Emirates
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- Staff may review your content; the policy does not describe an opt-out.
Emirates collects travel, health, and biometric data, shares it widely, profiles you for ads, and the site is as-is with .
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
They collect booking details, passport, payments, health, religion, biometrics, device IDs, and location.
Read the exact line
Privacy policy
“In certain circumstances, we may also collect special categories of personal information such as,”
Training
They use it to fly you, personalize offers, market, profile you, and run ads on social media.
Read the exact line
Privacy policy
“We work with third‑party advertising and social media platforms to provide personalized advertising promoting our products and services in accordance with your preferences”
Sharing
Group companies, partners, governments, payment firms, and ad platforms can get your data.
Read the exact line
Privacy policy
“other entities within the Emirates Group to provide you with, improve, and personalize our products and services; to manage our business; develop a single customer view; for profiling and analytics”
Kept
They keep it as long as they say they need it, and longer for legal or complaint reasons.
Read the exact line
Privacy policy
“We keep your personal information for as long as is reasonably necessary for the purposes for which it was collected, For example, to manage bookings and provide you with any relevant Emirates products or services, as explained in this Privacy Policy.”
Controls
You can unsubscribe from marketing and request access or deletion by form or email.
Read the exact line
Privacy policy
“You can exercise your rights by completing a form on our website or by contacting us by email or post.”
Fine print
The site is as-is, you them, and using it after changes means you accept the new terms.
Read the exact line
Terms of service
“We may change these Terms and Conditions at any time without advance notice. Changed terms will become effective once posted on the Website and will not have any retrospective effect on existing contractual arrangements made through this Website.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Unsubscribe from marketing emails
Unsubscribe link in emails, or Skywards My Account then Personal Preferences on emirates.com
Request access or deletion of your data
Form on their website, or privacy@emirates.com, or Data Privacy Office, P.O. Box 686, Dubai
Turn off app notifications
Device Settings, notifications for the Emirates app
Manage social-media ad preferences
Preference settings inside the social or digital platforms that show Emirates ads
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can use your face and other biometrics and share that with partners and border agencies.
Read the exact line
Privacy policy
“identify you by using facial recognition and other biometric technologies which may be used by ourselves, (for example, to enable better customer service, faster flight check‑in at the airport and entry into our lounges and for security purposes), our travel providers, immigration authorities”
For example, a camera at check-in could match your face and that data could go to immigration at your destination.
They send your name and email or phone to social networks so those sites can show you Emirates ads.
Read the exact line
Privacy policy
“We work with social media and other digital platforms to provide you with advertisements within those platforms. We provide them with your name and contact details (such as your email address or phone numbers).”
For example, they can give Facebook your email so you see Emirates ads in your feed.
Your data can be stored in the UAE and other countries with different privacy laws.
Read the exact line
Privacy policy
“The Emirates Group is a global business, which means your personal information may be transferred and stored in the United Arab Emirates and in other countries that may be outside your country of residence.”
For example, a booking made in the US can sit on systems in Dubai.
If someone sues them because of how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“As a condition of use of this Website, you agree to us from and against any and all liabilities, expenses (including legal fees), and damages arising out of claims resulting from your use of this Website”
For example, if a booking you made causes a dispute, they can ask you to cover their lawyer costs.
They say the website and its info come with no promises that it works or is accurate.
Read the exact line
Terms of service
“ALL SUCH INFORMATION, SOFTWARE, PRODUCTS, AND SERVICES ARE PROVIDED "AS IS," WITHOUT REPRESENTATION, , OR COVENANT OF ANY KIND”
For example, if a fare or schedule on the site is wrong, they disclaim for that.
They build a profile from your trips, payments, cookies, and personal details to target you.
Read the exact line
Privacy policy
“We use personal information such as your date of birth, gender, country of residence, transactions (for example, payments made to us, Miles earned, and flights taken) and information derived from Cookies and your preferences for profiling.”
For example, they can use your flights and cookies to decide which ads and offers you see.
Staff can listen to recordings of your calls with customer service.
Read the exact line
Privacy policy
“We also keep a record of our communications with you, including call recordings, so we can monitor and improve the quality of our customer support services”
For example, a call about a missed connection can be recorded and reviewed later.
Even after a trip is over, they can keep your data for legal or tax reasons.
Read the exact line
Privacy policy
“In some circumstances, we may store your personal information for longer periods of time, for example, where we are required to do so to comply with legal, regulatory, tax, or accounting requirements”
For example, old booking and payment records may stay on file for years.
They say marketing emails and similar messages need your permission.
Read the exact line
Privacy policy
“We will only send you marketing messages if you tell us to do so”
For example, they should not email you deals unless you opted in or set that preference.
If they change the website rules and you keep using the site, they treat that as agreement.
Read the exact line
Terms of service
“Your continued use of this Website after any change means you have accepted the changed Terms and Conditions.”
For example, they can post new terms tonight and your next visit counts as accepting them.
Words to know
Legal words from the lines above, in plain English.
- sensitive personal information
- Data that could hurt you if exposed, like health, religion, sexuality, race, exact location or bank details. For example, telling a chatbot about a medical condition creates sensitive data that some laws protect more strictly.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- profiling
- Building a picture of who you are, what you like and what you might do next from your data. For example, an app may guess your income, health or politics from what you watch and tap.
- biometric
- Measurements of your body that identify you, like your face, fingerprint or voice. For example, a selfie used to unlock the app or a voice recording matched to you.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
How we got here · grade F · score 27/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect far more than a ticket needs, including lifestyle interests, cookies, device ID, IP, location from the app, health, religion, and biometrics.
Does it record your voice, face or body, and what happens to that?
They collect biometric data, images, and audio, use facial recognition, and share it with travel providers and immigration authorities.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
They record customer-service calls to monitor quality and do not describe an opt-out from that review.
Are you profiled or tracked for advertising?
They profile you and send name and contact details to social and ad platforms for personalized ads.
Do they sell or share your data, and can you opt out?
They share with the group, many partners, governments, and advertisers; California residents can ask yearly who got marketing data.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed and longer for legal reasons; deletion is by contacting them or a form, not a simple in-app wipe with a deadline.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They build profiles from trips, payments, cookies, and preferences; you can change marketing preferences but not a full memory dashboard.
Do they commit to basic security, and have they leaked data?
They describe SSL/TLS, staff confidentiality, and destroying or anonymizing data when no longer needed. No independent audit is described.
Is there a real age gate, and are teens protected?
The website terms ask you to promise you are old enough to make a binding contract. There is no described age check.
Will they tell you when the rules change, and is the policy specific?
Neither document shows a last-updated date. Privacy updates are posted on the page; website terms can change without advance notice.
Can they close your account without warning, and can you get your data out first?
They may cancel bookings without notice in some abuse cases and can withdraw the website without notice. No general export-before-close process is described.
If something goes wrong, who pays?
The site is as-is with broad liability limits, and you must indemnify them for claims from your use of the website.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 11,654 words at a college graduate level (Flesch reading ease 37.2); the terms are 3,141 words at a college level.
