- Introduction
- Information we collect
- How we collect information
- How we use your personal information
- Disclosure of personal information
- Travelling for work
- Club Jetstar and My Account
- How we use cookies
- How we hold information and keep it secure
- Disclosure of information across borders
- Privacy complaints and further information
- European data protection laws
- Legal grounds for use of personal information
- Our contact details
Introduction
This Privacy Policy explains how Jetstar generally handles your personal information. We may also provide more specific information relating to particular products or services in our privacy collection notices.
We will update this policy on our website if we change the way we handle personal information.
This Privacy Policy does not apply to Jetstar’s employee records and contractor records.
Specific types of interactions with us
In addition to the general information in this Privacy Policy, we have included specific sections that you should read if you:
- travel for work with one of our corporate, business or government clients
- are a member of, or use, Club Jetstar or have a My Account
- are based in the European Economic Area (the EEA) during your interactions with us (other than when you are in the EEA solely for travel purposes).
Who is Jetstar?
This Privacy Policy applies to Jetstar Airways Pty Ltd and other Jetstar branded entities (being Jetstar Asia, Jetstar Japan and Jetstar branded related bodies corporate of Jetstar Airways Pty Ltd) (collectively referred to as “Jetstar”, “we” and “our”), excluding the Qantas Group.
The “Qantas Group” means Qantas Airways Limited and its related bodies corporate, excluding Jetstar, Wishlist Holdings Limited and Qantas Superannuation Limited companies.
Information we collect
General
The types of personal information that we collect and process about you will depend on our relationship with you. It will include some or all of the following:
- General information about you: your name, title, gender, date of birth, contact details, passport or other identification details (which may include your image) and your answer to a security question (for example, your favourite colour)
- Contact details: such as phone number, address, email address, and social media handle
- Travel details: such as travel itinerary, baggage, seat preferences, seat and meal requests
- Health and dietary information: dietary requirements and health information, including requests for specific assistance, in connection with your use of our products and services
- Payment details: such as details of your credit or debit card number and expiry date
- Your use of our products and services: such as your use of our inflight entertainment systems and any related products and services, CCTV images captured in airport lounges that are operated by our partners and on-board, and your previous travel arrangements with us
- Our interactions with you: such as any feedback, complaints, compliments, claims you have made (such as in relation to lost baggage), responses to market surveys, records of any correspondence and interactions with us and our staff (including in person, online, by telephone or email and via social media)
- Your interests: such as destinations you have visited and products you have bought
- Website and mobile apps: if you use our website or mobile applications, your geo-location, IP address, mobile telephone number or ID, and details of how you use the website or app and any third-party sites that you have accessed from them
- Club Jetstar and My Account: your membership details and details of your participation in Club Jetstar or My Account. If you are a member of, or use, Club Jetstar or have a My Account, see Club Jetstar and My Account section below for more information about the data we collect connected to your membership or account.
- Other programs and clubs: your membership number and details of your participation in Qantas Group or partner programs and clubs
- Employment information: if you are an employee or other person travelling or obtaining products or services in relation to one of our corporate, business or government clients, certain information about your employment or relationship with our corporate or government clients such as your employer’s name, your employee number, your professional title and your work contact information
- Incidents: details about any incidents that you are either involved in or that you witness, in connection with your flight or any of our products or services
- Information used to prevent and detect fraud: an assessment of whether your transaction is potentially fraudulent, including the historical and other information used by our service provider to make this assessment
- Wi-Fi use: if you use Wi-Fi onboard our aircraft, we collect information about you, your device and how you use the Wi-Fi service.
Certain aspects of your personal information, for example details of your travel documentation, payment details and contact information, are required for many of our products and services and if you fail to supply such information as requested for specific services, we may be unable to provide you with the products and services in full.
Sensitive personal information
Under privacy laws, certain categories of personal information are considered particularly sensitive and therefore as needing additional protection. These categories include information about health, racial or ethnic origin, political opinions, religious beliefs, trade union membership or your sexual orientation. Sensitive information may also include genetic and biometric data. Information concerning criminal convictions and offences is also viewed as sensitive, for example, under European data protection law.
We may collect and handle your sensitive personal information, for example:
- when you request special medical or access assistance
- if you tell us you have specific dietary requirements relating to your religious beliefs; or
- information required by government authorities for public health reasons or to demonstrate fitness to fly (such as confirmation you meet any applicable COVID-19 testing requirements).
