Privacy Policy (May 2025) - Why does Flybuys collect, use and disclose personal information?

• Creating your Flybuys account.
• Keeping your personal information up to date.
• Verifying your identity.
• Allocating Flybuys points.
• Enabling redemption of points for rewards.

• Email.
• SMS.
• In-app messages.
• Push notifications.
• Ads you may see on Flybuys’ and third-party websites.

• Information about Flybuys’ and partner’s products, services, promotions and direct marketing that may be of interest to you.
• Information about your reward redemption.
• Service messages (such as product recall notices or notification of updates to our Terms and Conditions).

• To improve understanding of your interests and behaviour in relation to products, services, and offers.
• To improve operational processes to enhance your customer experience.
• Reviewing and testing systems, products and services, (such as reviewing call recordings or using AI to determine the reason for your call).
• Analysis and reporting, including reviewing preferences and transaction patterns of our members, grouping members into segments for personalisation and targeted digital marketing or the generation of insights.

Providing you with support.

• Investigating and responding to your feedback, queries or concerns.
• We may monitor and record your communications with us (including email and telephone) for security, dispute resolution, quality control and training purposes.

System and account security, fraud detection, and investigations.

• To safeguard member accounts and our infrastructure from malicious, dangerous, or illegal activities.
• To detect and monitor suspicious behaviours and potential security threats.
• To conduct investigations, implement fraud detection measures, and help with loss prevention strategies.

• Recruitment of team members.
• To protect our lawful interests.
• To facilitate purchases and potential purchases of our businesses.

As required or permitted by law.

• Complying with our regulatory obligations, including any requests for information from a regulator, court, government department, or authorised authorities.