks platform, your email address will be used to create an account with the relevant third-party provider.

We may disclose de-identified or aggregated information where it is not prohibited by applicable law, and we strive to take commercially reasonable steps to maintain it in this form and to require recipients of it to do the same.

Adverts you might see while using the Skyscanner Platforms

Skyscanner partners with affiliate network and marketing partners such as Facebook (“Third-Party Ad Solutions”) to market and advertise our services on third-party websites and applications and measure the effectiveness of the advertising campaigns. Such activities include:

• Creating audiences for Skyscanner advertisements of other individuals who have similar characteristics to you based on the information our Third-Party Ad Solutions hold about you; and
• Including you in ‘custom audiences’ which will receive Skyscanner advertising content.

For more information about how we use cookies and other technologies, including how you can manage your preferences, please see our section the Cookies, Web Beacons, and Other Technologies section below.

Cookies, Web Beacons, and Other Technologies

We use a combination of cookies and other technologies such as pixels/web beacons and tracking codes (explained below) to collect information for use in line with the purposes set out in this policy.

What are cookies, web beacons, and other technologies?

Cookies are small text files placed by a website and stored by your browser on your device. A cookie can later be read when your browser connects to a web server in the same domain that placed the cookie. The text in a cookie contains a string of numbers and letters that may uniquely identify your device and can contain other information as well. This allows the web server to recognize your browser over time, each time it connects to that web server.

Web beacons are electronic images (also called single-pixel or clear GIFs) that are contained within a website or email. When your browser opens a webpage or email that contains a web beacon, it automatically connects to the web server that hosts the image (typically operated by a third party). This allows that web server to log information about your device and to set and read its own cookies. In the same way, third-party content on our websites (such as embedded videos, plug-ins, or ads) results in your browser connecting to the third-party web server that hosts that content. We also include web beacons in our email messages or newsletters to tell us if you open and act on them.

Mobile analytics and advertising IDs are generated by operating systems for mobile devices (iOS and Android) and can be accessed and used by apps in much the same way that websites access and use cookies. Our apps contain software that enables us and our third-party analytics and advertising partners to access these mobile IDs.

How do we and our partners use cookies and other technologies?

We, and our analytics and advertising partners, use these technologies in our websites, apps, and online services to collect personal data (such as the pages you visit, the links you click on, and similar usage information, identifiers, and device information) when you use our services, including personal data about your online activities over time and across different websites or online services. This data is used to store your preferences and settings, enable you to sign-in, analyze how our websites and apps perform, track your interaction with the site or app, develop inferences, deliver and tailor interest-based advertising, combat fraud, and fulfill other legitimate purposes. We and/or our partners also share the data we collect or infer with third parties for these purposes. For more information about the third-party analytics and advertising partners that collect personal information on our services, please see the “Our Disclosure of Personal Data” section of this statement.

What controls are available?

There are a range of cookie and related controls available through browsers, mobile operating systems, and elsewhere. See the “Choice and Control of Personal Data” section below for details.

Working to keep personal data secure is one of our highest priorities. To make sure we maintain a culture of ‘Security & Privacy by Design’, we provide thorough data protection and privacy training, as well as security training to all Skyscanner employees. We develop our services with the goal of using the minimum amount of personal data necessary, including through use of data minimisation techniques like anonymisation and pseudonymisation.

No website or app can guarantee complete security, but we use a range of technical, organisational and administrative security measures and best-practice techniques, depending on the type of data being processed. You can find out more about Skyscanner’s security practices here.

Choice and Control of Personal Data

We provide you with options and choices for how we use personal data, as described further in this section. In some jurisdictions, these options and choices may be enforceable as rights under applicable law.

Notice at Collection. At or before the time of collection, under certain law, you may have a right to receive notice of our practices, including the categories of personal data and sensitive personal data to be collected, the purposes for which such data is collected or used, whether such data is sold or shared, and how long such data is retained. You can find those details in this policy by clicking on the above links.

Access, copy, correction, and deletion. If you wish to access, obtain a copy of (including for porting or transferring) personal data, correct inaccurate, or delete, personal data that we hold about you, you can exercise these rights by visiting our "Make a Data Privacy Request" page.

You can also request additional information about our collection, use, disclosure, or sale of personal data. Note that we have provided much of this information in this privacy statement.

Targeted Advertising/Do Not Sell or Share My Personal Information. Some laws define “sell,” “share,” and “personal data” or “personal information” very broadly, and some of our data sharing described in this privacy policy may be considered a “sale” or “sharing” under those definitions. In particular, we have made available certain personal data to third-party advertising and analytics providers who may collect name and contact information, demographic information, commercial information, identifiers and device information, Internet and network activity, inferences, and geolocation data through our sites and apps when you use our online services as further described in our Cookies, Web Beacons, and Other Technologies section above.

