JetBlue Airways Privacy Policy

Notice to Customers

We at JetBlue Airways Corporation and our wholly owned subsidiaries ("JetBlue," "we," "our," or "us") respect your privacy. We are providing you with information about our practices related to the personal information that we collect from and about you when you interact with us. By personal information, we mean information that directly identifies you, such as your email address, telephone number, street address, etc. For more, see the What Information Do We Collect section below. By interacting with us, we mean all our online and offline locations, including when you use a JetBlue website (e.g., jetblue.com, www.jetbluevacations.com, their respective subdomains, and any other website owned, operated and/or controlled by JetBlue), the JetBlue mobile application and our related mobile services, JetBlue's onboard wireless services, JetBlue's in-flight entertainment system or other services linking to this policy, any offline location that makes this Privacy Policy available to you, and any other services provided by us or by others acting on our behalf, including but not limited to commercial air travel and ancillary services (all, collectively, the "JetBlue Service(s)"). We also want to make sure you understand how your information is protected, how it could be used, and our legal basis for doing so. Please take a moment to read the following sections, which describe our online privacy and security practices in more detail. By using the JetBlue Services or otherwise providing us with any information, you consent to this policy and the practices it describes. JetBlue reserves the right, at any time, to change this policy, in whole or in part, in its sole discretion. Please review this policy periodically to ensure you are aware of any changes and are familiar with the most current version. This Privacy Policy is not a contract and does not create any contractual rights or obligations.

Please note that when you interact with other entities, including through links that are made by sites or services of third parties that we do not control, you leave the JetBlue Services, and such other entities may independently collect information about you and solicit information from you. This Policy does not apply to these third-party sites. The information collected and stored by such other entities remains subject to their own policies and practices, including what information they share with us, your rights and choices on their services and devices, and whether they store information in the U.S. or elsewhere. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

Some jurisdictions may provide for additional privacy rights and disclosures to their residents or relevant data subjects that may apply to you in certain circumstances. Please see our “Notice to Residents of Certain U.S. States” section below for relevant information relating to such U.S jurisdictions. If you are a data subject in the European Union, please see the “Additional Disclaimers for EU Data Subjects” section below. Otherwise, if you wish to exercise your rights and choices, please see the “Your Rights and Choices” section or if you have any questions about this Privacy Policy, contact us as set out in the “Contact Us” section below.

‍

1. What information do we collect?

When you use the JetBlue Services, your information and activity data is collected in several ways.

A. Information You Provide.

We collect information when you engage with the JetBlue Services both online and offline, including information you provide when you register a TrueBlue account, book a flight or JetBlue Vacation package or make another travel booking, purchase merchandise, or sign up for a sweepstakes or other promotion. You also may be asked to provide information about where you like to travel or other information about your preferences and behavior. The following categories of information we collect and have collected in the last 12 months:

• Contact Data - including your first and last name, email address, postal address, and phone number.
  
• Billing Information - including your first and last name, credit card number, email address, postal address, cell phone number, and/or other payment information, or information needed to verify your identity.
  ‍
• Demographic Data - including your age, gender, and country of residence.
  ‍
• Profile Data - including your interests, inferences, preferences, and favorites.
  ‍
• Content - including content within any messages you send to us (such as feedback and questions to customer support) or publicly post on a JetBlue Service (such as in reviews or blog comments). We also collect content within any messages you exchange with others through a JetBlue Service (such as if you use our chat functionality).
  ‍
• Personal Contacts and Other Passenger Data - including the first and last name, email address, and phone number of your personal contacts and those travel companions or other individuals for which you provide information. When you provide information to us about your travel companions or other individuals (if, for example, you have arranged to make a booking on their behalf), you confirm to us that you have obtained their authorization to provide their information to us and their consent to use their information in accordance with this Privacy Policy. If you cannot make these confirmations, you must not provide us with any personal information about these individuals. We collect data about your contacts with your consent to fulfill a request by you, such as processing your travel reservations.
  ‍
• Job Applicant Data, including your employment and education history, transcript, writing samples, and references as necessary to consider your job application for open positions.

