INTRODUCTION
AladdinMiles is committed to respecting your privacy and protecting your personal information
* We will be transparent about the information we are collecting and what we will do with it.
* We will use the information you give us for the purposes described in our Privacy Policy, which include providing you with services you have requested and enhancing your experience with AladdinMiles.
* We will also use the information to help us understand you better and so that we can give you relevant offers.
* If you tell us, you don ’t want to receive marketing messages we will stop sending them. We will, of course, continue to send essential information relating to AladdinMiles and our merchants and partners.
* We will put in place measures to protect your information and keep it secure.
* We will respect your data protection rights and aim to give you control over your own information.
You can access our full Privacy Policy below to help you to understand better how we use your personal information. In it, we explain in more detail the types of personal information we collect, how we collect it, what we may use it for and who we may share it with.
Without prejudice to your rights under applicable laws, the above and the Privacy Policy are not contractual and do not form part of your contract with us.
FULL PRIVACY POLICY
CONTROLLER OF PERSONAL INFORMATION
Any personal information processed by AladdinMiles in connection with this Privacy Policy is controlled by AladdinMiles, which is considered the “data controller ”of your personal information under KSA and European Union data protection law. To contact the Data Protection Officer, please use the Contact Us functionality in our apps or on our websites.
Any provider of services such as a restaurant, hotel, car rental, airline company or an affiliated venue will also separately be a “Data Controller ”. You can access the privacy policies of those providers from them directly.
WHAT DO WE MEAN BY PERSONAL INFORMATION?
Personal information means details which identify you or could be used to identify you, such as your name and contact details, your purchase history. It may also include information about how you use our websites and mobile applications.
WHEN DOES THIS POLICY APPLY?
This Privacy Policy applies to personal information about you that we collect, use and otherwise process regarding your relationship with us as a customer or potential customer, including when you purchase through us or use our other services, use our websites or mobile applications, contact our customer representatives or call centers and book to use our services through third parties.
Where we reference that others are data controllers in the sections ’Controller of Personal Information ’and ’Who do we share your personal information with?’you should consult their privacy policies for further information.
Additional Terms and Conditions or policies may apply if you elect to take additional services from us such as purchasing extra Miles or entering a competition linked to AladdinMiles and other third parties.
HOW CAN YOU KEEP YOUR PERSONAL INFORMATION SECURE?
We take great care to protect the personal information you provide to us. You can read more about how we do this in our Data Protection Policy. Here are some things you can do to keep your information secure.
KEEP YOUR PAYMENT INFORMATION CONFIDENTIAL
When you make a purchase, you will enter your credit card details. This is made via our payment processor in a certified application. We do not store your credit card details. Our payment processor may, however store your credit card details if you so choose.
ALADDINMILES CUSTOMER APP LOG-IN DETAILS CONFIDENTIAL
To make sure your access to our websites, other online services, and mobile applications is secure, you should not share your log in details with anyone else. When you finish using the website, online services or mobile app you should log out if others may be able to access your computer or device. This is especially important if you are using a publicly accessible computer.
BE AWARE OF AND PROTECT YOURSELF AGAINST INTERNET FRAUD AND ‘PHISHING ’
There is an Internet fraud practice known as ‘phishing ’which is the illegal gathering of personal information by deception. Unsolicited emails are sent to individuals from lists illegally gathered by a third party, and recipients are asked to enter or reconfirm bank or password details into a 'cloned 'or illegal copy website.
WHEN DO WE COLLECT PERSONAL INFORMATION ABOUT YOU?
We collect personal information about you whenever you use our services (whether these services are provided by us or by other companies or agents acting on our behalf), including when you make a purchase through us, when you use our website or mobile applications, or interact with us via email or use our contact centers.
For additional details see ’What types of personal information do we collect and retain?’below.
In addition, we may receive personal information about you from third parties, such as:
* Companies contracted by us to provide services to you.
* Companies involved in arrangements made via our services or mobile apps.
* Companies that participate in our loyalty schemes and other customer programs (e.g. airlines, car hire providers and hotels).
* Companies who provide details to us under privacy polices providing information to be shared with AladdinMiles.
WHAT TYPES OF PERSONAL INFORMATION DO WE COLLECT AND RETAIN?
When you use our services, you will need to provide us with your personal details.
We collect the following categories of personal information:
* Information you provide for AladdinMiles to complete and manage a booking or purchase you have made through us or a service you have requested from us.
