Privacy Notice

Emirates (also referred to as “we” and “us”), is a Dubai corporation established by Decree No.2 of 1985 (as amended) of the Government of Dubai, whose principal office is at Emirates Group Headquarters, PO Box 686, Dubai, United Arab Emirates. Emirates is part of the Emirates Group and is primarily focused on airline operations and includes divisions and/or entities and brands, such as Emirates Skycargo, Skywards and Emirates Courier Express.

If you have any questions about this Notice, you can contact our Data Privacy Officer at privacy@emirates.com or at Data Privacy Office, Emirates Group, P.O. Box 686, Dubai, United Arab Emirates.

You can find out more about the Emirates Group here.

This Notice is applicable to all individuals using Emirates Courier Express services, products, websites, or applications worldwide, unless they are covered by a separate Privacy Notice. The following categories of individuals are covered by this Notice:

• Shippers: This includes shippers, their employees, or individuals who send a shipment.
• Shipment receivers: Any individual who receives a shipment.
• Persons who interact with Emirates Courier Express and express interest in our services or paying for them.
• Persons who visit Emirates Courier Express website
• Contractors and service providers, including their employees.
• All the above subjects are referred to as "you" or "your".

The type of information we collect about you depends on your interaction with us. In some countries, additional data can be processed to comply with local laws.

• Contact Details: This includes information necessary to contact you, such as your name, telephone and mobile number, WhatsApp, address, and email address, which we may need when picking up or delivering a package.
• User Verification Information: This pertains to data that helps us confirm your identity and validate your access to specific data. It includes your account information, login ID, and password.
• Profile Data: This refers to information on your profile, such as your delivery preferences and order/purchase history.
• Shipping Information: This includes data that facilitates the pick-up and delivery of your shipment, such as your address, shipment documents, and proof of delivery.
• Financial Information: This encompasses data used for invoicing, financial, and payment processes, such as your bank account number and e-payment details.
• Identification Information: This involves data used to identify you, such as an image of your passport to verify your identity, your ID data, social security number, and your signature as proof of delivery.
• Feedback Information: This includes information you provide to us, either directly to one of our employees or by completing an online survey. This could be your feedback or other comments.
• Website activities. This includes information we may automatically collect about your use of our websites, such as IP address, your activities on our website, domain name.

Our main purpose in collecting and utilizing your personal information is to handle, transport, and deliver your shipment. We may collect your information directly or indirectly. When you actively provide us with information by creating an account, reaching out to us, or completing a form or survey on our website, we receive your data directly from you. This information may be collected online, over the telephone through our contact centre, or in person at our facilities. If we receive your data from an external third party, such as a shipper, we receive your data indirectly. In this case, it is their responsibility to ensure the accuracy of the data and transfer it to us in compliance with relevant laws.

We will only process your personal information for the below purposes when we have a valid legal ground for the processing in accordance with applicable law, depending on the country in which you are located.

The table below describes the processing activities for which we act as a data controller. Where we act as a data processor on behalf of the shippers or other partners who operate as data controllers, the shippers or other partners are responsible for ensuring a valid legal ground for the data processing. Please refer to their respective privacy policies for more information regarding the processing of your personal information.

Emirates will share or transfer your data to the following category of recipients in the course of carrying out the purposes outlined in this Notice, when permitted by applicable law and with appropriate safeguards:

• To other companies and/or brands in the Emirates Group.
• To third parties that we use for the provision of certain services, such as ground handling and logistical services related to the transportation of goods; to anyone to whom we transfer or may transfer our rights and duties under any agreement we have with you or your business.
• To customs or other regulatory authorities in the country of departure and/or destination in order to comply with the law in those countries.
• To third party organisations involved in credit card authorisation.
• To employees and agents of the Emirates Group.

Where the information is disclosed to our contractors, we obtain contractual commitments from them to protect your personal information and to use personal information for the specific purposes for which we supply it. We may also disclose your personal information if necessary either to prevent a threat to life or health, authorised or required by law, reasonably necessary to enforce the law or necessary to investigate a suspected unlawful activity.

Emirates Courier Express is a global business, which means your personal information may be transferred and stored in the United Arab Emirates and other countries which may be outside your country of residence. Some of these countries are subject to different standards of data protection than your country of residence.