We will ask you for your consent to handle this type of personal information, to the extent required under applicable laws, for example under the Australian Privacy Act or the European General Data Protection Regulation.
How we collect personal information
How we collect personal information about you will depend on our relationship or interactions with you.
Directly from you
We mainly collect information directly from you, for example, when you use our website or social media, you call or write to us, we interact with you in person, such as when you use our products and services or participate in promotions.
Indirectly
There may be occasions when we collect information about you from someone else, such as:
- partners participating in Club Jetstar
- travel agents, booking agents and other airlines, including when you make an inquiry but do not complete a booking
- when someone else books or purchases goods or services on your behalf
- our service providers
- airports and their service providers
- freight and associated service providers
- third parties that provide us with marketing leads
- immigration, customs, border, security, law enforcement and other government and regulatory authorities
- other Jetstar-branded entities and the Qantas Group
- businesses for whom we provide marketing and data analysis services
- providers of third-party websites, apps and social media platforms
- Jetstar credit card issuer/manager
If you provide us with information about other individuals, regardless of whether you are travelling together, you are responsible for telling those individuals and letting them know that they can find a copy of this Privacy Policy on our website.
How we use your personal information
We may use your personal information for the following purposes:
- To provide and administer our travel products and services: to verify your identity, to contact you about your orders and bookings and travel, freight and other arrangements, to process payments, for quality assurance and training purposes, such as training our staff, testing our systems, and managing our suppliers.
- For marketing purposes: to provide you with updates and offers, if you have chosen to receive these; to operate our competitions, promotions and events; to distribute our newsletters and other communications. We may also use your information for marketing Jetstar and our selected business partners’ products and services to you by post, email, SMS, phone and, where required by law, we will ask for your consent at the time we collect your data to conduct any of these types of marketing. We will provide an option to unsubscribe or opt-out of further communication on any electronic marketing communication sent to you.
- To provide customer support: to handle queries, complaints and claims.
- To comply with our legal obligations and for health, safety and security purposes: to ensure the safety and security of all passengers, including investigating security and screening issues and to take appropriate steps to prioritise the health of those passengers and our crew. We may process your personal information to comply with our regulatory requirements including in relation to immigration, public health, customs and security or dialogue with regulators, as applicable, which may include disclosing your personal information to third parties, the court service, regulators or law enforcement agencies in connection with enquiries, proceedings or investigations by such parties anywhere in the world or where compelled to do so.
- To operate and facilitate your participation in Club Jetstar: if you are a member of Club Jetstar, we will use personal information that we collect about you to ensure that you get the benefit of Club Jetstar’s and our partners’ programs and clubs, including to track your and record your usage of benefits. Partners participating in Club Jetstar, may also use your personal information to facilitate your participation in Club Jetstar.
- To conduct market, consumer and other research: to improve our products, services and marketing activities, including our websites, and to generate consumer insights that help us to market more efficiently and to be more relevant to you.
- To ensure website content is relevant: including to ensure that content from our websites is presented in the most effective manner for you and for your device, which may include automated decision making and passing your data to business partners, suppliers and/or service providers.
We may also combine the information that we collect and hold about you, for example, by linking your bookings to your My Account.
Disclosure of personal information
We may disclose your personal information to third parties in connection with:
- goods and services that you have bought through us or that we provide to you
- the operation of, and your participation in, Club Jetstar
- the operation of, and your participation in, your My Account
- our legal obligations, responding to complaints and claims, investigating any activity that we suspect to be fraudulent
- security, customs, public health and immigration purposes
including:
- other carriers on your itinerary so they can provide goods and services to you
- partners participating in our Club Jetstar to allow you to receive offers and benefits in Club Jetstar
- operators of other programs and clubs to allow you to receive offers and benefits in their programs and clubs
- various law enforcement agencies, regulatory authorities and governments around the world and their service providers
- such other third parties mentioned in the “How we use your personal information” section above.
For example:
- travel operators and travel agents, ground handling service providers (such as check-in agents, freight handling, specific assistance and ground transport, airport lounge operators, chauffeur services, catering services), and other Jetstar-branded entities may need the information in connection with these purposes
- US federal law requires airlines, including Jetstar, to collect an attestation in relation to the COVID-19 pandemic for passengers arriving in the US from a foreign country. We are required to retain a copy of each attestation for 2 years, and to provide this to the US Centers for Disease Control and Prevention (CDC) upon request. Visit the CDC's website for more information.
In addition to the above third parties, we may use service providers for the services listed below, many of whom handle your personal information on our behalf.
