Customer Data Privacy Policy

Your privacy is important to us

United Airlines respects your privacy. This Policy discloses United’s privacy practices for your information collected online or offline. We address the following topics:

-
Your privacy is important to us
United Airlines respects your privacy. This Privacy Policy discloses United’s privacy practices for your information collected online or offline. We address the following topics:
While United strives to take reasonable measures to protect your information, this Privacy Policy is not a contract and does not create any legal rights or obligations. Rather, the following are guidelines for protecting your information and, depending on your jurisdiction, describing your rights under applicable data protection laws. Except as otherwise described in this Policy, by using any of our sites and/or our services or otherwise providing us with any information, you acknowledge the handling of your information as described in this Privacy Policy.
Scope of this policy
This Privacy Policy applies to the information that we collect about you on any United website in which it is posted, which include the following situations:
- On United-managed websites and mobile websites, such as, for example, united.com, mobile.united.com, hub.united.com;
- Through United-managed mobile applications, such as the United App;
- Offline, through a United Customer Contact Center agent or other travel agent.
The information we collect is controlled by United Airlines, Inc., which is headquartered in the United States at 233 S. Wacker Drive, Chicago, Illinois 60606.
This Notice does not apply to the following United sites or services:
- United Cargo transactions, including but not limited to, those conducted on unitedcargo.com;
- United Wi-Fi^SM service portal;
- United Club^SM locations’ Wi-Fi service; or
- United’s Technical Operations website.
In addition, this Privacy Policy does not apply to any website not owned and managed by United or any other third-party site.
With respect to the above, please see those respective sites for the privacy policies that may apply.
Information we collect about you
United collects and maintains information, including personal information, about you directly from you (both online and offline) and automatically when you use our sites and third-party sites. We collect information from you when you make travel arrangements, contact us, complete a survey, register for the MileagePlus program, participate in a promotion, or otherwise interact with us.
The type of information we collect about you depends on your particular interaction with us, and includes the following information, as applicable:
- Name;
- Contact information;
- MileagePlus number and security information;
- Gender and date of birth;
- Payment information;
- Passport information and photograph;
- Government ID or redress number;
- Images and biometric information;
- Travel preferences and special requests;
- Purchase information (both travel and non-travel purchases);
- User and activity data from our websites and mobile applications;
- Survey responses;
- Tax identification number of promotion or survey winner, depending on the value of the prize; and
- Health information.
Payment information, passport information and photograph, and government ID may be defined as “sensitive” under certain data protection laws. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
Information we collect directly from you
Based on your interaction with us, we collect information directly from you as described below.
MileagePlus information
When you enroll in MileagePlus, or if you are already a MileagePlus member, we collect information such as your name, address, phone number(s), email address, MileagePlus account number, and password or other account security authentication information. If you create a traveler profile, we also will collect the information that you choose to provide to us. You have the option of providing us with payment information, telephone numbers, email addresses, general requests or special needs, travel preferences and loyalty program information.
In certain situations, we collect information that is defined as “sensitive” under applicable data protection laws. We provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such request and/or provide such information, we collect information in order to provide accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time.
Personal information collected and processed as part of our MileagePlus program is held by Mileage Plus Intellectual Property Assets, Ltd. (“MIPA”), a member of the United group of companies, whose registered office is at Maples Corporate Services Limited, PO Box 309, Ugland House, George Town, Grand Cayman, KY1-1104, Cayman Islands. MIPA will be a data controller in respect of that personal information under the Data Protection Law, 2017 of the Cayman Islands (“DPL”).
MIPA will be a data controller in respect of that personal information under the Data Protection Law, 2017 of the Cayman Islands (“DPL”).
Where MIPA is the data controller, it processes MileagePlus personal information where it has an appropriate legal basis. This may be because:
- Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to the MileagePlus program and services and to provide you with information you request);
- Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to fulfill your MileagePlus benefits); and/or
- Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).
If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.
Online purchases
If you make a purchase with us, whether as a MileagePlus member or as a “Guest”, we collect traveler information, travel and contact preferences, and payment information.
Offline purchases: Telephone, travel agent or ticket counter
To make a purchase or transact other business with a United Customer Contact Center agent, a travel agent, or a customer service representative (collectively, “Reservations Agents”), Reservations Agents collect traveler information, travel and contact preferences, and payment information. We may monitor and/or record telephone calls to Reservations Agents. By continuing with the call, you are deemed to consent to such monitoring and/or recording.
COVID-19
You may be required to provide information about your health, including (depending on your destination) lack or presence of symptoms related to COVID-19, COVID-19 test results, or COVID-19 vaccine information or information supporting your request for an exemption to a health-related travel requirement. We may offer you the ability to electronically provide such information to us, such as through our Travel-Ready Center or through a digital health pass. We may offer you the ability to request that United collect your information from a third-party, such as a digital health app that you have chosen to use. We will use such information to help facilitate, but cannot guarantee, meeting your destination’s requirements, to comply with applicable laws (for example, we may be required to confirm you have necessary travel documentation), and to help ensure health and safety during the travel experience. United is not liable for any assistance or information provided by any employee or agent of United to you relating to such documents or compliance with such laws, or for the consequences to you resulting from failure to obtain and present such documents, which shall be in good condition, or to comply with such laws. United also reserves the right to deny boarding to you if your information is not in good condition according to United’s reasonable belief, or which otherwise do not comply with laws of the specific country you are departing from, transiting through, or travelling to. We may offer you the ability to provide contact information to help health authorities facilitate contact tracing. In some cases, your destination may require that you provide such information. We may be required by law to disclose contact information to health authorities or other government authorities.
Biometric Information
We may provide you the option to voluntarily participate in travel facilitation and security programs that use biometric information. These programs may include trial programs to expedite the boarding and baggage check processes, as well as security programs like the Traveler Verification Service administered by U.S. Customs and Border Protection. You should review any specific details regarding the collection, use, disclosure, and retention of biometric information when considering whether to participate in these programs.
United Club
United may collect information such as name, addresses, email addresses, telephone numbers, and credit card information, in order to provide service to members of its United Club.
In flight
United may collect credit card and MileagePlus information in flight to enable present and/or future purchases.
Children
Due to the nature of our services, United will collect and maintain travel information, about children under the age of 13 when necessary to comply with federal aviation or security regulations, for safety or security reasons, or as otherwise necessary for United to provide transportation or other services requested.
Information we automatically collect
We and our service providers automatically collect information about your use of our sites through cookies, web beacons, log files and other technologies. Such information includes the following:
- Domain name;
- Browser type and operating system;
- IP address;
- Web pages you view;
- Links you click;
- Length of time of your visit;
- Your activities on our sites and your movement through these sites; and
- Referring URL or webpage that led you to our sites.
We and our third-party service providers may combine this information with information that we (or they) already have collected about you. For more information, refer to the Use of cookies, web beacons and other similar technologies" section below.
Information we collect through our mobile application(s)
We collect information directly from you when you use our mobile application(s), which varies based on your interaction with our mobile applications, but may include, for example, name, email address, MileagePlus account information, government ID or passenger redress number, passport information and/or photograph, date of birth, and payment information (e.g., credit card number, expiration date and billing name and address), if not already provided.
We may store your information to facilitate your travel (e.g. reservation, specific flight information) or purchase needs. The mobile application(s) may also store user-provided data, unless you choose to delete it, for as long as you use the related feature of the application. Information provided for traveler data, security clearance, purchases and related activities will be stored in our operational systems, as needed, to provide services you request. If such information is stored in your MileagePlus account, it will not be accessible if your MileagePlus account is closed.
We also collect information automatically through your use of our mobile application(s) (using cookies, beacons or other tracking technologies designed for mobile applications). Information collected in your use of our mobile application(s) includes, but is not limited to:
- With your consent, your pinpointed physical location information from technologies like GPS, Wi-Fi, or cell tower proximity (geo-location tracking)
- With your consent, while at or near certain airports in the U.S., your pinpointed physical location will be tracked continuously to provide you location-based offers, services and other information. For more information, see the Location Services FAQ located on the side menu of the United App;
- Your domain name;
- Device ID or alternative ID where required by the platform provider;
- Electronic data concerning operating systems and computing devices/browser, including types;
- Features you use and links you click;
- Amount of time spent in the application;
- Installs and uninstalls;
- Transaction details and history.
We may combine this information with information that we already have collected about you.
Information we collect from third parties
We collect information about you from third parties. If you make a reservation through a travel agent, we will obtain your travel information from that agent. We may also obtain information about you from our marketing partners, advertisers and other third parties.
Sensitive information we collect directly from you
In certain situations, we collect information that is defined as “sensitive” under certain data protection laws. If a medical or other emergency occurs while traveling with United, we collect relevant information and may provide such information to non-United medical or other safety personnel as necessary or advisable. We also provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such a request and/or provide such information, we collect information in order to provide reasonable accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
How we use your information
General - applicable to all sources of information
We primarily use your information, including personal information, to provide our services to you and to fulfill your requests. In certain circumstances, such as for advertising purposes, we combine your information with other information that we have about you, that is publicly available and/or that we have obtained from third parties (either individually or in the aggregate). We also use your information for the following purposes:
- For flight information/wireless services. You may register for receipt of flight information and other wireless services by indicating your preference to receive this information by providing relevant information or by granting applicable permissions. Participation in these services may be optional.
- To improve your user experience. To tailor the content and information that we may send or display to you, such as information about your travel schedule; to offer customized location information, personalized help and instructions; and to otherwise personalize your experiences while using our sites or services.
- For operational needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
- For marketing and advertising. United uses your information, consistent with applicable law, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising) and to send you news and newsletters. Specifically, information that we collect about you may be used to send you email, direct mail, or telephone communications about offers from United, its partners or other third parties, that might be of interest to you (please see the section on Disclosing your information below and the section on Changing your marketing preferences below). We also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites.
- For surveys and promotions. As permitted under applicable law, we offer you the opportunity to participate in a survey or promotion. We use survey results for various purposes, including to enhance our services and sites and to develop improved promotions, and, if you provide your name, we may contact you to discuss your comments. Unless otherwise stated in the promotion or survey, we use the contact information that we collect through promotions for the purpose of notifying the winner. If you win a promotion, we may request additional information.
- To improve and maintain our sites and our services. We use your information to improve and maintain our sites and services, respond to user desires and preferences, for research and analytical purposes, such as improving our operations, for security purposes, and for protecting ourselves and users of our services.
- To protect our rights and interests, and the rights and interests of other users of our services.
- To protect our rights and interests, and the rights and interests of other users of our services.
- As otherwise permitted by law.
In addition to the foregoing, specific examples of how we use information derived from the following categories are described below.
MileagePlus
We use information that we collect from our MileagePlus members to enroll you in the MileagePlus program; to provide mileage credit for program-related purchases and activities related to United, MileagePlus partners and other third parties (please see the section on Disclosing your information below); to communicate with you on the status of your MileagePlus account; to notify you of any special promotions for which you might be eligible; to pre-fill certain data fields so you do not need to enter the same information multiple times; perform the requested services; to process your transactions (including billing); to notify you about flight information, reservation confirmation, flight or seat changes, boarding time(s), and available ancillary services.
We may use the information that we collect about you to send you email, direct mail, or telephone communications about offers from United, our partners or other entities, that might be of interest to you. As discussed in the section regarding Disclosing your information, consistent with applicable law, we also may disclose your information to our partners and other entities for their own marketing purposes.
Children
We do not knowingly use information we collect about children known to be under the age of 16 for any marketing or promotional purpose purpose, nor do we permit our affiliates, third-party sponsors or other third parties with whom we may share information to do so. We use the information collected about children known to be under 16 only to provide services. We will give out personal information about children if required by law, to comply with a court order or subpoena, or to protect the safety and security of visitors and our sites.
Information collected from our mobile application(s)
In addition to the uses of your information described above, if you have allowed us to send you push notifications, we may provide you updates on flights or gate changes, or to offer services and other information. If you do not permit us to send you push notifications, we may still provide such updates through the message center in the mobile application.
If you have allowed us to collect and use your geo-location information, we may provide you location-based offers, services and other information, such as airport maps to help you locate your gate, United Club locations and nearby retailer locations, offers related to United and our marketing partners which may be of interest to you, and personalized assistance. The type of communications that you receive from us may depend on your location; not all features are available at all locations. Geo-location information may also be used to protect United’s interests.
You may change your push notification preferences and/or geo-location tracking preferences at any time through your mobile device settings.
We may promote our sites via Internet advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and United may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures, and protecting United’s interests. You may opt out of the collection of such information by uninstalling the mobile application(s). Once the mobile application(s) has been uninstalled, all information stored in the application will be deleted, including any preferences you previously set or enabled.
Disclosing your information
United may transmit or transfer, as applicable, your personal information to the following persons/entities. Unless otherwise noted, these entities act as our processors and are not independent controllers of your information:
- Affiliates. We may disclose information we collect from you to our affiliates or subsidiaries, which may act as a co-controller of your information. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
- Service providers/Data processors. We may share your information with service providers that assist us and perform functions on our behalf. In some cases service providers, such as information technology and data processing vendors, data storage services, etc., may be located outside the United States and your personal information may be processed or stored in other countries (please see the section on Location of your information below). We also use service providers to assist us in determining and placing relevant advertising.
- Non-affiliated third parties. We may transfer your information to the following third parties as necessary to complete your transaction, fulfill your requests, and for their own marketing purposes, as permitted by law: airlines, car rental agencies, hotels, travel agencies, baggage services entities, other travel services or ticketing entities, and other entities involved in travel reservations or ticketing; governmental or law enforcement authorities or border control agencies; partners with whom we jointly offer a product or service; entities with whom you purchase or redeem miles; corporate customers as part of our management of agreements we have with them. In some circumstances, these entities also act as controllers of your information. Specifically, we may also transfer your information to the following third parties: commercial partners for marketing or sale of our products or services or marketing or sale of their own products or services; financial companies for them to offer you their products or services or a co-branded card, including Banorte. You consent to this transfer unless you advise us to the contrary by submitting this form.
- Research and analytics. We may use and disclose your information for research and analytics purposes.
- Aggregate information. Aggregate information, such as demographic information, domain names, other site traffic information, etc., may at times be transferred with United partners or other third parties. Examples of aggregate information are X% of eligible tickets purchased are eTickets; X% of subscribers use a mobile application, etc.
- Law enforcement/Legal processes/other uses. United may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental, law enforcement or health authority; to protect the rights or property of United, its customers, its sites or site users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable. In certain circumstances, United’s service providers may be required to disclose information to government or law enforcement authorities. Security, health and customs and immigration laws in the U.S. and many other countries require all airlines, including United, to provide border control agencies or other governmental authorities with passenger data. In order to comply with these laws we may disclose information about you and your travel arrangements to such authorities.
- Business transactions. If United is or may be acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.
- Additional notice for users of certain mobile websites. You may make purchases using MileagePlus award miles through certain mobile websites. If you choose to use these sites, then United will receive information from the third-party about your purchase and will exchange information with the third-party to facilitate the transaction and the use of miles from your account.
Use of cookies, web beacons and other similar technologies
United and our third-party service providers collect information by using technologies and methodologies, such as "cookies", tags, web beacons or other similar technologies that enable tracking as you browse our sites. We use these technologies to authenticate you as a user, to remember your preferences for using the site, to present offers that may be of interest and to facilitate transactions, such as flight searches and purchases. We and our third-party service providers also use these tools to analyze use of our sites and our services. We may use this information in the aggregate or combine it with information that we have already collected about you.
Cookie. "Cookies" are small bits of information that are stored on your computer by your web browser. Web beacons or “pixel tags” are small strings of code placed on a web page or in an email message for the purpose of transferring information. Cookies and the other technologies discussed in this section allow us to recognize your preference information, to track your transactions and to facilitate effective website administration.
Cookies help establish a user session and allow our server to provide site users with the appropriate information, advertisements and services. We also use cookies to ensure you obtain the information you request, to authenticate your authority to access the site and to track the usage of our websites in order to improve the site(s) according to our customers’ needs. If you are a registered user on our site and you elect to have the site store your MileagePlus number, the cookie stored on your computer will contain your MileagePlus number.
If you do not want your information to be collected through cookies, you can change the preferences in your particular Internet browser. Some website functionality may not work properly if your browser does not accept cookies. Specifically, if you choose not to accept our cookies and are a registered user, you will not have access to your information, such as your user profile, itineraries, award travel, upgrades and MileagePlus summary information, on this site. Although you cannot log into the site as a registered user if you disable our cookies, you can still purchase on the site by logging in as a “Guest”. Please consult your chosen Internet browser for instructions on how to change your cookie settings.
Local storage objects. We may use Flash Local Storage Objects ("Flash LSOs") to store your preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose "Global Storage Settings Panel" and follow the instructions to review and, if you want. To see the Flash LSOs currently on your computer, choose "Website Storage Settings Panel" and follow the instructions to review and, if you want, to delete any specific Flash LSO.
Clear GIFs, pixel tags and other technologies. These technologies allow us to recognize your preference information, keep track of your transactions and facilitate effective website administration. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We and our third-party service providers may use clear GIFs (also known as web beacons, web bugs or pixel tags), in connection with our sites and services to, among other things, track the activities of visitors, help us manage content and compile statistics about usage. We and our third-party service providers may also use clear GIFs in HTML emails sent to you to help us track email response rates, identify when our emails are viewed and track whether our emails are forwarded.
Targeted advertising
We and our third-party service providers, including ad networks, use the information that we collect about you to serve advertisements to you on various channels, including, but not limited to, United and third-party websites, United and third-party mobile apps and other mediums that may include social networks and television. We and our third-party service providers may collect the data that we use to determine relevant advertising from the following sources: data collected about you online and through your use of our mobile apps, whether collected directly or automatically through cookies, web beacons and other technologies, including technologies designed to collect data through mobile apps, third-party sites (e.g., engagement with social media when publicly available), and offline, including, but not limited to, data combined or appended from various sources. These advertisements may be about United products and services or products and services of third parties that we think might be of interest to you. United and our third-party service providers may use cookies and web beacons when working with these companies to provide them information regarding your use of the site (whether individually or in the aggregate) to assist them in determining relevant advertising.
In addition, some advertising technology used by United to deliver advertisements may use separate cookies and other tracking technologies. This technology may be delivered via visits to our website, email messages, apps or otherwise. Web beacons on some pages of our site, in conjunction with these advertising cookies and our other cookies, enable the advertising technology to better understand onsite activity in the aggregate, to recognize a browser's cookie when a browser visits this website, other websites or apps, and to learn which advertisements bring users to our site or our apps or otherwise take action.
Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons, clear GIFs, Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third-party's specific privacy policy, and not this Privacy Policy
Third-party ad networks may be members of either the Network Advertising Initiative (“NAI”) or About Ads-Digital Advertising Alliance (“DAI”). If they are members and you do not want to receive targeted advertisements from these third-party ad networks, you may opt out. Information as to member companies, the practices of such third-party ad networks and your choices regarding having information used by these companies and how to opt out, can be found at either: http://www.networkadvertising.org/optout_nonppii.asp for NAI members or http://www.aboutads.info/choices/ for DAI members. Information on how to opt out of the use of your information by DoubleClick is available at http://www.google.com/policies/technologies/ads/ and information on how to opt out of Google Analytics is available at https://tools.google.com/dlpage/gaoptout.
Opting out of one or more NAI or DAI members means that only those particular members will no longer deliver targeted content or ads to you. It does not mean you will no longer receive any targeted content or ads on our websites or other non-United websites. If your browser is configured to reject cookies when you visit one of the above referenced opt-out pages and then you erase your cookies, use a different computer or change web browsers, your NAI or DAI opt-out may no longer be active.
Third-party analytics
We also use automated devices and applications, such as Google Analytics, to evaluate the use of our websites and apps and the services we provide. We use these tools to gather information about users to help us improve our services, performance and user experiences. These analytics providers may use cookies and other technologies to perform their services, and may combine the information that they collect about you on our websites with other information that they have collected. This Privacy Policy does not cover such third parties’ use of the data.
Your legal rights
Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal information:
Right to access, correct, and delete your personal information: Please ensure that you tell us about changes in personal information (e.g., change of address, redress number) so that ensure that your information is up to date. You have the right to request access to the personal information that we hold about you and: (a) the source of your personal information; (b) the purposes, legal basis and methods of processing; (c) the data controller’s identity; and (d) the entities or categories of entities to whom your personal information may be transferred. If you are a MileagePlus member, you can create, view or update your MileagePlus account by accessing it through the MileagePlus profile section on united.com or by calling +1-800-421-4655. You may also update information relevant to your use of our mobile application(s) through the app itself. You also have the right to request that we delete your information. We are not required to comply with your request to erase personal information if the processing of your personal information is necessary for compliance with a legal obligation or for the establishment, exercise, or deference of legal claims.
Right to restrict the processing of your personal information: You have the right to restrict the use of your personal information when (i) you contest the accuracy of the data; (ii) the use is unlawful but you do not want us to erase the data; (iii) we no longer need the personal information for the relevant purposes, but we require it for the establishment, exercise, or defense of legal claims; or (iv) you have objected to our personal information use justified on our legitimate interests verification as to whether we have a compelling interest to continue to use your data. We can continue to use your personal information following a request for restriction, where: we have your consent; or to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.
Right to data portability:To the extent that we process your information (i) based on your consent or under a contract; and (ii) through automated means, you have the right to receive such personal information in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller.
Right to object to the processing of your personal information:You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
Right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction:You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the EEA.
Right to lodge a complaint with your local supervisory authority: You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your personal information. We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.
How to exercise your rights:If you would like to exercise your privacy rights pursuant to applicable law, please submit our data and preferences request form. In your message, please indicate the right you would like to exercise. We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal information requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Protecting information collected
United maintains physical, administrative, electronic and procedural safeguards to protect your information. When you place orders online to purchase services or access your MileagePlus account information, we use secure servers to protect your personal information, which is intended to encrypt the personal information that is transmitted between you and our sites. Although United takes reasonable steps to safeguard and to prevent unauthorized access to your personal information, it cannot be responsible for the acts of those who gain unauthorized access and United makes no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.
If a third-party seeks to transact business with United on your behalf, that party will be asked to provide us with the same personal information we would collect directly from you to complete your transaction. Unless and until we are advised otherwise, we consider that such third-party has an appropriate legal basis to provide us with your personal information and make such transactions and any subsequent changes, on your behalf in accordance with this Privacy Policy. If such third-party who has your full name and booking reference contacts us and seeks information on your booking or requests changes to it, we will disclose your booking information and allow such third-party to make changes as we will conclude that third-party has an appropriate legal basis to do so. Please note that the collection, use and disclosure of your personal information by a third-party is subject to your dealings with them and, if applicable, any of their privacy policies and practices. If you do not want an individual to obtain information on or make changes to your booking, you should not share your booking reference with them.
Your role in protecting your information
To protect your privacy and United's proprietary databases and systems, you should not share any of your information, such as MileagePlus number or password, with any unauthorized individuals or third-party information aggregators that would allow them access to your sensitive account information. For more information, see our PIN/Password Frequently Asked Questions page. You should also take all necessary steps to secure your mobile devices and protect information you may have stored on them. We do not have control over the security of your mobile device. United assumes no responsibility for the loss of information associated with security disrupting technologies, reverse engineering of mobile device applications or malware, that compromise the United mobile application(s) as a result of owner or third-party initiated changes to the mobile device. The security of that mobile device is the responsibility of its owner, not United.
Changing your marketing preferences
MileagePlus members can opt out of receiving marketing or promotion-related emails, phone calls or direct mail from United by accessing their account profile information on the United website and changing their profile to indicate their desire to be excluded. In addition, members can contact the MileagePlus Service Center by phone or in writing and request a profile change. Emails sent to members will contain a message and link on how to opt out of that type of communication in the future. Regardless of your opt-out preferences, we reserve the right to send you emails or other communications for administrative purposes.
Location of your information/data transfer/notice to non-US persons
United will transfer, store, and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. Where personal information that we collect is transferred to and processed in the United States or anywhere else outside the European Economic Area (EEA) for the purposes described in this policy, we will take steps to ensure that the information receives the same level of protection as if it remained within the EEA, including entering into data transfer agreements, using the EU Commission approved Standard Contractual Clauses, or by relying on certification schemes. You may have a right to details of the mechanisms under which your data is transferred outside the EEA. By submitting any personal information or by using the website and without limitation to any other rights or obligations we have, you acknowledge such transfer to, and processing in, the United States and these other countries, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions.
At this time, our precise geo-location tracking and related offers and services as discussed in this Policy only are available at certain airports in the U.S. Non-U.S. persons who choose to use this service may have certain rights to their personal data as discussed here.
Other sites/digital channels
Our sites and our online services may contain links to third-party sites. Any access to and use of such linked sites is not governed by this Privacy Policy but instead is governed by the privacy policies of those third-party sites. We are not responsible for the information practices of such third-party sites.
Contact us
If you have comments or questions about this Privacy Policy, please fill out and submit this form.
If you have comments or questions about the privacy practices of MIPA, please fill out and submit this form. Where your personal information is held by MIPA you may have various rights under the DPL, and may also have a right to lodge a complaint with the Cayman Islands Ombudsman.
If you would like to exercise your privacy rights pursuant to applicable law, please submit our data and preferences request form.
Legal effect and changes to the policy
As previously stated, this Privacy Policy is not a contract nor does it otherwise create any legal rights or obligations in addition to those provided under applicable data protection laws. Rather, this Privacy Policy merely reflects guidelines setting forth United’s intended business practices. By using any United digital channel, and/or by providing any information to United online or offline, you acknowledge the collection and use of such information by United, its affiliates, partners, contractors and permitted agents as herein described and consistent with applicable laws. Also, United, in its discretion, may amend, interpret, modify or withdraw any portion of this Privacy Policy and related business practices at any time. United will notify you of changes to this Privacy Policy by posting updated text on this site, and your continued use of our digital channels or offline outlets constitutes your acknowledgement of those changes. A version of this Privacy Policy has been effective since October 15, 2002, and was last updated on March 12, 2021. This Privacy Policy supersedes previous privacy policies posted on united.com and coair.com.
Thank you for taking the time to read this Privacy Policy.
Your privacy is important to us
United Airlines respects your privacy. This Privacy Policy discloses United’s privacy practices for your information collected online or offline. We address the following topics:
While United strives to take reasonable measures to protect your information, this Privacy Policy is not a contract and does not create any legal rights or obligations. Rather, the following are guidelines for protecting your information and, depending on your jurisdiction, describing your rights under applicable data protection laws. Except as otherwise described in this Policy, by using any of our sites and/or our services or otherwise providing us with any information, you acknowledge the handling of your information as described in this Privacy Policy.
Scope of this policy
This Privacy Policy applies to the information that we collect about you on any United website in which it is posted, which include the following situations:
- On United-managed websites and mobile websites, such as, for example, united.com, mobile.united.com, hub.united.com;
- Through United-managed mobile applications, such as the United App;
- Offline, through a United Customer Contact Center agent or other travel agent.
The information we collect is controlled by United Airlines, Inc., which is headquartered in the United States at 233 S. Wacker Drive, Chicago, Illinois 60606.
This Privacy Policy does not apply to the following United sites or services:
- United Cargo transactions;
- United Wi-Fi^SM service portal;
- United Club^SM locations’ Wi-Fi service; or
- United’s Technical Operations website;
In addition, this Privacy Policy does not apply to any website not owned and managed by United or any other third-party site.
With respect to the above, please see those respective sites for the privacy policies that may apply.
Information we collect about you
United collects and maintains information, including personal information, about you directly from you (both online and offline) and automatically when you use our sites and third-party sites. We collect information from you when you make travel arrangements, contact us, complete a survey, register for the MileagePlus program, participate in a promotion, or otherwise interact with us. The type of information we collect about you depends on your particular interaction with us, and includes the following information:
- Name;
- Contact information;
- MileagePlus number and security information;
- Gender and date of birth;
- Payment information;
- Passport information and photograph;
- Government ID or redress number;
- Images and biometric information;
- Travel preferences and special requests;
- Purchase information (both travel and non-travel purchases);
- User and activity data from our websites and mobile applications;
- Survey responses;
- Tax identification number of promotion or survey winner, depending on the value of the prize; and
- Health information.
Payment information, passport information and photograph, and government ID may be defined as “sensitive” under certain data protection laws. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
Information we collect directly from you
Based on your interaction with us, we collect information directly from you as described below.
MileagePlus information
When you enroll in MileagePlus, or if you are already a MileagePlus member, we collect information such as your name, address, phone number(s), email address, MileagePlus account number, and password or other account security authentication information. If you create a traveler profile, we also will collect the information that you choose to provide to us. You have the option of providing us with payment information, telephone numbers, email addresses, general requests or special needs, travel preferences and loyalty program information.
In certain situations, we collect information that is defined as “sensitive” under applicable data protection laws. We provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such request and/or provide such information, we collect information in order to provide accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time.
Personal information collected and processed as part of our MileagePlus program is held by Mileage Plus Intellectual Property Assets, Ltd. (“MIPA”), a member of the United group of companies, whose registered office is at Maples Corporate
Services Limited, PO Box 309, Ugland House, George Town, Grand Cayman, KY1-1104, Cayman Islands.
MIPA will be a data controller in respect of that personal information under the Data Protection Law, 2017 of the Cayman Islands (“DPL”). Where MIPA is the data controller, it processes MileagePlus personal information where it has an appropriate legal basis. This may be because:
- Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to the MileagePlus program and services and to provide you with information you request);
- Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to fulfill your MileagePlus benefits); and/or
- Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).
If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.
Online purchases
If you make a purchase with us, whether as a MileagePlus member or as a “Guest”, we collect traveler information, travel and contact preferences, and payment information.
Offline purchases: Telephone, travel agent or ticket counter
To make a purchase or transact other business with a United Customer Contact Center agent, a travel agent, or a customer service representative (collectively, “Reservations Agents”), Reservations Agents collect traveler information, travel and contact preferences, and payment information. We may monitor and/or record telephone calls to Reservations Agents. By continuing with the call, you are deemed to consent to such monitoring and/or recording.
COVID-19
You may be required to provide information about your health, including (depending on your destination) lack or presence of symptoms related to COVID-19, COVID-19 test results, or COVID-19 vaccine information or information supporting your request for an exemption to a health-related travel requirement. We may offer you the ability to electronically provide such information to us, such as through our Travel-Ready Center or through a digital health pass. We may offer you the ability to request that United collect your information from a third-party, such as a digital health app that you have chosen to use. We will use such information to help facilitate, but cannot guarantee, meeting your destination’s requirements, to comply with applicable laws (for example, we may be required to confirm you have necessary travel documentation), and to help ensure health and safety during the travel experience. United is not liable for any assistance or information provided by any employee or agent of United to you relating to such documents or compliance with such laws, or for the consequences to you resulting from failure to obtain and present such documents, which shall be in good condition, or to comply with such laws. United also reserves the right to deny boarding to you if your information is not in good condition according to United’s reasonable belief, or which otherwise do not comply with laws of the specific country you are departing from, transiting through, or travelling to. We may offer you the ability to provide contact information to help health authorities facilitate contact tracing. In some cases, your destination may require that you provide such information. We may be required by law to disclose contact information to health authorities or other government authorities.
Biometric Information
We may provide you the option to voluntarily participate in travel facilitation and security programs that use biometric information. These programs may include trial programs to expedite the boarding and baggage check processes, as well as security programs like the Traveler Verification Service administered by U.S. Customs and Border Protection. You should review any specific details regarding the collection, use, disclosure, and retention of biometric information when considering whether to participate in these programs.
United Club
United may collect information such as name, addresses, email addresses, telephone numbers, and credit card information, in order to provide service to members of its United Club.
In flight
United may collect credit card and MileagePlus information in flight to enable present and/or future purchases.
Children
Due to the nature of our services, United will collect and maintain travel information, about children under the age of 13 when necessary to comply with federal aviation or security regulations, for safety or security reasons, or as otherwise necessary for United to provide transportation or other services requested.
Information we collect automatically
We and our service providers automatically collect information about your use of our sites through cookies, web beacons, log files and other technologies. Such information includes the following:
- Domain name;
- Browser type and operating system;
- IP address;
- Web pages you view;
- Links you click;
- Length of time of your visit;
- Your activities on our sites and your movement through these sites; and
- Referring URL or webpage that led you to our sites.
We and our service providers may combine this information with information that we (or they) already have collected about you. For more information, refer to the Use of cookies, web beacons and other similar technologies section below.
Information we collect through our mobile application(s)
We collect information directly from you when you use our mobile application(s), which varies based on your interaction with our mobile applications, but may include, for example, name, email address, MileagePlus account information, government ID or passenger redress number, passport information and/or photograph, date of birth, and payment information (e.g., credit card number, expiration date and billing name and address), if not already provided.
We may store your information to facilitate your travel (e.g. reservation, specific flight information) or purchase needs. The mobile application(s) may also store user-provided data, unless you choose to delete it, for as long as you use the related feature of the application. Information provided for traveler data, security clearance, purchases and related activities will be stored in our operational systems, as needed, to provide services you request. If such information is stored in your MileagePlus account, it will not be accessible if your MileagePlus account is closed.
We also collect information automatically through your use of our mobile application(s) (using cookies, beacons or other tracking technologies designed for mobile applications). Information collected in your use of our mobile application(s) includes, but is not limited to:
- With your consent, your pinpointed physical location information from technologies like GPS, Wi-Fi, or cell tower proximity (geo-location tracking)
- With your consent, while at or near certain airports in the U.S., your pinpointed physical location will be tracked continuously to provide you location-based offers, services and other information. For more information, see the Location Services FAQ located on the side menu of the United App.
- Your domain name
- Device ID or alternative ID where required by the platform provider
- Electronic data concerning operating systems and computing devices/browser, including the type of operating system or computing device
- Features you use and links you click
- Amount of time spent in the application
- Installs and uninstalls
- Transaction details and history
We may combine this information with information that we already have collected about you.
Information we collect from third parties
We collect information about you from third parties. If you make a reservation through a travel agent, we will obtain your travel information from that agent. We may also obtain information about you from our marketing partners, advertisers and other third parties.
Sensitive information we collect directly from you
In certain situations, we collect information that is defined as “sensitive” under certain data protection laws. If a medical or other emergency occurs while traveling with United, we collect relevant information and may provide such information to non-United medical or other safety personnel as necessary or advisable. We also provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such a request and/or provide such information, we collect information in order to provide reasonable accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
How we use your information
General - applicable to all sources of information
We primarily use your information, including personal information, to provide our services to you and to fulfill your requests. In certain circumstances, such as for advertising purposes, we combine your information with other information that we have about you, that is publicly available and/or that we have obtained from third parties (either individually or in the aggregate). We also use your information for the following purposes:
- For flight information/wireless services. You may register for receipt of flight information and other wireless services by indicating your preference to receive this information by providing relevant information or by granting applicable permissions. Participation in these services may be optional.
- To improve your user experience. To tailor the content and information that we may send or display to you, such as information about your travel schedule; to offer customized location information, personalized help and instructions; and to otherwise personalize your experiences while using our sites or services.
- For operational needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
- For marketing and advertising. United uses your information, consistent with applicable law, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising) and to send you news and newsletters. Specifically, information that we collect about you may be used to send you email, direct mail, or telephone communications about offers from United, its partners or other third parties, that might be of interest to you (please see the section on Disclosing your information below and the section on Changing your marketing preferences below). We also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites.
- For surveys and promotions. As permitted under applicable law, we offer you the opportunity to participate in a survey or promotion. We use survey results for various purposes, including to enhance our services and sites and to develop improved promotions, and, if you provide your name, we may contact you to discuss your comments. Unless otherwise stated in the promotion or survey, we use the contact information that we collect through promotions for the purpose of notifying the winner. If you win a promotion, we may request additional information.
- To improve and maintain our sites and our services. We use your information to improve and maintain our sites and services, respond to user desires and preferences, for research and analytical purposes, such as improving our operations, for security purposes, and for protecting ourselves and users of our services.
- To protect our rights and interests, and the rights and interests of other users of our services.
- As otherwise permitted by law.
In addition to the foregoing, specific examples of how we use information derived from the following categories are described below.
MileagePlus
We use information that we collect from our MileagePlus members to enroll you in the MileagePlus program; to provide mileage credit for program-related purchases and activities related to United, MileagePlus partners and other third parties (please see the section on Disclosing your information below); to communicate with you on the status of your MileagePlus account; to notify you of any special promotions for which you might be eligible; to pre-fill certain data fields so you do not need to enter the same information multiple times; perform the requested services; to process your transactions (including billing); to notify you about flight information, reservation confirmation, flight or seat changes, boarding time(s), and available ancillary services.
We may use the information that we collect about you to send you email, direct mail, or telephone communications about offers from United, our partners or other entities, that might be of interest to you. As discussed in the section regarding Disclosing your information, consistent with applicable law, we also may disclose your information to our partners and other entities for their own marketing purposes.
Children
We do not knowingly use information we collect about children known to be under the age of 16 for any marketing or promotional purpose, nor do we permit our affiliates, third-party sponsors or other third parties with whom we may share information to do so. We use the information collected about children known to be under 16 only to provide services. We will give out personal information about children if required by law, to comply with a court order or subpoena, or to protect the safety and security of visitors and our sites.
Information collected from our mobile application(s)
In addition to the uses of your information described above, if you have allowed us to send you push notifications, we may provide you updates on flights or gate changes, or to offer services and other information. If you do not permit us to send you push notifications, we may still provide such updates through the message center in the mobile application.
If you have allowed us to collect and use your geo-location information, we may provide you location-based offers, services and other information, such as airport maps to help you locate your gate, United Club locations and nearby retailer locations, offers related to United and our marketing partners which may be of interest to you, and personalized assistance. The type of communications that you receive from us may depend on your location; not all features are available at all locations. Geo-location information may also be used to protect United’s interests.
You may change your push notification preferences and/or geo-location tracking preferences at any time through your mobile device settings.
We may promote our sites via Internet advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and United may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures, and protecting United’s interests. You may opt out of the collection of such information by uninstalling the mobile application(s). Once the mobile application(s) has been uninstalled, all information stored in the application will be deleted, including any preferences you previously set or enabled.
Disclosing your information
United may transmit or transfer, as applicable, your personal information to the following persons/entities. Unless otherwise noted, these entities act as our processors and are not independent controllers of your information:
- Affiliates. We may disclose information we collect from you to our affiliates or subsidiaries, which may act as a co-controller of your information. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
- Service providers/Data processors. We may share your information with service providers that assist us and perform functions on our behalf. In some cases service providers, such as information technology and data processing vendors, data storage services, etc., may be located outside the United States and your personal information may be processed or stored in other countries (please see the section on Location of your information below). We also use service providers to assist us in determining and placing relevant advertising.
- Non-affiliated third parties. We may transfer your information to the following third parties as necessary to complete your transaction, fulfill your requests, and for their own marketing purposes, as permitted by law: airlines, car rental agencies, hotels, travel agencies, baggage services entities, other travel services or ticketing entities, and other entities involved in travel reservations or ticketing; governmental or law enforcement authorities or border control agencies; partners with whom we jointly offer a product or service; entities with whom you purchase or redeem miles; corporate customers as part of our management of agreements we have with them. In some circumstances, these entities also act as controllers of your information. Specifically, we may also transfer your information to the following third parties: commercial partners for marketing or sale of our products or services or marketing or sale of their own products or services; financial companies for them to offer you their products or services or a co-branded card, including Banorte. You consent to this transfer unless you advise us to the contrary by submitting this form.
- Research and analytics. We may use and disclose your information for research and analytics purposes.
- Aggregate information. Aggregate information, such as demographic information, domain names, other site traffic information, etc., may at times be transferred with United partners or other third parties. Examples of aggregate information are X% of eligible tickets purchased are eTickets; X% of subscribers use a mobile application, etc.
- Law enforcement/Legal processes/other uses. United may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental, law enforcement or health authority; to protect the rights or property of United, its customers, its sites or site users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable. In certain circumstances, United’s service providers may be required to disclose information to government or law enforcement authorities. Security, health and customs and immigration laws in the U.S. and many other countries require all airlines, including United, to provide border control agencies or other governmental authorities with passenger data. In order to comply with these laws we may disclose information about you and your travel arrangements to such authorities.
- Business transactions. If United is or may be acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.
- Additional notice for users of certain mobile websites. You may make purchases using MileagePlus award miles through certain mobile websites. If you choose to use these sites, then United will receive information from the third-party about your purchase and will exchange information with the third-party to facilitate the transaction and the use of miles from your account.
Use of cookies, web beacons and other similar technologies
United and our service providers collect information by using technologies and methodologies, such as "cookies", tags, web beacons or other similar technologies that enable tracking as you browse our sites. We use these technologies to authenticate you as a user, to remember your preferences for using the site, to present offers that may be of interest and to facilitate transactions, such as flight searches and purchases. We and our service providers also use these tools to analyze use of our sites and our services. We may use this information in the aggregate or combine it with information that we have already collected about you.
Cookie. "Cookies" are small bits of information that are stored on your computer by your web browser. Web beacons or “pixel tags” are small strings of code placed on a web page or in an email message for the purpose of transferring information. Cookies and the other technologies discussed in this section allow us to recognize your preference information, to track your transactions and to facilitate effective website administration.
Cookies help establish a user session and allow our server to provide site users with the appropriate information, advertisements and services. We also use cookies to ensure you obtain the information you request, to authenticate your authority to access the site and to track the usage of our websites in order to improve the site(s) according to our customers’ needs. If you are a registered user on our site and you elect to have the site store your MileagePlus number, the cookie stored on your computer will contain your MileagePlus number.
If you do not want your information to be collected through cookies, you can change the preferences in your particular Internet browser. Some website functionality may not work properly if your browser does not accept cookies. Specifically, if you choose not to accept our cookies and are a registered user, you will not have access to your information, such as your user profile, itineraries, award travel, upgrades and MileagePlus summary information, on this site. Although you cannot log into the site as a registered user if you disable our cookies, you can still purchase on the site by logging in as a “Guest”. Please consult your chosen Internet browser for instructions on how to change your cookie settings.
Local storage objects. We may use Flash Local Storage Objects ("Flash LSOs") to store your preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose "Global Storage Settings Panel" and follow the instructions to review and, if you want. To see the Flash LSOs currently on your computer, choose "Website Storage Settings Panel" and follow the instructions to review and, if you want, to delete any specific Flash LSO.
Targeted advertising
We and our service providers use the information that we collect about you to serve advertisements to you on various channels, United and other websites, United and third-party mobile apps and other mediums, social networks and television. We and our service providers may collect the data that we use to determine relevant advertising from the following sources: data collected about you online and through your use of our mobile apps, whether collected directly or automatically through cookies, web beacons and other technologies designed to collect data through mobile apps, third-party sites and engagement with social media when publicly available, and offline. Such data combined or appended from various sources. These advertisements may be about United products and services or products and services of third parties that we think might be of interest to you. United and our service providers may use cookies and web beacons when working with these companies to provide them information regarding your use of the site (whether individually or in the aggregate) to assist them in determining relevant advertising.
In addition, some advertising technology used by United to deliver advertisements may use separate cookies and other tracking technologies. This technology may be delivered via visits to our website, email messages, apps or otherwise. Web beacons on some pages of our site, in conjunction with these advertising cookies and our other cookies, enable the advertising technology to better understand onsite activity in the aggregate, to recognize a browser's cookie when a browser visits this website, other websites or apps, and to learn which advertisements bring users to our site or our apps or otherwise take action.
Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons, clear GIFs, Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third-party's specific privacy policy, and not this Privacy Policy
Third-party ad networks may be members of either the Network Advertising Initiative (“NAI”) or About Ads-Digital Advertising Alliance (“DAI”). If they are members and you do not want to receive targeted advertisements from these third-party ad networks, you may opt out. Information as to member companies, the practices of such third-party ad networks and your choices regarding having information used by these companies and how to opt out, can be found at either: http://www.networkadvertising.org/optout_nonppii.asp for NAI members or http://www.aboutads.info/choices/ for DAI members. Information on how to opt out of the use of your information by DoubleClick is available at http://www.google.com/policies/technologies/ads/ and information on how to opt out of Google Analytics is available at https://tools.google.com/dlpage/gaoptout.
Opting out of one or more NAI or DAI members means that only those particular members will no longer deliver targeted content or ads to you. It does not mean you will no longer receive any targeted content or ads on our websites or other non-United websites. If your browser is configured to reject cookies when you visit one of the above referenced opt-out pages and then you erase your cookies, use a different computer or change web browsers, your NAI or DAI opt-out may no longer be active.
Analytics
We also use automated devices and applications, such as Google Analytics, to evaluate the use of our websites and apps and the services we provide. We use these tools to gather information about users to help us improve our services, performance and user experiences. These analytics providers may use cookies and other technologies to perform their services, and may combine the information that they collect about you on our websites with other information that they have collected. This Privacy Policy does not cover such third parties’ use of the data.
Your legal rights
In terms of applicable law, you have the following rights regarding the personal data we obtain and process from you (“ARCO Rights”):
- Access – You have the right to know what personal data we process, what it is used for and the conditions of use thereof.
- Rectification – You have the right to request the rectification of your personal data in the event it is inaccurate, incomplete or outdated.
- Cancellation – You have the right to request that your personal data is removed from our databases when you consider that it is not being used properly.
- Opposition – You have the right to oppose the use of your personal data for specific purposes.
If you would like to exercise any of the ARCO Rights, please submit our data and preferences request form. In your message, please indicate the ARCO right you would like to exercise. We may ask you for additional information to confirm your identity and for security purposes. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Protecting information collected
United maintains physical, administrative, electronic and procedural safeguards to protect your information. When you place orders online to purchase services or access your MileagePlus account information, we use secure servers to protect your personal information, which is intended to encrypt the personal information that is transmitted between you and our sites. Although United takes reasonable steps to safeguard and to prevent unauthorized access to your personal information, it cannot be responsible for the acts of those who gain unauthorized access and United makes no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.
If a third-party seeks to transact business with United on your behalf, that party will be asked to provide us with the same personal information we would collect directly from you to complete your transaction. Unless and until we are advised otherwise, we consider that such third-party has an appropriate legal basis to provide us with your personal information and make such transactions and any subsequent changes, on your behalf in accordance with this Privacy Policy. If such third-party who has your full name and booking reference contacts us and seeks information on your booking or requests changes to it, we will disclose your booking information and allow such third-party to make changes as we will conclude that third-party has an appropriate legal basis to do so. Please note that the collection, use and disclosure of your personal information by a third-party is subject to your dealings with them and, if applicable, any of their privacy policies and practices. If you do not want an individual to obtain information on or make changes to your booking, you should not share your booking reference with them.
Your role in protecting your information
To protect your privacy and United's proprietary databases and systems, you should not share any of your information, such as MileagePlus number or password, with any unauthorized individuals or third-party information aggregators that would allow them access to your sensitive account information. For more information, see our PIN/Password Frequently Asked Questions page. You should also take all necessary steps to secure your mobile devices and protect information you may have stored on them. We do not have control over the security of your mobile device. United assumes no responsibility for the loss of information associated with security disrupting technologies, reverse engineering of mobile device applications or malware, that compromise the United mobile application(s) as a result of owner or third-party initiated changes to the mobile device. The security of that mobile device is the responsibility of its owner, not United.
Changing your marketing preferences
MileagePlus members can opt out of receiving marketing or promotion-related emails, phone calls or direct mail from United by accessing their account profile information on the United website and changing their profile to indicate their desire to be excluded. In addition, members can contact the MileagePlus Service Center by phone or in writing and request a profile change. Emails sent to members will contain a message and link on how to opt out of that type of communication in the future. Regardless of your opt-out preferences, we reserve the right to send you emails or other communications for administrative purposes.
Location of your information/data transfer/notice to non-US persons
United will transfer, store and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. By submitting any personal information or by using the website and without limitation to any other rights or obligations we have, you consent to such transfer to, and processing in, the United States and these other countries, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions.
At this time, our precise geo-location tracking and related offers and services as discussed in this Policy only are available at certain airports in the U.S. Non-U.S. persons who choose to use this service may have certain rights to their personal data as discussed here.
Other sites/digital channels
Our sites and our online services may contain links to third-party sites. Any access to and use of such linked sites is not governed by this Privacy Policy but instead is governed by the privacy policies of those third-party sites. We are not responsible for the information practices of such third-party sites.
Contact us
If you have comments or questions about this Privacy Policy, please fill out and submit this form.
If you have comments or questions about the privacy practices of MIPA, please fill out and submit this form. Where your personal information is held by MIPA you may have various rights under the DPL, and may also have a right to lodge a complaint with the Cayman Islands Ombudsman.
If you would like to exercise your privacy rights pursuant to applicable law, please submit our data and preferences request form.
Legal effect and changes to the policy
As previously stated, this Privacy Policy is not a contract nor does it otherwise create any legal rights or obligations in addition to those provided under applicable data protection laws. Rather, this Privacy Policy merely reflects guidelines setting forth United’s intended business practices. By using any United digital channel, and/or by providing any information to United online or offline, you acknowledge the collection and use of such information by United, its affiliates, partners, contractors and permitted agents as herein described and consistent with applicable laws. Also, United, in its discretion, may amend, interpret, modify or withdraw any portion of this Privacy Policy and related business practices at any time. United will notify you of changes to this Privacy Policy by posting updated text on this site, and your continued use of our digital channels or offline outlets constitutes your acknowledgement of those changes. A version of this Privacy Policy has been effective since October 15, 2002, and was last updated on March 12, 2021. This Privacy Policy supersedes previous privacy policies posted on united.com and coair.com.
Thank you for taking the time to read this Privacy Policy.