* Information about the services we have provided to you in the past.
* Information about online registration and other interactions.
* Information about your use of our websites, contact centers and mobile applications. For more details of the methods please see 'How we use cookies and other methods for the collection of website usage data '.
* Information about your device and your location if you have been browsing on www.aladdinmiles.com or using our mobile application, for example your IP address or unique device ID. (An IP address (i.e. Internet Protocol address) is a numeric code that can act as a unique identifier for your computer or other device –this can be turned off from your device).
WHEN AND WHY DO WE COLLECT ‘SENSITIVE PERSONAL DATA ’?
Certain categories of personal information, such as that about race, ethnicity, religion, health, sexuality or biometric information are special categories of data requiring additional protection under KSA and European Union data protection law and is referred to here as “sensitive personal data ”. Generally, we try to limit the circumstances where we collect and process sensitive personal data. Examples of where we may collect and process ’sensitive personal data ’includes the following:
* You have chosen to provide such information to us or it has been passed onto us by a third party such as the venue with which you made your purchase.
* In addition, you may have made purchase or requested services (such as a meal) which is not ’sensitive data ’but may imply or suggest your religion, health or other information.
WHAT DO WE USE YOUR PERSONAL INFORMATION FOR?
The main purposes for which we use your personal information are:
* To fulfill your purchases.
* To send status updates and service communications to you.
* To meet certain legal and regulatory requirements which apply to AladdinMiles as a loyalty program operator.
* To provide services tailored to your requirements and to treat you in a more personal way.
* To carry out analysis and market research.
* To carry out marketing including online advertising and keep you informed of AladdinMiles products and services.
* To undertake targeted online advertising.
* To send you status updates and service communications.
* To improve our websites, products and services.
* For management and administrative purposes.
WHEN WILL WE SEND YOU MARKETING?
When we have your permission, we will send you marketing communications from AladdinMiles. As AladdinMiles, we do sometimes send marketing communications that include a business partners ’products and services related to your past and present purchases.
We will only allow third parties or other members of our group to send marketing communications to you when we have agreed marketing from third parties.
We will respect your choice as to what communications you wish to receive and how these are sent.
HOW CAN YOU CHANGE WHAT MARKETING COMMUNICATIONS YOU RECEIVE, HOW YOU RECEIVE THEM AND UNSUBSCRIBE?
If you decide you would no longer like to be sent marketing communications, you can change your mind at any time. You can change your marketing preferences at any time in your online account or in our mobile applications.
In addition, each marketing communication we send by email will also have an unsubscribe option which will allow you to stop you receiving further marketing emails. We aim to action requests to stop being sent marketing communications within 10 working days of receiving those requests, but it is possible you will receive some marketing in the period prior to that change being made.
Please note that if you tell us that you do not wish to be sent further marketing communications, you will still receive service communications (as described above) which are necessary, for example, to confirm your booking or to provide you with an update on its status.
WHAT IS OUR LEGAL BASIS FOR USING YOUR PERSONAL INFORMATION?
AladdinMiles will only process your personal information where we have a legal basis to do so. The legal basis will depend on the reason or reasons AladdinMiles collected and needs to use your information. Under KSA and EU GDPR data protection laws in almost all cases the legal basis will be:
* Because we need to use your information so that we can process your purchase and otherwise perform the contract we have with you.
* Because it is in AladdinMiles legitimate interests as a loyalty program operator to use your personal information to operate and improve our business.
* Because AladdinMiles needs to use your personal information to comply with a legal obligation.
* To protect the vital interests of you or another person.
* Because you have consented to AladdinMiles using your information for a particular purpose.
More information on each legal basis is provided below.
If processing of your data is subject to any other laws, then the basis of processing your data may be different to that set out above and may in those circumstances be based on your consent in all cases.
HOW LONG DO WE KEEP PERSONAL INFORMATION?
We will keep your information for as long as we need it for the purpose it is being processed for. For example, when you make a purchase through us, we will keep the information related to your purchase, so we can fulfill the purchase and after that, we will keep the information for a period which enables us to handle or respond to any complaints, queries or concerns relating to the purchase.
The information may also be retained so that we can continue to improve your experience with us and to ensure that you receive any loyalty rewards which are due to you.
We will actively review the information we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or customer need for it to be retained. If you stop interacting with us as a customer, we will remove or anonymise your information after 7 years.
PERFORMANCE OF A CONTRACT WITH YOU
It will be necessary for AladdinMiles to use your personal information to complete a purchase you have made through us.
