WestJet Rewards Privacy Statement

For the purposes of this Privacy Statement, “WestJet”, “we”, and “us” mean WestJet, an Alberta partnership, WestJet Group Inc., and their controlled affiliates and subsidiaries, including WestJet Loyalty Holding LP and WestJet Loyalty LP. WestJet is responsible for administering the WestJet Rewards program and responding to privacy-related questions and requests relating to the program.  Program Partners, the WestJet Credit Card issuer, service providers, and other partners may have their own privacy statements and may be responsible for their own collection, use, disclosure, and protection of personal information depending on your relationship with them. 

In this Privacy Statement, “Rewards Group” means WestJet and Sunwing Vacations for purposes of the WestJet Rewards program; “Program Partners” means partners that participate in point accumulation, redemption, linked loyalty, or co-branded program activities and with whom WestJet collaborates to provide broader member benefits or offers; “WestJet Credit Card issuer” means the financial institution that issues a WestJet Credit Card; “Service Providers” means organizations that process personal information on WestJet’s behalf; and “other partners” means other third parties that make products, services, offers, or benefits available to Members in connection with WestJet Rewards. 

Personal information is information about an identifiable individual, including information that can be used to identify or contact you directly or indirectly, as set out more fully in the “Personal Information” section of the Main WestJet Privacy Statement. 

Generally, we collect your personal information directly from you, including when you enroll in WestJet Rewards, earn or redeem points, interact with our websites, apps, emails, or promotions, or contact us regarding the program.   

We may also collect personal information from a third-party service provider, program partner, financial institution or someone acting on your behalf. Unless and until we are advised otherwise, we will consider a third-party booking on your behalf to have your authority to provide us with your personal information in the same manner as if you were providing that information yourself. In the case of personal information of minors or those incapable of providing consent, those consenting on their behalf must be parents, legal guardians or legal representatives, as appropriate. Parents, legal guardians or legal representatives will exercise privacy and data protection rights on behalf of such individuals. See “Services booked for you by someone else” below for further information.   

Here is a list of some of the personal information we might collect, including when and how we might collect it (this list includes only some examples and is not exhaustive):  

• Your full name and contact information (such as your address, telephone number, email address and date of birth) when you enroll in WestJet Rewards, 
• WestJet Rewards-specific information, such as your membership number, points balance, account status, transactions, redemption activity, details about rewards you redeem, information necessary to fulfill your redemption request, and information relating to WestJet Credit Card benefits and transactions, where applicable and as described below.   
• Your travel history and interactions with WestJet Rewards, WestJet, Sunwing Vacations, and participating Program Partners. Information about your transactions with us or third parties (like air carriers, hotels, transportation and other service providers) where we coordinate the transactions for you (like when you redeem rewards). We may collect this information directly from you or through third parties.   
• How you interact with the applications and technologies when you access WestJet Group websites and cookies and other technologies that are enabled on your computer or device. This is described further in the Main WestJet Privacy Statement.   
• Details about our interactions when you contact us, such as when and why you contacted us.   

Personal information does not include anonymized or aggregated information that cannot reasonably be used to identify an individual. 

In addition, if you are a Member, we may collect personal information when you interact with any company in the Rewards Group, including:  

• When you make purchases or redemptions with a company in the Rewards Group, that company provides information about the transaction to us – such as transaction date, dates of travel, price, destination, products purchased (ticket type, checked bag, advance seat selection, hotel, etc.) and any other information you provided as part of that transaction.  
• When you receive any Rewards Group emails, we may collect information about how you engage with us, such as whether and when you open your emails – for more details, please see “Cookies and other technology”.  
• When you visit or use any Rewards Group website, mobile application or any other Rewards Group online platform, we may collect information such as the webpages you viewed, search queries, frequency of visits, time spent on the site or application, and location information – for more details, please see the terms and conditions of the applicable website or mobile application, and “Cookies and other technology”.  
• When you interact with the Rewards Group social media pages and contests, we may collect or receive information about that interaction.  

