Privacy and security

Privacy Policy

Updated: 1 May 2026

On this page

Introduction

General

This Privacy Policy explains how Qantas generally handles your personal information. We may also provide more specific information relating to particular products or services in our privacy collection notices.

We will update this policy on our website if we change the way we handle personal information.

This Privacy Policy does not apply to Qantas’ employee records and contractor records.

Specific types of interactions with us

In addition to the general information in this Privacy Policy, we have included specific sections that you should read if you:

Who is Qantas?

This Privacy Policy applies to Qantas Airways Limited and its related bodies corporate (referred to as “Qantas”, “we” and our), excluding Qantas Superannuation Limited and TripADeal Pty Limited, and excluding all Jetstar branded entities.

Information we collect

General

The types of personal information that we collect and process about you will depend on our relationship with you. It will include some or all of the following:

Certain aspects of your personal information, for example details of your travel documentation, payment details and contact information, are required for many of our products and services and if you fail to supply such information as requested for specific services, we may be unable to provide you with the products and services in full.

Sensitive personal information

Under privacy laws, certain categories of personal information are considered particularly sensitive and therefore as needing additional protection. These categories include information about health, racial or ethnic origin, political opinions, religious beliefs, trade union membership or your sexual orientation. Sensitive information may also include genetic and biometric data. Information concerning criminal convictions and offences is also viewed as sensitive, for example, under European data protection law.

We may collect and handle your sensitive personal information, for example:

We will ask you for your consent to handle this type of personal information, to the extent required under applicable laws, for example under the Australian Privacy Act or the European General Data Protection Regulation.

How we collect personal information

How we collect personal information about you will depend on our relationship or interactions with you.

Directly from you

We mainly collect information directly from you, for example, when you use our website or social media, you call or write to us, we interact with you in person, such as when you use our products and services or participate in promotions, or you buy or sell shares in our company, or if you are a Qantas Frequent Flyer member.

Indirectly

There may be occasions when we collect information about you from someone else, such as:

We may also collect information about you via data matching activities conducted by us or our trusted service providers.

If you provide us with information about other individuals, regardless of whether you are travelling together, you are responsible for telling those individuals and letting them know that they can find a copy of this Privacy Policy on our website.

How we use your personal information

We may use your personal information for the following purposes:

We may also combine the information that we collect and hold about you.

Disclosure of personal information

We may disclose your personal information to third parties in connection with:

including:

For example:

In addition to the above third parties, we may use service providers for the services listed below, many of whom handle your personal information on our behalf.

We may disclose your personal information to comply with our legal obligations, respond to complaints and claims, and investigate and protect ourselves and third parties against any activity that we reasonably suspect to be fraudulent. We may also disclose your personal information to law enforcement agencies, regulatory authorities and governments around the world and their service providers in connection with their investigations, screening, public health requirements or other functions.

We may transfer your information between our related bodies corporate who comply with this Privacy Policy.

Travelling for work

If you are travelling:

we may collect information about your role with the client or member. For example, your employment type, your role and title, your employee number, your start date with the client and your travel arrangements.

We may disclose your travel details and any information associated with your travel (such as incident reports) to the client or member.

Qantas' programs and clubs

Our programs and clubs include the Qantas Frequent Flyer Program, Qantas Business Rewards and the Qantas Club.

Membership of and participation in our clubs and programs is subject to the respective programs' terms and conditions which can be viewed on this website.

Personal information we collect

General participation in our programs and clubs

The specific programs and clubs you join and participate in will determine the particular information we collect about you. For example, the Qantas Frequent Flyer program collects information to provide members with personalised offers. However, in general we collect the following information about our members.

Qantas Frequent Flyer members

We may collect logs of your use of our products and services, and while you visit our websites or mobile applications. This information may include date and time of visit, membership number, membership status, surname, location and actions, for example, pages viewed, and pages submitted.

How we collect information

We collect personal information about you as a member of our programs and clubs through your registration and participation in them.

We may collect information directly from you through our interactions with you. We may also collect information from others who interact with us on your behalf, our related bodies corporate and Jetstar branded entities, partner airlines, third parties providing services for our programs and clubs (including data analysis services), or our program and club partners, such as when you register through one of our program partners or transact with them, and other third parties.

We may also collect information about you via data matching activities conducted by us or our trusted service providers. This may also include collecting information from public sources (for example, Census data) and combining this information with information that we hold about you.

How we use your personal information

Providing and marketing enhanced products and services

We use your personal information to personalise the way we provide and market enhanced benefits, products and services to you. We aim to enhance the way you use our programs and clubs by understanding your preferences, interests and hobbies.

We may also market the products and services of our partners and other third parties who we believe may have products and services in which you would be interested.

General administration of clubs and programs

We use the information we hold about you to administer our programs and clubs. These activities include:

We also use the information we hold to improve our services and customer service. This may be achieved through activities such research, behavioural analytics, and planning and developing products.