LEGITIMATE INTERESTS
As a commercial loyalty program operator AladdinMiles has a legitimate business interest to use the personal information we collect to offer an effective service and carry out our business.
COMPLIANCE WITH LEGAL OBLIGATIONS
There are situations where AladdinMiles is subject to a legal obligation and needs to use your personal information to comply with those obligations.
TO PROTECT THE VITAL INTEREST OF YOU OR ANOTHER PERSON
There are situations where we may need to use your personal information to protect the vital interests of you or another person.
CONSENT
Alternatively, we may collect and use your personal information where you have given your specific consent to us doing so.
If the basis of our processing your data is consent to marketing, you can withdraw your consent to such processing at any time, including by amending your account online or alternately contact us via Contact Us in our mobile applications.
However, if you withdraw your full consent, in some circumstances, it may mean we will not be able to provide all or parts of the services you have requested through or from us and you will not be able to obtain a refund of any charges you have paid.
WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH?
Your personal information may be shared with the companies within our group. You will only be sent marketing emails from other companies within our group where you have provided your consent to those companies. We may also disclose your personal information to the following third parties for the purpose described here:
* Airlines and other service providers needed to deliver the services you have asked for. Those airlines and other service providers will be identified when you make a purchase or a booking.
* If you have joined the AladdinMiles loyalty program, so that we can administer the benefits of the loyalty program to you.
* Credit and charge card companies, credit reference agencies and anti-fraud screening service providers to process payments and (where necessary) to carry out fraud-screening.
* In response to a valid, legal request from Government and law enforcement agencies such as customs and immigration authorities.
* Third party service providers we are using to provide services that involve data processing, for example, to carry out marketing initiatives or run customer surveys on our behalf.
* Third parties, such as law firms and law courts, to enforce or apply any contract with you.
* Third parties, such as the police and regulatory authorities, to protect our rights, property, or the safety of our customers, staff and assets.
* We may provide usage information (but not your personal details) to other websites so that they know that you have visited our websites (see ’How we use cookies and other methods for the collection of website usage data 'above).
* We may provide usage information including your personal details to marketing agencies to deliver online advertising on websites or social networks.
* If necessary to comply with a legal or regulatory obligation in any jurisdiction, including where that obligation arises because of a voluntary act or decision by us (e.g. our decision to operate to a country or a related decision).
We do not sell personal information to third parties, and we only allow third parties to send you marketing information where we have your consent to do so.
WHAT COUNTRIES WILL YOUR PERSONAL INFORMATION BE SENT TO?
Your personal information may be sent to and stored by us and third parties in countries outside the country in which you are located.
The nature of our business means it is often necessary for us to send your personal information outside the KSA and European Economic Area to fulfill your purchases and booking arrangements. This occurs because our business and the third parties identified in ’Who do we share your personal information with?’have operations in countries across the world.
In addition, we may transfer your data to parties in countries outside the country in which you are located to provide services to us.
This may involve sending your data to countries where under their local laws you may have fewer legal rights.
Where your personal information is transferred, and we are using a service provider in a third country, we will implement safeguards so that your personal information continues to be protected to the standards set out in this privacy policy.
REQUESTING A COPY OF YOUR PERSONAL INFORMATION
Under EU GDPR Data Protection Regulation, you may request a copy of any personal data about you held by AladdinMiles. There is no fee for this request.
The request must be in writing and must contain the following:
* Your name and postal address.
* Details of your request.
* Any details which may help us locate the information which is the subject of your request, for example:
* Bill reference and dates.
* Airline membership number.
* Telephone recording details (identifier number, the number you call from, the number and option you dialed, the date and time of your call(s)).
* You must also provide:
** A photocopy of your passport or driving licence, so that we can verify your identity.
** Your signature and the date of the request.
** If you are applying on behalf of another person then signed authority from the individual is required.
Please send your request to the Data Protection Officer via our Contact Form.
WHAT ARE YOUR LEGAL RIGHTS IN RELATION TO THE PERSONAL INFORMATION WE HOLD ABOUT YOU?
Under data protection laws in KSA and the European Union, you have certain rights in relation to your personal information. Responses to exercise your rights will be provided within one month and generally there is no fee for making these requests. If your request is particularly complicated we may extend the deadline for responding to three months, but we will let you know if this is the case.