Your privacy is important to us
United Airlines respects your privacy. This Privacy Policy discloses United’s privacy practices for your information collected online or offline. We address the following topics:
While United strives to take reasonable measures to protect your information, this Privacy Policy is not a contract and does not create any legal rights or obligations. Rather, the following are guidelines for protecting your information and, depending on your jurisdiction, describing your rights under applicable data protection laws. Except as otherwise described in this Policy, by using any of our sites and/or our services or otherwise providing us with any information, you acknowledge the handling of your information as described in this Privacy Policy.
Scope of this policy
This Privacy Policy applies to the information that we collect about you on any United website in which it is posted, which include the following situations:
- On United-managed websites and mobile websites, such as, for example, united.com, mobile.united.com, hub.united.com;
- Through United-managed mobile applications, such as the United App;
- Offline, through a United Customer Contact Center agent or other travel agent.
The information we collect is controlled by United Airlines, Inc., which is headquartered in the United States at 233 S. Wacker Drive, Chicago, Illinois 60606.
This Privacy Policy does not apply to the following United sites or services:
- United Cargo transactions;
- United Wi-Fi^SM service portal;
- United Club^SM locations’ Wi-Fi service; or
- United’s Technical Operations website;
In addition, this Privacy Policy does not apply to any website not owned and managed by United or any other third-party site.
With respect to the above, please see those respective sites for the privacy policies that may apply.
Information we collect about you
United collects and maintains information, including personal information, about you directly from you (both online and offline) and automatically when you use our sites and third-party sites. We collect information from you when you make travel arrangements, contact us, complete a survey, register for the MileagePlus program, participate in a promotion, or otherwise interact with us. The type of information we collect about you depends on your particular interaction with us, and includes the following information:
- Name;
- Contact information;
- MileagePlus number and security information;
- Gender and date of birth;
- Payment information;
- Passport information and photograph;
- Government ID or redress number;
- Images and biometric information;
- Travel preferences and special requests;
- Purchase information (both travel and non-travel purchases);
- User and activity data from our websites and mobile applications;
- Survey responses;
- Tax identification number of promotion or survey winner, depending on the value of the prize; and
- Health information.
Payment information, passport information and photograph, and government ID may be defined as “sensitive” under certain data protection laws. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
Information we collect directly from you
Based on your interaction with us, we collect information directly from you as described below.
MileagePlus information
When you enroll in MileagePlus, or if you are already a MileagePlus member, we collect information such as your name, address, phone number(s), email address, MileagePlus account number, and password or other account security authentication information. If you create a traveler profile, we also will collect the information that you choose to provide to us. You have the option of providing us with payment information, telephone numbers, email addresses, general requests or special needs, travel preferences and loyalty program information.
In certain situations, we collect information that is defined as “sensitive” under applicable data protection laws. We provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such request and/or provide such information, we collect information in order to provide accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time.
Personal information collected and processed as part of our MileagePlus program is held by Mileage Plus Intellectual Property Assets, Ltd. (“MIPA”), a member of the United group of companies, whose registered office is at Maples Corporate
Services Limited, PO Box 309, Ugland House, George Town, Grand Cayman, KY1-1104, Cayman Islands.
MIPA will be a data controller in respect of that personal information under the Data Protection Law, 2017 of the Cayman Islands (“DPL”). Where MIPA is the data controller, it processes MileagePlus personal information where it has an appropriate legal basis. This may be because:
- Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to the MileagePlus program and services and to provide you with information you request);
- Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to fulfill your MileagePlus benefits); and/or
- Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).
If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.
Online purchases
If you make a purchase with us, whether as a MileagePlus member or as a “Guest”, we collect traveler information, travel and contact preferences, and payment information.
Offline purchases: Telephone, travel agent or ticket counter
To make a purchase or transact other business with a United Customer Contact Center agent, a travel agent, or a customer service representative (collectively, “Reservations Agents”), Reservations Agents collect traveler information, travel and contact preferences, and payment information. We may monitor and/or record telephone calls to Reservations Agents. By continuing with the call, you are deemed to consent to such monitoring and/or recording.
COVID-19
You may be required to provide information about your health, including (depending on your destination) lack or presence of symptoms related to COVID-19, COVID-19 test results, or COVID-19 vaccine information or information supporting your request for an exemption to a health-related travel requirement. We may offer you the ability to electronically provide such information to us, such as through our Travel-Ready Center or through a digital health pass. We may offer you the ability to request that United collect your information from a third party, such as a digital health app that you have chosen to use. We will use such information to help facilitate, but cannot guarantee, meeting your destination’s requirements, to comply with applicable laws (for example, we may be required to confirm you have necessary travel documentation), and to help ensure health and safety during the travel experience. United is not liable for any assistance or information provided by any employee or agent of United to you relating to such documents or compliance with such laws, or for the consequences to you resulting from failure to obtain and present such documents, which shall be in good condition, or to comply with such laws. United also reserves the right to deny boarding to you if your information is not in good condition according to United’s reasonable belief, or which otherwise do not comply with laws of the specific country you are departing from, transiting through, or travelling to. We may offer you the ability to provide contact information to help health authorities facilitate contact tracing. In some cases, your destination may require that you provide such information. We may be required by law to disclose contact information to health authorities or other government authorities.
Biometric Information
We may provide you the option to voluntarily participate in travel facilitation and security programs that use biometric information. These programs may include trial programs to expedite the boarding and baggage check processes, as well as security programs like the Traveler Verification Service administered by U.S. Customs and Border Protection. You should review any specific details regarding the collection, use, disclosure, and retention of biometric information when considering whether to participate in these programs.
United Club
United may collect information such as name, addresses, email addresses, telephone numbers, and credit card information, in order to provide service to members of its United Club.
In flight
United may collect credit card and MileagePlus information in flight to enable present and/or future purchases.
Children
Due to the nature of our services, United will collect and maintain travel information, about children under the age of 13 when necessary to comply with federal aviation or security regulations, for safety or security reasons, or as otherwise necessary for United to provide transportation or other services requested.
Information we collect automatically
We and our service providers automatically collect information about your use of our sites through cookies, web beacons, log files and other technologies. Such information includes the following:
- Domain name;
- Browser type and operating system;
- IP address;
- Web pages you view;
- Links you click;
- Length of time of your visit;
- Your activities on our sites and your movement through these sites; and
- Referring URL or webpage that led you to our sites.
We and our service providers may combine this information with information that we (or they) already have collected about you. For more information, refer to the Use of cookies, web beacons and other similar technologies section below.
Information we collect through our mobile application(s)
We collect information directly from you when you use our mobile application(s), which varies based on your interaction with our mobile applications, but may include, for example, name, email address, MileagePlus account information, government ID or passenger redress number, passport information and/or photograph, date of birth, and payment information (e.g., credit card number, expiration date and billing name and address), if not already provided.
We may store your information to facilitate your travel (e.g. reservation, specific flight information) or purchase needs. The mobile application(s) may also store user-provided data, unless you choose to delete it, for as long as you use the related feature of the application. Information provided for traveler data, security clearance, purchases and related activities will be stored in our operational systems, as needed, to provide services you request. If such information is stored in your MileagePlus account, it will not be accessible if your MileagePlus account is closed.
We also collect information automatically through your use of our mobile application(s) (using cookies, beacons or other tracking technologies designed for mobile applications). Information collected in your use of our mobile application(s) includes, but is not limited to:
- With your consent, your pinpointed physical location information from technologies like GPS, Wi-Fi, or cell tower proximity (geo-location tracking)
- With your consent, while at or near certain airports in the U.S., your pinpointed physical location will be tracked continuously to provide you location-based offers, services and other information. For more information, see the Location Services FAQ located on the side menu of the United App.
- Your domain name
- Device ID or alternative ID where required by the platform provider
- Electronic data concerning operating systems and computing devices/browser, including the type of operating system or computing device
- Features you use and links you click
- Amount of time spent in the application
- Installs and uninstalls
- Transaction details and history
We may combine this information with information that we already have collected about you.
Information we collect from third parties
We collect information about you from third parties. If you make a reservation through a travel agent, we will obtain your travel information from that agent. We may also obtain information about you from our marketing partners, advertisers and other third parties.
Sensitive information we collect directly from you
In certain situations, we collect information that is defined as “sensitive” under certain data protection laws. If a medical or other emergency occurs while traveling with United, we collect relevant information and may provide such information to non-United medical or other safety personnel as necessary or advisable. We also provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such a request and/or provide such information, we collect information in order to provide reasonable accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
How we use your information
General - applicable to all sources of information
We primarily use your information, including personal information, to provide our services to you and to fulfill your requests. In certain circumstances, such as for advertising purposes, we combine your information with other information that we have about you, that is publicly available and/or that we have obtained from third parties (either individually or in the aggregate). We also use your information for the following purposes:
- For flight information/wireless services. You may register for receipt of flight information and other wireless services by indicating your preference to receive this information by providing relevant information or by granting applicable permissions. Participation in these services may be optional.
- To improve your user experience. To tailor the content and information that we may send or display to you, such as information about your travel schedule; to offer customized location information, personalized help and instructions; and to otherwise personalize your experiences while using our sites or services.
- For operational needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
- For marketing and advertising. United uses your information, consistent with applicable law, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising) and to send you news and newsletters. Specifically, information that we collect about you may be used to send you email, direct mail, or telephone communications about offers from United, its partners or other third parties, that might be of interest to you (please see the section on Disclosing your information below and the section on Changing your marketing preferences below). We also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites.
- For surveys and promotions. As permitted under applicable law, we offer you the opportunity to participate in a survey or promotion. We use survey results for various purposes, including to enhance our services and sites and to develop improved promotions, and, if you provide your name, we may contact you to discuss your comments. Unless otherwise stated in the promotion or survey, we use the contact information that we collect through promotions for the purpose of notifying the winner. If you win a promotion, we may request additional information.
- To improve and maintain our sites and our services. We use your information to improve and maintain our sites and services, respond to user desires and preferences, for research and analytical purposes, such as improving our operations, for security purposes, and for protecting ourselves and users of our services.
- To protect our rights and interests, and the rights and interests of other users of our services.
- As otherwise permitted by law.
In addition to the foregoing, specific examples of how we use information derived from the following categories are described below.
MileagePlus
We use information that we collect from our MileagePlus members to enroll you in the MileagePlus program; to provide mileage credit for program-related purchases and activities related to United, MileagePlus partners and other third parties (please see the section on Disclosing your information below); to communicate with you on the status of your MileagePlus account; to notify you of any special promotions for which you might be eligible; to pre-fill certain data fields so you do not need to enter the same information multiple times; perform the requested services; to process your transactions (including billing); to notify you about flight information, reservation confirmation, flight or seat changes, boarding time(s), and available ancillary services.
We may use the information that we collect about you to send you email, direct mail, or telephone communications about offers from United, our partners or other entities, that might be of interest to you. As discussed in the section regarding Disclosing your information, consistent with applicable law, we also may disclose your information to our partners and other entities for their own marketing purposes.
Children
We do not knowingly use information we collect about children known to be under the age of 16 for any marketing or promotional purpose purpose, nor do we permit our affiliates, third-party sponsors or other third parties with whom we may share information to do so. We use the information collected about children known to be under 16 only to provide services. We will give out personal information about children if required by law, to comply with a court order or subpoena, or to protect the safety and security of visitors and our sites.
Information collected from our mobile application(s)
In addition to the uses of your information described above, if you have allowed us to send you push notifications, we may provide you updates on flights or gate changes, or to offer services and other information. If you do not permit us to send you push notifications, we may still provide such updates through the message center in the mobile application.
If you have allowed us to collect and use your geo-location information, we may provide you location-based offers, services and other information, such as airport maps to help you locate your gate, United Club locations and nearby retailer locations, offers related to United and our marketing partners which may be of interest to you, and personalized assistance. The type of communications that you receive from us may depend on your location; not all features are available at all locations. Geo-location information may also be used to protect United’s interests.
You may change your push notification preferences and/or geo-location tracking preferences at any time through your mobile device settings.
We may promote our sites via Internet advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and United may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures, and protecting United’s interests. You may opt out of the collection of such information by uninstalling the mobile application(s). Once the mobile application(s) has been uninstalled, all information stored in the application will be deleted, including any preferences you previously set or enabled.
Disclosing your information
United may transmit or transfer, as applicable, your personal information to the following persons/entities. Unless otherwise noted, these entities act as our processors and are not independent controllers of your information:
- Affiliates. We may disclose information we collect from you to our affiliates or subsidiaries, which may act as a co-controller of your information. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
- Service providers/Data processors. We may share your information with service providers that assist us and perform functions on our behalf. In some cases service providers, such as information technology and data processing vendors, data storage services, etc., may be located outside the United States and your personal information may be processed or stored in other countries (please see the section on Location of your information below). We also use service providers to assist us in determining and placing relevant advertising.
- Non-affiliated third parties. We may transfer your information to the following third parties as necessary to complete your transaction, fulfill your requests, and for their own marketing purposes, as permitted by law: airlines, car rental agencies, hotels, travel agencies, baggage services entities, other travel services or ticketing entities, and other entities involved in travel reservations or ticketing; governmental or law enforcement authorities or border control agencies; partners with whom we jointly offer a product or service; entities with whom you purchase or redeem miles; corporate customers as part of our management of agreements we have with them. In some circumstances, these entities also act as controllers of your information. Specifically, we may also transfer your information to the following third parties: commercial partners for marketing or sale of our products or services or marketing or sale of their own products or services; financial companies for them to offer you their products or services or a co-branded card, including Banorte. You consent to this transfer unless you advise us to the contrary by contacting privacy@united.com.
- Research and analytics. We may use and disclose your information for research and analytics purposes.
- Aggregate information. Aggregate information, such as demographic information, domain names, other site traffic information, etc., may at times be transferred with United partners or other third parties. Examples of aggregate information are X% of eligible tickets purchased are eTickets; X% of subscribers use a mobile application, etc.
- Law enforcement/Legal processes/other uses. United may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental, law enforcement or health authority; to protect the rights or property of United, its customers, its sites or site users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable. In certain circumstances, United’s service providers may be required to disclose information to government or law enforcement authorities. Security, health and customs and immigration laws in the U.S. and many other countries require all airlines, including United, to provide border control agencies or other governmental authorities with passenger data. In order to comply with these laws we may disclose information about you and your travel arrangements to such authorities.
- Business transactions. If United is or may be acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.
- Additional notice for users of certain mobile websites. You may make purchases using MileagePlus award miles through certain mobile websites. If you choose to use these sites, then United will receive information from the third party about your purchase and will exchange information with the third party to facilitate the transaction and the use of miles from your account.
Use of cookies, web beacons and other similar technologies
United and our service providers collect information by using technologies and methodologies, such as "cookies", tags, web beacons or other similar technologies that enable tracking as you browse our sites. We use these technologies to authenticate you as a user, to remember your preferences for using the site, to present offers that may be of interest and to facilitate transactions, such as flight searches and purchases. We and our service providers also use these tools to analyze use of our sites and our services. We may use this information in the aggregate or combine it with information that we have already collected about you.
Cookie. "Cookies" are small bits of information that are stored on your computer by your web browser. Web beacons or “pixel tags” are small strings of code placed on a web page or in an email message for the purpose of transferring information. Cookies and the other technologies discussed in this section allow us to recognize your preference information, to track your transactions and to facilitate effective website administration.
Cookies help establish a user session and allow our server to provide site users with the appropriate information, advertisements and services. We also use cookies to ensure you obtain the information you request, to authenticate your authority to access the site and to track the usage of our websites in order to improve the site(s) according to our customers’ needs. If you are a registered user on our site and you elect to have the site store your MileagePlus number, the cookie stored on your computer will contain your MileagePlus number.
If you do not want your information to be collected through cookies, you can change the preferences in your particular Internet browser. Some website functionality may not work properly if your browser does not accept cookies. Specifically, if you choose not to accept our cookies and are a registered user, you will not have access to your information, such as your user profile, itineraries, award travel, upgrades and MileagePlus summary information, on this site. Although you cannot log into the site as a registered user if you disable our cookies, you can still purchase on the site by logging in as a “Guest”. Please consult your chosen Internet browser for instructions on how to change your cookie settings.
Local storage objects. We may use Flash Local Storage Objects ("Flash LSOs") to store your preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose “Global Storage Settings Panel“ and follow the instructions to review and, if you want. To see the Flash LSOs currently on your computer, choose“Website Storage Settings Panel“ and follow the instructions to review and, if you want, to delete any specific Flash LSO.
Targeted advertising
We and our service providers use the information that we collect about you to serve advertisements to you on various channels, United and other websites, United and third-party mobile apps and other mediums, social networks and television. We and our service providers may collect the data that we use to determine relevant advertising from the following sources: data collected about you online and through your use of our mobile apps, whether collected directly or automatically through cookies, web beacons and other technologies designed to collect data through mobile apps, third-party sites and engagement with social media when publicly available, and offline. Such data combined or appended from various sources. These advertisements may be about United products and services or products and services of third parties that we think might be of interest to you. United and our service providers may use cookies and web beacons when working with these companies to provide them information regarding your use of the site (whether individually or in the aggregate) to assist them in determining relevant advertising.
In addition, some advertising technology used by United to deliver advertisements may use separate cookies and other tracking technologies. This technology may be delivered via visits to our website, email messages, apps or otherwise. Web beacons on some pages of our site, in conjunction with these advertising cookies and our other cookies, enable the advertising technology to better understand onsite activity in the aggregate, to recognize a browser's cookie when a browser visits this website, other websites or apps, and to learn which advertisements bring users to our site or our apps or otherwise take action.
Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons, clear GIFs, Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party's specific privacy policy, and not this Privacy Policy
Third-party ad networks may be members of either the Network Advertising Initiative (“NAI”) or About Ads-Digital Advertising Alliance (“DAI”). If they are members and you do not want to receive targeted advertisements from these third-party ad networks, you may opt out. Information as to member companies, the practices of such third-party ad networks and your choices regarding having information used by these companies and how to opt out, can be found at either: http://www.networkadvertising.org/optout_nonppii.asp for NAI members or http://www.aboutads.info/choices/ for DAI members. Information on how to opt out of the use of your information by DoubleClick is available at http://www.google.com/policies/technologies/ads/ and information on how to opt out of Google Analytics is available at https://tools.google.com/dlpage/gaoptout.
Opting out of one or more NAI or DAI members means that only those particular members will no longer deliver targeted content or ads to you. It does not mean you will no longer receive any targeted content or ads on our websites or other non-United websites. If your browser is configured to reject cookies when you visit one of the above referenced opt-out pages and then you erase your cookies, use a different computer or change web browsers, your NAI or DAI opt-out may no longer be active.
Analytics
We also use automated devices and applications, such as Google Analytics, to evaluate the use of our websites and apps and the services we provide. We use these tools to gather information about users to help us improve our services, performance and user experiences. These analytics providers may use cookies and other technologies to perform their services, and may combine the information that they collect about you on our websites with other information that they have collected. This Privacy Policy does not cover such third parties’ use of the data.
Your legal rights
In terms of applicable law, you have the following rights regarding the personal data we obtain and process from you (“ARCO Rights”):
- Access – You have the right to know what personal data we process, what it is used for and the conditions of use thereof.
- Rectification – You have the right to request the rectification of your personal data in the event that it is inaccurate, incomplete or outdated.
- Cancellation – You have the right to request that your personal data is removed from our databases when you consider that it is not being used properly.
- Opposition – You have the right to oppose the use of your personal data for specific purposes.
If you would like to exercise any of the ARCO Rights, please send a request to privacy@united.com. In your message, please indicate the ARCO right you would like to exercise. We may ask you for additional information to confirm your identity and for security purposes. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Protecting information collected
United maintains physical, administrative, electronic and procedural safeguards to protect your information. When you place orders online to purchase services or access your MileagePlus account information, we use secure servers to protect your personal information, which is intended to encrypt the personal information that is transmitted between you and our sites. Although United takes reasonable steps to safeguard and to prevent unauthorized access to your personal information, it cannot be responsible for the acts of those who gain unauthorized access and United makes no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.
If a third party seeks to transact business with United on your behalf, that party will be asked to provide us with the same personal information we would collect directly from you to complete your transaction. Unless and until we are advised otherwise, we consider that such third party has an appropriate legal basis to provide us with your personal information and make such transactions and any subsequent changes, on your behalf in accordance with this Privacy Policy. If such third party who has your full name and booking reference contacts us and seeks information on your booking or requests changes to it, we will disclose your booking information and allow such third party to make changes as we will conclude that third party has an appropriate legal basis to do so. Please note that the collection, use and disclosure of your personal information by a third party is subject to your dealings with them and, if applicable, any of their privacy policies and practices. If you do not want an individual to obtain information on or make changes to your booking, you should not share your booking reference with them.
Your role in protecting your information
To protect your privacy and United's proprietary databases and systems, you should not share any of your information, such as MileagePlus number or password, with any unauthorized individuals or third-party information aggregators that would allow them access to your sensitive account information. For more information, see our PIN/Password Frequently Asked Questions page. You should also take all necessary steps to secure your mobile devices and protect information you may have stored on them. We do not have control over the security of your mobile device. United assumes no responsibility for the loss of information associated with security disrupting technologies, reverse engineering of mobile device applications or malware, that compromise the United mobile application(s) as a result of owner or third-party initiated changes to the mobile device. The security of that mobile device is the responsibility of its owner, not United.
Changing your marketing preferences
MileagePlus members can opt out of receiving marketing or promotion-related emails, phone calls or direct mail from United by accessing their account profile information on the United website and changing their profile to indicate their desire to be excluded. In addition, members can contact the MileagePlus Service Center by phone or in writing and request a profile change. Emails sent to members will contain a message and link on how to opt out of that type of communication in the future. Regardless of your opt-out preferences, we reserve the right to send you emails or other communications for administrative purposes.
Location of your information/data transfer/notice to non-US persons
United will transfer, store and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. By submitting any personal information or by using the website and without limitation to any other rights or obligations we have, you consent to such transfer to, and processing in, the United States and these other countries, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions.
At this time, our precise geo-location tracking and related offers and services as discussed in this Policy only are available at certain airports in the U.S. Non-U.S. persons who choose to use this service may have certain rights to their personal data as discussed here.
Other sites/digital channels
Our sites and our online services may contain links to third-party sites. Any access to and use of such linked sites is not governed by this Privacy Policy but instead is governed by the privacy policies of those third-party sites. We are not responsible for the information practices of such third-party sites.
Contact us
If you have comments or questions about this Privacy Policy, please submit your inquiry to United Customer Care. Please contact privacy@united.com.
Legal effect and changes to the policy
As previously stated, this Privacy Policy is not a contract nor does it otherwise create any legal rights or obligations in addition to those provided under applicable data protection laws. Rather, this Privacy Policy merely reflects guidelines setting forth United’s intended business practices. By using any United digital channel, and/or by providing any information to United online or offline, you acknowledge the collection and use of such information by United, its affiliates, partners, contractors and permitted agents as herein described and consistent with applicable laws. Also, United, in its discretion, may amend, interpret, modify or withdraw any portion of this Privacy Policy and related business practices at any time. United will notify you of changes to this Privacy Policy by posting updated text on this site, and your continued use of our digital channels or offline outlets constitutes your acknowledgement of those changes. A version of this Privacy Policy has been effective since October 15, 2002, and was last updated on March 12, 2021. This Privacy Policy supersedes previous privacy policies posted on united.com and coair.com.
Thank you for taking the time to read this Privacy Policy.
Your privacy is important to us
United Airlines respects your privacy. This Privacy Policy discloses United’s privacy practices for your information collected online or offline. We address the following topics:
While United strives to take reasonable measures to protect your information, this Privacy Policy is not a contract and does not create any legal rights or obligations. Rather, the following are guidelines for protecting your information and, depending on your jurisdiction, describing your rights under applicable data protection laws. Except as otherwise described in this Policy, by using any of our sites and/or our services or otherwise providing us with any information, you acknowledge the handling of your information as described in this Privacy Policy.
Scope of this policy
This Privacy Policy applies to the information that we collect about you on any United website in which it is posted, which include the following situations:
- On United-managed websites and mobile websites, such as, for example, united.com, mobile.united.com, hub.united.com;
- Through United-managed mobile applications, such as the United App;
- Offline, through a United Customer Contact Center agent or other travel agent.
The information we collect is controlled by United Airlines, Inc., which is headquartered in the United States at 233 S. Wacker Drive, Chicago, Illinois 60606.
This Privacy Policy does not apply to the following United sites or services:
- United Cargo transactions;
- United Wi-Fi^SM service portal;
- United Club^SM locations’ Wi-Fi service; or
- United’s Technical Operations website;
In addition, this Privacy Policy does not apply to any website not owned and managed by United or any other third-party site.
With respect to the above, please see those respective sites for the privacy policies that may apply.
Information we collect about you
United collects and maintains information, including personal information, about you directly from you (both online and offline) and automatically when you use our sites and third-party sites. We collect information from you when you make travel arrangements, contact us, complete a survey, register for the MileagePlus program, participate in a promotion, or otherwise interact with us. The type of information we collect about you depends on your particular interaction with us, and includes the following information:
- Name;
- Contact information;
- MileagePlus number and security information;
- Gender and date of birth;
- Payment information;
- Passport information and photograph;
- Government ID or redress number;
- Images and biometric information;
- Travel preferences and special requests;
- Purchase information (both travel and non-travel purchases);
- User and activity data from our websites and mobile applications;
- Survey responses;
- Tax identification number of promotion or survey winner, depending on the value of the prize; and
- Health information.
Payment information, passport information and photograph, and government ID may be defined as “sensitive” under certain data protection laws. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
Information we collect directly from you
Based on your interaction with us, we collect information directly from you as described below.
MileagePlus information
When you enroll in MileagePlus, or if you are already a MileagePlus member, we collect information such as your name, address, phone number(s), email address, MileagePlus account number, and password or other account security authentication information. If you create a traveler profile, we also will collect the information that you choose to provide to us. You have the option of providing us with payment information, telephone numbers, email addresses, general requests or special needs, travel preferences and loyalty program information.
In certain situations, we collect information that is defined as “sensitive” under applicable data protection laws. We provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such request and/or provide such information, we collect information in order to provide accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time.
Personal information collected and processed as part of our MileagePlus program is held by Mileage Plus Intellectual Property Assets, Ltd. (“MIPA”), a member of the United group of companies, whose registered office is at Maples Corporate
Services Limited, PO Box 309, Ugland House, George Town, Grand Cayman, KY1-1104, Cayman Islands.
MIPA will be a data controller in respect of that personal information under the Data Protection Law, 2017 of the Cayman Islands (“DPL”). Where MIPA is the data controller, it processes MileagePlus personal information where it has an appropriate legal basis. This may be because:
- Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to the MileagePlus program and services and to provide you with information you request);
- Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to fulfill your MileagePlus benefits); and/or
- Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).
If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.
Online purchases
If you make a purchase with us, whether as a MileagePlus member or as a “Guest”, we collect traveler information, travel and contact preferences, and payment information.
Offline purchases: Telephone, travel agent or ticket counter
To make a purchase or transact other business with a United Customer Contact Center agent, a travel agent, or a customer service representative (collectively, “Reservations Agents”), Reservations Agents collect traveler information, travel and contact preferences, and payment information. We may monitor and/or record telephone calls to Reservations Agents. By continuing with the call, you are deemed to consent to such monitoring and/or recording.
COVID-19
You may be required to provide information about your health, including (depending on your destination) lack or presence of symptoms related to COVID-19, COVID-19 test results, or COVID-19 vaccine information or information supporting your request for an exemption to a health-related travel requirement. We may offer you the ability to electronically provide such information to us, such as through our Travel-Ready Center or through a digital health pass. We may offer you the ability to request that United collect your information from a third party, such as a digital health app that you have chosen to use. We will use such information to help facilitate, but cannot guarantee, meeting your destination’s requirements, to comply with applicable laws (for example, we may be required to confirm you have necessary travel documentation), and to help ensure health and safety during the travel experience. United is not liable for any assistance or information provided by any employee or agent of United to you relating to such documents or compliance with such laws, or for the consequences to you resulting from failure to obtain and present such documents, which shall be in good condition, or to comply with such laws. United also reserves the right to deny boarding to you if your information is not in good condition according to United’s reasonable belief, or which otherwise do not comply with laws of the specific country you are departing from, transiting through, or travelling to. We may offer you the ability to provide contact information to help health authorities facilitate contact tracing. In some cases, your destination may require that you provide such information. We may be required by law to disclose contact information to health authorities or other government authorities.
Biometric Information
We may provide you the option to voluntarily participate in travel facilitation and security programs that use biometric information. These programs may include trial programs to expedite the boarding and baggage check processes, as well as security programs like the Traveler Verification Service administered by U.S. Customs and Border Protection. You should review any specific details regarding the collection, use, disclosure, and retention of biometric information when considering whether to participate in these programs.
United Club
United may collect information such as name, addresses, email addresses, telephone numbers, and credit card information, in order to provide service to members of its United Club.
In flight
United may collect credit card and MileagePlus information in flight to enable present and/or future purchases.
Children
Due to the nature of our services, United will collect and maintain travel information, about children under the age of 13 when necessary to comply with federal aviation or security regulations, for safety or security reasons, or as otherwise necessary for United to provide transportation or other services requested.
Information we collect automatically
We and our service providers automatically collect information about your use of our sites through cookies, web beacons, log files and other technologies. Such information includes the following:
- Domain name;
- Browser type and operating system;
- IP address;
- Web pages you view;
- Links you click;
- Length of time of your visit;
- Your activities on our sites and your movement through these sites; and
- Referring URL or webpage that led you to our sites.
We and our service providers may combine this information with information that we (or they) already have collected about you. For more information, refer to the Use of cookies, web beacons and other similar technologies section below.
Information we collect through our mobile application(s)
We collect information directly from you when you use our mobile application(s), which varies based on your interaction with our mobile applications, but may include, for example, name, email address, MileagePlus account information, government ID or passenger redress number, passport information and/or photograph, date of birth, and payment information (e.g., credit card number, expiration date and billing name and address), if not already provided.
We may store your information to facilitate your travel (e.g. reservation, specific flight information) or purchase needs. The mobile application(s) may also store user-provided data, unless you choose to delete it, for as long as you use the related feature of the application. Information provided for traveler data, security clearance, purchases and related activities will be stored in our operational systems, as needed, to provide services you request. If such information is stored in your MileagePlus account, it will not be accessible if your MileagePlus account is closed.
We also collect information automatically through your use of our mobile application(s) (using cookies, beacons or other tracking technologies designed for mobile applications). Information collected in your use of our mobile application(s) includes, but is not limited to:
- With your consent, your pinpointed physical location information from technologies like GPS, Wi-Fi, or cell tower proximity (geo-location tracking)
- With your consent, while at or near certain airports in the U.S., your pinpointed physical location will be tracked continuously to provide you location-based offers, services and other information. For more information, see the Location Services FAQ located on the side menu of the United App.
- Your domain name
- Device ID or alternative ID where required by the platform provider
- Electronic data concerning operating systems and computing devices/browser, including the type of operating system or computing device
- Features you use and links you click
- Amount of time spent in the application
- Installs and uninstalls
- Transaction details and history
We may combine this information with information that we already have collected about you.
Information we collect from third parties
We collect information about you from third parties. If you make a reservation through a travel agent, we will obtain your travel information from that agent. We may also obtain information about you from our marketing partners, advertisers and other third parties.
Sensitive information we collect directly from you
In certain situations, we collect information that is defined as “sensitive” under certain data protection laws. If a medical or other emergency occurs while traveling with United, we collect relevant information and may provide such information to non-United medical or other safety personnel as necessary or advisable. We also provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such a request and/or provide such information, we collect information in order to provide reasonable accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
How we use your information
General - applicable to all sources of information
We primarily use your information, including personal information, to provide our services to you and to fulfill your requests. In certain circumstances, such as for advertising purposes, we combine your information with other information that we have about you, that is publicly available and/or that we have obtained from third parties (either individually or in the aggregate). We also use your information for the following purposes:
- For flight information/wireless services. You may register for receipt of flight information and other wireless services by indicating your preference to receive this information by providing relevant information or by granting applicable permissions. Participation in these services may be optional.
- To improve your user experience. To tailor the content and information that we may send or display to you, such as information about your travel schedule; to offer customized location information, personalized help and instructions; and to otherwise personalize your experiences while using our sites or services.
- For operational needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
- For marketing and advertising. United uses your information, consistent with applicable law, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising) and to send you news and newsletters. Specifically, information that we collect about you may be used to send you email, direct mail, or telephone communications about offers from United, its partners or other third parties, that might be of interest to you (please see the section on Disclosing your information below and the section on Changing your marketing preferences below). We also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites.
- For surveys and promotions. As permitted under applicable law, we offer you the opportunity to participate in a survey or promotion. We use survey results for various purposes, including to enhance our services and sites and to develop improved promotions, and, if you provide your name, we may contact you to discuss your comments. Unless otherwise stated in the promotion or survey, we use the contact information that we collect through promotions for the purpose of notifying the winner. If you win a promotion, we may request additional information.
- To improve and maintain our sites and our services. We use your information to improve and maintain our sites and services, respond to user desires and preferences, for research and analytical purposes, such as improving our operations, for security purposes, and for protecting ourselves and users of our services.
- To protect our rights and interests, and the rights and interests of other users of our services.
- As otherwise permitted by law.
In addition to the foregoing, specific examples of how we use information derived from the following categories are described below.
MileagePlus
We use information that we collect from our MileagePlus members to enroll you in the MileagePlus program; to provide mileage credit for program-related purchases and activities related to United, MileagePlus partners and other third parties (please see the section on Disclosing your information below); to communicate with you on the status of your MileagePlus account; to notify you of any special promotions for which you might be eligible; to pre-fill certain data fields so you do not need to enter the same information multiple times; perform the requested services; to process your transactions (including billing); to notify you about flight information, reservation confirmation, flight or seat changes, boarding time(s), and available ancillary services.
We may use the information that we collect about you to send you email, direct mail, or telephone communications about offers from United, our partners or other entities, that might be of interest to you. As discussed in the section regarding Disclosing your information, consistent with applicable law, we also may disclose your information to our partners and other entities for their own marketing purposes.
Children
We do not knowingly use information we collect about children known to be under the age of 16 for any marketing or promotional purpose purpose, nor do we permit our affiliates, third-party sponsors or other third parties with whom we may share information to do so. We use the information collected about children known to be under 16 only to provide services. We will give out personal information about children if required by law, to comply with a court order or subpoena, or to protect the safety and security of visitors and our sites.
Information collected from our mobile application(s)
In addition to the uses of your information described above, if you have allowed us to send you push notifications, we may provide you updates on flights or gate changes, or to offer services and other information. If you do not permit us to send you push notifications, we may still provide such updates through the message center in the mobile application.
If you have allowed us to collect and use your geo-location information, we may provide you location-based offers, services and other information, such as airport maps to help you locate your gate, United Club locations and nearby retailer locations, offers related to United and our marketing partners which may be of interest to you, and personalized assistance. The type of communications that you receive from us may depend on your location; not all features are available at all locations. Geo-location information may also be used to protect United’s interests.
You may change your push notification preferences and/or geo-location tracking preferences at any time through your mobile device settings.
We may promote our sites via Internet advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and United may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures, and protecting United’s interests. You may opt out of the collection of such information by uninstalling the mobile application(s). Once the mobile application(s) has been uninstalled, all information stored in the application will be deleted, including any preferences you previously set or enabled.
Disclosing your information
United may transmit or transfer, as applicable, your personal information to the following persons/entities. Unless otherwise noted, these entities act as our processors and are not independent controllers of your information:
- Affiliates. We may disclose information we collect from you to our affiliates or subsidiaries, which may act as a co-controller of your information. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
- Service providers/Data processors. We may share your information with service providers that assist us and perform functions on our behalf. In some cases service providers, such as information technology and data processing vendors, data storage services, etc., may be located outside the United States and your personal information may be processed or stored in other countries (please see the section on Location of your information below). We also use service providers to assist us in determining and placing relevant advertising.
- Non-affiliated third parties. We may transfer your information to the following third parties as necessary to complete your transaction, fulfill your requests, and for their own marketing purposes, as permitted by law: airlines, car rental agencies, hotels, travel agencies, baggage services entities, other travel services or ticketing entities, and other entities involved in travel reservations or ticketing; governmental or law enforcement authorities or border control agencies; partners with whom we jointly offer a product or service; entities with whom you purchase or redeem miles; corporate customers as part of our management of agreements we have with them. In some circumstances, these entities also act as controllers of your information. Specifically, we may also transfer your information to the following third parties: commercial partners for marketing or sale of our products or services or marketing or sale of their own products or services; financial companies for them to offer you their products or services or a co-branded card, including Banorte. You consent to this transfer unless you advise us to the contrary by contacting privacy@united.com.
- Research and analytics. We may use and disclose your information for research and analytics purposes.
- Aggregate information. Aggregate information, such as demographic information, domain names, other site traffic information, etc., may at times be transferred with United partners or other third parties. Examples of aggregate information are X% of eligible tickets purchased are eTickets; X% of subscribers use a mobile application, etc.
- Law enforcement/Legal processes/other uses. United may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental, law enforcement or health authority; to protect the rights or property of United, its customers, its sites or site users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable. In certain circumstances, United’s service providers may be required to disclose information to government or law enforcement authorities. Security, health and customs and immigration laws in the U.S. and many other countries require all airlines, including United, to provide border control agencies or other governmental authorities with passenger data. In order to comply with these laws we may disclose information about you and your travel arrangements to such authorities.
- Business transactions. If United is or may be acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.
- Additional notice for users of certain mobile websites. You may make purchases using MileagePlus award miles through certain mobile websites. If you choose to use these sites, then United will receive information from the third party about your purchase and will exchange information with the third party to facilitate the transaction and the use of miles from your account.
Use of cookies, web beacons and other similar technologies
United and our service providers collect information by using technologies and methodologies, such as "cookies", tags, web beacons or other similar technologies that enable tracking as you browse our sites. We use these technologies to authenticate you as a user, to remember your preferences for using the site, to present offers that may be of interest and to facilitate transactions, such as flight searches and purchases. We and our service providers also use these tools to analyze use of our sites and our services. We may use this information in the aggregate or combine it with information that we have already collected about you.
Cookie. "Cookies" are small bits of information that are stored on your computer by your web browser. Web beacons or “pixel tags” are small strings of code placed on a web page or in an email message for the purpose of transferring information. Cookies and the other technologies discussed in this section allow us to recognize your preference information, to track your transactions and to facilitate effective website administration.
Cookies help establish a user session and allow our server to provide site users with the appropriate information, advertisements and services. We also use cookies to ensure you obtain the information you request, to authenticate your authority to access the site and to track the usage of our websites in order to improve the site(s) according to our customers’ needs. If you are a registered user on our site and you elect to have the site store your MileagePlus number, the cookie stored on your computer will contain your MileagePlus number.
If you do not want your information to be collected through cookies, you can change the preferences in your particular Internet browser. Some website functionality may not work properly if your browser does not accept cookies. Specifically, if you choose not to accept our cookies and are a registered user, you will not have access to your information, such as your user profile, itineraries, award travel, upgrades and MileagePlus summary information, on this site. Although you cannot log into the site as a registered user if you disable our cookies, you can still purchase on the site by logging in as a “Guest”. Please consult your chosen Internet browser for instructions on how to change your cookie settings.
Local storage objects. We may use Flash Local Storage Objects ("Flash LSOs") to store your preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose “Global Storage Settings Panel“ and follow the instructions to review and, if you want. To see the Flash LSOs currently on your computer, choose“Website Storage Settings Panel“ and follow the instructions to review and, if you want, to delete any specific Flash LSO.
Targeted advertising
We and our service providers use the information that we collect about you to serve advertisements to you on various channels, United and other websites, United and third-party mobile apps and other mediums, social networks and television. We and our service providers may collect the data that we use to determine relevant advertising from the following sources: data collected about you online and through your use of our mobile apps, whether collected directly or automatically through cookies, web beacons and other technologies designed to collect data through mobile apps, third-party sites and engagement with social media when publicly available, and offline. Such data combined or appended from various sources. These advertisements may be about United products and services or products and services of third parties that we think might be of interest to you. United and our service providers may use cookies and web beacons when working with these companies to provide them information regarding your use of the site (whether individually or in the aggregate) to assist them in determining relevant advertising.
In addition, some advertising technology used by United to deliver advertisements may use separate cookies and other tracking technologies. This technology may be delivered via visits to our website, email messages, apps or otherwise. Web beacons on some pages of our site, in conjunction with these advertising cookies and our other cookies, enable the advertising technology to better understand onsite activity in the aggregate, to recognize a browser's cookie when a browser visits this website, other websites or apps, and to learn which advertisements bring users to our site or our apps or otherwise take action.
Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons, clear GIFs, Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party's specific privacy policy, and not this Privacy Policy
Third-party ad networks may be members of either the Network Advertising Initiative (“NAI”) or About Ads-Digital Advertising Alliance (“DAI”). If they are members and you do not want to receive targeted advertisements from these third-party ad networks, you may opt out. Information as to member companies, the practices of such third-party ad networks and your choices regarding having information used by these companies and how to opt out, can be found at either: http://www.networkadvertising.org/optout_nonppii.asp for NAI members or http://www.aboutads.info/choices/ for DAI members. Information on how to opt out of the use of your information by DoubleClick is available at http://www.google.com/policies/technologies/ads/ and information on how to opt out of Google Analytics is available at https://tools.google.com/dlpage/gaoptout.
Opting out of one or more NAI or DAI members means that only those particular members will no longer deliver targeted content or ads to you. It does not mean you will no longer receive any targeted content or ads on our websites or other non-United websites. If your browser is configured to reject cookies when you visit one of the above referenced opt-out pages and then you erase your cookies, use a different computer or change web browsers, your NAI or DAI opt-out may no longer be active.
Analytics
We also use automated devices and applications, such as Google Analytics, to evaluate the use of our websites and apps and the services we provide. We use these tools to gather information about users to help us improve our services, performance and user experiences. These analytics providers may use cookies and other technologies to perform their services, and may combine the information that they collect about you on our websites with other information that they have collected. This Privacy Policy does not cover such third parties’ use of the data.
Your legal rights
In terms of applicable law, you have the following rights regarding the personal data we obtain and process from you (“ARCO Rights”):
- Access – You have the right to know what personal data we process, what it is used for and the conditions of use thereof.
- Rectification – You have the right to request the rectification of your personal data in the event that it is inaccurate, incomplete or outdated.
- Cancellation – You have the right to request that your personal data is removed from our databases when you consider that it is not being used properly.
- Opposition – You have the right to oppose the use of your personal data for specific purposes.
If you would like to exercise any of the ARCO Rights, please send a request to privacy@united.com. In your message, please indicate the ARCO right you would like to exercise. We may ask you for additional information to confirm your identity and for security purposes. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Protecting information collected
United maintains physical, administrative, electronic and procedural safeguards to protect your information. When you place orders online to purchase services or access your MileagePlus account information, we use secure servers to protect your personal information, which is intended to encrypt the personal information that is transmitted between you and our sites. Although United takes reasonable steps to safeguard and to prevent unauthorized access to your personal information, it cannot be responsible for the acts of those who gain unauthorized access and United makes no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.
If a third party seeks to transact business with United on your behalf, that party will be asked to provide us with the same personal information we would collect directly from you to complete your transaction. Unless and until we are advised otherwise, we consider that such third party has an appropriate legal basis to provide us with your personal information and make such transactions and any subsequent changes, on your behalf in accordance with this Privacy Policy. If such third party who has your full name and booking reference contacts us and seeks information on your booking or requests changes to it, we will disclose your booking information and allow such third party to make changes as we will conclude that third party has an appropriate legal basis to do so. Please note that the collection, use and disclosure of your personal information by a third party is subject to your dealings with them and, if applicable, any of their privacy policies and practices. If you do not want an individual to obtain information on or make changes to your booking, you should not share your booking reference with them.
Your role in protecting your information
To protect your privacy and United's proprietary databases and systems, you should not share any of your information, such as MileagePlus number or password, with any unauthorized individuals or third-party information aggregators that would allow them access to your sensitive account information. For more information, see our PIN/Password Frequently Asked Questions page. You should also take all necessary steps to secure your mobile devices and protect information you may have stored on them. We do not have control over the security of your mobile device. United assumes no responsibility for the loss of information associated with security disrupting technologies, reverse engineering of mobile device applications or malware, that compromise the United mobile application(s) as a result of owner or third-party initiated changes to the mobile device. The security of that mobile device is the responsibility of its owner, not United.
Changing your marketing preferences
MileagePlus members can opt out of receiving marketing or promotion-related emails, phone calls or direct mail from United by accessing their account profile information on the United website and changing their profile to indicate their desire to be excluded. In addition, members can contact the MileagePlus Service Center by phone or in writing and request a profile change. Emails sent to members will contain a message and link on how to opt out of that type of communication in the future. Regardless of your opt-out preferences, we reserve the right to send you emails or other communications for administrative purposes.
Location of your information/data transfer/notice to non-US persons
United will transfer, store and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. By submitting any personal information or by using the website and without limitation to any other rights or obligations we have, you consent to such transfer to, and processing in, the United States and these other countries, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions.
At this time, our precise geo-location tracking and related offers and services as discussed in this Policy only are available at certain airports in the U.S. Non-U.S. persons who choose to use this service may have certain rights to their personal data as discussed here.
Other sites/digital channels
Our sites and our online services may contain links to third-party sites. Any access to and use of such linked sites is not governed by this Privacy Policy but instead is governed by the privacy policies of those third-party sites. We are not responsible for the information practices of such third-party sites.
Contact us
If you have comments or questions about this Privacy Policy, please contact privacy@united.com.
If you have comments or questions about the privacy practices of MIPA, please contact MileagePlusPrivacy@united.com. Where your personal information is held by MIPA you may have various rights under the DPL, and may also have a right to lodge a complaint with the Cayman Islands Ombudsman.
Legal effect and changes to the policy
As previously stated, this Privacy Policy is not a contract nor does it otherwise create any legal rights or obligations in addition to those provided under applicable data protection laws. Rather, this Privacy Policy merely reflects guidelines setting forth United’s intended business practices. By using any United digital channel, and/or by providing any information to United online or offline, you acknowledge the collection and use of such information by United, its affiliates, partners, contractors and permitted agents as herein described and consistent with applicable laws. Also, United, in its discretion, may amend, interpret, modify or withdraw any portion of this Privacy Policy and related business practices at any time. United will notify you of changes to this Privacy Policy by posting updated text on this site, and your continued use of our digital channels or offline outlets constitutes your acknowledgement of those changes. A version of this Privacy Policy has been effective since October 15, 2002, and was last updated on March 12, 2021. This Privacy Policy supersedes previous privacy policies posted on united.com and coair.com.
Thank you for taking the time to read this Privacy Policy.