This collection can include information about past interactions – including those that occurred before you became a Member – where the use is consistent with the original purposes for which the information was collected, based on consent where required, or otherwise permitted by law. Where permitted, we may use information from previous interactions with WestJet, Sunwing Vacations, participating Program Partners, or related services to support the administration of the program, provide relevant benefits and offers, improve member experiences, and better understand member preferences and interests. 

If you are a Member, we may collect personal information when you interact with our Program Partners. For example:  

• If you accumulate points or make a redemption with a program partner, we may receive a description of the transaction. We may also receive information from Program Partners relating to point accumulation, reward redemption, participation in partner programs, or linked and co-branded loyalty programs, in accordance with the applicable terms, consents, or program agreements.   
• If you are a WestJet Credit Card holder, WestJet may receive information about you from the financial institution that issued your WestJet Credit Card, including information needed to administer WestJet Rewards benefits associated with the card. This may include transaction information such as the merchant’s name, location, date, and amount of purchase. This information sharing is described in more detail in the cardholder documents provided with your WestJet Credit Card. We may use this information to administer WestJet Rewards benefits and, where you have opted in or provided the required consent, provide a more personalized program experience. 
• If you provide a separate consent to link a Program Partner’s loyalty or marketing program with your WestJet account, the Program Partner may share additional information with us as set out in that consent.  
• Web interactions: We collect browsing data from websites co-branded with WestJet Rewards and, for purchases on non-co-branded third-party websites accessed via the WestJet Rewards platform, we may also collect information about the product purchased using cookies or similar technologies, including location information where enabled or otherwise permitted. For more information about our use of cookies, see “Cookies and other technology” below and the Main WestJet Privacy Statement. 

If a third party, like a travel agent, family member or employer, makes a booking or request on your behalf, WestJet uses your personal information as provided by them to manage those bookings or requests. Unless we are advised otherwise, we will treat that person as having your authority to provide us with your personal information. The way in which that third party collects, uses and discloses your personal information is subject to your dealings with them and their privacy statements and practices, not those of WestJet. Any inquiries about the privacy statements and practices of third parties should be directed to them. That third party is responsible for providing any notices and obtaining any consents required for them to provide your personal information to WestJet for the booking or request. 

If you have a WestJet Credit Card, we use personal information to administer WestJet Rewards benefits associated with the card, fulfill redemption requests, and provide relevant offers or advertising in accordance with your choices and applicable law. If available, you may also opt in or provide any required consent for WestJet to use information related to where you shop to provide a more tailored program experience, including more personalized offers, travel benefits, programs, and rewards opportunities.    

WestJet may also receive information from the financial institution that issued your WestJet Credit Card, including information relating to card transactions and program benefits, as described in the cardholder agreement associated with your credit card. We use this information to administer WestJet Rewards benefits and, where applicable and with any required consent, provide more relevant offers, benefits, and program experiences. 

You can find more information about the type of personal information used in relation to WestJet Credit Cards by reviewing the cardholder agreement issued by your financial institution, which was included with your credit card. 

We use cookies and similar technologies on our sites and apps, and we measure how you engage with our emails, including whether and when you open them. The Main WestJet Privacy Statement sets out the categories, what each does, how choices work, how to change your choices through the cookie preference centre and other available tools, and when we honour Global Privacy Control signals where required by applicable law or where WestJet has confirmed that it honours them. When you sign in or authenticate, information about how you use our website and app may be linked to your guest profile for service continuity, security and fraud prevention, analytics, and, where you consent or the law permits, personalization. For more details, please see the Main WestJet Privacy Statement.

How does WestJet Rewards disclose personal information?