We will also collect information with your consent. You may choose to voluntarily submit other information to us that we do not request, and, in such instances, you are solely responsible for such information.

B. Information Collected Automatically.

When you use the JetBlue Services, some information about you and your online activity may be automatically collected using of tracking technologies (“Usage Information”). Usage Information may include, but is not limited to, the internet protocol (“IP”) address used to connect your computer to the internet, device identifier, browser type and version, operating system and platform, mobile device type, wireless carrier, data regarding network connected hardware, the average time you spent engaging with the JetBlue Services, pages viewed, information searched for, access times, geo-location information, and/or other statistics and information about your use of the JetBlue Services. The categories of information we automatically collect and have collected in the last 12 months includes:

• Service Use Data - including data about features you use, pages you visit, content and advertisements you view, products and services you view and purchase, the time of day you browse, and your referring and exiting pages.
  
• Device Data - including data about the type of device or browser you use, your device’s operating software, your internet service provider, your device’s regional and language settings, and device identifiers such as IP address and Ad Id.
  ‍
• Location Data - including imprecise location data (such as location derived from an IP address or data that indicates a city or postal code level) and, with your consent, precise location data (such as latitude/longitude data).

The various methods that may be used on the JetBlue Services to collect Usage Information include:

• Log Information: Log information is data about your use of the JetBlue Services, such as IP address, browser type, internet service provider, referring and exit pages, operating system, date/time stamps, and related data, which is stored in log files.
  ‍
• Information Collected by Tracking Technologies: Cookies, web beacons (also known as “Tracking Pixels”), embedded scripts, location-identifying technologies, voice processing technologies, device fingerprinting, in-app tracking methods, and other tracking technologies now and hereafter developed (“Tracking Technologies”) may be used to collect information about your interactions with the JetBlue Services or emails, including information about your browsing and activity behavior. These tracking technologies allow us to determine unique preferences and trends based on a visitor's use of the JetBlue Services, as well as that visitor's use of third-party online services participating in the same advertising network as JetBlue.
  ‍
• Cookies: A cookie is a small text file stored on a user’s device, which may be a session ID or persistent cookie. Session cookies make it easier for you to navigate the JetBlue Services and expire when you close your browser. Persistent cookies help in understanding how you use the JetBlue Services and remain after you close your browser. The JetBlue Services may associate some or all these types of cookies with your devices. Cookies may remain on your device for extended periods of time.

• Web Beacons / Tracking Pixels: Web beacons are small graphic images, also known as "internet tags" or "clear gifs," embedded in web pages and email messages. Web beacons may be used, without limitation, to count the number of visitors to the JetBlue Services, to monitor how users navigate the JetBlue Services, and to count content views.
  ‍
• Embedded Scripts: An embedded script is a programming code designed to collect information about your interactions with the JetBlue Services. It is temporarily downloaded onto your device from our web server or a third party with whom we work, is active only while you are connected to the JetBlue Services and deleted or deactivated thereafter.
  ‍
• Location-Identifying Technologies: GPS (global positioning systems) software, geo-filtering, Wi-Fi, and other location-identifying technologies locate (sometimes precisely) you for purposes such as verifying your location and delivering or restricting relevant content based on your location.
  ‍
• Voice-Processing Technologies: Voice processing technologies analyze the data collected through the microphone on your device for purposes such as responding to your requests and providing you with relevant content based on your requests. JetBlue does not have access to your actual voice; however, third parties may have access and you should review their policies accordingly.
  ‍
• Device Fingerprinting: Device fingerprinting is the process of analyzing and combining sets of information elements from your device’s browser, such as JavaScript objects and installed fonts, to create a “fingerprint” of your device and uniquely identify your device and applications.
  
• In-App Tracking Methods: There are a variety of tracking technologies that may be included in mobile apps, and these are not browser-based like cookies and cannot be controlled by browser settings. Some use device identifiers, or other identifiers such as “Ad IDs” to associate app user activity to a particular app and to track user activity across apps.