While United strives to take reasonable measures to protect your information, this Policy is not a contract and does not create any legal rights or obligations. Rather, the following are guidelines for protecting your information and, depending on your jurisdiction, describing your rights under applicable data protection laws. Except as otherwise described in this Policy, by using any of our sites and/or our services or otherwise providing us with any information, you acknowledge the handling of your information as described in this Policy.

Scope of this policy

Responsible for the treatment: United Airlines, Inc. Peru Branch
Address of the holder: Avenida Victor Andres Belaunde 147, Edificio Real 5, Office 101, San Isidro, Lima, Peru
The existence of this database of personal data has been informed to the National Authority of Protection of Personal Data of the Ministry of Justice and Human Rights of Peru, through its registration in the National Registry of Protection of Personal Data with the denominations “Customers ”With Code: RNPDP-PJP No. 16832," Advertising “with Code: RNPDP-PJP No. 16834 and" Book of Claims "with Code: RNPDP-PJP No. 16833.
Such information will be retained for as long as is reasonably necessary for the purposes described in this Policy. For more information, please review this Policy.

This Policy applies to the information that we collect about you on any United website in which it is posted, which include the following situations:

On United-managed websites and mobile websites, including, for example, united.com, mobile.united.com, hub.united.com;
Through United-managed mobile applications, such as the United App;
Offline, including, for example, through a United Customer Contact Center agent or other travel agent.

The information we collect is controlled by United Airlines, Inc., which is headquartered in the United States at 233 S. Wacker Drive, Chicago, Illinois 60606.

This Policy does not apply to the following United sites or services:

United Cargo transactions, including but not limited to, those conducted on unitedcargo.com;
United Wi-Fi^SM service portal;
United Club^SM locations’ Wi-Fi service; or
United’s Technical Operations website.

In addition, this Policy does not apply to any website not owned and managed by United, including but not limited to, United Vacations, United Cruises, MileagePlus Shopping, Orbitz, Travelocity, Expedia or any other third-party site.

With respect to the above, please see those respective sites for the privacy policies that may apply.

Information we collect about you

United collects and maintains information, including personal information, about you directly from you (both online and offline) and automatically when you use our sites and third-party sites. We collect information from you when you make travel arrangements, contact us, complete a survey, register for the MileagePlus program, participate in a promotion, or otherwise interact with us. The type of information we collect about you depends on your particular interaction with us, and may include, but not limited to, the following information:

Name;
Contact information;
MileagePlus number and security information;
Gender and date of birth;
Payment information (e.g., credit card information);
Passport information and photograph;
Government ID or redress number;
Images and biometrics;
Travel preferences and special requests;
Purchase information (including both travel and non-travel purchases);
User and activity data from our websites and mobile applications;
Survey responses;
Tax identification number of promotion or survey winner, depending on the value of the prize; and
Health information.

Information we collect directly from you

Examples of the types of information we collect directly from you are described below.

MileagePlus information

When you enroll in MileagePlus, or if you are already a MileagePlus member, we collect specific information such as your name, address, phone number(s), email address, MileagePlus account number, and password or other account security authentication information. If you create a traveler profile, we also will collect the information that you choose to provide to us, which may include but not be limited to: payment information (e.g., credit card information, billing name/address), telephone numbers, email addresses, general requests or special needs, travel preferences and loyalty program information.

In certain situations, we collect information that is defined as “sensitive” under applicable data protection laws. We provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such request and/or provide such information, we collect information in order to provide accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time.

Personal information collected and processed as part of our MileagePlus program is held by Mileage Plus Intellectual Property Assets, Ltd. (“MIPA”), a member of the United group of companies, whose registered office is at Maples Corporate Services Limited, PO Box 309, Ugland House, George Town, Grand Cayman, KY1-1104, Cayman Islands. MIPA will be a data controller in respect of that personal information under the Data Protection Law, 2017 of the Cayman Islands (“DPL”).

Where MIPA is the data controller, it processes MileagePlus personal information where it has an appropriate legal basis. This may be because:

Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to the MileagePlus program and services and to provide you with information you request);
Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to fulfill your MileagePlus benefits); and/or
Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).

If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.

Online purchases

If you make a purchase with us, whether as a MileagePlus member or as a “Guest”, we collect information about you, including but not limited to traveler, payment information, contact and travel preferences.

Offline purchases: Telephone, travel agent or ticket counter

To make a purchase or transact other business with a United Customer Contact Center agent, a travel agent (including online travel agents outside of United), or a customer service representative (collectively, “Reservations Agents”), Reservations Agents collect data such as payment information, passport information, birth date, name, addresses, email addresses, and telephone numbers. We may monitor and/or record telephone calls to Reservations Agents. By continuing with the call, you are deemed to consent to such monitoring and/or recording.

COVID-19

You may be required to provide information about your health, including (depending on your destination) lack or presence of symptoms related to COVID-19, COVID-19 test results, or COVID-19 vaccine information or information supporting your request for an exemption to a health-related travel requirement. We may offer you the ability to electronically provide such information to us, such as through our Travel-Ready Center or through a digital health pass. We may offer you the ability to request that United collect your information from a third-party, such as a digital health app that you have chosen to use. We will use such information to help facilitate, but cannot guarantee, meeting your destination’s requirements, to comply with applicable laws (for example, we may be required to confirm you have necessary travel documentation), and to help ensure health and safety during the travel experience. United is not liable for any assistance or information provided by any employee or agent of United to you relating to such documents or compliance with such laws, or for the consequences to you resulting from failure to obtain and present such documents, which shall be in good condition, or to comply with such laws. United also reserves the right to deny boarding to you if your information is not in good condition according to United’s reasonable belief, or which otherwise do not comply with laws of the specific country you are departing from, transiting through, or travelling to. We may offer you the ability to provide contact information to help health authorities facilitate contact tracing. In some cases, your destination may require that you provide such information. We may be required by law to disclose contact information to health authorities or other government authorities.

Biometric Information

We may provide you the option to voluntarily participate in travel facilitation and security programs that use biometric information. These programs may include trial programs to expedite the boarding and baggage check processes, as well as security programs like the Traveler Verification Service administered by U.S. Customs and Border Protection. You should review any specific details regarding the collection, use, disclosure, and retention of biometric information when considering whether to participate in these programs.

United Club

United may collect information such as name, addresses, email addresses, telephone numbers, and credit card information, in order to provide service to members of its United Club.

In flight

United may collect credit card and MileagePlus information in flight to enable present and/or future purchases.

Children

Due to the nature of our services, United will collect and maintain travel information, about children under the age of 13 when necessary to comply with federal aviation or security regulations, for safety or security reasons, or as otherwise necessary for United to provide transportation or other services requested.

Information we automatically collect

We and our third-party service providers automatically collect information about your use of our sites through cookies, web beacons, log files and other technologies. Such information includes but is not limited to, the following:

Domain name;
NBrowser type and operating system;
IP address;
Web pages you view;
Links you click;
Length of time of your visit;
Your activities on our sites including your movement through these sites; and
Referring URL or webpage that led you to our sites.

We and our third-party service providers may combine this information with information that we (or they) already have collected about you. For more information, refer to the "Use of cookies, web beacons and other similar technologies" section below.

Information we collect through our mobile application(s)

We collect information from you when you use our mobile application(s), including, but not limited to: name, email address, MileagePlus account information, government ID or passenger redress number, passport information and/or photograph, date of birth, payment information (e.g., credit card number, expiration date and billing name and address), if not already provided.

You may store your information in order to facilitate your travel (e.g. reservation, specific flight information, etc.) or purchase needs. The mobile application(s) may also store user-provided data, unless you choose to delete it, for as long as you use the related feature of the application. Information provided for traveler data, security clearance, purchases and related activities will be stored in our operational systems, as needed, to provide services you request. If such information is stored in your MileagePlus account it will not be accessible if your MileagePlus account is closed.

We also collect information automatically through your use of our mobile application(s) (through cookies, beacons or other tracking technologies designed for mobile applications), including, but not limited to, the following:

Your pinpointed physical location information from technologies like GPS, Wi-Fi, or cell tower proximity (geo-location tracking), if you agree to grant us permission to do so;
At select airports in the U.S., your precise location may be tracked continuously to provide you with location-based services, if you agree to grant us permission to do so. For more information, and to learn how to turn off this tracking, please see the Location Services FAQ located on the side menu of the United App;
Your domain name;
Device ID or alternative ID where required by the platform provider;
Electronic data concerning operating systems and computing devices/browser, including types;
Features you use and links you click;
Amount of time spent in the application;
Installs and uninstalls;
Transaction details and history.

Information we collect from third parties

We collect information about you from third parties, including personal, demographic and aggregate information. For example, if you make a reservation through a travel agent, we will obtain your travel information from that agent. We may also obtain information about you from our marketing partners, advertisers and other third parties.

Sensitive information we collect directly from you

In certain situations, we collect information that is defined as “sensitive” under applicable data protection laws. If a medical or other emergency occurs while travelling with United, we collect information, including but not limited to first and last name, contact information, date of birth, and medical information, and may share such information with third-party medical or other safety personnel as necessary or advisable. We also provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such request and/or provide such information, we collect information in order to provide reasonable accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time.

How we use your information

General - applicable to all sources of information

We primarily use your information, including personal information, to provide our services to you and to fulfill your requests. In certain circumstances, such as for advertising purposes, we combine your information with other information that we have about you, that is publicly available and/or that we have obtained from third parties (either individually or in the aggregate). We also use your information for the following purposes:

For flight information/wireless services. You may register for receipt of flight information and other wireless services by indicating your preference to receive this information by providing relevant information or by granting applicable permissions. Participation in these services may be optional.
To improve your user experience. To tailor the content and information that we may send or display to you, such as information about your travel schedule; to offer customized location information, personalized help and instructions; and to otherwise personalize your experiences while using our sites or services.
For operational needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
For marketing and advertising. United uses your information, consistent with applicable law, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising) and to send you news and newsletters. Specifically, we use the information that we collect about you to send you email, direct mail, or telephone communications about offers, including those offered by United, its partners or other third parties, that might be of interest to you. We also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites.
For surveys and promotions. As permitted under applicable law, we offer you the opportunity to participate in a survey or promotion. We use survey results for various purposes, including to enhance our services and sites and to develop improved promotions, and, if you provide your name, we may contact you to discuss your comments. Unless otherwise stated in the promotion or survey, we use the contact information that we collect through promotions for the purpose of notifying the winner. If you win a promotion, we may request additional information (e.g., social security number for income tax purposes depending on the prize).
To improve and maintain our sites and our services. We use your information to improve and maintain our sites and services, respond to user desires and preferences, for research and analytical purposes, such as improving our operations, and for security purposes, including, but not limited to, protecting ourselves and users of our services.
To protect our rights and interests, and the rights and interests of other users of our services.
As otherwise permitted by law.

In addition to the foregoing, specific examples of how we use information derived from the following categories are described below.

MileagePlus

We use information that we collect from our MileagePlus members to enroll you in the MileagePlus program; to provide mileage credit for program-related purchases and activities, including but not limited to MileagePlus partners; to communicate with you on the status of your MileagePlus account; to notify you of any special promotions for which you might be eligible; to pre-fill certain data fields so you do not need to enter the same information multiple times; perform the requested services (e.g., booking); to process your transactions (including billing); to notify you about flight information (including but not limited to reservation confirmation, flight or seat changes, boarding time(s), and available ancillary services).

We may use your information, consistent with applicable law, for marketing purposes, including sending emails or direct mail offers on services or products, including products and services offered by United as well as those offered by third parties, which may be of interest to you. You can opt -out of marketing at any time, and if you have a MileagePlus account, you may control certain marketing practices through your MileagePlus account as described below.

Children

We do not knowingly use information we collect about children known to be under the age of 16 for any marketing or promotional purposes, nor do we permit our affiliates, third-party sponsors or other third parties with whom we may share information to do so. We use the information collected about children known to be under 16 only to provide services. We will give out personal information about children if required by law, for example to comply with a court order or subpoena, or to protect the safety and security of visitors and our sites.