We may transfer your personal information to people in foreign countries for the purposes set out in this Notice, for example:

• To Emirates offices globally.
• To third party contractors and service providers (including operators of global travel distribution systems).
• Airlines and other travel and freight service providers.

In most cases the transfer will be necessary for the performance of our agreement with you or for the implementation of pre-agreement measures taken in response to a request by you or for the performance of a contract with a third party which is concluded in your interests.

In the event your personal information is transferred to a foreign jurisdiction, it may be subject to the laws of that jurisdiction, and we may be required to disclose it to the courts, law enforcement or governmental authorities in those jurisdictions.

We will take appropriate steps to ensure that transfers of personal information are in accordance with applicable law, and we only transfer personal information to another country where:

• we are satisfied that adequate levels of protection are in place to protect your information; and
• the transfers are fully managed to protect your privacy rights and interests and are limited to countries which are recognized as providing an adequate level of legal protection or where we can be satisfied that alternative arrangements are in place to protect your privacy rights.

To fulfil our obligations, execute our contracts, and comply with legal requirements, we will retain your data for the necessary duration. Please note that the length of this retention period may vary depending on the laws of each country.

In accordance with legal obligations, certain data may be retained for up to 10 years, although this duration may differ based on local laws in each country. This includes, for instance, the retention of shipment documents needed for shipment processing. We establish a suitable and reasonable retention period by taking into account the nature, sensitivity, and necessity of your data. Please be aware that any data collected with your consent will be processed until such time as you withdraw your consent.

Emirates will take appropriate steps to protect the personal information we collect from you. We have implemented various technology and security features to safeguard the privacy of your personal information.

We take reasonable steps to ensure that your personal information is accurate, complete, and up to date whenever we collect or use it. If the personal information we hold about you is inaccurate, incomplete, or out-of-date, please contact us and we will take reasonable steps to either correct this information, or if necessary, discuss an alternative action with you.

Our website may use "cookies" so that we can better serve you with customised information when you return to our website. Cookies are identifiers which a website can send to your browser to facilitate a user's next visit to our website. You can set your browser to notify you when you are sent a cookie, giving you the option to decide whether or not to accept it. If you disable cookies, your use of our site may be affected. Information collected about your visit to our site is retained for statistical and website development purposes, and not in a form which would enable us to identify you.

Our website may contain links to other websites. Emirates is not responsible for the privacy practices of websites not operated by Emirates or by an entity in the "Emirates Group". We encourage our users to read the privacy statements of each and every website that collects personal information.

We reserve the right to change this Notice from time to time according to the changes in our services, the processing of your data or in the applicable law. We therefore recommend visiting our Notice periodically.

If you are subject to laws that provide you with such rights, depending on certain exceptions, and in some cases dependent upon the processing activity we are undertaking, you may have certain rights in relation to your personal information.

• Right to access personal information. You have a right to request that we provide you with a copy of your personal information that we hold, and you have the right to be informed of: the source of your personal information; the purposes, legal basis and methods of processing; the data controller’s identity; and the entities or categories of entities to whom your personal information may be transferred.
• Right to rectify personal information. You have the right to request a correction of any inaccurate data about yourself.
• Right to erase (‘right to be forgotten’) personal information. You have the right, in certain circumstances, to request a deletion of your data. Where your right to be forgotten is valid, and only, if necessary, minimal data about you can be kept ensuring you will not be contacted again.
• Right to restrict the processing of your personal information. You have the right to request a limitation in the way your data is used.
• Right to object to the processing. You have the right to challenge certain types of processing when based on legitimate interest, such as direct marketing.
• Right to lodge a complaint with your local supervisory authority. You have a right to lodge a complaint with your local supervisory authority (i.e. your place of habitual residence, place of work of place of alleged infringement) if you have concerns about how we are processing your personal information. We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.

If you wish to access any of the rights set out above, we may ask you for additional information to confirm your identity and for security purposes, in particular before disclosing personal information to you. We reserve the right to charge a fee where permitted by law, for example, if your request is manifestly unfounded or excessive.

You can exercise your rights by completing a form, or by emailing us at privacy@emirates.com or by sending us a communication at Data Privacy Office, Emirates, P.O. Box 686, Dubai, United Arab Emirates. Subject to legal and other permissible considerations, we will make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request.

We may not always be able to fully address your request, for example, if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.