We will handle all requests in accordance with applicable law. However, depending on the right you wish to exercise, and the nature of the personal information involved, there may be legal reasons why we cannot grant your request. Further explanation of those rights and the exceptions to them are set out below.
Details of how to exercise your rights are set out in the section below “How can you exercise your legal rights and change how we use your data?
Your rights include the following:
1. You may request us to stop sending you marketing. To see how to change your permission to market please refer to “How can you change what marketing communications you receive and how you receive them?"which can be located in "When will we send you marketing?". If you do so we will no longer be able to send you marketing communications. However, if you subsequently make a purchase through us we will need to send you communications about the purchase and other services you have booked or purchased. These communications will help you get the most from the services we provide and may also contain options and other details about the services you will be using.
2. You may request us to stop using your personal information where we are doing so under legitimate interests (see the section “What is our legal basis for using your personal information ”for examples of when that applies) unless it is needed for dealing with legal claims or we have other compelling legitimate reasons that override your rights.
3. You may request us to stop processing of your personal information for marketing purposes including analytics for the purposes of targeted marketing, including online advertising.
4. You may access the personal information we hold on you.
5. There are some limited exceptions to this right, such as information relating to others who have not consented to the disclosure of their information and information which is legally privileged. Please see “Accessing your personal information ”which can be located within "How can you exercise your legal rights and change how we use your data?"for more details.
6. You may ask us to correct your personal information (the 'right of rectification ’) if that information is inaccurate. How to do this see section on “How can you change what marketing communications you receive and how you receive them?”
7. You may ask for personal information which identifies you to be erased (or forgotten).
8. To do this we will remove the information that identifies you from the data we hold in our active systems (“anonymise ”). However, a separate and restricted copy of the identifying information will be kept for 7 years to meet the obligations we have to law enforcement, national authorities and legal proceedings.
Considerations:
* We may need to retain certain elements that relate to a contract between you and AladdinMiles because we need it for our own legal and auditing purposes (for more information on the basis on which we process your personal information see the section “What is our legal basis for using your personal information ”).
* A record of your request including the personal information you supplied will be retained in the application used to carry this out for 3 years.
* In some circumstances it may mean we will not be able to provide all or parts of the services you have requested from us in relation to previous purchases or retain any preferences you have previously shared with us.
* We cannot erase your personal information if you retain your membership with AladdinMiles as we require this information to deliver our contract with you. If you wish to proceed you will need to resign from the AladdinMiles.
* We cannot erase your personal information if you have purchased or booked through us in the past 18 months. For Legal reasons, we need to keep information linked to these purchases and bookings. You may come back to us once this time period has passed and submit a request.
* We cannot erase your personal information if we have identified that you either have an open complaint with us or we hold a previous case for you within the past 6 years. We are required to retain this information in case there is a need to re-open the complaint.
HOW CAN YOU EXERCISE YOUR LEGAL RIGHTS AND CHANGE HOW WE USE YOUR DATA?
If you wish to change how we use your personal information, please contact us.
We will ask for some information to identify you, which will only be used to process your request. We will verify your identify via email before processing your request.
Alternatively, you can make a request to us via our Contact Form, ensuring you mark the request for Customer Permissions (Data Protection Office).
ACCESSING YOUR PERSONAL INFORMATION
If you wish to receive a copy of your information, you can make your request in writing and include the following information with your request:
* Your name and postal address
* Details of your request
* A photocopy of your passport or driving license, so that we can verify your identity
* Your signature and the date of the request
* If you are applying on behalf of another person then signed authority from the individual is required
* Any details which may help us locate the information which is the subject of your request
* Bill reference number of a previous purchase
* Airline membership number
* Telephone recording details (identifier number, the number you call from, the number and option you detailed, the date and time of your call(s)).
If you wish the information to be provided to you in a machine-readable copy, please indicate that at the time of making your request.
Please send your request via our Contact Form.
HOW WILL WE INFORM YOU OF CHANGES TO THIS PRIVACY POLICY?
If we change this Privacy Policy, we will let you know about the changes by publishing the updated version on www.AladdinMiles.com. We are committed to protecting and respecting your privacy and will continue to do so in any future changes we make to this Privacy Policy.
HOW TO GET IN TOUCH WITH US AND YOUR RIGHT TO COMPLAIN TO OUR SUPERVISORY AUTHORITY?
If you have any questions about this policy, please contact the Data Protection Officer.
The Data Protection Officer for AladdinMiles can be contacted via the Contact Form.