WestJet Rewards discloses personal information as reasonably required to process your request to redeem rewards for travel services, including flights, hotel and car bookings, to provide other requested services to you, and to display relevant advertising in accordance with your choices and applicable law, or as otherwise set out in this Privacy Statement and the Main WestJet Privacy Statement. Here is a list of some of the ways we might disclose your personal information (this list includes only examples and is not exhaustive): 

• To maximize the value of your WestJet Rewards membership to you, and to serve you better, we collaborate extensively with other companies in the Rewards Group. Part of this collaboration involves sharing relevant personal information with companies in the Rewards Group, including our understanding of your interests, preferences and purchasing patterns. Companies in the Rewards Group then use that personal information to better tailor their travel-related offers to you in order to provide you with more opportunities to earn points and to receive rewards. 
• We share your personal information with a program partner as necessary to fulfill a redemption transaction, such as your name, contact information and point balance, including when you use your WestJet Rewards credentials on a partner website or application.  
• We may share information about your activity in the program or general characteristics about you, such as past purchases and behavioural data, with a program partner or strategic partner of which you are a customer, where reasonably necessary for that partner to make relevant offers to you that allow for the accumulation or redemption of points, provide a Member-related benefit or privilege, support linked loyalty experiences, or fulfill another purpose described to you at the time of collection or consent. For example, we may share your contact information, your program status, how long you have been a Member, which region you live in, your age range, and that you had at least a certain number of transactions within a partner category in a period of time.   
• We may share your contact information to organizations with programs that are affiliated to WestJet or that might interest you, so that they can get in touch with you and offer their products and/or services. This personal information is only disclosed with your consent, which you may withdraw at any time.  
• We may share your personal information to address a customer service issue or as permitted by law, for example to assist in detecting or preventing fraud.  
• We may share identifying information of Members, such as name, contact information and country of residence, in a hashed format, with social media platforms or internet search providers with which you have an existing relationship. This information is shared for the purpose of extending exclusive membership-related offers and benefits to Members who use the services of these third parties by delivering customized advertising to you on social media platforms and, where permitted by law and consistent with your choices, for building lookalike audiences using tools such as Meta’s Custom Audiences and Lookalike Audiences features. You may manage or disable this use of your data through the cookie preferences banner, other advertising preference tools described in the Main WestJet Privacy Statement, and any applicable settings offered by the relevant platform, or by contacting us as set out in this Privacy Statement. 
• Where you provide a separate consent to link a program partner’s loyalty or marketing program with your WestJet Rewards account, then we may share additional information with that program partner as set out in that consent. This may include linked, co-branded, or affiliated loyalty and marketing programs where you have provided the required consent. We will not share with Program Partners the personal information that we receive from financial institutions regarding WestJet Credit Card holders without your separate consent. 
• Where WestJet shares your personal information with Program Partners, those Program Partners are contractually required to comply with privacy laws in collecting, using, disclosing and safeguarding your personal information. Although we make reasonable efforts to ensure that our Program Partners respect your privacy, ultimately Program Partners control the personal information that we share with them, and they are responsible to you for their privacy practices and compliance with applicable privacy laws.  
• We may share personal information with service providers who assist us in operating, administering, supporting, securing, or improving the WestJet Rewards program. These service providers process personal information on our behalf and are contractually required to protect it and use it only for authorized purposes. 
• We reserve the right to disclose and/or transfer personal information to a related party in the event of a proposed or completed corporate reorganization and to a related party or third party in the event of a proposed or completed purchase, sale (including a liquidation, realization, foreclosure or repossession), lease, license, merger, amalgamation or any other type of acquisition, disposal, transfer, conveyance, financing, the taking of security on, or securitization of all or any portion of WestJet or of any of the business or assets or shares of WestJet or a division thereof, in order for you to continue to receive the same products and services from such related party or third party.  
• We may also disclose aggregated and anonymized information, which no longer allows an individual to be directly or indirectly identified, for study or research purposes, for the production of statistics, and such other purposes as permitted by applicable law.  