If you do not wish for us to “sell” personal data, or “share” personal data for targeted advertising purposes, you can make your request by visiting https://www.skyscanner.com/privacy-settings on web or via the Privacy Settings menu in the Skyscanner App, and by following the instructions below for opting out of having personal data we collect from you used for targeted advertising. You should take both of these actions when making your request so that it can be honored for personal data we have about you and for some personal data we collect automatically (such as via Technologies).

If you opt-out using these choices, including the choices noted below, we will take steps to stop disclosing personal data in ways that are considered a “sale” or “sharing” (for targeted advertising) for which opt-out rights are required under applicable law. However, we will continue to disclose personal data to service providers and others as allowed by applicable law. Further, using these choices will not opt you out of the use of previously “sold” or “shared” personal data or stop all targeted advertising.

We do not knowingly sell or share personal data of minors under 18 years of age.

To opt-out from having personal data we collect from you in connection with our website used for targeted advertising, you can use the:

• Privacy settings. As mentioned above, you can control your settings on https://www.skyscanner.com/privacy-settings on web or via the Privacy Settings menu in the Skyscanner App.

Other options may also be available to help reduce targeted advertising, but may not prevent having personal data we, and the partners we work with, collect from you being used for targeted advertising. These options include:

• Industry opt-out tools. These include the NAI (http://optout.networkadvertising.org), DAA (http://optout.aboutads.info/), and European DAA (http://www.youronlinechoices.com/)
• Cookie controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.
• Do Not Track. Some browsers include a "Do Not Track" (DNT) setting that can send a signal to the websites you visit indicating you do not wish to be tracked. There is not a common understanding of how to interpret the DNT signal; therefore, our website and services do not respond to browser DNT signals.
• Mobile advertising ID controls. iOS and Android operating systems may provide options to limit tracking and/or reset advertising IDs commonly used to help targeted advertising.

Note that the options in this section are specific to the device or browser you are using. If you access our services from other devices or browsers, take these actions from those devices and browsers as well.

Communication preferences. You can choose whether to receive promotional emails from us. If you receive a promotional email from us and would like to stop, you can do so by following the unsubscribe instructions in any promotional email or by contacting us as described in the contact us section below. You can also update your marketing preferences in your account. If you are using the mobile app, you can change your push notification preferences by clicking “profile” > “settings” > “marketing options.” If you are using the website, you can change your preferences by clicking “account” and changing your settings under “subscribe.”

Email web beacons. Your email service may have settings that allow you to prevent the automatic downloading of images, including web beacons, which may prevent us from automatically collecting personal data via web beacons in emails.

Limit Use and Disclosure of Sensitive Personal Data. You may limit our use of sensitive personal data for any purposes other than to provide the services or goods you request or as otherwise permitted by law. Note that we do not use sensitive personal data for any such additional purposes.

If you send us a request to exercise choices noted in this section, to the extent provided for by applicable law, we may decline requests in certain cases. For example, we may decline requests where we are unable to authenticate you as the person to whom the personal data relates, or where granting the request: would be prohibited by law; could adversely affect the privacy or other rights of another person; would reveal a trade secret or other confidential information; would interfere with a legal or business obligation that requires retention or use of the data; is unreasonable or excessive; or where applicable law excuses us from doing so. If you receive a response from us informing you that we have declined your request, in whole or in part, you may appeal that decision by submitting your appeal using the contact method described at the bottom of this privacy statement.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights where permitted by law. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.

To provide, correct, or delete specific pieces of personal data we will need to verify your identity to the degree of certainty required by law. We may verify your request by asking you to respond to an email confirming you are the owner of the account. We may also request documents like a utility bill or passport to confirm your name and residence.

You have a right to not be discriminated against for exercising your rights under applicable law, including where applicable, when making the requests noted above.

Additionally, California’s “Shine the Light” law allows California residents who have provided personal data to a business with which the individual has established a business relationship for personal, family, or household purposes may request information about whether the business has disclosed personal data to any third parties for the third parties’ direct marketing purposes. Please be aware that we do not disclose personal data to any third parties for their direct marketing purposes as defined by this law.

You can take certain actions in your Skyscanner account (e.g. view, edit, and remove certain personal data from your profile), or make a request by contacting us electronically via our Help Center or by writing to our Data Protection Officer at Skyscanner, Quartermile One, 15 Lauriston Place, Edinburgh EH3 9EN.