What we collect, why we collect it, and the choices you have. Written to be read, not skimmed past.
Last updated: 3 September 2026
We collect the details you give us when you create an ExtraMiles account or contact us, and the transaction records our partners send when you earn miles.
Your information is used to run the loyalty programme and to improve it — never sold.
Earning miles requires a partner to confirm your transaction, so we share the minimum needed to match it to your account — typically your membership identifier, not your contact details.
When you follow a partner link from ExtraMiles, that partner's own privacy policy governs what they collect on their site.
Marketing email is opt-in and every message carries an unsubscribe link. Unsubscribing stops marketing email but not the transactional messages needed to operate your account, such as passcodes and security notices.
Account and transaction records are kept while your account is active, and afterwards only as long as needed to meet legal, accounting and fraud-prevention obligations. Records we no longer need are deleted or anonymised.
Data is transmitted over encrypted connections and access is restricted to staff who need it. Passwords are stored only in hashed form — never in plain text — and we will never ask you for your password by email, phone or message.
You can ask us to show you the personal data we hold, correct it, delete it, or stop using it for marketing. Write to the address below and we will respond within the period required by applicable UAE law.
We use browser storage to keep you signed in and to remember preferences such as your language. We do not use it to build advertising profiles.
If we make a material change we will update the date on this page and, where the change affects how we use your data, tell you directly.