- Billing and payment processing, including detecting fraudulent or suspicious bookings
- Catering
- Chauffeur services
- Airport lounge operations
- Ground handling (such as check-in agents, freight handling, specific assistance and ground transport)
- Customer service and call centres
- Corporate and government travel sales and fulfilment functions
- Market research and analysis
- Marketing, printing and distribution (including mailing and email) services
- Information technology services such as data storage, passenger and freight booking and distribution systems, communication networks, software and system development, maintenance and support, incident investigation and resolution, and information processing, analysis and reporting
- Investigating and responding to incidents.
We may disclose your personal information to comply with our legal obligations, respond to complaints and claims, and investigate and protect ourselves and third parties against any activity that we reasonably suspect to be fraudulent. We may also disclose your personal information to law enforcement agencies, regulatory authorities and governments around the world and their service providers in connection with their investigations, screening, public health requirements or other functions.
We may transfer your information between our related bodies corporate and other Jetstar branded entities that are not related bodies corporate of Jetstar, some of which are located overseas in Singapore and Japan. Jetstar branded entities comply with this Privacy Policy.
Travelling for work
If you are travelling under a travel agreement with our corporate, business or government clients we may collect information about your role with the client or member. For example, your employment type, your role and title, your employee number, your start date with the client and your travel arrangements.
We may disclose your travel details and any information associated with your travel (such as incident reports) to the client or member.
Club Jetstar and My Account
Membership of and participation in Club Jetstar and creating a My Account is subject to My Account Terms and Conditions.
Personal information we collect
General participation in Club JetstarIn general we collect the information below about members of Club Jetstar.
- Information about your membership: any information supplied as part of applications in connection with Club Jetstar.
- Your payment details: including information related to credit cards and pre-paid cards.
- Marketing purposes: your preferences, marketing subscriptions, interests and details of other memberships you may have.
- Total Savings and purchase behaviour: including flight and ancillary prices, discounts and products offered to you and received by you.
Logged-in members with a My Account who use jetstar.com
We may collect logs of your use of jetstar.com while you have logged in. This information may include date and time of visit, Club Jetstar membership status, surname, location and actions, for example, pages viewed, and pages submitted.
How we collect information
We collect personal information about you as a member of Club Jetstar through your registration and participation in Club Jetstar.
We may collect information directly from you through our interactions with you. We may also collect information from others who interact with us on your behalf, our related bodies corporate, Jetstar branded entities and the Qantas Group.
We may also collect information from public sources (for example, Census data) and combine this information with information that we hold about you.
How we use your personal information
Providing and marketing enhanced products and services.
We use your personal information to personalise the way we provide and market enhanced benefits, products and services to you. We aim to enhance the way you use Club Jetstar, the website and marketing communications by understanding your preferences, interests and hobbies.
We may also market the products and services of our partners and other third parties who we believe may have products and services in which you would be interested.
General administration of Club Jetstar
We use the information we hold about you to administer Club Jetstar. These activities include:
- assessing your membership applications
- confirming your eligibility to participate in, and receive the benefits, goods and services, associated with Club Jetstar
- investigating any activity we suspect to be fraudulent.
We also use the information we hold to improve our services and customer service. This may be achieved through activities such research, behavioural analytics, and planning and developing products.
Logged-in members with a Club Jetstar membership or My Account who use jetstar.com
We may use this information we collect when members are logged in and using jetstar.com to monitor the use of, and improve, the information and functions on jetstar.com. We may also use the information to understand your preferences and provide you with information about our products and services and our partners' products and services which we think may interest you.
Disclosure of your personal information
We may disclose your information to partner airlines, and non-airline program partners for the purposes outlined in this Privacy Policy.
We may disclose your information to:
- providers of goods and services to members of Club Jetstar
- service providers for Club Jetstar.
They may use the information to assist us with Club Jetstar. Such activities may include:
- administering Club Jetstar generally
- determining your eligibility for, and providing, products and services
- operating our call and service centres
- providing market research and marketing services.
We may also disclose your personal information in the course of investigating any activity we suspect to be fraudulent.
How we use cookies
Cookies are small pieces of data stored on the web browser on your computer. This website and associated websites (including those you reach by clicking on advertising) may store cookies on your web browser.
You can visit our viewing tips page opens in new window to see if you have cookies enabled in your browser. See how we use cookies and to enable or disable cookies in your browser by visiting our Cookies Policy.
How we hold information and keep it secure
IT security
We hold your personal information in a combination of hard copy and electronic files. We use third- party information system providers who may store or have access to your personal information.