For further information on how we use Tracking Technologies for analytics and advertising, and your rights and choices regarding them, see the “Analytics and Advertising” and “Your Rights and Choices” sections below.

C. Information on Behalf of Our Partners.

In certain circumstances we provide products and services for our partners, including other airlines and TrueBlue partners, and collect and process information about individuals (including through tracking technologies) at their direction (“Partner Data”). Partner Data has historically included contact data, travel reservation information, demographic data, content, service use data, device connectivity and configuration data, and location data, among other information. Our processing of Partner Data is governed by the terms of our service agreements with our partners, and not this Privacy Policy. To the extent we combine Partner Data with information we have collected through the JetBlue Services, we will treat the combined information in accordance with the practices described in this Privacy Policy, in addition to any additional restrictions imposed by our partners. We are not responsible for how our partners treat the information we collect on their behalf, and we recommend you review their own privacy policies.

For further information on your rights and choices regarding Customer Data, see the “Your Rights and Choices” section below.

D. Information from Other Sources.

We also collect information from other sources. The categories of sources we collect and have collected information from in the last 12 months include:

• Consumers or users of the JetBlue Services.
• Data brokers or resellers from which we receive data to supplement the data we collect.
• Social networks when you engage with our content, reference the JetBlue Services, or grant us permission to access information from the social networks.
• Partners that offer co-branded services, sell or distribute our products, or engage in joint marketing activities.
• Publicly available sources, including data in the public domain.

‍

2. How do we use the information we collect?

We collect and use information for business and commercial purposes in accordance with the practices described in this Privacy Policy. We do not sell personal information we hold about you to third parties, and we use it only in accordance with this policy. Our business purposes for collecting and using information, including in the last 12 months, include to:

• provide you the JetBlue Services, including commercial air travel and ancillary services, such as customer service, in-flight services, and entertainment, and booking services;
• complete transactions and respond to your requests;
• maintain, improve, and optimize the JetBlue Services;
• send you technical notices, updates, security alerts, information regarding changes to our policies, and support and administrative messages;
• prevent and address fraud, breach of policies or terms, and threats of harm;
• as required by law, rule or regulation, legal request, subpoena, or other legal process or requirement;
• notify you of promotions, updates, or special offers, including JetBlue affiliate offerings and those of our TrueBlue partners, such as other airlines, that we think may interest you;
• develop and send you direct marketing, including advertisements and communications about, our partners, and other entities’ products, offers, promotions, rewards, events, and services;
• personalize your customer experience and serve you with advertisements and other information appropriate and relevant to you and your interests throughout the JetBlue Services; and
• fulfill any other business or commercial purposes at your direction or with your notice and/or consent;
• process any job application for open positions.

Notwithstanding the above, we may use information that does not identify you (including information that has been aggregated or de-identified) for any purpose except as prohibited by applicable law. For information on your rights and choices regarding how we use information about you, please see the “Your Rights and Choices” section below.

Some jurisdictions in the U.S. may require additional disclosures to their residents in certain circumstances; please see our “Notice to Residents of Certain U.S. States” section below. If you are a data subject in Europe, please see the “Additional Disclaimers for EU Data Subjects” section below.

‍

3. Sharing of Information.

We share information we collect in accordance with the practices described in this Privacy Policy. The types of entities and contexts in which we disclose and have shared information within the last 12 months, include the following:

• Service Providers. We share information with entities that process information on our behalf for our business purposes. Service providers assist us with services such as payment processing, travel and booking reservation, identity verification, data analytics, marketing and advertising, website hosting, and technical support.
  ‍
• Vendors and Other Parties. We share information with vendors for business and commercial purposes, including analytics and advertising technology companies. Vendors may act as our service providers, or in certain contexts, independently decide how to process your information. For more information on advertising and analytics, see the “Analytics and Advertising” section below.
  ‍
• Affiliates. We share information with our related entities including our parent and sister companies and subsidiaries for business purposes such as customer support, marketing, booking, advertising, and technical operations. We also may share information with affiliates for commercial purposes.
  ‍
• Partners. We share information with our partners in connection with offering co-branded services, selling, or distributing our products, or engaging in joint marketing activities.
  ‍
• Promotions. When you voluntarily enter a sweepstakes, contest, or other promotion, we share information as set out in the official rules that govern the promotion as well as for administrative purposes and as required by law (e.g., on a winners list). By entering a promotion, you agree to the official rules that govern that promotion, and may, except where prohibited by applicable law, allow the sponsor and/or other entities to use your name, voice and/or likeness in advertising or marketing materials.
  ‍
• Public Forums. Please think carefully before making information public as you are solely responsible for any information you make public. Once you have posted information, you may not be able to edit or delete such information, subject to additional rights set out in the “Your Rights and Choices” section below.

• Merger or Acquisition. We share information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
  ‍
• Security and Compelled Disclosure. We share information to comply with the law or other legal process, and where required, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We also share information to protect the rights, property, life, health, security and safety of us, the JetBlue Services or anyone else.
  ‍
• Facilitating Requests. We share information at your request or direction, such as when you choose to share information with a social network about your activities on the JetBlue Services.
  ‍
• Consent. We share information with notice to you and your consent.

Notwithstanding the above, we may share information that does not identify you (including information that has been aggregated or de-identified) except as prohibited by applicable law. For information on your rights and choices regarding how we share information about you, please see the “Your Rights and Choices” section below.

‍

4. Social Media and Technology Integrations.

We offer parts of the JetBlue Services through websites, platforms, and services operated or controlled by separate entities. In addition, we integrate technologies operated or controlled by separate entities into parts of the JetBlue Services. Some examples include:

• Links. The JetBlue Services includes links that hyperlink to websites, platforms, and other services not operated or controlled by us. We may get a commission if you purchase a product after clicking on a link to an affiliate’s website.
  ‍
• Liking, Sharing, and Logging-In. We may embed pixels or SDKs throughout the JetBlue Services that allow you to “like” or “share” content on, or log-in to your account through social media. If you choose to engage with such integration, we may receive information from the social network that you have authorized to share with us. Please note that the social network may independently collect information about you through the integration.
  ‍
• Brand Pages and Chatbots. We may offer our content through social media. Any information you provide to us when you engage with our content (such as through our brand page or via our chatbot on Facebook Messenger) is treated in accordance with this Privacy Policy. Also, if you publicly reference the JetBlue Services on social media (e.g., by using a hashtag associated with JetBlue in a tweet or post), we may use your reference on or in connection with the JetBlue Services.
  ‍
• In-Flight Entertainment. We may offer our content to you during your in-flight experience through our in-flight entertainment system (“In-Flight Experience”). Your In-Flight Experience may be personalized to you through technology integrations involving separate entities. If you choose to engage with our In-Flight Experience, we may collect and share information about your interaction with such to further personalize your experience and show relevant advertisements to you. For more information about the mechanisms we use for personalization please see the “Analytics and Advertising” section below.

‍

5. Analytics and Advertising.

We use analytics services, to help us understand how users access and use the JetBlue Services if permitted by local regulation. In addition, we work with agencies, advertisers, ad networks, and other technology services to place ads about our products and services on other websites and services. For example, we may place ads through Google and Facebook that you may view on their platforms as well as on other websites and services.

As part of this process, we may incorporate tracking technologies into JetBlue Services (including our website and emails) as well as into our ads displayed on other websites and services. Some of these tracking technologies may track your activities across time and services for purposes of associating the different devices you use and delivering relevant ads and/or other content to you (“Interest-based Advertising”).

We also use audience matching services to reach people (or similar people) who have visited the JetBlue Services or are identified in one or more of our databases (“Matched Ads”) if permitted by local regulation. This is done by us uploading a customer list to a technology service or incorporating a pixel from a technology service into JetBlue Services, and the technology service matching common factors between our data and their data. For instance, we may incorporate the Facebook pixel on the JetBlue Services and may share your email address with Facebook as part of our use of Facebook Custom Audiences. Some technology services may provide us with their own data, which is then uploaded into another technology service for matching common factors between those datasets.