Information collected from our mobile application(s)

In addition to the uses of your information described above, if you use our mobile applications, we use your information to send push notifications (after requesting your permission to do so), such as updates on flights, gate changes and offers or other information, to your mobile device.

If you permit us to collect your geo-location information, then we may provide you with location-based tools, such as airport/map views, city code search, and United Club locations or parking spaces, or send you travel notices specific to your location. In addition, for certain mobile applications, we may use geo-location tracking, subject to your granting United permission, to provide you with other services and information, such as identifying nearby retailer locations and/or to present you with offers which may be of interest to you, to facilitate your services and/or purchases through the application and to tally your miles and credit your account. Geo-location information may also be used to protect United’s interests.

You may withdraw your permission or opt out of geo-location tracking. Please consult your chosen mobile device manufacturer for information on setting your location-tracking features.

We promote our sites via Internet advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and United may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures and protecting United’s interests. You may opt out of the collection of such information by uninstalling the mobile application(s). Once the mobile application(s) has been uninstalled, all information stored in the application will be deleted, including any preferences you previously set or enabled.

The legal bases for using your personal information

We collect, use, and share your personal information where we are satisfied that we have an appropriate legal basis to do this. This may be because:

Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to our products and services and to provide you with information you request); you have a right to object to processing as explained in the section below titled Your legal rights;
Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to make travel reservations in the performance of our services); and/or
Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).

If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.

Disclosing your information

United may disclose your personal information to the following persons/entities:

Affiliates. We may disclose information we collect from you to our affiliates or subsidiaries. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
Service providers. We may share your information with third parties that assist us and perform functions on our behalf. These entities may include technical support, website hosting, service/order fulfillment, customer service and credit card processing, among others. In some cases third-party service providers, such as information technology and data processing vendors, data storage services, etc., may be located outside the United States and your personal information may be processed or stored in other countries; please see the section on Cross-border transfers of information below. We also use third parties to assist us in determining and placing relevant advertising.
Non-affiliated third parties. We may also share your information with third parties as necessary to complete your transaction or fulfill your requests. Consistent with applicable law, United may also share your information with third parties for marketing purposes including but not limited to the third-party’s own marketing or promotional purposes or other companies’ marketing purposes in order for them to present you with offers on services or products that may be of interest to you. We may share your information with contracted corporate customers as part of our management of agreements we have with them.
Marketing partners. If we jointly offer a product or service with a different entity, we will share your information with that entity to assist in marketing and providing that product or service. These entities may include, but are not limited to: airlines, car rental agencies, hotels and travel agencies. Consistent with applicable law, we may also share your information with our partners for their own marketing purposes.
Research and analytics. We may use and disclose your information for research and analytics purposes.
Aggregate information. Aggregate information, such as demographic information, domain names, other site traffic information, etc., may at times be shared with United partners or other third parties. Examples of aggregate information are X% of eligible tickets purchased are eTickets; X% of subscribers use a mobile application, etc.
Law enforcement/Legal processes/other uses. United may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental or law enforcement authority; to protect the rights or property of United, its customers, its sites or site users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable. In certain circumstances, United’s third-party service providers may be required to disclose information to government or law enforcement authorities. Security, health and customs and immigration laws in the U.S. and many other countries require all airlines, including United, to provide border control agencies or other governmental authorities with passenger data. In order to comply with these laws we may disclose information about you and your travel arrangements to such authorities.
Business transactions. If United is or may be acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.
Additional notice for users of certain mobile websites. You may make purchases using MileagePlus award miles through certain mobile websites. If you choose to use these sites, then United will receive information from the third-party about your purchase and will exchange information with the third-party to facilitate the transaction and the use of miles from your account.

Peru third parties:

Peru third parties
Category	Recipient	Address	Purpose	Data transferred	Retention
Baggage services	Maleteria	Av. Aviación 3197 San Borja.	Luggage Repair	Name, surname and address of the passenger	Until the end of the service and/or its billing
Baggage services	Servbag	Jr. Tampacacha 427, Independencia	Transportation/Delivery of delayed luggage	Name, surname and address of the passenger	Until the end of the service and/or its billing
Catering services	Gate Gourmet	Aeropuerto internacional Jorge Chávez s/n Callao	List of special meals requested	Name and surname of the passenger	Until the end of the service and/or its billing
Lodging Services	Hotel Holiday Inn	Av. Tomas Valle s/n Callao	List of passengers in case of irregular operations	Name and surname of the passenger	Until the end of the service and/or its billing
Lodging Services	Hotel Kingdom	Av. Arenales 1798, Lince	List of passengers in case of irregular operations	Name and surname of the passenger	Until the end of the service and/or its billing
Lodging Services	Hotel sheraton	Av. Paseo de la Republica 170, Lima	List of passengers in case of irregular operations	Name and surname of the passenger	Until the end of the service and/or its billing
Lodging Services	Novotel	Av. Victor Andrés Belaunde 198, San Isidro	List of passengers in case of irregular operations	Name and surname of the passenger	Until the end of the service and/or its billing
Other airport services	Salon Sumaq	Aeropuerto internacional Jorge Chávez s/n Callao	Access to the VIP lounge for first class/business class passengers	Name and surname of the passenger	Until the end of the service and/or its billing
Other airport services	Talma - Wlchr	Aeropuerto internacional Jorge Chávez s/n Callao	Wheelchair service for passengers	Name and surname of the passenger	Until the end of the service and/or its billing
Other services	First class	Jr. Oscar Barrenechea mz C San Martin	Transportation service for passengers during irregular operations	Name, surname and address of the passenger	Until the end of the service and/or its billing
Other services	Taxi directo	Aeropuerto internacional Jorge Chávez s/n Callao	Transportation service for passengers during irregular operations	Name and surname of the passenger	Until the end of the service and/or its billing
Security services	Longport security	Aeropuerto internacional Jorge Chávez s/n Callao	List of passengers selected for additional inspections and list of checked baggage	Name and surname of the passenger	Until the end of the service and/or its billing

Use of cookies, web beacons and other similar technologies

United and our third-party service providers collect information by using technologies and methodologies, such as "cookies", tags, web beacons or other similar technologies that enable tracking as you browse our sites. We use these technologies to authenticate you as a user, to remember your preferences for using the site, to present offers that may be of interest and to facilitate transactions, such as flight searches and purchases. We and our third-party service providers also use these tools to analyze use of our sites and our services. We may use this information in the aggregate or combine it with information that we have already collected about you.

Cookie. "Cookies" are small bits of information that are stored on your computer by your web browser. Web beacons or “pixel tags” are small strings of code placed on a web page or in an email message for the purpose of transferring information. Cookies and the other technologies discussed in this section allow us to recognize your preference information, to track your transactions and to facilitate effective website administration.

Cookies help establish a user session and allow our server to provide site users with the appropriate information, advertisements and services. We also use cookies to ensure you obtain the information you request, to authenticate your authority to access the site and to track the usage of our websites in order to improve the site(s) according to our customers’ needs. If you are a registered user on our site and you elect to have the site store your MileagePlus number, the cookie stored on your computer will contain your MileagePlus number.

If you do not want your information to be collected through cookies, you can change the preferences in your particular Internet browser. Some website functionality may not work properly if your browser does not accept cookies. Specifically, if you choose not to accept our cookies and are a registered user, you will not have access to your information, such as your user profile, itineraries, award travel, upgrades and MileagePlus summary information, on this site. Although you cannot log into the site as a registered user if you disable our cookies, you can still purchase on the site by logging in as a “Guest”. Please consult your chosen Internet browser for instructions on how to change your cookie settings.

Local storage objects. We may use Flash Local Storage Objects ("Flash LSOs") to store your preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose “Global Storage Settings Panel“ and follow the instructions. To see the Flash LSOs currently on your computer, choose “Website Storage Settings Panel“ and follow the instructions to review and, if you want, to delete any specific Flash LSO.

Clear GIFs, pixel tags and other technologies. These technologies allow us to recognize your preference information, keep track of your transactions and facilitate effective website administration. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We and our third-party service providers may use clear GIFs (also known as web beacons, web bugs or pixel tags), in connection with our sites and services to, among other things, track the activities of visitors, help us manage content and compile statistics about usage. We and our third-party service providers may also use clear GIFs in HTML emails sent to you to help us track email response rates, identify when our emails are viewed and track whether our emails are forwarded.

Targeted advertising

We and our third-party service providers, including ad networks, use the information that we collect about you to serve advertisements to you on various channels, including, but not limited to, United and third-party websites, United and third-party mobile apps and other mediums that may include social networks and television. We and our third-party service providers may collect the data that we use to determine relevant advertising from the following sources: data collected about you online and through your use of our mobile apps, whether collected directly or automatically through cookies, web beacons and other technologies, including technologies designed to collect data through mobile apps, third-party sites (e.g., engagement with social media when publicly available), and offline, including, but not limited to, data combined or appended from various sources. These advertisements may be about United products and services or products and services of third parties that we think might be of interest to you. United and our third-party service providers may use cookies and web beacons when working with these companies to provide them information regarding your use of the site (whether individually or in the aggregate) to assist them in determining relevant advertising.

In addition, some third-party advertising technology used by United to deliver advertisements may use separate cookies and other tracking technologies. This technology may be delivered via visits to our website, email messages, apps or otherwise. Web beacons on some pages of our site, in conjunction with these advertising cookies and our other cookies, enable the third-party advertising technology to better understand onsite activity in the aggregate, to recognize a browser's cookie when a browser visits this website, other websites or apps, and to learn which advertisements bring users to our site or our apps or otherwise take action.

third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third-party's specific privacy policy, and not this Privacy Policy.

third-party ad networks may be members of either the Network Advertising Initiative (“NAI”) or About Ads-Digital Advertising Alliance (“DAI”). If they are members and you do not want to receive targeted advertisements from these third-party ad networks, you may opt out. Information as to member companies, the practices of such third-party ad networks and your choices regarding having information used by these companies, including how to opt out, can be found at either: http://www.networkadvertising.org/optout_nonppii.asp for NAI members or http://www.aboutads.info/choices/ for DAI members. Information on how to opt out of the use of your information by DoubleClick is available at http://www.google.com/policies/technologies/ads/ and information on how to opt out of Google Analytics is available at https://tools.google.com/dlpage/gaoptout.

Opting out of one or more NAI or DAI members means that only those particular members will no longer deliver targeted content or ads to you. It does not mean you will no longer receive any targeted content or ads on our websites or other non-United websites. If your browser is configured to reject cookies when you visit one of the above referenced opt-out pages and then you erase your cookies, use a different computer or change web browsers, your NAI or DAI opt-out may no longer be active.

Third-party analytics

We also use automated devices and applications, such as Google Analytics, to evaluate the use of our websites and apps and the services we provide. We use these tools to gather information about users to help us improve our services, performance and user experiences. These analytics providers may use cookies and other technologies to perform their services, and may combine the information that they collect about you on our websites with other information that they have collected. This Policy does not cover such third parties’ use of the data.

Your legal rights

Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal information:

Right to access, correct, and delete your personal information: Please ensure that you tell us about changes in personal information (e.g., change of address, redress number) so that ensure that your information is up to date. You have the right to request access to the personal information that we hold about you and: (a) the source of your personal information; (b) the purposes, legal basis and methods of processing; (c) the data controller’s identity; and (d) the entities or categories of entities to whom your personal information may be transferred. If you are a MileagePlus member, you can create, view or update your MileagePlus account by accessing it through the MileagePlus profile section on united.com or by calling +1-800-421-4655. You may also update information relevant to your use of our mobile application(s) through the app itself. You also have the right to request that we delete your information. We are not required to comply with your request to erase personal information if the processing of your personal information is necessary for compliance with a legal obligation or for the establishment, exercise, or deference of legal claims.

Right to restrict the processing of your personal information: You have the right to restrict the use of your personal information when (i) you contest the accuracy of the data; (ii) the use is unlawful but you do not want us to erase the data; (iii) we no longer need the personal information for the relevant purposes, but we require it for the establishment, exercise, or defense of legal claims; or (iv) you have objected to our personal information use justified on our legitimate interests verification as to whether we have a compelling interest to continue to use your data. We can continue to use your personal information following a request for restriction, where: we have your consent; or to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.

Right to data portability: To the extent that we process your information (i) based on your consent or under a contract; and (ii) through automated means, you have the right to receive such personal information in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller.

Right to object to the processing of your personal information: You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.

Right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction: You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the Peru.

Right to lodge a complaint with your local supervisory authority: You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your personal information. We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.

How to exercise your rights: If you would like to exercise any of the rights described above, please send us a request via privacy@united.com. In your message, please indicate the right you would like to exercise. We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal information requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

Protecting information collected

United maintains physical, electronic and procedural safeguards to protect your information. When you place orders online to purchase services or access your MileagePlus account information, we use secure servers to protect your personal information, which is intended to encrypt the personal information that is transmitted between you and our sites. Although United takes reasonable steps to safeguard and to prevent unauthorized access to your personal information, it cannot be responsible for the acts of those who gain unauthorized access and United makes no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.

If a third-party, including but not limited to a family member, friend, co-worker or corporate travel desk, seeks to transact business with United on your behalf, that party will be asked to provide us with the same personal information we would collect directly from you to complete your transaction. Unless and until we are advised otherwise, we consider that such third-party has an appropriate legal basis to provide us with your personal information and make such transactions, including any subsequent changes, on your behalf in accordance with this Privacy Policy. If such third-party who has your full name and booking reference contacts us and seeks information on your booking or requests changes to it, we will disclose your booking information and allow such third-party to make changes as we will conclude that third-party has an appropriate legal basis to do so. Please note that the collection, use and disclosure of your personal information by a third-party is subject to your dealings with them and, if applicable, any of their privacy policies and practices. If you do not want an individual to obtain information on or make changes to your booking, you should not share your booking reference with them.

Your role in protecting your information

To protect your privacy and United's proprietary databases and systems, you should not share any of your information, such as MileagePlus number or password, with any unauthorized individuals or third-party information aggregators that would allow them access to your sensitive account information. For more information, see our PIN/Password Frequently Asked Questions page. You should also take all necessary steps to secure your mobile devices and protect information you may have stored on them. We do not have control over the security of your mobile device. United assumes no responsibility for the loss of information associated with security disrupting technologies, including but not limited to reverse engineering of mobile device applications or malware, that compromise the United mobile application(s) as a result of owner or third-party initiated changes to the mobile device. The security of that mobile device is the responsibility of its owner, not United.

Opting out

MileagePlus members can opt out of receiving marketing or promotion-related emails or direct mail from United by accessing their account profile information on the United website and changing their profile to indicate their desire to be excluded. In addition, members can contact the MileagePlus Service Center by phone or in writing and request a profile change. Emails sent to members will contain a message and link on how to opt out of that type of communication in the future. Regardless of your opt-out preferences, we reserve the right to send you emails or other communications for administrative purposes.

Location of your information/Data transfer/Notice to non-US persons

United will transfer, store, and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. By submitting any personal information or by using the website and without limitation to any other rights or obligations we have, you acknowledge such transfer to, and processing in, the United States and these other countries, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions.

Other sites/digital channels

Our sites and our online services may contain links to third-party sites. Any access to and use of such linked sites is not governed by this Policy but instead is governed by the privacy policies of those third-party sites. We are not responsible for the information practices of such third-party sites.

Contact us

If you have comments or questions about this Privacy Policy, please contact privacy@united.com.

If you have comments or questions about the privacy practices of MIPA, please contact MileagePlusPrivacy@united.com. Where your personal information is held by MIPA you may have various rights under the DPL, and may also have a right to lodge a complaint with the Cayman Islands Ombudsman.

Legal effect and changes to the policy

As previously stated, this Privacy Policy is not a contract nor does it otherwise create any legal rights or obligations in addition to those provided under applicable data protection laws. Rather, this Privacy Policy merely reflects guidelines setting forth United’s intended business practices. By using any United digital channel, and/or by providing any information to United online or offline, you acknowledge the collection and use of such information by United, its affiliates, partners, contractors and permitted agents as herein described and consistent with applicable laws. Also, United, in its discretion, may amend, interpret, modify or withdraw any portion of this Privacy Policy and related business practices at any time by posting updated text on this site, and your continued use of our digital channels or offline outlets constitutes your acknowledgement of those changes. This Policy was last updated on March 12, 2021.