When you book flights or access information about your membership of our programs and clubs, a secure server is used. Secure Sockets Layer (SSL) encrypts the information you send through this website.
No data transmission over the Internet or website can be guaranteed to be secure from intrusion. However, we maintain physical, electronic and procedural safeguards to protect your personal information in accordance with data protection legislative requirements and industry standards.
If we have given you (or you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential and for complying with any other security procedures notified to you. We require that you do not disclose your passwords to anyone else.
When you make a Jetstar booking, you will be issued a booking reference. Your booking reference serves as a unique passenger identifier and can be used to access and update your personal information. We recommend that you do not disclose your booking reference to anyone else and that you do not post a photo of your boarding pass or ticket on social media.
Disclosure of information across borders
When we disclose personal information in accordance with this Privacy Policy, it may be accessed from, transferred to, and/or stored outside the country in which you are located and outside of Australia. The data protection laws in that country may be of a lower standard than those in your own country. We will, in all circumstances, safeguard the personal information as set out in this Privacy Policy.
Refer to the section on European data protection laws for information about the export of personal data to outside the EEA.
In the course of providing our services and facilitating reservations made through us
As a provider of travel and reservations services, we may disclose your information to countries where you travel or send freight to, or in which you have reserved services such as car hire or accommodation. This includes countries through which you are transiting and travel on flights operated by other airlines. In addition, your information may be disclosed to countries in which the providers of the services you have reserved operate or have their headquarters located.
We also have call centre and other customer service and system support providers for Jetstar in the Philippines, China, Vietnam, Indonesia and Japan.
Our service providers
We may also disclose your personal information to data processors (including operators of global travel distribution systems and reservation systems), customer service providers, and managers of our credit and financial products. The countries in which these third parties are located include the United Kingdom, Australia, the United States, Germany, France, Singapore, Japan, Vietnam and the Philippines.
Access to, and correction of, information about you
In some countries you have the right to access, or correct, the personal information that we hold about you. If you would like to request access to, or correction of, your personal information that we hold, please contact us.
To the extent required by applicable law, we will provide you with access to the information we hold about you, including for the purpose of correcting or updating that information, within a reasonable timeframe (or any timeframe stipulated by the laws that apply to your request). If we are permitted to withhold some of your personal information and we choose to do so, we will advise you when responding to your request. If we refuse to provide you with access to, or to amend, the information, (for example, if we are permitted to refuse access because granting access would interfere with the privacy of others or if it would result in a breach of confidentiality) to the extent required we will notify you in writing of our reasons for the refusal and how you may complain about the refusal.
Where permitted by law, we may recover from you our reasonable costs of supplying you with access to this information. However, we will not charge you for the making of the request or to correct or update your personal information. Club Jetstar members and logged-in members with a My Account who use jetstar.com can update their profile information online or by contacting us.
Privacy complaints and further information
If you have a concern about your privacy or you have any query on how your personal information is collected or used please contact us using the details below. We will treat your complaints confidentially. Our representative will contact you within a reasonable time after receipt of your complaint to discuss your concerns and outline options regarding how they may be resolved. We will aim to ensure that your complaint is resolved in timely and appropriate manner.
If you are not satisfied with our response, you may also contact the body responsible for administering the privacy laws in your country. If you are in Australia, you can contact the Office of the Australian Information Commissioner.
European data protection laws
This section applies if you are based in the European Economic Area (EEA) during your interactions with us (other than when you are in the EEA solely for travel purposes) and sets out the additional information that we are required to provide to you under European data protection laws.
Under European data protection laws, use of personal information must be based on one of a number of legal grounds and we are required to set out the grounds in respect of each use. Companies may process personal data only when the processing is permitted by the specific legal ground set out in the law.
In the table below, we have set out the relevant grounds that apply to each purpose of data processing that is mentioned in this Privacy Policy. You can find an explanation of each of the legal grounds for use of personal information here.