The safety and security of your personal information also depends on you. While many of our services are publicly accessible, your WestJet Rewards account information and some of our services are accessible only through the use of an individual user ID and password. To protect the confidentiality of your personal information, you must keep any password associated with your use of our services confidential. Do not disclose it to any other person. Please let us know immediately if you believe that the confidentiality of your password has been compromised or if it has been misused. Please note that we will never ask you to disclose your password in an unsolicited phone call or email.  

We encourage you to contact WestJet's Privacy Officer first if you have any questions, concerns, or complaints regarding our collection, use, or disclosure of your personal information. We will investigate and respond to your concern. 

Where you make a request to exercise your rights in relation to your personal information or you make a complaint, we ask that you provide us with sufficient information so that we can properly address your request. Our response will be subject to verifying your identity using the least intrusive method appropriate to the request.  

We will respond to your request within the time required by applicable law. We may refuse or limit a request where we are not legally required, or are prevented by applicable law, to fulfill it. 

If you are not satisfied with our response, or if you believe we have breached applicable privacy laws, you may have the right to complain to the privacy regulator or supervisory authority responsible for your jurisdiction. For example, in Canada you may contact the Office of the Privacy Commissioner of Canada and, in Quebec, the Commission d'accès à l'information du Québec.  

If you are unsure of who that authority is, please contact us using the contact details in the Main WestJet Privacy Statement. 

Whilst this Privacy Statement describes the data protection practices adopted by us generally across the world in respect of the WestJet Rewards program, local data protection laws may vary. Specifically, our operations in the United Kingdom and European Economic Area may mean that we are subject to different, or additional, local data protection requirements.   

The sections of this Privacy Statement set out above together with the information set out in this local differences section constitute our Privacy Statement for the purposes of our compliance with the data protection laws in the United Kingdom and European Economic Area in respect of the WestJet Rewards program. We set out below additional information, over and above the information set out in the rest of this Privacy Statement, that we are obliged to provide to you to comply with local data protection laws in the United Kingdom and European Economic Area.       

We cannot force you to provide your personal information to us and you can choose not to provide us with your personal information. Where we need to collect your personal information by law or in order to process your instructions, provide you with our products or services, or perform a contract we have with you and you decide not to provide that information when requested, we may not be able to carry out your instructions, provide our products and services, or perform the contract we have or are trying to enter into with you. In other circumstances where you choose not to provide us with your personal information we request, your decision not to provide us with your personal information may affect our ability to provide certain of our products and services.

For the purposes of the data protection laws in the United Kingdom and the European Economic Area, WestJet (the Alberta partnership) and its affiliates WestJet Loyalty Holding LP and WestJet Loyalty LP are considered to be joint controllers of the personal information processed in connection with the operation of the WestJet Rewards program. A joint controller arrangement generally means that the joint controllers will share certain personal information and will determine jointly how and why that personal information is processed. It also means that they are jointly responsible to you under those laws for that processing. WestJet is the day-to-day manager of the WestJet Rewards program and is the only one of the three parties that will collect and, ordinarily, hold a copy of your personal information in relation to the WestJet Rewards program. For this reason, the joint controllers have agreed that WestJet will be: (i) primarily responsible for ensuring that the joint controllers comply with the data protection laws in the United Kingdom and the European Economic Area in respect of the personal information processed in connection with the WestJet Rewards program and (ii) the primary contact for all privacy-related queries, issues or requests relating to the WestJet Rewards program. Please note that, in the context of this joint controller arrangement, your personal information will continue to be processed as described in this Privacy Statement. If you would like further information on this joint controller arrangement, please contact us using the contact details in the Main WestJet Privacy Statement.

Where we transfer personal information from a country located within the European Union to a country outside of the European Union that is not recognized by the European Commission as providing an adequate level of data protection, we normally do so subject to safeguards that assure the protection of your personal information, such as the European Commission approved Standard Contractual Clauses.