Qantas Frequent Flyer members

We may use this information we collect when members visit our websites and mobile applications to monitor the use of, and improve, the information and functions on Qantas' website and mobile applications. We may also use the information to understand your preferences and provide you with information about our products and services and our partners' products and services which we think may interest you.

If you are a Qantas Frequent Flyer member, logging in to your account will enable you to receive online targeted offers and otherwise benefit from your membership e.g. check your Frequent Flyer points. If you do not want targeted advertising, use our products and services without logging in to your account. You will still be able to use the functionalities of Qantas' website and Qantas' mobile applications without logging in, however, you may not be able to experience all of the available features and functionalities (for example, seeing your previous flight bookings). You will still receive non-targeted online advertisements on our website and mobile application if you are logged out, however they may be less relevant to you.

Disclosure of your personal information

We may disclose your information to partner airlines,  one world alliance airlines, and non-airline program partners for the purposes outlined in this Privacy Policy.

We may also disclose your information to:

They may use the information to operate programs and clubs. Such activities may include:

We may also disclose your personal information for fraud prevention and detection.

Qantas Business Rewards

If you purchase or use goods or services that have been acquired as part of a transaction that is eligible under the Qantas Business Rewards program, we may collect information about your role with the Qantas Business Rewards member. For example, your employment type, your employee number, your start date with the client and your travel arrangements.

How we use cookies and tags

Cookies are small pieces of data stored on the web browser on your computer. This website and associated websites (including those you reach by clicking on advertising) may store cookies on your web browser.

Tags (or pixels) are short snippets of javascript (code) that set and read cookies. This website and associated websites may use tags for analytics and marketing.

For information on how we use cookies and tags, and to find out how to manage your cookie settings, see our Cookies Policy.

How we hold information and keep it secure

IT Security

We hold your personal information in a combination of hard copy and electronic files. We use third party information system providers who may store or have access to your personal information.

When you book flights or access information about your membership of our programs and clubs, a secure server is used. Secure Sockets Layer (SSL) encrypts the information you send through this website.

No data transmission over the Internet or website can be guaranteed to be secure from intrusion. However, we maintain physical, electronic and procedural safeguards to protect your personal information in accordance with data protection legislative requirements and industry standards.

If we have given you (or you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential and for complying with any other security procedures notified to you. We require that you do not disclose your passwords to anyone else.

When you make a booking, you will be issued a booking reference. The booking reference serves as a unique passenger identifier and you should keep it secure. We recommend that you do not disclose your booking reference to anyone else and that you do not post a photo of your boarding pass or ticket on social media.

Disclosure of information across borders

When we disclose personal information in accordance with this Privacy Policy, it may be accessed from, transferred to, and/or stored outside the country in which you are located. The data protection laws in that country may be of a lower standard than those in your own country. We will, in all circumstances, safeguard the personal information as set out in this Privacy Policy.

Refer to the section on European Data Protection Laws for information about the export of personal data from the EEA to outside the EEA.

In the course of providing our services and facilitating reservations made through us

As a provider of travel and reservations services, we may disclose your information to countries where you travel or send freight to, or in which you have reserved services such as car hire or accommodation. This includes countries through which you are transiting and travel on flights operated by other airlines. In addition, your information may be disclosed to countries in which the providers of the services you have reserved operate or have their headquarters located.

Our service providers

We may also disclose your personal information to data processors (including operators of global travel distribution systems and reservation systems, and processors that assist us in preventing and detecting fraud), customer service providers and managers of our credit and financial products. The countries in which these third parties are located include the United Kingdom, the United States, Germany, South Africa and the Philippines.

Access to, and correction of, information about you

In some countries you have the right to access, or correct, the personal information that we hold about you. If you would like to request access to, or correction of, your personal information that we hold, please contact us using the details in the section titled 'Contacting Us'.

To the extent required by applicable law, we will provide you with access to the information we hold about you, including for the purpose of correcting or updating that information, within a reasonable timeframe (or any time frame stipulated by the laws that apply to your request). If we are permitted to withhold some of your personal information and we choose to do so, we will advise you when responding to your request. If we refuse to provide you with access to, or to amend, the information, to the extent required we will notify you of our reasons for the refusal and how you may complain about the refusal.

Where permitted by law, we may recover from you our reasonable costs of supplying you with access to this information. However, we will not charge you for the making of the request or to correct or update your personal information. Loyalty Program members can update their profile information online or by contacting the Qantas Frequent Flyer Service Centre.

Privacy complaints and further information

If you have a concern about your privacy or you have any query on how your personal information is collected or used please contact us using the details below. We will respond to your query or complaint within a reasonable time.

If you are not satisfied with our response, you may also contact the body responsible for administering the privacy laws in your country. If you are in Australia, you can contact the Office of the Australian Information Commissioner. In the United Kingdom you may contact the Office of the Information Commissioner.

European data protection laws

This section applies if you are based in the European Economic Area (EEA) during your interactions with us (other than when you are in the EEA solely for travel purposes) and sets out the additional information that we are required to provide to you under European data protection laws.