Purposes of the data processing |
Use bases |
To provide and administer our travel products and services |
- contract performance - legitimate interests (to allow us to perform our obligations and provide services to you) For sensitive Personal Data - consent |
For marketing purposes | - legitimate interests (in order to market to you) and consent (which can be withdrawn at any time) |
To provide customer support |
- contract performance - legal obligation - legitimate interests (to allow us to correspond with you in connection with our services) |
To comply with our legal obligations and for health, safety and security purposes |
- legal obligation - legal claims - legitimate interests (to cooperate with law enforcement and regulatory authorities, to take appropriate steps to prioritise the health and safety of our passengers and our crew) For sensitive Personal Data - legal claims - vital interests - substantial public interest - public interest in area of public health |
To operate and facilitate your participation in our programs and clubs |
- contract performance - legitimate interests (to allow us to provide tailored services to you |
To conduct market, consumer and other research |
- legitimate interest (to ensure that we understand our clients' requirements |
To ensure website content is relevant |
- legitimate interests (to allow us to provide you with the content and services on our website) |
Legal grounds for use of personal information
The principal legal grounds for our use of your personal information are as follows:
- Consent: where you have consented to our use of your information (you will have been presented with a consent form in relation to any such use and may withdraw your consent).
- Contract performance: where we are required to collect and handle your personal information in order to provide you with the services that we have contractually agreed to provide to you, eg where you have booked a flight with us or the use of our freight service.
- Legal obligation: where we need to use your personal information to comply with our legal obligations.
- Vital interests: where we need to process your personal information in order to protect the vital interests of you or another natural person, eg where you require urgent assistance.
- Public interest: where we need to process your personal information in order to carry out a task that is in the public interest.
- Legitimate interests: where we use your information to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights.
The legal grounds for our use of the sensitive categories of personal information are:
-
Consent: where you have explicitly consented to our use of your personal information. You may withdraw your consent to the use of your personal information.
- Vital interest: where we need to process your personal information in order to protect the vital interests of you or another natural person where you or the other person is physically or legally incapable of giving consent.
- Legal claims: where your personal information is necessary for us to establish, exercise or defend any legal claims.
- Substantial public interest: where we need to process your personal information for reasons of substantial public interest set out in EU law or the laws of the member state in which you are based.
- Public interest in area of public health: where we need to process your personal information for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health, set out in EU law or the laws of the member state in which you are based.
Disclosure of information outside the EEA
Your personal information will be transferred to, and accessed in, countries outside of the EEA and we may be required by law to take specific measures to safeguard this personal information. Certain countries outside the EEA have been approved by the European Commission as providing essentially equivalent protections to EEA data protection laws and therefore no additional safeguards are required to export personal information from the EEA to these jurisdictions. In countries which have not had these approvals, we will use appropriate safeguards to protect any personal information being transferred, such as EU Commission-approved model contractual clauses or binding corporate rules permitted by applicable legal requirements.
Please contact us if you would like to see a copy of the specific safeguards applied to the export of your personal information.
Retention period
Our retention periods for personal data are based on business needs and legal requirements. We retain personal data for as long as is necessary for the processing purpose(s) for which the information was collected, and any other permissible, related purpose. For example, we may retain certain transaction details and correspondence until the time limit for claims arising from the transaction has expired, or to comply with regulatory requirements regarding the retention of such data. When personal data is no longer needed, we either securely destroy it, or irreversibly anonymise the data (and we may further retain and use the anonymised information).
Marketing
You have the right to ask us not to process your personal information for marketing purposes. We will inform you if we intend to use your information for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by not opting in when we invite you to participate in our marketing activities. You can also exercise the right by contacting us or by managing your marketing preferences at “My Profile” if your profile is registered on our website.
Additional rights under EU law
In addition to the rights outlined elsewhere in this Privacy Policy, under certain conditions you may have the right under EU data protection law to ask us to:
- provide you with further details on how we use and process your personal information;
- delete personal information we no longer have grounds to process; and
- restrict how we process your personal information while we consider an inquiry you have raised.
In addition, under certain conditions, you have the right to:
- where processing is based on consent, withdraw the consent;
- lodge a complaint with a supervisory authority;
- object to any processing of personal information that we process on the “legitimate interests” or “public interests” grounds, unless our reasons for the underlying processing outweighs your interests, rights and freedoms; and
- to direct marketing (including any profiling for such purposes) at any time.
You can exercise these rights by contacting us
These rights are subject to certain exemptions to safeguard the public interest (eg the prevention or detection of crime) and our interests (eg the maintenance of legal privilege).
Our contact details
If you have any questions about privacy, please contact us.
You may also email us at PrivacyOfficer@qantas.com.au, or write to us at:
Customer Care
Jetstar Airways Pty Ltd
GPO Box 4713
Melbourne, VIC 3001
Australia
If your inquiry relates to EU, Singapore or UK data protection laws you may contact Jetstar’s Data Protection Officer at PrivacyOfficer@qantas.com.au
Version date: October 2024