As indicated above, vendors may act as our service providers, or in certain contexts, independently decide how to process your information. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

For further information on the types of tracking technologies we use on the JetBlue Services and your rights and choices regarding analytics, Interest-based Advertising, and Matched Ads, please see the “Information Collected Automatically” and “Your Rights and Choices” sections.

‍

6. Collection and Use of Biometric Data.

Certain of the JetBlue services, including without limitation the JetBlue Services, may collect personal information about you that includes biometric data, such as fingerprints, digital photographs, retinal scans, facial recognition data and other biometric information (collectively, “Biometric Data”). We may collect this Biometric Data using technological means, such as identification document scanners, fingerprint scanners, digital cameras, retinal scanners, and facial recognition scanners, either in person at our business locations or via your device.

Biometric Data may be used by JetBlue solely for identity verification purposes to: (1) facilitate and expedite airport processes, such as check-in and boarding; (2) prevent fraud and misrepresentation; (3) enhance security at designated customs and security checkpoints; and (4) comply with applicable laws and regulations, including Transportation Security Administration (“TSA”) and U.S. Customs and Border Protection (“CBP”) requirements. For instance, JetBlue may use a biometric enabled boarding process, which converts a photograph to a digital image that is used for identity verification purposes, and which may be shared with CBP upon boarding an international flight as part of CBP’s biometric exit program. For more information on this program, visit https://www.cbp.gov/travel/ biometrics.

In each case, we only use these technologies with your express consent and as permitted by applicable law. JetBlue manages the security and confidentiality of Biometric Data to protect it from unauthorized access, use, disclosure, or alteration. JetBlue will not use your Biometric Data for marketing purposes or share your Biometric Data with third parties for such third parties’ own marketing purposes. JetBlue complies with all local privacy laws in the collection and processing of Biometric Data.

‍

7. Children.

The JetBlue Services are targeted at a general audience. JetBlue does not knowingly collect personal information (as defined by the U.S. Children’s Privacy Protection Act, or “COPPA”) in a manner not permitted by COPPA. If you are under the age of 13, please do not provide personal information of any kind whatsoever. If you are a parent or legal guardian and you believe we have collected information from your child in a manner not permitted by law, contact us through one of the methods set forth in the “Contact Us” section below. We will remove the data to the extent required by applicable laws.

We do not knowingly “sell” the personal information of minors under 16 years of age without their affirmative authorization.

If you are a California resident under 18 years old and registered to use the JetBlue Service, you can ask us to remove any content or information you have posted on the JetBlue Service. To make a request, contact us as set out in “Contact Us” section with “California Under 18 Content Removal Request” in the subject line, and a description of the information you want removed. We will make reasonably good faith efforts to remove the information from prospective public view, although we cannot ensure the complete or comprehensive removal of the content and may retain the content as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

‍

8. Security of Collected Information.

We take reasonable administrative, technical, and physical precautions to keep information about you obtained in connection with the JetBlue Services secure against unauthorized access and use, and we periodically review our security measures. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of information about you outside our control. When you affirmatively provide us with information such as your name, address, phone number, credit card information, travel details, etc. while registering with TrueBlue or making a reservation or engaging with a feature of our offered web services, your information is encrypted and transferred over a secure connection, available on most internet browsers. Please note that if you provide information outside of a secure session, JetBlue cannot guarantee that information is protected with appropriate safeguards. Only JetBlue-authorized individuals and our approved third-party companies described in this policy are granted permission to access your information.

Your participation is key in keeping your information confidential. Here are some things you can do:

• Secure your booking confirmation number:
  • This is the 6-character code that you receive when purchasing a ticket. This number appears in your email and boarding pass. You should keep this code confidential to prevent anyone from gaining access to your flight details.
• Secure your TrueBlue Account Number and Login:
  • Do not share your TrueBlue login or account information. Always log out of your TrueBlue account especially when using a public device or network.
  • You should opt-in to Multi-Factor Authentication to protect yourself from misuse and fraud.