-
Your privacy is important to us
This Notice discloses United’s privacy practices for your information collected online or offline.
This Notice is not a contract and does not create any legal rights or obligations. Rather, the following is designed to notify you about how United protects your information and your rights under applicable data protection laws. By using any of our sites and/or our services or otherwise providing us with any information, you acknowledge the handling of your information as described in this Notice. Additional information about the practices set forth in this Notice can be found in our full Privacy Policy.
Scope of this policy
This Notice applies to the United websites/apps on which it is posted and to data collected offline as follows:
- On United-managed websites and mobile websites, including, for example, united.com, mileageplus.com, mobile.united.com, hub.united.com;
- Through United-managed mobile applications, such as the United App;
- Offline, including, for example, through a United Customer Contact Center agent or other travel agent.
This Notice does not apply to the following United sites or services:
- United Cargo transactions, including but not limited to, those conducted on unitedcargo.com;
- United Wi-Fi^SM service portal;
- United Club^SM locations’ Wi-Fi service; or
- United’s Technical Operations website.
This Notice does not apply to any website not owned and managed by United, including but not limited to, United Vacations, United Cruises, MileagePlus Shopping, Orbitz, Travelocity, Expedia or any other third-party site.
Information we collect about you
United collects and maintains personal information about you directly from you (both online and offline) and automatically when you use our sites and third party sites, including when you make travel arrangements, contact us, complete a survey, register for the MileagePlus program, participate in a promotion, or otherwise interact with us.
The type of information we collect about you depends on your particular interaction with us, and includes the following information, as applicable:
- Name;
- Contact information;
- MileagePlus number and security information;
- Gender and date of birth;
- Payment information (e.g., credit card information);
- Passport information and photograph;
- Government ID or redress number;
- Images;
- Travel preferences and special requests;
- Purchase information (including both travel and non-travel purchases);
- User and activity data from our websites and mobile applications;
- Survey responses; and
- Tax identification number of promotion or survey winner, depending on the value of the prize.
How we use your information
We use your personal information:
- To provide our services
- In response to your requests
- For flight information/wireless services.
- To improve your user experience.
- For operational needs and providing services.
- For marketing and advertising.
- For surveys and promotions.
- To improve and maintain our sites and our services.
- To protect our rights and interests, and the rights and interests of other users of our services.
- As permitted by law.
We collect, use and share your personal information where we are satisfied that we have an appropriate legal basis to do this.
Disclosing your information
United discloses your personal information to the following persons/entities:
- Affiliates. We disclose your information to our affiliates or subsidiaries. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
- Service providers. We share your information with third parties that assist us and perform functions on our behalf.
- Non-affiliated third parties. We share your information with third parties as necessary to complete your transaction or fulfill your requests. Consistent with applicable law, United may also share your information with third parties for marketing purposes including but not limited to the third party’s own marketing or promotional purposes or other companies’ marketing purposes in order for them to present you with offers on services or products that may be of interest to you.
- Marketing partners. If we jointly offer a product or service with a different entity, we will share your information with that entity to assist in marketing and providing that product or service. Consistent with applicable law, we may also share your information with our partners for their own marketing purposes
- Research and analytics. We may use and disclose your information for research and analytics purposes.
- Aggregate information. Aggregate information, such as demographic information, domain names, other site traffic information, etc., may at times be shared with United partners or other third parties.
- Law enforcement/Legal processes/other uses. United may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental or law enforcement authority; to protect the rights or property of United, its customers, its sites or site users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable.
- Business transactions. If United is or may be acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.
- Additional notice for users of certain mobile websites. You may make purchases using MileagePlus award miles through certain mobile websites. If you choose to use these sites, then United will receive information from the third party about your purchase and will exchange information with the third party to facilitate the transaction and the use of miles from your account.
Data transfers
United will transfer, store, and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. Where personal information that we collect is transferred to and processed in the United States or anywhere else outside the European Economic Area (EEA) for the purposes described in this policy, we will take steps to ensure that the information receives the same level of protection as if it remained within the EEA, including entering into data transfer agreements, using the EU Commission approved Standard Contractual Clauses, or by relying on certification schemes such as the EU - US Privacy Shield. You may have a right to details of the mechanisms under which your data is transferred outside the EEA.
Protecting information collected
United maintains physical, electronic and procedural safeguards designed to protect your information. Although United takes reasonable steps to safeguard and to prevent unauthorized access to your personal information, it cannot be responsible for the acts of those who gain unauthorized access and United makes no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.
Choices, access, and correction of information
Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal information. These rights may include the right to:
- access personal information
- rectify / erase personal information
- restrict the processing of your personal information
- transfer your personal information
- object to the processing of personal information
- object to how we use your personal information for direct marketing purposes
- obtain a copy of personal information safeguards used for transfers outside your jurisdiction
- lodge a complaint with your local supervisory authority
You can exercise your rights by contacting us. Subject to legal and other permissible considerations, we will make reasonable efforts to honor your request promptly or inform you if we require further information in order to fulfil your request.
Contact us
If you have comments or questions about this Privacy Policy, please submit your inquiry to United Customer Care. Please reference this Privacy Policy in those communications.
Changes to the Privacy Policy
United, in its discretion, may amend, interpret, modify or withdraw any portion of this Privacy Policy and related business practices at any time by posting updated text on this site, and your continued use of our digital channels or offline outlets constitutes your acknowledgement of those changes.
Your privacy is important to us
United Airlines respects your privacy. This Privacy Policy discloses United’s privacy practices for your information collected online or offline. We address the following topics:
While United strives to take reasonable measures to protect your information, this Privacy Policy is not a contract and does not create any legal rights or obligations. Rather, the following are guidelines for protecting your information and, depending on your jurisdiction, describing your rights under applicable data protection laws. By using any of our sites and/or our services or otherwise providing us with any information, you acknowledge the handling of your information as described in this Privacy Policy.
Scope of this policy
This Privacy Policy applies to the information that we collect about you on any United website in which it is posted, which include the following situations:
- On United-managed websites and mobile websites, such as united.com, mileageplus.com, mobile.united.com, hub.united.com;
- Through United-managed mobile applications, such as the United App;
- Offline, through a United Customer Contact Center agent or other travel agent.
The information we collect is controlled by United Airlines, Inc., which is headquartered in the United States at 233 S. Wacker Drive, Chicago, Illinois 60606.
This Privacy Policy does not apply to the following United sites or services:
- United Cargo transactions;
- United Wi-FiSM service portal;
- United ClubSM locations’ Wi-Fi service; or
- United’s Technical Operations website.
In addition, this Privacy Policy does not apply to any website not owned and managed by United or any other third-party site.
With respect to the above, please see those respective sites for the privacy policies that may apply.
Information we collect about you
United collects and maintains information, including personal information, about you directly from you (both online and offline) and automatically when you use our sites and third-party sites. We collect information from you when you make travel arrangements, contact us, complete a survey, register for the MileagePlus program, participate in a promotion, or otherwise interact with us. The type of information we collect about you depends on your particular interaction with us, and includes the following information:
- Name;
- Contact information;
- MileagePlus number and security information;
- Gender and date of birth;
- Payment information;
- Passport information and photograph;
- Government ID or redress number;
- Images;
- Travel preferences and special requests;
- Purchase information (both travel and non-travel purchases);
- User and activity data from our websites and mobile applications;
- Survey responses; and
- Tax identification number of promotion or survey winner, depending on the value of the prize.
Payment information, passport information and photograph, and government ID may be defined as “sensitive” under certain data protection laws. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
Information we collect directly from you
Based on your interaction with us, we collect information directly from you as described below.
MileagePlus information
When you enroll in MileagePlus, or if you are already a MileagePlus member, we collect information such as your name, address, phone number(s), email address, MileagePlus account number, and password or other account security authentication information. If you create a traveler profile, we also will collect the information that you choose to provide to us. You have the option of providing us with payment information, telephone numbers, email addresses, general requests or special needs, travel preferences and loyalty program information.
Online purchases
If you make a purchase with us, whether as a MileagePlus member or as a “Guest”, we collect traveler information, travel and contact preferences, and payment information.
Offline purchases: Telephone, travel agent or ticket counter
To make a purchase or transact other business with a United Customer Contact Center agent, a travel agent, or a customer service representative (collectively, “Reservations Agents”), Reservations Agents collect traveler information, travel and contact preferences, and payment information. We may monitor and/or record telephone calls to Reservations Agents. By continuing with the call, you are deemed to consent to such monitoring and/or recording.
United Club
United may collect information such as name, addresses, email addresses, telephone numbers, and credit card information, in order to provide service to members of its United Club.
In flight
United may collect credit card and MileagePlus information in flight to enable present and/or future purchases.
Children
Due to the nature of our services, United will collect and maintain travel information, about children under the age of 13 when necessary to comply with federal aviation or security regulations, for safety or security reasons, or as otherwise necessary for United to provide transportation or other services requested.
Information we collect automatically
We and our service providers automatically collect information about your use of our sites through cookies, web beacons, log files and other technologies. Such information includes the following:
- Domain name;
- Browser type and operating system;
- IP address;
- Web pages you view;
- Links you click;
- Length of time of your visit;
- Your activities on our sites and your movement through these sites; and
- Referring URL or webpage that led you to our sites.
We and our service providers may combine this information with information that we (or they) already have collected about you. For more information, refer to the Use of cookies, web beacons and other similar technologies section below.
Information we collect through our mobile application(s)
We collect information directly from you when you use our mobile application(s), which varies based on your interaction with our mobile applications, but may include, for example, name, email address, MileagePlus account information, government ID or passenger redress number, passport information and/or photograph, date of birth, and payment information (e.g., credit card number, expiration date and billing name and address), if not already provided.
We may store your information to facilitate your travel (e.g. reservation, specific flight information) or purchase needs. The mobile application(s) may also store user-provided data, unless you choose to delete it, for as long as you use the related feature of the application. Information provided for traveler data, security clearance, purchases and related activities will be stored in our operational systems, as needed, to provide services you request. If such information is stored in your MileagePlus account, it will not be accessible if your MileagePlus account is closed.
We also collect information automatically through your use of our mobile application(s) (using cookies, beacons or other tracking technologies designed for mobile applications). Information collected in your use of our mobile application(s) includes, but is not limited to:
- With your consent, your pinpointed physical location information from technologies like GPS, Wi-Fi, or cell tower proximity (geo-location tracking)
- With your consent, while at or near certain airports in the U.S., your pinpointed physical location will be tracked continuously to provide you location-based offers, services and other information. For more information, see the Location Services FAQ located on the side menu of the United App.
- Your domain name
- Device ID or alternative ID where required by the platform provider
- Electronic data concerning operating systems and computing devices/browser, including the type of operating system or computing device
- Features you use and links you click
- Amount of time spent in the application
- Installs and uninstalls
- Transaction details and history
We may combine this information with information that we already have collected about you.
Information we collect from third parties
We collect information about you from third parties. If you make a reservation through a travel agent, we will obtain your travel information from that agent. We may also obtain information about you from our marketing partners, advertisers and other third parties.
Sensitive information we collect directly from you
In certain situations, we collect information that is defined as “sensitive” under certain data protection laws. If a medical or other emergency occurs while traveling with United, we collect relevant information and may provide such information to non-United medical or other safety personnel as necessary or advisable. We also provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such a request and/or provide such information, we collect information in order to provide reasonable accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time. By providing sensitive information to us, you consent to us processing it in accordance with this Privacy Policy.
How we use your information
General - applicable to all sources of information
We primarily use your information, including personal information, to provide our services to you and to fulfill your requests. In certain circumstances, such as for advertising purposes, we combine your information with other information that we have about you, that is publicly available and/or that we have obtained from third parties (either individually or in the aggregate). We also use your information for the following purposes:
- For flight information/wireless services. You may register for receipt of flight information and other wireless services by indicating your preference to receive this information by providing relevant information or by granting applicable permissions. Participation in these services may be optional.
- To improve your user experience. To tailor the content and information that we may send or display to you, such as information about your travel schedule; to offer customized location information, personalized help and instructions; and to otherwise personalize your experiences while using our sites or services.
- For operational needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
- For marketing and advertising. United uses your information, consistent with applicable law, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising) and to send you news and newsletters. Specifically, information that we collect about you may be used to send you email, direct mail, or telephone communications about offers from United, its partners or other third parties, that might be of interest to you (please see the section on Disclosing your information below and the section on Changing your marketing preferences below). We also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites.
- For surveys and promotions. As permitted under applicable law, we offer you the opportunity to participate in a survey or promotion. We use survey results for various purposes, including to enhance our services and sites and to develop improved promotions, and, if you provide your name, we may contact you to discuss your comments. Unless otherwise stated in the promotion or survey, we use the contact information that we collect through promotions for the purpose of notifying the winner. If you win a promotion, we may request additional information.
- To improve and maintain our sites and our services. We use your information to improve and maintain our sites and services, respond to user desires and preferences, for research and analytical purposes, such as improving our operations, for security purposes, and for protecting ourselves and users of our services.
- To protect our rights and interests, and the rights and interests of other users of our services.
- As permitted by law.
In addition to the foregoing, specific examples of how we use information derived from the following categories are described below.
MileagePlus
We use information that we collect from our MileagePlus members to enroll you in the MileagePlus program; to provide mileage credit for program-related purchases and activities related to United, MileagePlus partners and other third parties (please see the section on Disclosing your information below); to communicate with you on the status of your MileagePlus account; to notify you of any special promotions for which you might be eligible; to pre-fill certain data fields so you do not need to enter the same information multiple times; perform the requested services; to process your transactions (including billing); to notify you about flight information, reservation confirmation, flight or seat changes, boarding time(s), and available ancillary services.
We may use the information that we collect about you to send you email, direct mail, or telephone communications about offers from United, our partners or other entities, that might be of interest to you. As discussed in the section regarding Disclosing your information, consistent with applicable law, we also may disclose your information to our partners and other entities for their own marketing purposes.
Children
We do not knowingly use information we collect about children known to be under the age of 16 for any marketing or promotional purposeYou may change your push notification preferences and/or geo-location tracking preferences at any time through your mobile device settings.
We may promote our sites via Internet advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and United may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures, and protecting United’s interests. You may opt out of the collection of such information by uninstalling the mobile application(s). Once the mobile application(s) has been uninstalled, all information stored in the application will be deleted, including any preferences you previously set or enabled.
Disclosing your information
United may transmit or transfer, as applicable, your personal information to the following persons/entities. Unless otherwise noted, these entities act as our processors and are not independent controllers of your information:
- Affiliates. We may disclose information we collect from you to our affiliates or subsidiaries, which may act as a co-controller of your information. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
- Service providers/Data processors. We may share your information with service providers that assist us and perform functions on our behalf. In some cases service providers, such as information technology and data processing vendors, data storage services, etc., may be located outside the United States and your personal information may be processed or stored in other countries (please see the section on Location of your information below). We also use service providers to assist us in determining and placing relevant advertising.
- Non-affiliated third parties. We may transfer your information to the following third parties as necessary to complete your transaction, fulfill your requests, and for their own marketing purposes, as permitted by law: airlines, car rental agencies, hotels, travel agencies, baggage services entities, other travel services or ticketing entities, and other entities involved in travel reservations or ticketing; governmental or law enforcement authorities or border control agencies; partners with whom we jointly offer a product or service; entities with whom you purchase or redeem miles; corporate customers as part of our management of agreements we have with them. In some circumstances, these entities also act as controllers of your information. Specifically, we may also transfer your information to the following third parties: commercial partners for marketing or sale of our products or services or marketing or sale of their own products or services; financial companies for them to offer you their products or services or a co-branded card, including Banorte. You consent to this transfer unless you advise us to the contrary by contacting privacy@united.com.
- Research and analytics. We may use and disclose your information for research and analytics purposes.
- Aggregate information. Aggregate information, such as demographic information, domain names, other site traffic information, etc., may at times be transferred with United partners or other third parties. Examples of aggregate information are X% of eligible tickets purchased are eTickets; X% of subscribers use a mobile application, etc.
- Law enforcement/Legal processes/other uses. United may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental or law enforcement authority; to protect the rights or property of United, its customers, its sites or site users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable. In certain circumstances, United’s service providers may be required to disclose information to government or law enforcement authorities. Security, health and customs and immigration laws in the U.S. and many other countries require all airlines, including United, to provide border control agencies or other governmental authorities with passenger data. In order to comply with these laws we may disclose information about you and your travel arrangements to such authorities.
- Business transactions. If United is or may be acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.
- Additional notice for users of certain mobile websites. You may make purchases using MileagePlus award miles through certain mobile websites. If you choose to use these sites, then United will receive information from the third party about your purchase and will exchange information with the third party to facilitate the transaction and the use of miles from your account.
Use of cookies, web beacons and other similar technologies
United and our service providers collect information by using technologies and methodologies, such as "cookies", tags, web beacons or other similar technologies that enable tracking as you browse our sites. We use these technologies to authenticate you as a user, to remember your preferences for using the site, to present offers that may be of interest and to facilitate transactions, such as flight searches and purchases. We and our service providers also use these tools to analyze use of our sites and our services. We may use this information in the aggregate or combine it with information that we have already collected about you.
Cookie. "Cookies" are small bits of information that are stored on your computer by your web browser. Web beacons or “pixel tags” are small strings of code placed on a web page or in an email message for the purpose of transferring information. Cookies and the other technologies discussed in this section allow us to recognize your preference information, to track your transactions and to facilitate effective website administration.
Cookies help establish a user session and allow our server to provide site users with the appropriate information, advertisements and services. We also use cookies to ensure you obtain the information you request, to authenticate your authority to access the site and to track the usage of our websites in order to improve the site(s) according to our customers’ needs. If you are a registered user on our site and you elect to have the site store your MileagePlus number, the cookie stored on your computer will contain your MileagePlus number.
If you do not want your information to be collected through cookies, you can change the preferences in your particular Internet browser. Some website functionality may not work properly if your browser does not accept cookies. Specifically, if you choose not to accept our cookies and are a registered user, you will not have access to your information, such as your user profile, itineraries, award travel, upgrades and MileagePlus summary information, on this site. Although you cannot log into the site as a registered user if you disable our cookies, you can still purchase on the site by logging in as a “Guest”. Please consult your chosen Internet browser for instructions on how to change your cookie settings.
Local storage objects. We may use Flash Local Storage Objects ("Flash LSOs") to store your preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose “Global Storage Settings Panel“ and follow the instructions. To see the Flash LSOs currently on your computer, choose “Website Storage Settings Panel“ and follow the insts, nor do we permit our affiliates, third-party sponsors or other third parties with whom we may share information to do so. We use the information collected about children known to be under 16 only to provide services. We will give out personal information about children if required by law, to comply with a court order or subpoena, or to protect the safety and security of visitors and our sites.
Information collected from our mobile application(s)
In addition to the uses of your information described above, if you have allowed us to send you push notifications, we may provide you updates on flights or gate changes, or to offer services and other information. If you do not permit us to send you push notifications, we may still provide such updates through the message center in the mobile application.
If you have allowed us to collect and use your geo-location information, we may provide you location-based offers, services and other information, such as airport maps to help you locate your gate, United Club locations and nearby retailer locations, offers related to United and our marketing partners which may be of interest to you, and personalized assistance. The type of communications that you receive from us may depend on your location; not all features are available at all locations. Geo-location information may also be used to protect United’s interests.
You may change your push notification preferences and/or geo-location tracking preferences at any time through your mobile device settings.
We may promote our sites via Internet advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and United may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures, and protecting United’s interests. You may opt out of the collection of such information by uninstalling the mobile application(s). Once the mobile application(s) has been uninstalled, all information stored in the application will be deleted, including any preferences you previously set or enabled.
Targeted advertising
We and our service providers use the information that we collect about you to serve advertisements to you on various channels, United and other websites, United and third-party mobile apps and other mediums, social networks and television. We and our service providers may collect the data that we use to determine relevant advertising from the following sources: data collected about you online and through your use of our mobile apps, whether collected directly or automatically through cookies, web beacons and other technologies designed to collect data through mobile apps, third-party sites and engagement with social media when publicly available, and offline. Such data combined or appended from various sources. These advertisements may be about United products and services or products and services of third parties that we think might be of interest to you. United and our service providers may use cookies and web beacons when working with these companies to provide them information regarding your use of the site (whether individually or in the aggregate) to assist them in determining relevant advertising.
In addition, some advertising technology used by United to deliver advertisements may use separate cookies and other tracking technologies. This technology may be delivered via visits to our website, email messages, apps or otherwise. Web beacons on some pages of our site, in conjunction with these advertising cookies and our other cookies, enable the advertising technology to better understand onsite activity in the aggregate, to recognize a browser's cookie when a browser visits this website, other websites or apps, and to learn which advertisements bring users to our site or our apps or otherwise take action.
Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons, clear GIFs, Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party's specific privacy policy, and not this Privacy Policy
Third-party ad networks may be members of either the Network Advertising Initiative (“NAI”) or About Ads-Digital Advertising Alliance (“DAI”). If they are members and you do not want to receive targeted advertisements from these third-party ad networks, you may opt out. Information as to member companies, the practices of such third-party ad networks and your choices regarding having information used by these companies and how to opt out, can be found at either: http://www.networkadvertising.org/optout_nonppii.asp for NAI members or http://www.aboutads.info/choices/ for DAI members. Information on how to opt out of the use of your information by DoubleClick is available at http://www.google.com/policies/technologies/ads/ and information on how to opt out of Google Analytics is available at https://tools.google.com/dlpage/gaoptout.
Opting out of one or more NAI or DAI members means that only those particular members will no longer deliver targeted content or ads to you. It does not mean you will no longer receive any targeted content or ads on our websites or other non-United websites. If your browser is configured to reject cookies when you visit one of the above referenced opt-out pages and then you erase your cookies, use a different computer or change web browsers, your NAI or DAI opt-out may no longer be active.
Analytics
We also use automated devices and applications, such as Google Analytics, to evaluate the use of our websites and apps and the services we provide. We use these tools to gather information about users to help us improve our services, performance and user experiences. These analytics providers may use cookies and other technologies to perform their services, and may combine the information that they collect about you on our websites with other information that they have collected. This Privacy Policy does not cover such third parties’ use of the data.
Your legal rights
In terms of applicable law, you have the following rights regarding the personal data we obtain and process from you (“ARCO Rights”):
- Access – You have the right to know what personal data we process, what it is used for and the conditions of use thereof.
- Rectification – You have the right to request the rectification of your personal data in the event that it is inaccurate, incomplete or outdated.
- Cancellation – You have the right to request that your personal data is removed from our databases when you consider that it is not being used properly.
- Opposition – You have the right to oppose the use of your personal data for specific purposes.
If you would like to exercise any of the ARCO Rights, please send a request to privacy@united.com. In your message, please indicate the ARCO right you would like to exercise. We may ask you for additional information to confirm your identity and for security purposes. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Protecting information collected
United maintains physical, administrative, electronic and procedural safeguards to protect your information. When you place orders online to purchase services or access your MileagePlus account information, we use secure servers to protect your personal information, which is intended to encrypt the personal information that is transmitted between you and our sites. Although United takes reasonable steps to safeguard and to prevent unauthorized access to your personal information, it cannot be responsible for the acts of those who gain unauthorized access and United makes no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.
If a third party seeks to transact business with United on your behalf, that party will be asked to provide us with the same personal information we would collect directly from you to complete your transaction. Unless and until we are advised otherwise, we consider that such third party has an appropriate legal basis to provide us with your personal information and make such transactions and any subsequent changes, on your behalf in accordance with this Privacy Policy. If such third party who has your full name and booking reference contacts us and seeks information on your booking or requests changes to it, we will disclose your booking information and allow such third party to make changes as we will conclude that third party has an appropriate legal basis to do so. Please note that the collection, use and disclosure of your personal information by a third party is subject to your dealings with them and, if applicable, any of their privacy policies and practices. If you do not want an individual to obtain information on or make changes to your booking, you should not share your booking reference with them.
Your role in protecting your information
To protect your privacy and United's proprietary databases and systems, you should not share any of your information, such as MileagePlus number or password, with any unauthorized individuals or third-party information aggregators that would allow them access to your sensitive account information. For more information, see our PIN/Password Frequently Asked Questions page. You should also take all necessary steps to secure your mobile devices and protect information you may have stored on them. We do not have control over the security of your mobile device. United assumes no responsibility for the loss of information associated with security disrupting technologies, reverse engineering of mobile device applications or malware, that compromise the United mobile application(s) as a result of owner or third-party initiated changes to the mobile device. The security of that mobile device is the responsibility of its owner, not United.
Changing your marketing preferences
MileagePlus members can opt out of receiving marketing or promotion-related emails, phone calls or direct mail from United by accessing their account profile information on the United website and changing their profile to indicate their desire to be excluded. In addition, members can contact the MileagePlus Service Center by phone or in writing and request a profile change. Emails sent to members will contain a message and link on how to opt out of that type of communication in the future. Regardless of your opt-out preferences, we reserve the right to send you emails or other communications for administrative purposes.
Location of your information/data transfer/notice to non-US persons
United will transfer, store and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. By submitting any personal information or by using the website and without limitation to any other rights or obligations we have, you consent to such transfer to, and processing in, the United States and these other countries, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions.
At this time, our precise geo-location tracking and related offers and services as discussed in this Policy only are available at certain airports in the U.S. Non-U.S. persons who choose to use this service may have certain rights to their personal data as discussed here.
Other sites/digital channels
Our sites and our online services may contain links to third-party sites. Any access to and use of such linked sites is not governed by this Privacy Policy but instead is governed by the privacy policies of those third-party sites. We are not responsible for the information practices of such third-party sites.
Contact us
If you have comments or questions about this Privacy Policy, please submit your inquiry to United Customer Care. Please reference this Privacy Policy in those communications.
Legal effect and changes to the policy
As previously stated, this Privacy Policy is not a contract nor does it otherwise create any legal rights or obligations in addition to those provided under applicable data protection laws. Rather, this Privacy Policy merely reflects guidelines setting forth United’s intended business practices. By using any United digital channel, and/or by providing any information to United online or offline, you acknowledge the collection and use of such information by United, its affiliates, partners, contractors and permitted agents as herein described and consistent with applicable laws. Also, United, in its discretion, may amend, interpret, modify or withdraw any portion of this Privacy Policy and related business practices at any time. United will notify you of changes to this Privacy Policy by posting updated text on this site, and your continued use of our digital channels or offline outlets constitutes your acknowledgement of those changes. A version of this Privacy Policy has been effective since October 15, 2002, and was last updated on November 2, 2018. This Privacy Policy supersedes previous privacy policies posted on united.com and coair.com.
Thank you for taking the time to read this Privacy Policy.
Your privacy is important to us
United Airlines respects your privacy. This Privacy Policy discloses United’s privacy practices for your information collected online or offline. We address the following topics:
While United strives to take reasonable measures to protect your information, this Policy is not a contract and does not create any legal rights or obligations. Rather, the following are guidelines for protecting your information and, depending on your jurisdiction, describing your rights under applicable data protection laws. Except as otherwise described in this policy, by using any of our sites and/or our services or otherwise providing us with any information, you acknowledge the handling of your information as described in this Policy.
Scope of this policy
This Policy applies to the information that we collect about you on any United website in which it is posted, which include the following situations:
- On United-managed websites and mobile websites, including, for example, united.com, mobile.united.com, hub.united.com;
- Through United-managed mobile applications, such as the United App;
- Offline, including, for example, through a United Customer Contact Center agent or other travel agent.
The information we process is controlled by United Airlines, Inc., which is headquartered in the United States at 233 S. Wacker Drive, Chicago, Illinois 60606.
This Policy does not apply to the following United sites or services:
- United Cargo transactions, including but not limited to, those conducted on unitedcargo.com;
- United Wi-Fi^SM service portal;
- United Club^SM locations’ Wi-Fi service; or
- United’s Technical Operations website.
In addition, this Policy does not apply to any website not owned and managed by United, including but not limited to, United Vacations, United Cruises, MileagePlus Shopping, Orbitz, Travelocity, Expedia or any other third-party site.
With respect to the above, please see those respective sites for the privacy policies that may apply.
Information we collect about you
United collects and maintains information, including personal information, about you directly from you (both online and offline) and automatically when you use our sites and third party sites. We collect information from you when you make travel arrangements, contact us, complete a survey, register for the MileagePlus program, participate in a promotion, or otherwise interact with us. The type of information we collect about you depends on your particular interaction with us, and may include, but not limited to, the following information:
- Name;
- Contact information (e.g., address, phone number, email address);
- MileagePlus number and security information;
- Gender and date of birth;
- Payment information (e.g., credit card information);
- Passport information and photograph;
- Government ID or redress number;
- Images and biometric information;
- Travel preferences and special requests;
- Purchase information (both travel and non-travel purchases);
- User and activity data from our websites and mobile applications;
- Survey responses;
- Tax identification number of promotion or survey winner, depending on the value of the prize; and
- Health information.
We keep your information for as long as we deem necessary or relevant to the provision of services offered by United, as permitted by applicable law, as well as to resolve disputes and comply with legal contracts and obligations.
Information we collect directly from you
Examples of the types of information we collect directly from you are described below.
MileagePlus information
When you enroll in MileagePlus, or if you are already a MileagePlus member, we collect specific information such as your name, address, phone number(s), email address, MileagePlus account number, and password or other account security authentication information. If you create a traveler profile, we also will collect the information that you choose to provide to us, which may include but not be limited to: payment information (e.g., credit card information, billing name/address), telephone numbers, email addresses, general requests or special needs, travel preferences and loyalty program information.
In certain situations, we collect information that is defined as “sensitive” under applicable data protection laws. We provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such request and/or provide such information, we collect information in order to provide accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time.
Personal information collected and processed as part of our MileagePlus program is held by Mileage Plus Intellectual Property Assets, Ltd. (“MIPA”), a member of the United group of companies, whose registered office is at Maples Corporate Services Limited, PO Box 309, Ugland House, George Town, Grand Cayman, KY1-1104, Cayman Islands. MIPA will be a data controller in respect of that personal information under the Data Protection Law, 2017 of the Cayman Islands (“DPL”).
Where MIPA is the data controller, it processes MileagePlus personal information where it has an appropriate legal basis. This may be because:
- Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to the MileagePlus program and services and to provide you with information you request);
- Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to fulfill your MileagePlus benefits); and/or
- Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).
If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.
Online purchases
If you make a purchase with us, whether as a MileagePlus member or as a “Guest”, we collect information about you, including but not limited to traveler information (e.g., name, contact information, gender and data of birth, passport information and photograph), payment information (e.g., credit card information, billing name/address, travel preferences and special requests.
Offline purchases: Telephone, travel agent or ticket counter
To make a purchase or transact other business with a United Customer Contact Center agent, a travel agent (including online travel agents outside of United), or a customer service representative (collectively, “Reservations Agents”), Reservations Agents collect data such as payment information, passport information, birth date, name, addresses, email addresses, and telephone numbers. We may monitor and/or record telephone calls to Reservations Agents. By continuing with the call, you are deemed to consent to such monitoring and/or recording.
COVID-19
You may be required to provide information about your health, including (depending on your destination) lack or presence of symptoms related to COVID-19, COVID-19 test results, or COVID-19 vaccine information or information supporting your request for an exemption to a health-related travel requirement. We may offer you the ability to electronically provide such information to us, such as through our Travel-Ready Center or through a digital health pass. We may offer you the ability to request that United collect your information from a third party, such as a digital health app that you have chosen to use. We will use such information to help facilitate, but cannot guarantee, meeting your destination’s requirements, to comply with applicable laws (for example, we may be required to confirm you have necessary travel documentation), and to help ensure health and safety during the travel experience. United is not liable for any assistance or information provided by any employee or agent of United to you relating to such documents or compliance with such laws, or for the consequences to you resulting from failure to obtain and present such documents, which shall be in good condition, or to comply with such laws. United also reserves the right to deny boarding to you if your information is not in good condition according to United’s reasonable belief, or which otherwise do not comply with laws of the specific country you are departing from, transiting through, or travelling to. We may offer you the ability to provide contact information to help health authorities facilitate contact tracing. In some cases, your destination may require that you provide such information. We may be required by law to disclose contact information to health authorities or other government authorities.
Biometric Information
We may provide you the option to voluntarily participate in travel facilitation and security programs that use biometric information. These programs may include trial programs to expedite the boarding and baggage check processes, as well as security programs like the Traveler Verification Service administered by U.S. Customs and Border Protection. You should review any specific details regarding the collection, use, disclosure, and retention of biometric information when considering whether to participate in these programs.
United Club
United may collect information such as name, addresses, email addresses, telephone numbers, and credit card information, in order to provide service to members of its United Club.
In flight
United may collect credit card and MileagePlus information in flight to enable present and/or future purchases.
Children
Due to the nature of our services, United will collect and maintain travel information, about children under the age of 13 when necessary to comply with federal aviation or security regulations, for safety or security reasons, or as otherwise necessary for United to provide transportation or other services requested.
Information we automatically collect
We and our third party service providers automatically collect information about your use of our sites through cookies, web beacons, log files and other technologies. Such information includes but is not limited to, the following:
- Domain name;
- Browser type and operating system;
- IP address;
- Web pages you view;
- Links you click;
- Length of time of your visit;
- Your activities on our sites and your movement through these sites; and
- Referring URL or webpage that led you to our sites.
We and our third party service providers may combine this information with information that we (or they) already have collected about you. For more information, refer to the "Use of cookies, web beacons and other similar technologies" section below.
Information we collect through our mobile application(s)
We collect information from you when you use our mobile application(s), including, but not limited to: name, email address, MileagePlus account information, government ID or passenger redress number, passport information and/or photograph, date of birth, payment information (e.g., credit card number, expiration date and billing name and address), if not already provided.
You may store your information in order to facilitate your travel (e.g. reservation, specific flight information, etc.) or purchase needs. The mobile application(s) may also store user-provided data, unless you choose to delete it, for as long as you use the related feature of the application. Information provided for traveler data, security clearance, purchases and related activities will be stored in our operational systems, as needed, to provide services you request. If such information is stored in your MileagePlus account it will not be accessible if your MileagePlus account is closed.
We also collect information automatically through your use of our mobile application(s) (through cookies, beacons or other tracking technologies designed for mobile applications), including, but not limited to, the following:
- Your pinpointed physical location information from technologies like GPS, Wi-Fi, or cell tower proximity (geo-location tracking), if you agree to grant us permission to do so;
- At select airports in the U.S., your precise location may be tracked continuously to provide you with location-based services, if you agree to grant us permission to do so. For more information, and to learn how to turn off this tracking, please see the Location Services FAQ located on the side menu of the United App;
- Your domain name;
- Device ID or alternative ID where required by the platform provider;
- Electronic data concerning operating systems and computing devices/browser, including types;
- Features you use and links you click;
- Amount of time spent in the application;
- Installs and uninstalls;
- Transaction details and history;
Information we collect from third parties
We collect information about you from third parties, including personal, demographic and aggregate information. For example, if you make a reservation through a travel agent, we will obtain your travel information from that agent. We may also obtain information about you from our marketing partners, advertisers and other third parties.
Sensitive information we collect directly from you
In certain situations, we collect information that is defined as “sensitive” under applicable data protection laws. If a medical or other emergency occurs while travelling with United, we collect information, including but not limited to first and last name, contact information, date of birth, and medical information, and may share such information with third-party medical or other safety personnel as necessary or advisable. We also provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such request and/or provide such information, we collect information in order to provide reasonable accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile information for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time.
How we use your information
General - applicable to all sources of information
We primarily use your information, including personal information, to provide our services to you and to fulfill your requests. In certain circumstances, such as for advertising purposes, we combine your information with other information that we have about you, that is publicly available and/or that we have obtained from third parties (either individually or in the aggregate). We also use your information for the following purposes:
- For flight information/wireless services. You may register for receipt of flight information and other wireless services by indicating your preference to receive this information by providing relevant information or by granting applicable permissions. Participation in these services may be optional.
- To improve your user experience. To tailor the content and information that we may send or display to you, such as information about your travel schedule; to offer customized location information, personalized help and instructions; and to otherwise personalize your experiences while using our sites or services.
- For operational needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
- For marketing and advertising. United uses your information, consistent with applicable law, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising) and to send you news and newsletters. Specifically, we use the information that we collect about you to send you email, direct mail, or telephone communications about offers, including those offered by United, its partners or other third parties, that might be of interest to you. We also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites.
- For surveys and promotions. As permitted under applicable law, we offer you the opportunity to participate in a survey or promotion. We use survey results for various purposes, including to enhance our services and sites and to develop improved promotions, and, if you provide your name, we may contact you to discuss your comments. Unless otherwise stated in the promotion or survey, we use the contact information that we collect through promotions for the purpose of notifying the winner. If you win a promotion, we may request additional information (e.g., social security number for income tax purposes depending on the prize).
- To improve and maintain our sites and our services. We use your information to improve and maintain our sites and services, respond to user desires and preferences, for research and analytical purposes, such as improving our operations, and for security purposes, including, but not limited to, protecting ourselves and users of our services.
- To protect our rights and interests, and the rights and interests of other users of our services.
- As otherwise permitted by law.
In addition to the foregoing, specific examples of how we use information derived from the following categories are described below.
MileagePlus
We use information that we collect from our MileagePlus members to enroll you in the MileagePlus program; to provide mileage credit for program-related purchases and activities, including but not limited to MileagePlus partners; to communicate with you on the status of your MileagePlus account; to notify you of any special promotions for which you might be eligible; to pre-fill certain data fields so you do not need to enter the same information multiple times; perform the requested services (e.g., booking); to process your transactions (including billing); to notify you about flight information (including but not limited to reservation confirmation, flight or seat changes, boarding time(s), and available ancillary services).
We may use your information, consistent with applicable law, for marketing purposes, including sending emails or direct mail offers on services or products, including products and services offered by United as well as those offered by third parties, which may be of interest to you. You can opt -out of marketing at any time, and if you have a MileagePlus account, you may control certain marketing practices through your MileagePlus account as described below.
Children and teenagers
We do not knowingly use information we collect about children and teenagers known to be under the age of 18 for any marketing or promotional purposes, nor do we permit our affiliates, third-party sponsors or other third parties with whom we may share information to do so. We use the information collected about children only to provide services. We will give out personal information about children if required by law, for example to comply with a court order or subpoena, or to protect the safety and security of visitors and our sites.
Information collected from our mobile application(s)
In addition to the uses of your information described above, if you use our mobile applications, we use your information to send push notifications (after requesting your permission to do so), such as updates on flights, gate changes and offers or other information, to your mobile device.
If you permit us to collect your geo-location information, then we may provide you with location-based tools, such as airport/map views, city code search, and United Club locations or parking spaces, or send you travel notices specific to your location. In addition, for certain mobile applications, we may use geo-location tracking, subject to your granting United permission, to provide you with other services and information, such as identifying nearby retailer locations and/or to present you with offers which may be of interest to you, to facilitate your services and/or purchases through the application and to tally your miles and credit your account. Geo-location information may also be used to protect United’s interests.
You may withdraw your permission or opt out of geo-location tracking. Please consult your chosen mobile device manufacturer for information on setting your location-tracking features.
We promote our sites via Internet advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and United may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures and protecting United’s interests. You may opt out of the collection of such information by uninstalling the mobile application(s). Once the mobile application(s) has been uninstalled, all information stored in the application will be deleted, including any preferences you previously set or enabled.
The legal bases for using your personal information
We collect, use, and share your personal information where we are satisfied that we have an appropriate legal basis to do this. This may be because:
- Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to our products and services and to provide you with information you request); you have a right to object to processing as explained in the section below titled Your legal rights;
- Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to make travel reservations in the performance of our services); and/or
- Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).
If you would like to find out more about the legal bases on which we process personal information, please contact us at privacy@united.com.
Disclosing your information
United may disclose your personal information to the following persons/entities:
- Affiliates. We may disclose information we collect from you to our affiliates or subsidiaries. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
- Service providers We may share your information with third parties that assist us and perform functions on our behalf. These entities may include technical support, website hosting, service/order fulfillment, customer service and credit card processing, among others. In some cases third-party service providers, such as information technology and data processing vendors, data storage services, etc., may be located outside the United States and your personal information may be processed or stored in other countries; please see the section on Cross-border transfers of information below. We also use third parties to assist us in determining and placing relevant advertising.
- Non-affiliated third parties. We may also share your information with third parties as necessary to complete your transaction or fulfill your requests. Consistent with applicable law, United may also share your information with third parties for marketing purposes including but not limited to the third party’s own marketing or promotional purposes or other companies’ marketing purposes in order for them to present you with offers on services or products that may be of interest to you. We may share your information with contracted corporate customers as part of our management of agreements we have with them.
- Marketing partners. If we jointly offer a product or service with a different entity, we will share your information with that entity to assist in marketing and providing that product or service. These entities may include, but are not limited to: airlines, car rental agencies, hotels and travel agencies. Consistent with applicable law, we may also share your information with our partners for their own marketing purposes.
- Research and analytics. We may use and disclose your information for research and analytics purposes.
- Aggregate information. Aggregate, anonymized information, such as demographic information, domain names, other site traffic information, etc., may at times be shared with United partners or other third parties. Examples of aggregate information are X% of eligible tickets purchased are eTickets; X% of subscribers use a mobile application, etc.
- Law enforcement/Legal processes/other uses. United may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental or law enforcement authority; to protect the rights or property of United, its customers, its sites or site users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable. In certain circumstances, United’s third party service providers may be required to disclose information to government or law enforcement authorities. Security, health and customs and immigration laws in the U.S. and many other countries require all airlines, including United, to provide border control agencies or other governmental authorities with passenger data. In order to comply with these laws we may disclose information about you and your travel arrangements to such authorities.
- Business transactions. If United is or may be acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.
- Additional notice for users of certain mobile websites. You may make purchases using MileagePlus award miles through certain mobile websites. If you choose to use these sites, then United will receive information from the third party about your purchase and will exchange information with the third party to facilitate the transaction and the use of miles from your account.
Use of cookies, web beacons and other similar technologies
United and our third party service providers collect information by using technologies and methodologies, such as "cookies", tags, web beacons or other similar technologies that enable tracking as you browse our sites. We use these technologies to authenticate you as a user, to remember your preferences for using the site, to present offers that may be of interest and to facilitate transactions, such as flight searches and purchases. We and our third party service providers also use these tools to analyze use of our sites and our services. We may use this information in the aggregate or combine it with information that we have already collected about you.
Cookie. "Cookies" are small bits of information that are stored on your computer by your web browser. Web beacons or “pixel tags” are small strings of code placed on a web page or in an email message for the purpose of transferring information. Cookies and the other technologies discussed in this section allow us to recognize your preference information, to track your transactions and to facilitate effective website administration.
Cookies help establish a user session and allow our server to provide site users with the appropriate information, advertisements and services. We also use cookies to ensure you obtain the information you request, to authenticate your authority to access the site and to track the usage of our websites in order to improve the site(s) according to our customers’ needs. If you are a registered user on our site and you elect to have the site store your MileagePlus number, the cookie stored on your computer will contain your MileagePlus number.
If you do not want your information to be collected through cookies, you can change the preferences in your particular Internet browser. Some website functionality may not work properly if your browser does not accept cookies. Specifically, if you choose not to accept our cookies and are a registered user, you will not have access to your information, such as your user profile, itineraries, award travel, upgrades and MileagePlus summary information, on this site. Although you cannot log into the site as a registered user if you disable our cookies, you can still purchase on the site by logging in as a “Guest”. Please consult your chosen Internet browser for instructions on how to change your cookie settings.
Local storage objects. We may use Flash Local Storage Objects ("Flash LSOs") to store your preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose “Global Storage Settings Panel“ and follow the instructions. To see the Flash LSOs currently on your computer, choose “Website Storage Settings Panel“ and follow the instructions to review and, if you want, to delete any specific Flash LSO.
Clear GIFs, pixel tags and other technologies.. These technologies allow us to recognize your preference information, keep track of your transactions and facilitate effective website administration. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We and our third-party service providers may use clear GIFs (also known as web beacons, web bugs or pixel tags), in connection with our sites and services to, among other things, track the activities of visitors, help us manage content and compile statistics about usage. We and our third party service providers may also use clear GIFs in HTML emails sent to you to help us track email response rates, identify when our emails are viewed and track whether our emails are forwarded.
Targeted advertising
We and our third-party service providers, including ad networks, use the information that we collect about you to serve advertisements to you on various channels, including, but not limited to, United and third-party websites, United and third party mobile apps and other mediums that may include social networks and television. We and our third-party service providers may collect the data that we use to determine relevant advertising from the following sources: data collected about you online and through your use of our mobile apps, whether collected directly or automatically through cookies, web beacons and other technologies, including technologies designed to collect data through mobile apps, third party sites (e.g., engagement with social media when publicly available), and offline, including, but not limited to, data combined or appended from various sources. These advertisements may be about United products and services or products and services of third parties that we think might be of interest to you. United and our third party service providers may use cookies and web beacons when working with these companies to provide them information regarding your use of the site (whether individually or in the aggregate) to assist them in determining relevant advertising.
In addition, some third party advertising technology used by United to deliver advertisements may use separate cookies and other tracking technologies. This technology may be delivered via visits to our website, email messages, apps or otherwise. Web beacons on some pages of our site, in conjunction with these advertising cookies and our other cookies, enable the third-party advertising technology to better understand onsite activity in the aggregate, to recognize a browser's cookie when a browser visits this website, other websites or apps, and to learn which advertisements bring users to our site or our apps or otherwise take action.
Third party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party's specific privacy policy, and not this Privacy Policy.
Third party ad networks may be members of either the Network Advertising Initiative (“NAI”) or About Ads-Digital Advertising Alliance (“DAI”). If they are members and you do not want to receive targeted advertisements from these third-party ad networks, you may opt out. Information as to member companies, the practices of such third-party ad networks and your choices regarding having information used by these companies, including how to opt out, can be found at either: http://www.networkadvertising.org/optout_nonppii.asp for NAI members or http://www.aboutads.info/choices/ for DAI members. Information on how to opt out of the use of your information by DoubleClick is available at http://www.google.com/policies/technologies/ads/ and information on how to opt out of Google Analytics is available at https://tools.google.com/dlpage/gaoptout.
Opting out of one or more NAI or DAI members means that only those particular members will no longer deliver targeted content or ads to you. It does not mean you will no longer receive any targeted content or ads on our websites or other non-United websites. If your browser is configured to reject cookies when you visit one of the above referenced opt-out pages and then you erase your cookies, use a different computer or change web browsers, your NAI or DAI opt-out may no longer be active.
Third-party analytics
We also use automated devices and applications, such as Google Analytics, to evaluate the use of our websites and apps and the services we provide. We use these tools to gather information about users to help us improve our services, performance and user experiences. These analytics providers may use cookies and other technologies to perform their services, and may combine the information that they collect about you on our websites with other information that they have collected. This Policy does not cover such third parties’ use of the data.
Your legal rights
Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal information:
Right to access, correct, and delete your personal information: Please ensure that you tell us about changes in personal information (e.g., change of address, redress number) so that ensure that your information is up to date. You have the right to request access to the personal information that we hold about you and: (a) the source of your personal information; (b) the purposes, legal basis and methods of processing; (c) the data controller’s identity; and (d) the entities or categories of entities to whom your personal information may be transferred. If you are a MileagePlus member, you can create, view or update your MileagePlus account by accessing it through the MileagePlus profile section on united.com or by calling +1-800-421-4655. You may also update information relevant to your use of our mobile application(s) through the app itself. You also have the right to request that we delete your information. We are not required to comply with your request to erase personal information if the processing of your personal information is necessary for compliance with a legal obligation or for the establishment, exercise, or deference of legal claims.
Right to restrict the processing of your personal information: You have the right to restrict the use of your personal information when (i) you contest the accuracy of the data; (ii) the use is unlawful but you do not want us to erase the data; (iii) we no longer need the personal information for the relevant purposes, but we require it for the establishment, exercise, or defense of legal claims; or (iv) you have objected to our personal information use justified on our legitimate interests verification as to whether we have a compelling interest to continue to use your data. We can continue to use your personal information following a request for restriction, where: we have your consent; or to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.
Right to data portability: To the extent that we process your information (i) based on your consent or under a contract; and (ii) through automated means, you have the right to receive such personal information in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller.
Right to object to the processing of your personal information: You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
Right to lodge a complaint with your local supervisory authority: You have a right to lodge a complaint with the National Authority for Data Protection (ANPD) if you have concerns about how we are processing your personal information. We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.
Right to obtain information about the entities with which we share your personal information: You have the right to obtain accurate information on the public and private entities with which we share your personal information.
Right to delete your personal information processed based on consent and to receive information on the possibility of not providing consent: You have the right to request that personal information which processing is based solely on previously given consent be deleted, as well as the right to receive clear information on the possibility of not providing consent and the relevant consequences of this, such as the impossibility of using part of the available services.
How to exercise your rights: If you would like to exercise any of the rights described above, please send us a request via privacy@united.com. In your message, please indicate the right you would like to exercise. We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal information requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.
Protecting information collected
United maintains physical, electronic and procedural safeguards to protect your information. When you place orders online to purchase services or access your MileagePlus account information, we use secure servers to protect your personal information, which is intended to encrypt the personal information that is transmitted between you and our sites. Although United takes reasonable steps to safeguard and to prevent unauthorized access to your personal information, it cannot be responsible for the acts of those who gain unauthorized access and United makes no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.
If a third party, including but not limited to a family member, friend, co-worker or corporate travel desk, seeks to transact business with United on your behalf, that party will be asked to provide us with the same personal information we would collect directly from you to complete your transaction. Unless and until we are advised otherwise, we consider that such third party has an appropriate legal basis to provide us with your personal information and make such transactions, including any subsequent changes, on your behalf in accordance with this Privacy Policy. If such third party who has your full name and booking reference contacts us and seeks information on your booking or requests changes to it, we will disclose your booking information and allow such third party to make changes as we will conclude that third party has an appropriate legal basis to do so. Please note that the collection, use and disclosure of your personal information by a third party is subject to your dealings with them and, if applicable, any of their privacy policies and practices. If you do not want an individual to obtain information on or make changes to your booking, you should not share your booking reference with them.
Your role in protecting your information
To protect your privacy and United's proprietary databases and systems, you should not share any of your information, such as MileagePlus number or password, with any unauthorized individuals or third-party information aggregators that would allow them access to your sensitive account information. For more information, see our PIN/Password Frequently Asked Questions page. You should also take all necessary steps to secure your mobile devices and protect information you may have stored on them. We do not have control over the security of your mobile device. United assumes no responsibility for the loss of information associated with security disrupting technologies, including but not limited to reverse engineering of mobile device applications or malware, that compromise the United mobile application(s) as a result of owner or third-party initiated changes to the mobile device. The security of that mobile device is the responsibility of its owner, not United.
Opting out
MileagePlus members can opt out of receiving marketing or promotion-related emails or direct mail from United by accessing their account profile information on the United website and changing their profile to indicate their desire to be excluded. In addition, members can contact the MileagePlus Service Center by phone or in writing and request a profile change. Emails sent to members will contain a message and link on how to opt out of that type of communication in the future. Regardless of your opt-out preferences, we reserve the right to send you emails or other communications for administrative purposes.
Location of your information/Data transfer/Notice to non-US persons
United will transfer, store, and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. By submitting any personal information or by using the website and without limitation to any other rights or obligations we have, you acknowledge such transfer to, and processing in, the United States and these other countries, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions.
Other sites/digital channels
Our sites and our online services may contain links to third party sites. Any access to and use of such linked sites is not governed by this Policy but instead is governed by the privacy policies of those third party sites. We are not responsible for the information practices of such third party sites.
Contact us
If you have comments or questions about this Privacy Policy, please contact privacy@united.com.
If you have comments or questions about the privacy practices of MIPA, please contact MileagePlusPrivacy@united.com. Where your personal information is held by MIPA you may have various rights under the DPL, and may also have a right to lodge a complaint with the Cayman Islands Ombudsman.
Legal effect and changes to the policy
As previously stated, this Privacy Policy is not a contract nor does it otherwise create any legal rights or obligations in addition to those provided under applicable data protection laws. Rather, this Privacy Policy merely reflects guidelines setting forth United’s intended business practices. By using any United digital channel, and/or by providing any information to United online or offline, you acknowledge the collection and use of such information by United, its affiliates, partners, contractors and permitted agents as herein described and consistent with applicable laws. Also, United, in its discretion, may amend, interpret, modify or withdraw any portion of this Privacy Policy and related business practices at any time by posting updated text on this site, and your continued use of our digital channels or offline outlets constitutes your acknowledgement of those changes. A version of this Privacy Policy has been effective since October 15, 2002, and was last updated on March 12, 2021. This Privacy Policy supersedes previous privacy policies posted on united.com and coair.com.
Thank you for taking the time to read this Privacy Policy.
-

