Introduction
This Privacy Policy explains how KrisFlyerSpree collects, uses, discloses, and protects personal data when you visit and use the website located at the path /privacy.html and related pages. By accessing or using the service, you acknowledge that you have read and understood this policy and consent to the practices it describes, to the extent permitted by applicable law.
Scope of This Privacy Policy
This policy applies to personal data collected through the KrisFlyerSpree website, including browsing activities, participation in loyalty-related offers, and interactions with features such as shopping, earning rewards, and accessing partner services. It does not cover data practices of third-party websites, services, or partners which are governed by their own privacy policies.
Information We Collect
KrisFlyerSpree may collect information that identifies you, relates to you, describes you, or could reasonably be linked to you or your device. The information collected falls into several categories.
Information You Provide Directly
When you use the website or certain features, you may provide:
- Profile and loyalty information (such as your name, loyalty program details, and membership number where applicable).
- Account-related information when you register, sign in, or interact with your account.
- Preference information related to how you choose to browse, shop, earn, or redeem rewards.
- Feedback and communications you send through forms, surveys, or feedback tools on the site.
Information Collected Automatically
When you visit the website, certain data is collected automatically to help operate, secure, and improve the service, including:
- Device and browser information such as your device type, operating system, browser type, and settings.
- Usage data including the pages you view, time spent on pages, referring and exit pages, and navigation patterns.
- Technical identifiers like IP address, cookie identifiers, and other unique IDs associated with your browser or device.
Information from Third Parties
In some cases, KrisFlyerSpree may receive information about you from partners, affiliates, or service providers to facilitate reward crediting, enhance fraud prevention, or support analytics. Such data is handled in accordance with this Privacy Policy and any applicable contractual or legal requirements.
Use of Cookies and Similar Technologies
The website may use cookies, web beacons, and similar tracking technologies to support essential functions, analyze site usage, personalize content, and measure the effectiveness of activities on the platform.
- Essential cookies help the site function properly, including enabling navigation, session management, and security features.
- Performance and analytics cookies help understand how visitors use the site so that functionality and user experience can be improved.
- Preference cookies remember your settings and preferences to provide a more tailored experience.
Where required by applicable law, you may be given options to accept or manage cookies and related technologies through your browser settings or on-site tools.
How We Use Your Information
KrisFlyerSpree may use the collected information for the following purposes:
- To operate and maintain the website including providing core functionalities, enabling navigation, and ensuring the site works as intended.
- To support loyalty and rewards activities such as attributing transactions, calculating points, and assisting with reward-related queries where applicable.
- To improve and personalize the user experience through analytics, testing, and optimization of features and content.
- To protect security and prevent misuse by detecting, investigating, and preventing fraudulent or unauthorized activities.
- To comply with legal obligations and respond to lawful requests, regulatory requirements, or enforceable governmental demands, where applicable.
Legal Basis for Processing (Where Applicable)
Depending on the jurisdiction and applicable data protection laws, KrisFlyerSpree may rely on different legal bases for processing personal data, including:
- Performance of a contract when processing is necessary to provide services related to your use of the website or participation in reward activities.
- Legitimate interests to operate, secure, and improve the platform, provided that such interests are not overridden by your rights and interests.
- Consent when required for specific uses of cookies, analytics, or other optional data processing activities.
- Compliance with legal obligations when processing is necessary to meet regulatory or statutory requirements.
How We Share Information
Your information may be shared with third parties in limited, controlled circumstances consistent with this Privacy Policy and applicable law.
Service Providers and Partners
KrisFlyerSpree may share data with carefully selected service providers and partners that perform services on its behalf, such as analytics providers, technical infrastructure providers, and other vendors that support the website’s operation and performance. These parties are typically bound by contractual obligations to handle data securely and use it only for the purposes specified.
Compliance, Protection, and Legal Requests
Information may be disclosed when necessary to:
- Comply with applicable laws, regulations, or legal processes.
- Respond to lawful requests by public authorities, where required.
- Protect the rights, safety, or property of KrisFlyerSpree, its users, or others, to the extent permitted by law.
Business Changes
In the event of a corporate transaction, reorganization, or other business restructuring involving KrisFlyerSpree or related entities, information may be transferred as part of that process, subject to safeguards and continued protection consistent with this Privacy Policy.
Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as otherwise permitted or required by law. The retention period may vary based on factors such as legal requirements, dispute resolution needs, and operational business requirements. After the applicable retention period, data is typically deleted, anonymized, or securely archived.
Data Security
Appropriate technical and organizational measures are implemented to help protect personal data from unauthorized access, disclosure, alteration, or destruction. While no system can be guaranteed to be completely secure, KrisFlyerSpree seeks to safeguard data through industry-aligned practices, secure configurations, and policies designed to reduce risks of misuse or loss.
International Data Transfers
Depending on your location and the infrastructure used to operate the website, your information may be processed in countries that may have different data protection rules from those in your jurisdiction. Where required, appropriate safeguards are applied to protect personal data when it is transferred across borders, in line with applicable law.
Your Privacy Choices and Rights
Subject to applicable laws, you may have certain rights regarding your personal data, which can include:
- The right to access information about the personal data that may be held about you.
- The right to request correction of inaccurate or incomplete data.
- The right to request deletion of data in certain circumstances.
- The right to object to or restrict certain types of processing, where legally applicable.
- The right to withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.
The availability and scope of these rights can differ depending on your jurisdiction and the legal basis on which your data is processed.
Children’s Privacy
The website is not primarily directed at children, and KrisFlyerSpree does not knowingly collect personal data from children where such collection would require parental consent under applicable law. If it is discovered that such data has been collected inadvertently, reasonable steps may be taken to delete it, in line with legal requirements.
Third-Party Sites and Services
The website may contain references to third-party merchants, partner offers, or other external services. This Privacy Policy does not cover the data practices of those third parties. When you navigate to or interact with third-party sites or services, their own privacy policies and terms will apply, and you are encouraged to review them to understand how they handle personal data.
Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in legal requirements, technology, or the way the website operates. When material changes are made, updated information may be made available on the relevant page, and the revised policy will indicate the date it was last updated. Continued use of the website after such updates may signify acceptance of the revised Privacy Policy, as allowed by applicable law.
How This Policy Relates to the KrisFlyerSpree Experience
The privacy practices described here are designed to support a secure and reliable experience whenever you visit the KrisFlyerSpree website, explore offers, or participate in reward-related activity. By understanding how your information is collected and used, you can make informed decisions about your interactions with the platform and manage your preferences in a way that best suits your needs.