Under European data protection laws, use of personal information must be based on one of a number of legal grounds and we are required to set out the grounds in respect of each use. Companies may process personal data only when the processing is permitted by the specific legal ground set out in the law.

In the table below, we have set out the relevant grounds that apply to each purpose of data processing that is mentioned in this Privacy Policy. You can find an explanation of each of the legal grounds for use of personal information here.

The purpose of data processing and its uses

false

Yes
No
Not applicable
Purposes of the data processing
Use bases
To provide and administer our travel products and services
  • contract performance
  • legitimate interests (to allow us to perform our obligations and provide services to you)

For sensitive Personal Data

  • Consent
For marketing purposes
  • legitimate interests (in order to market to you) and consent (which can be withdrawn at any time)
To provide customer support
  • contract performance
  • legal obligation
  • legitimate interests (to allow us to correspond with you in connection with our services)
To comply with our legal obligations and for health, safety and security purposes
  • legal obligation
  • legal claims
  • legitimate interests (to cooperate with law enforcement and regulatory authorities, to take appropriate steps to prioritise the health and safety of our passengers and our crew)

For sensitive Personal Data

  • legal claims
  • vital interests
  • substantial public interest
  • public interest in area of public health
To prevent and detect fraudulent activity
  • legal claims
  • legitimate interests (to prevent, detect and take action in response to fraudulent activity, including fraudulent transactions)
To operate and facilitate your participation in our programs and clubs
  • contract performance
  • legitimate interests (to allow us to provide tailored services to you)
To conduct market, consumer and other research
  • legitimate interest (to ensure that we understand our clients’ requirements)
To ensure website content is relevant
  • legitimate interests (to allow us to provide you with the content and services on our website)
To manage any shareholding you may have in Qantas Airways Limited
  • contract performance
  • legitimate interests (to allow us to perform our obligations and provide services to you)

The principal legal grounds for our use of your personal information are as follows:

The legal grounds for our use of the sensitive categories of personal information are:

Disclosure of information outside the EEA

When we transfer personal information from inside the EEA to outside the EEA, we may be required by law to take specific measures to safeguard the relevant personal information. Certain countries outside the EEA have been approved by the European Commission as providing essentially equivalent protections to EEA data protection laws and therefore no additional safeguards are required to export personal information from the EEA to these jurisdictions. In countries which have not had these approvals, we will use appropriate safeguards to protect any personal information being transferred, such as EU Commission-approved model contractual clauses or binding corporate rules permitted by applicable legal requirements.

Please refer to the section 'Contacting Us' if you would like to see a copy of the specific safeguards applied to the export of your personal information.

Retention period

Our retention periods for personal data are based on business needs and legal requirements. We retain personal data for as long as is necessary for the processing purpose(s) for which the information was collected, and any other permissible, related purpose. For example, we may retain certain transaction details and correspondence until the time limit for claims arising from the transaction has expired, or to comply with regulatory requirements regarding the retention of such data. When personal data is no longer needed, we either securely destroy it, or irreversibly anonymise the data (and we may further retain and use the anonymised information).

Marketing

You have the right to ask us not to process your personal information for marketing purposes. We will inform you if we intend to use your information for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by not opting in when we invite you to participate in our marketing activities. You can also exercise the right by contacting us as set out in the 'Contacting Us' section below or by managing your marketing preferences at 'My Profile' if your profile is registered on our website.

Additional Rights Under EU Law

In addition to the rights outlined elsewhere in this Privacy Policy, under certain conditions you may have the right under EU data protection law to ask us to:

In addition, under certain conditions, you have the right to:

You can exercise these rights by contacting us at the 'Contacting Us' section below.

These rights are subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege).

Resolving your concerns

If you wish to gain access to your personal information, have a complaint about a breach of your privacy or you have any query on how your personal information is collected or used, please forward your request, complaint or query to the address below. We will respond to your query or complaint as soon as possible. Privacy complaints about our acts or practices may be investigated by the Privacy Commissioner who has the power to make a determination including a declaration that the claimant is entitled to compensation.

Loyalty Program members can update their profile information online or by contacting the Qantas Frequent Flyer Service Centre.

Matters Outside the Scope of the Privacy Policy

Our website may contain links to other companies' websites or materials. If you choose to access such third-party websites, our privacy policy will not apply, and the privacy policy of the third-party website will apply instead.

Changes to this Privacy Policy

We may amend this Privacy Policy as our business requirements or the law changes. Any changes to this Privacy Policy will be updated on this website, so please visit periodically to ensure that you have our most current privacy statement.

Contacting Us

Our preferred method for receiving questions about privacy is for you to use our Customer Feedback Form.

You may also email us at PrivacyOfficer@qantas.com.au, or write to us at:

Group Privacy Officer
C/- Qantas Customer Care
Qantas Airways Limited
10 Bourke Road
Mascot NSW 2020
Australia

If your inquiry relates to European, Singapore or United Kingdom data protection laws you may email our Data Protection Officer at PrivacyOfficer@qantas.com.au.