Topics

Scope of this policy
Information we collect about you
Information we collect directly from you
Information we automatically collect
Information we collect through our mobile application(s)
Information we collect from third parties
How we use your information
Disclosing your information
Use of cookies, web beacons and other similar technologies
Targeted advertising
Third-party analytics
Your access to your information
Protecting information collected
Your role in protecting your information
Opting out
Location of your information/data transfer/notice to non-US persons
Other sites/digital channels
Contact us
Legal effect and changes to the policy

While United Airlines, Inc. (“United”) strives to take reasonable measures to protect your information, this Policy is not a contract and does not create any legal rights or obligations. Rather, the following are guidelines for protecting your information. Except as otherwise described in this Policy, by using any of our websites and/or our services or otherwise providing us with any information, you consent to the handling of your information as described in this Policy.

Scope of this policy

This Policy applies to the information that we collect about you when you interact with United and this Policy is provided, which includes but is not limited to the following situations:

On United-managed websites and mobile websites, including but not limited to, united.com, mobile.united.com, and hub.united.com;
Through United-managed mobile apps, such as the United App;
Through United-managed technology or devices, such as kiosks and in-flight entertainment;
Offline, including, for example, through a United Customer Service Representative or other travel agent.

This Policy does not apply to any website not owned and managed by United, including but not limited to, United Vacations, United Cruises, MileagePlus Shopping, Orbitz, Travelocity, Expedia or any other third-party site. However, to the extent such websites provide your information to us, we will use your information as described in this Policy.

Nothing in this Policy is intended as a waiver of any rights, remedies, or defenses afforded to United under the law all of which United expressly reserves.

Information we collect about you

We collect and maintain information, including personal information, about you directly from you (both online and offline), automatically when you use our websites and services, and from third parties. We collect information when you make travel arrangements, contact us, complete a survey, enroll and participate in MileagePlus, participate in a promotion, or otherwise interact with us. The type of information we collect about you depends on your particular interaction with us, and may include, but is not limited to, the following information:

Name;
Contact information (for example, address, phone number, email address, or social media handle);
MileagePlus number and security information (for example, password or authentication information);
Gender and date of birth;
Payment information (for example, credit card information or billing information);
Passport information and photograph;
Government ID or redress number;
Tax ID;
Images and biometric information;
Travel preferences and special requests;
Purchase information (including both travel and non-travel purchases and subscriptions);
User and activity data;
Survey responses; and
Health information.

Information we collect directly from you

MileagePlus

When you enroll in MileagePlus we collect information such as your name, contact information, MileagePlus number and security information. We also collect other information that you choose to save in your profile or otherwise provide to us such as payment information travel preferences and special requests, marketing preferences, and other loyalty program information.

When you participate in MileagePlus, we collect information such as your name, contact information, MileagePlus number, purchase information and user and activity data.

Where MIPA is the data controller, it processes MileagePlus personal information where it has an appropriate legal basis. This may be because:

Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to the MileagePlus program and services and to provide you with information you request);
Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to fulfill your MileagePlus benefits); and/or
Our use of your personal information is necessary to comply with a relevant legal, security or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority). If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.

Online purchases

If you make a purchase online, we collect information such as your name, contact information, payment information, and purchase information.

Offline purchases

If you make a purchase offline, such as through a United Customer Service Representative, a travel agent, or a Flight Attendant in-flight, we collect information such as your name, contact information, payment information, and purchase information. We may monitor and/or record telephone calls with United Customer Service Representatives. By continuing with the call, you are deemed to consent to such monitoring and/or recording.

United Club

When you purchase a United Club membership and use a United Club, we collect your name, contact information, payment information, purchase information and user and activity data.

Special requests

We provide you the option to make a special meal request (on certain flights) and/or provide information about special travel needs. If you choose to make such request and/or provide such information, we collect information in order to provide accommodations during travel. In addition, MileagePlus members can choose to save their special meal requests and/or special needs in their profile for use in connection with bookings made through united.com. These saved preferences and/or selections can be changed at any time.

COVID-19

You may be required to provide information about your health, including (depending on your destination) lack or presence of symptoms related to COVID-19, COVID-19 test results, or COVID-19 vaccine information or information supporting your request for an exemption to a health-related travel requirement. We may offer you the ability to electronically provide such information to us, such as through our Travel-Ready Center or through a digital health pass. We may offer you the ability to request that we collect your information from a third party, such as a digital health app that you have chosen to use. We will use such information to help facilitate, but cannot guarantee, meeting your destination’s requirements, to comply with applicable laws (for example, we may be required to confirm you have necessary travel documentation), and to help ensure health and safety during the travel experience. We are not liable for any assistance or information provided by any employee or agent of United to you relating to such documents or compliance with such laws, or for the consequences to you resulting from failure to obtain and present such documents, which shall be in good condition, or to comply with such laws. We also reserve the right to deny boarding to you if your information is not in good condition according to our reasonable belief, or which otherwise do not comply with laws of the specific country you are departing from, transiting through, or travelling to. We may offer you the ability to provide contact information to help health authorities facilitate contact tracing. In some cases, your destination may require that you provide such information. We may be required by law to disclose contact information to health authorities or other government authorities.

Biometric information

You may be able to participate in travel facilitation and security programs that use biometric information. These programs may include trial programs to expedite the boarding and baggage check processes, as well as security programs like the Traveler Verification Service administered by U.S. Customs and Border Protection. You should review any specific details regarding the collection, use, disclosure, and retention of biometric information when considering whether to participate in these programs.

Emergencies

If a medical or other emergency occurs while travelling, we may collect information such as your name, contact information, date of birth, health information, and may share such information with third-party medical or other safety personnel as necessary or advisable.

Children

Due to the nature of our services, we collect information, about children under the age of 13 when necessary to comply with aviation or security regulations, for safety or security reasons, or as otherwise necessary to provide transportation and other requested services.

Information we collect directly from you

Examples of the types of information we collect directly from you are described below.

MileagePlus information

Where MIPA is the data controller, it processes MileagePlus personal information where it has an appropriate legal basis. This may be because:

Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to the MileagePlus program and services and to provide you with information you request);
Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to fulfill your MileagePlus benefits); and/or
Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).

If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.

COVID-19

You may be required to provide information about your health, including (depending on your destination) lack or presence of symptoms related to COVID-19, COVID-19 test results, or COVID-19 vaccine information or information supporting your request for an exemption to a health-related travel requirement. We may offer you the ability to electronically provide such information to us, such as through our Travel-Ready Center or through a digital health pass. We may offer you the ability to request that United collect your information from a third party, such as a digital health app that you have chosen to use. We will use such information to help facilitate, but cannot guarantee, meeting your destination’s requirements, to comply with applicable laws (for example, we may be required to confirm you have necessary travel documentation), and to help ensure health and safety during the travel experience. United is not liable for any assistance or information provided by any employee or agent of United to you relating to such documents or compliance with such laws, or for the consequences to you resulting from failure to obtain and present such documents, which shall be in good condition, or to comply with such laws. United also reserves the right to deny boarding to you if your information is not in good condition according to United’s reasonable belief, or which otherwise do not comply with laws of the specific country you are departing from, transiting through, or travelling to. We may offer you the ability to provide contact information to help health authorities facilitate contact tracing. In some cases, your destination may require that you provide such information. We may be required by law to disclose contact information to health authorities or other government authorities.

Biometric Information

Online purchases

Offline purchases: Telephone, travel agent or ticket counter

United Club

United may collect information such as name, addresses, email addresses, telephone numbers, and credit card information, in order to provide service to members of its United Club.

In flight

If a medical or other emergency occurs while travelling with United, we may collect information, including but not limited to first and last name, contact information, date of birth, medical information, and may share such information with third-party medical or other safety personnel as necessary or advisable. In non-medical or non-emergency situations, United may collect credit card and MileagePlus information in flight to enable present and/or future purchases.

Children

Due to the nature of our services, United will collect and maintain travel information, about children under the age of 14 when necessary to comply with federal aviation or security regulations, for safety or security reasons, or as otherwise necessary for United to provide transportation or other services requested.

Information we collect automatically

We and our third-party service providers may automatically collect information about you, your device, or your use of our websites and apps through cookies, pixels, web beacons, log files and other technologies. Such information includes, but is not limited to, the following:

Domain name;
Browser type and operating system;
IP address;
Device ID or alternative ID;
Pinpointed physical location information from technologies like GPS, Wi-Fi, or cell tower proximity (geo-location tracking) if your location-services are enabled;
Web pages you view;
Links you click;
Length of time of your visit;
Your activities on our sites including your movement through these websites;
Referring URL or webpage that led you to our websites;
Installs and uninstalls; and
Transaction details and history.

We and our third-party service providers may combine this information with information that we (or they) already have collected about you.

Information we collect from third parties

We may collect information about you from third parties, including personal, demographic, and aggregate information. For example, if you make a reservation or purchase through a travel agent, third-party platform (such as United Vacations, United Cruises, MileagePlus Shopping, Orbitz, Travelocity, or Expedia), or through another airline, we will obtain your name, contact information, purchase information, travel information, and special requests from that third party. We may also obtain information about you from our marketing partners, advertisers, and other third parties.

How we use your information

General - applicable to all sources of information

We primarily use your information, including personal information, to provide our services to you and to fulfill your requests. We may combine your information with other information that we have about you, that is publicly available and/or that we have obtained from third parties (either individually or in the aggregate). We also may use your information for the following purposes:

To improve your user experience. To tailor the content and information that we may send or display to you; to offer customized location information, personalized help and instructions; and to otherwise personalize your experiences while using our websites or services.
To communicate flight information. To provide relevant flight information, such as departure or arrival changes, baggage information, cancellation information, or in-flight information, via wireless services or app communications or notifications.
For operational and security needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
For marketing and advertising. We may use your information, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising, or app notifications) and to send you news and newsletters. Specifically, we may use the information that we collect about you to send you email, direct mail, telephone, digital advertisements, or app communications or notifications about offers, including those offered by us, our partners or other third parties, that might be of interest to you. We may also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking websites.
For surveys and promotions. From time to time, we may offer you the opportunity to participate in a survey or promotion. We use survey results for various purposes, including to enhance our services and sites and to develop improved promotions, and, if you provide your name, we may contact you to discuss your comments.
To improve and maintain our websites and our services. We use your information to improve and maintain our websites and services, respond to user desires and preferences, for other research and analytical purposes, and for security purposes, including, but not limited to, protecting ourselves and users of our services.
To protect our rights and interests, and the rights and interests of other users of our services.
As otherwise permitted by law.

In addition to the foregoing, specific examples of how we use information derived from the following categories are described below.

MileagePlus

We use your information to enroll you in MileagePlus; to provide mileage credit for program-related purchases and activities, including, but not limited to, MileagePlus partners; to communicate with you about your account; to notify you of any special promotions for which you might be eligible; and to pre-fill certain data fields so you do not need to enter the same information multiple times.

Children

We do not knowingly use information we collect about children known to be under the age of 13 for any marketing or promotional purposes, nor do we permit our affiliates, third-party sponsors or other third parties with whom we may share information to do so. We use the information collected about children known to be under 13 to comply with aviation or security regulations, for safety or security reasons, or as otherwise necessary to provide transportation or other requested services. We will disclose personal information about children if required by law, for example to comply with a court order or subpoena, or to protect the safety and security of visitors and our websites.

Information collected from our apps

We may use geo-location tracking to provide you with location-based tools, such as airport/map views, city code search, and United Club locations or parking spaces, or send you communications or app notifications specific to your location. In addition, for certain apps, we may use geo-location tracking to provide you with other services and information, such as identifying nearby retailer locations and/or to present you with offers which may be of interest to you, to facilitate your services and/or purchases through the app and to tally your miles and credit your account. Geo-location information may also be used to protect our interests. Please consult your mobile device manufacturer for information on setting permissions for your location-tracking features.

We may engage in digital advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and we may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures and protecting our interests. You may opt out of the collection of such information by uninstalling the app.

How we use your information

General - applicable to all sources of information

For flight information/wireless services. You may register for receipt of flight information and other wireless services by indicating your preference to receive this information by providing relevant information or by granting applicable permissions. Participation in these services may be optional.
To improve your user experience. To tailor the content and information that we may send or display to you; to offer customized location information, personalized help and instructions; and to otherwise personalize your experiences while using our sites or services.
For operational needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
For marketing and advertising. United may use your information, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising) and to send you news and newsletters. Specifically, we may use the information that we collect about you to send you email, direct mail, or telephone communications about offers, including those offered by United, its partners or other third parties, that might be of interest to you. We may also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites.
For surveys and promotions. From time to time, we may offer you the opportunity to participate in a survey or promotion. We use survey results for various purposes, including to enhance our services and sites and to develop improved promotions, and, if you provide your name, we may contact you to discuss your comments. Unless otherwise stated in the promotion or survey, we use the contact information that we collect through promotions for the purpose of notifying the winner. If you win a promotion, we may request additional information (e.g., social security number for income tax purposes depending on the prize).
To improve and maintain our sites and our services. We use your information to improve and maintain our sites and services, respond to user desires and preferences, for other research and analytical purposes, and for security purposes, including, but not limited to, protecting ourselves and users of our services.
To protect our rights and interests, and the rights and interests of other users of our services.
As permitted by law.

In addition to the foregoing, specific examples of how we use information derived from the following categories are described below.

MileagePlus

We may use your information for marketing purposes, including sending emails or direct mail offers on services or products, including products and services offered by United as well as those offered by third parties, which may be of interest to you. You may control certain marketing practices through your MileagePlus account as described below.

Children

We do not knowingly use information we collect about children known to be under the age of 14 for any marketing or promotional purposes, nor do we permit our affiliates, third-party sponsors or other third parties with whom we may share information to do so. We use the information collected about children known to be under 14 only to provide services. We will give out personal information about children if required by law, for example to comply with a court order or subpoena, or to protect the safety and security of visitors and our sites.

Information collected from our mobile application(s)

In addition to the uses of your information described above, if you use our mobile applications, we may use your information to send push notifications (after requesting your permission to do so), such as updates on flights, gate changes and offers or other information, to your mobile device.

You may withdraw your permission or opt out of geo-location tracking. Please consult your chosen mobile device manufacturer for information on setting your location-tracking features.

We may promote our sites via Internet advertising. If you click on such an advertisement, information such as your mobile device’s ID, as permitted by the platform provider, may be sent to the advertising network so that they and United may track the effectiveness of our advertising. This information might also be used for frequency capping, estimating the number of unique users, debugging or security measures and protecting United’s interests. You may opt out of the collection of such information by uninstalling the mobile application(s). Once the mobile application(s) has been uninstalled, all information stored in the application will be deleted, including any preferences you previously set or enabled.

Categories of personal information we sell or share or use for targeted advertising

When we engage in targeted advertising, we use personal information to deliver personalized ads to each person. We do not sell your information in a way that most people would think of as a sale. Various US state privacy laws have very broad definitions of "sell" or "share" as it relates to personal information for the use of targeted advertising. Under these definitions, when we use targeted advertising, it may be deemed as selling your information. We may “sell” or “share” for purposes of cross-context behavioral advertising, or use for targeted advertising all categories of personal information identified in the “Information we collect about you” section, except for personal information that is health information, images and biometric information, security information (for example, password or authentication information), financial account or payment card information, passport information and photograph, government ID or redress number, tax ID, or information related to children under the age of 16.

The referenced categories of personal information are sold to, shared for cross-context behavioral advertising, or used for targeted advertising with, entities for which we provide digital advertising services, business partners, advertising networks, and other companies that facilitate digital advertising. We engage in such sales and sharing to facilitate digital advertising services that we offer. We do so through a number of means. We allow third parties to place cookies or other tracking technologies on our website that may collect information about your online activities over time and across different websites or applications. We also utilize information that we have about you to create advertising profiles that we then provide to other entities to allow those entities to directly market to you and people like you. For more information about the use of cookies and other tracking technologies, see the section “Use of cookies, web beacons and other similar technologies” below.

We also sell the same categories of personal information to our affiliates, so they can offer their products and services to you or third parties as otherwise noted in this Policy.

To opt out of such sales and sharing of personal information, click here.

We do not sell or share for cross-context behavioral advertising any of the other categories of personal information we collect.

Retention

We retain personal information for use in fulfilling the actions identified in the “How we use your information” section, to provide you services and address your inquiries, and to comply with applicable laws, and will no longer retain it if none of those actions remain applicable to the personal information.

Disclosing your information

We may disclose your personal information to the following persons/entities:

Affiliates. We may disclose information we collect from you to our affiliates or subsidiaries. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
Service providers. We may share your information with third parties that assist us and perform functions on our behalf. These entities may include technical support, website hosting, service/order fulfillment, customer service and credit card processing, among others. In some cases third-party service providers, such as information technology and data processing vendors, data storage services, etc., may be located outside the United States and your personal information may be processed or stored in other countries. We also use third parties to assist us in determining and placing relevant advertising.
Non-affiliated third parties. We may also share your information with third parties as necessary to complete your transaction or fulfill your requests. We may also share your information with third parties for marketing purposes, including, but not limited to, the third party’s own marketing or promotional purposes or other companies’ marketing purposes in order for them to present you with offers on services or products that may be of interest to you. We may share your information with contracted corporate customers as part of our management of agreements we have with them, corporate expense management, corporate promotions and other services for corporate business travelers.
Marketing partners. If we jointly offer a product or service with a different entity, we will share your information with that entity to assist in marketing and providing that product or service. These entities may include, but are not limited to, airlines, car rental agencies, hotels and travel agencies. We may also share your information with our partners for their own marketing purposes. All the above categories exclude text messaging originator opt-in data and consent which will not be shared with any third parties.
Research and analytics. We may use and disclose your information for research and analytics purposes.
Aggregate information. Aggregate information, such as demographic information, domain names, other site traffic information, etc., may at times be shared with our partners or other third parties.
Law enforcement/Legal processes/Other uses. We may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental, law enforcement or health authority; to protect our rights or property, our customers, our websites or users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable. In certain circumstances, our third-party service providers may be required to disclose information to government or law enforcement authorities. Security, health and customs and immigration laws in the U.S. and many other countries require all airlines, including United, to provide border control agencies or other governmental authorities with passenger data. In order to comply with these laws we may disclose information about you and your travel arrangements to such authorities.
Business transactions. If we are acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.
Additional notice for users of certain mobile websites. You may make purchases using MileagePlus award miles through certain websites. If you choose to use these websites, then we will receive information from the third party about your purchase and will exchange information with the third party to facilitate the transaction and the use of miles from your account.

Additional information pertaining to the disclosure of your personal information may be found in the jurisdiction-specific section at the end of this notice.

Use of cookies, web beacons and other similar technologies

We and our third-party service providers collect information by using technologies and methodologies, such as "cookies", tags, web beacons or other similar technologies that enable tracking as you browse our websites. We use these technologies to authenticate you as a user, to remember your preferences for using the site, to present offers that may be of interest and to facilitate transactions, such as flight searches and purchases. We and our third-party service providers also use these tools to analyze use of our websites and our services. We may use this information in the aggregate or combine it with information that we have already collected about you.

Cookies. "Cookies" are small bits of information that are stored on your computer by your web browser. Web beacons or “pixel tags” are small strings of code placed on a web page or in an email message for the purpose of transferring information. Cookies and the other technologies discussed in this section allow us to recognize your preference information, to track your transactions and to facilitate effective website administration.

Cookies help establish a user session and allow our server to provide website users with the appropriate information, advertisements and services. We also use cookies to ensure you obtain the information you request, to authenticate your authority to access the website and to track the usage of our websites in order to improve our websites according to our customers’ needs. If you are a MileagePlus member and you elect to have our website store your MileagePlus number, the cookie stored on your computer will contain your MileagePlus number.

If you do not want your information to be collected through cookies, you can change the preferences in your particular internet browser. Some website functionality may not work properly if your browser does not accept cookies. Specifically, if you choose not to accept our cookies and are a MileagePlus member, you will not have access to your information, such as your user profile, itineraries, award travel, upgrades and MileagePlus summary information, on this website. Although you cannot log into the site as a MileagePlus member if you disable our cookies, you can still make a purchase on the website. Please consult your internet browser for instructions on how to change your cookie settings.

Local storage objects. We may use Flash Local Storage Objects ("Flash LSOs") to store your preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose “Global Storage Settings Panel” and follow the instructions. To see the Flash LSOs currently on your computer, choose “Website Storage Settings Panel” and follow the instructions to review and, if you want, to delete any specific Flash LSO.

Targeted advertising

We and our third-party service providers, including ad networks, use the information that we collect about you to serve advertisements to you on various channels, including, but not limited to, United and third-party websites, United and third-party apps and other mediums that may include social networks and television. We and our third-party service providers may collect the data that we use to determine relevant advertising from the following sources: data collected about you online and through your use of our mobile apps, whether collected directly or automatically through cookies, web beacons and other technologies, including technologies designed to collect data through mobile apps, third party sites (e.g., engagement with social media when publicly available), and offline, including, but not limited to, data combined or appended from various sources. These advertisements may be about United products and services or products and services of third parties that we think might be of interest to you. We and our third-party service providers may use cookies and web beacons when working with these companies to provide them information regarding your use of the website (whether individually or in the aggregate) to assist them in determining relevant advertising.

In addition, some third-party advertising technology used by us to deliver advertisements may use separate cookies and other tracking technologies. This technology may be delivered via visits to our website, email messages, apps or otherwise. Web beacons on some pages of our site, in conjunction with these advertising cookies and our other cookies, enable the third-party advertising technology to better understand onsite activity in the aggregate, to recognize a browser's cookie when a browser visits this website, other websites or apps, and to learn which advertisements bring users to our site or our apps or otherwise take action.

Third party ad network providers, advertisers, sponsors and/or traffic measurement services may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs and other technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party's specific privacy policy, and not this Policy.

Third party ad networks may be members of either the Network Advertising Initiative (“NAI”) or About Ads-Digital Advertising Alliance (“DAA”). If they are members and you do not want to receive targeted advertisements from these third-party ad networks, you may opt out. Information as to member companies, the practices of such third-party ad networks and your choices regarding having information used by these companies, including how to opt out, can be found at either: https://optout.networkadvertising.org/?c=1 for NAI members or http://www.aboutads.info/choices/ for DAA members. Information on how to opt out of the use of your information by DoubleClick is available at http://www.google.com/policies/technologies/ads/ and information on how to opt out of Google Analytics is available at https://tools.google.com/dlpage/gaoptout.

Opting out of one or more NAI or DAA members means that only those particular members will no longer deliver targeted content or ads to you. It does not mean you will no longer receive any targeted content or ads on our websites or other non-United websites. If your browser is configured to reject cookies when you visit one of the above referenced opt-out pages and then you erase your cookies, use a different computer or change web browsers, your NAI or DAA opt-out may no longer be active.

Third-party analytics

Your access to your information

If you are a MileagePlus member, you can create, view or update your MileagePlus account by accessing it through the MileagePlus profile section on united.com or by calling 1-800-421-4655. You may also update information relevant to your use of our app through the app itself.

Protecting information collected

We maintain physical, electronic and procedural safeguards to protect your information. Although we take reasonable steps to safeguard and to prevent unauthorized access to your personal information, such measures are not infallible, and we cannot be responsible for the acts of those who gain unauthorized access to our systems or your information and we make no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.

If a third party, including, but not limited to, a family member, friend, co-worker or corporate travel desk, seeks to transact business with United on your behalf, that party will be asked to provide us with the same personal information we would collect directly from you to complete your transaction. We assume that such third party has your consent and authorization to provide us with your personal information and make such transactions, including any subsequent changes, on your behalf in accordance with this Policy. If such third party who has your full name and booking reference contacts us and seeks information on your booking or requests changes to it, we will disclose your booking information and allow such third party to make changes as we will conclude you have given them your consent to do so. Please note that the collection, use and disclosure of your personal information by a third party is subject to your dealings with them and, if applicable, any of their privacy policies and practices. If you do not want an individual to obtain information on or make changes to your booking, you should not share your booking reference with them.

Your role in protecting your information

To protect your privacy and United's proprietary databases and systems, you should not share any of your information, such as MileagePlus number or password, with any unauthorized individuals or third-party information aggregators that would allow them access to your account information. You should also take all necessary steps to secure your mobile devices and protect information you may have stored on them. We do not have control over the security of your mobile device. United assumes no responsibility for the loss of information associated with security disrupting technologies, including but not limited to reverse engineering of mobile device applications or malware, that compromise the our app as a result of owner or third-party initiated changes to the mobile device. The security of that mobile device is the responsibility of its owner, not us.

Opting out

MileagePlus members can opt out of receiving marketing or promotion-related emails or direct mail from United by accessing their account profile information on the United website and updating their profile to indicate their desire to be excluded. In addition, members can contact the MileagePlus Service Center by phone or in writing and request a profile change. Emails sent to members will contain a message and link on how to opt out of that type of communication in the future. Regardless of your opt-out preferences, we reserve the right to send you emails or other communications for administrative, operational, and emergency purposes.

Location of your information/data transfer/notice to non-US persons

We will transfer, store and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. By submitting any personal information or by using the website and without limitation to any other rights or obligations we have, you consent to such transfer to, and processing in, the United States and these other countries, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions. Where required by applicable law, we will take steps to provide appropriate levels of data protection for cross-border transfers of personal information, including by entering into data transfer agreements.

Other websites/digital channels

Our websites and our online services may contain links to third-party websites. Any access to and use of such linked sites is not governed by this Policy but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

Contact us

If you have comments or questions about this Policy, please fill out and submit this form.

If you have comments or questions about the privacy practices of MIPA, please fill out and submit this form. Where your personal information is held by MIPA you may have various rights under the DPL, and may also have a right to lodge a complaint with the Cayman Islands Ombudsman.

If you would like to exercise your privacy rights pursuant to applicable law, please submit our data and preferences request form.

Legal effect and changes to the policy

As previously stated, this Policy is not a contract nor does it otherwise create any legal rights or obligations. Rather, this Policy merely reflects guidelines setting forth United’s intended business practices. By using any United digital channel, and/or by providing any information to United online or offline, you consent to the collection and use of such information by United, its affiliates, partners, contractors and permitted agents as herein described and consistent with applicable laws. Also, United, in its discretion, may amend, interpret, modify or withdraw any portion of this Policy and related business practices at any time by posting updated text on this site. Where legally required, we will notify you of a change and obtain your consent regarding it. By continuing to use our digital channels or offline outlets constitutes your consent to those changes.

Date Last Updated: This Policy was last updated on November 15, 2023.

Additional US State Specific Information and Potential Individual Rights

Laws in certain US states may give residents of those states specific rights with respect to the personal information collected about them and additional details regarding United’s collection and use of personal information. See below for more information.

CALIFORNIA

If you are a California resident, the California Consumer Privacy Act (“CCPA”) provides you with certain additional details regarding the disclosure of your personal information along with the following rights with respect to your personal information:

Disclosure of Personal Information For Business Purposes in the Past 12 Months

All categories of personal information identified in the “Information we collect about you” section may have been disclosed to any of the categories of third parties that we identify in the "Disclosing your information" section above.

Except for those categories of personal information that contain health information, images and biometric information, security information (for example, password or authentication information), financial account or payment card information, passport information and photograph, government ID or redress number, tax ID, or information related to children under the age of 16, all categories of personal information identified in the “Information we collect about you” section may have been sold or shared in the past 12 months to any of the categories of third parties that we identify in the "Disclosing your information" section above, aside from those acting as service providers.

Business Purposes for Such Disclosures

We disclose the categories of personal information to the categories of third parties identified above for the following purposes: to manage customer, supplier and vendor accounts and relationships; process payments; verify customers’ identities; fulfill orders and transactions; engage in advertising and marketing; operate our IT systems and secure our systems; prevent fraud and other illegal activities; and to obtain professional advice about legal and accounting matters.

Additional Information About How We May Disclose Personal Information and Purposes for Disclosures

We may also disclose your personal information as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property or safety of others, including to law enforcement agencies, and judicial and regulatory authorities. We may also disclose your personal information to third parties to help detect and protect against fraud or data security vulnerabilities. And we may disclose or transfer your personal information to a third party in the event of an actual or potential sale, merger, reorganization of our entity or other restructuring.

Your Right To Know About Personal Information We Collect

You can ask us for the following information from us with respect to the personal information we have collected about you since January 1, 2022:

Specific pieces of personal information we have collected about you;
Categories of personal information we have collected about you;
Categories of sources from which such personal information was collected;
Categories of personal information that the business sold or disclosed for a business purpose about the consumer;
Categories of third parties to whom the personal information was sold or disclosed for a business purpose; and
The business or commercial purpose for collecting or selling your personal information.

Your Right To Request Deletion of Personal Information We Have Collected From You

Upon your request and subject to the application or the exceptions in the law, we will delete the personal information we have collected from you.

Your Right to Request to Correct Personal Information We Hold About You

You may request that we correct personal information we hold that you believe is not accurate. We will take steps to determine the accuracy of the personal information that is the subject of your request to correct, and in doing so will consider the totality of the circumstances relating to the personal information you have identified as being incorrect. We may ask that you provide documentation regarding your request to correct to assist us in evaluating the request.

Your Right to Ask Us Not to Sell or Share Personal Information We Have Collected About You

With respect to those categories of personal information that we sell to third parties or share with third parties for the purpose of cross-context behavioral advertising, you have the right to opt out of such sales and sharing.

Your Right to Ask Us to Limit the Use of Your Sensitive Personal Information

To the extent we use or disclose your sensitive personal information to infer characteristics about you, you may have the right to request that we not do so and limit our use of such information to providing our Services and other business or operational purposes set forth in the CCPA relating to the use of sensitive personal information.

California Shine the Light

California Civil Code Section 1798.83, also known as the “Shine the Light” law, permits California residents to annually request, free of charge, information about the personal information (if any) disclosed to third parties for direct marketing purposes in the preceding calendar year. To make a request, please contact us at privacy@united.com.

Do Not Track Signals

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals.

Our Commitment to Honoring Your Rights

If you exercise any applicable rights explained in this Policy, we will continue to treat you fairly. If you exercise your rights under this Policy, you will not be denied or charged different prices or rates for goods or services, or provided a different level or quality of goods or services than others.

Exercising Your Rights and How We Will Respond

To exercise your rights to know, delete or correct your personal information you may call us at 1-800-864-8331 or use our webform found here. For such requests, we will first acknowledge receipt of your request within 10 business days of receipt of your request. We will then provide a substantive response to your request as soon as we can, generally within 45 days from when we receive your request, although we may be allowed to take longer to process your request in certain jurisdictions or under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know.

You can direct us to limit the use of your sensitive personal information, not to sell your personal information, or not to share it for purposes of cross-context behavioral advertising by calling us at 1-800-864-8331 or contacting us through our webform found here. For such requests, we will comply no later than 15 business days after receipt of your request.

We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations. In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will endeavor to provide you with an explanation as to why.

Verification of Identity – Requests to Know, Delete or Correct

We will ask you for two or three pieces of personal information and attempt to match those to information that we maintain about you.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.

Authorized Agents

You may designate an agent to submit requests on your behalf. The agent can be a natural person or a business entity.

If you would like to designate an agent to act on your behalf, you and the agent will need to comply with our verification process:

Requests to Know, Delete or Correct Personal Information: If the agent submits a request, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf. We will also require that you verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request. Please reach out to privacy@united.com and provide the first and last name and email address of the individual engaging you as their agent, along with a copy of the signed permission to act as their agent.
Requests to Opt-Out of Sale or Sharing: If the agent submits a request to opt out of the sale of your personal information or the sharing of your personal information for purposes of cross-context behavioral marketing, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out request on your behalf. Please reach out to privacy@united.com and provide the first and last name and email address of the individual engaging you as their agent, along with a copy of the signed permission to act as their agent.

Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with California law pertaining to powers of attorney.

COLORADO

If you are a Colorado resident, the Colorado Privacy Act (“CPA”) grants the rights described below with respect to personal information we collect about you.

Right to Know: The right to confirm whether or not we are processing your personal information and to access such data
Right to a Copy: The right to a portable copy of the personal information we have collected from you
Right to Delete: The right to request deletion of their personal information that we have collected about you and to have such information deleted, subject to certain exceptions
Right to Correct: The right to ask that we correct inaccuracies in your personal information, taking into account the nature of personal data and purposes of processing such information
Right to Opt Out of Targeted Advertising: The right to ask us to stop processing your personal information for such purposes
Right to Opt Out of the Sale of Personal Information: The right to ask us to stop processing your personal information for such purposes

Please note that for purpose of this section of this Policy, we consider “personal information” to have the same meaning as “personal data” as defined under the CPA.

Exercising Your Rights and How We Will Respond

To exercise your rights to know, delete, or correct, you can contact us at 1-800-864-8331 or use our webform found here. We will respond to such requests within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know.

You can opt out of the sale of your personal information or the use of your personal information for targeted advertising by calling us at 1-800-864-8331 or contacting us through our webform found here.

Our Commitment to Honoring Your Rights

If you exercise any applicable rights explained in this Privacy Policy, we will continue to treat you fairly. If you exercise your rights under this Privacy Policy, you will not be denied or charged different prices or rates for goods or services or provided a different level or quality of goods or services than others.

Verification of Identity – Requests to Know, Delete, Correct

We will ask you for two or three pieces of personal information and attempt to match those to information that we maintain about you.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.

When We Do Not Act on a Request – Appeal Process

In some cases, we may not act on your requests (e.g., if we cannot do so under other laws that apply). When this is the case, we will explain our reasons for not providing you with the information or taking the action (e.g., correcting data) you requested.

Additionally, you have the right to appeal our decision by contacting us at privacy@united.com within 30 days after your receipt of our decision. Please provide us with the first and last name and email address of the individual making the request. We will respond to your appeal within 45 days of our receipt of the request, unless we need additional time to do so (up to 60 additional days), in which case we will notify you.

CONNECTICUT

If you are a Connecticut resident, the Connecticut Data Privacy Act (“CTDPA”) grants the rights described below with respect to personal information we collect about you.

Right to Know: Connecticut residents have the right to confirm whether or not we are processing their personal information and to access such data.
Right to Access: Connecticut residents have the right to a portable and technically feasible copy of the personal information we have collected from them.
Right to Correct: Connecticut residents have the right to ask that we correct inaccuracies in their personal information, taking into account the nature of personal data and purposes of processing such information.
Right to Delete: Connecticut residents have the right to request deletion of the personal information that we have collected about them and to have such information deleted, subject to certain exceptions.
Right to Opt Out of the Sale of Personal Information: Connecticut residents have the right to ask us to not to sell their personal information for such purposes.
Right to Opt Out of Targeted Advertising: Connecticut residents have the right to ask us to stop processing their personal information for such purposes.

Please note that for purpose of this section of this Notice, we consider “personal information” to have the same meaning as “personal data” as defined under the CTDPA.

Exercising Your Rights and How We Will Respond

To exercise your rights to know, delete or correct, or to ask a question, contact us at 1-800-864-8331 or use our webform found here. We will respond to such requests within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know.

Our Commitment to Honoring Your Rights

Verification of Identity – Requests to Know, Delete, Correct

We will ask you for two or three pieces of personal information and attempt to match those to information that we maintain about you.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.

When We Do Not Act on a Request – Appeal Process

Authorized Agents

You may designate an agent to submit requests on your behalf. The agent can be a natural person or a business entity.

If you would like to designate an agent to act on your behalf, you and the agent will need to comply with our verification process:

Requests to Know, Delete or Correct Personal Information: If the agent submits a request, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the request on your behalf. We will also require that you verify your identity directly with us or confirm with us that you provided the agent with permission to submit the request. Please reach out to privacy@united.com and provide the first and last name and email address of the individual engaging you as their agent, along with a copy of the signed permission to act as their agent.
Requests to Opt Out: If the agent submits opt-out requests, the agent will need to provide us with your signed permission indicating the agent has been authorized to submit the opt-out request on your behalf. Please reach out to privacy@united.com and provide the first and last name and email address of the individual engaging you as their agent, along with a copy of the signed permission to act as their agent.

VIRGINIA

The Virginia Consumer Data Privacy Act (“VCDPA”) grants the Virginia residents the rights described below with respect to personal information we collect about you.

Right to Know: The right to confirm whether we are processing their personal information and to access such data.
Right to a Copy: The right to a portable copy of the personal information we have collected from them.
Right to Delete: The right to request deletion of their personal information that we have collected about them and to have such information deleted, subject to certain exceptions.
Right to Correct: The right to ask that we correct inaccuracies in their personal information, taking into account the nature of personal data and purposes of processing such information.
Right to Opt Out of Targeted Advertising: To the extent we engage in targeted advertising, the right to ask us to stop processing their personal information for such purposes.

While Virginia law provides the right to opt out of the sale of personal information, we do not sell personal information consistent with the definition of “sale” under Virginia law.

Please note that for purpose of this section of this Policy, we consider “personal information” to have the same meaning as “personal data” as defined under the VCDPA.

Exercising Your Rights and How We Will Respond

You can direct us not to process your personal information for purposes of targeted advertising by calling us at 1-800-864-8331 or contacting us through our webform found here.

We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations.

Verification of Identity – Requests to Know, Delete, Correct

We will ask you for two pieces of personal information and attempt to match those to information that we maintain about you.

If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.

When We Do Not Act on a Request – Appeal Process

Additionally, you have the right to appeal our decision by contacting us via privacy@united.com within 30 days after your receipt of our decision. Please provide us with the first and last name and email address of the individual making the request. We will respond to your appeal within 60 days of our receipt of the request.

Customer Data Privacy Policy

Your privacy is important to us

Customers in the United Kingdom and European Union

Your privacy is important to us

Scope of this policy

Information we collect about you

Information we collect directly from you

MileagePlus information

Online purchases

Offline purchases: Telephone, travel agent or ticket counter

COVID-19

Biometric Information

United Club

In flight

Children

Information we automatically collect

Information we collect through our mobile application(s)

Information we collect from third parties

Sensitive information we collect directly from you

How we use your information

General - applicable to all sources of information

MileagePlus

Children

Information collected from our mobile application(s)

Disclosing your information

Use of cookies, web beacons and other similar technologies

Targeted advertising

Third-party analytics

Your legal rights

Protecting information collected

Your role in protecting your information

Changing your marketing preferences

Location of your information/data transfer/notice to non-US persons

Other sites/digital channels

Contact us

Legal effect and changes to the policy

Customers in Mexico

Your privacy is important to us

Scope of this policy

Information we collect about you

Information we collect directly from you

MileagePlus information

Online purchases

Offline purchases: Telephone, travel agent or ticket counter

COVID-19

Biometric Information

United Club

In flight

Children

Information we collect automatically

Information we collect through our mobile application(s)

Information we collect from third parties

Sensitive information we collect directly from you

How we use your information

General - applicable to all sources of information

MileagePlus

Children

Information collected from our mobile application(s)

Disclosing your information

Use of cookies, web beacons and other similar technologies

Targeted advertising

Analytics

Your legal rights

Protecting information collected

Your role in protecting your information

Changing your marketing preferences

Location of your information/data transfer/notice to non-US persons

Other sites/digital channels

Contact us

Legal effect and changes to the policy

Customers in the United Kingdom and European Union

Your privacy is important to us

Scope of this policy

Information we collect about you

Information we collect directly from you

MileagePlus information

Online purchases

Offline purchases: Telephone, travel agent or ticket counter

COVID-19

Biometric Information