‍

9. Your Rights and Choices.

A. Account Information.

You may access, update, or remove certain information that you have provided to us through your TrueBlue account by logging into your TrueBlue Account and visiting the account settings by clicking on "Contact Information" or "Log-In Information." Please note that we will retain and use information about your use of the JetBlue Services and flight reservations and travel as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and as allowed by applicable law.

If you want to close your TrueBlue account or learn more about the information related to your account you, please call us at 1 (800) 538-2583 or you can send us a request in writing to:

JetBlue Airways Corporation
Attn: Customer Relations
P.O. Box 17435
Salt Lake City, UT 84117-0435

Any request you make regarding your TrueBlue account must be in writing or affirmatively by phone and include your name and address and any other information that may identify you, such as where your request relates to a travel booking, please provide your booking reference (e.g., confirmation number or record locater number), TrueBlue Account number if you have one, the dates on which the travel took place, and any other relevant information that will assist us to identify your booking. We may also require that you provide a photocopy of your passport or driver’s license so we can verify your identity.

Please be aware that if you use the JetBlue Services after you have closed your account or have requested that we do the same, including cases where you create a new TrueBlue account, we will again collect information about you and use it in the accordance with this policy and applicable law.

Some jurisdictions in the U.S. may require additional disclosures to their residents in certain circumstances; please see our “Notice to Residents of Certain U.S. States” section below. If you are a data subject in Europe, please see the “Additional Disclaimers for EU Data Subjects” section below.

B. Tracking Technologies.

• Cookies and Pixels. Most browsers accept cookies by default. You can instruct your browser, by changing its settings, to decline or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations.
  ‍
• Do Not Track. Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no industry consensus as to what site and app operators should do with regard to these signals. Accordingly, unless and until the law is interpreted to require us to do so, we do not monitor or take action with respect to “Do Not Track” signals. For more information on “Do Not Track,” visit http://www.allaboutdnt.com
  ‍
• App and Location Technologies. You can stop all collection of information via an app by uninstalling the app. You can also reset your device Ad Id at any time through your device settings, which is designed to allow you to limit the use of information collected about you. You can stop all collection of precise location data through an app by uninstalling the app or withdrawing your consent through your device settings.

Please be aware that if you disable or remove tracking technologies some parts of the JetBlue Services may not function correctly.

C. Analytics and Internet-based Advertising.

The companies we work with to provide you with targeted ads are required by us to give you the choice to opt out of receiving targeted ads. Most of these companies are participants of the Digital Advertising Alliance (“DAA”) and/or the Network Advertising Initiative (“NAI”). To learn more about the targeted ads provided by these companies, and how to opt out of receiving certain targeted ads from them, please visit: (i) for website targeted ads from DAA participants, https://www.aboutads.info/ choices; (ii) for app targeted ads from DAA participants, https://www.aboutads.info/ appchoices; and (iii) for targeted ads from NAI participants, https://www.networkadvertising. org/choices/. Opting out only means that the selected participants should no longer deliver certain targeted ads to you, but does not mean you will no longer receive any targeted content and/or ads (e.g., in connection with the participants’ other customers or from other technology services).

You may also limit our use of information collected from or about your mobile device for purposes of serving targeted ads to you by going to your device settings and selecting “Limit Ad Tracking” (for iOS devices) or “Opt out of Interest-Based Ads” (for Android devices).

Google also provides tools to allow you to opt out of the use of certain information collected by Google Analytics at https://tools.google.com/ dlpage/gaoptout and by Google Analytics for Display Advertising or the Google Display Network at https://www.google.com/ settings/ads/onweb/.

For information about removing yourself from tracking and reporting functions on jetblue.com, please first visit the Adobe opt-out page at http://www.adobe.com/privacy /opt-out.html#4. You should also visit the following link to prevent any information from being recorded in a session on our jetblue.com website: https://somnistats.jetblue.com /optout.html.

Please note that if you opt out using any of these methods, the opt-out will only apply to the specific browser or device from which you opt out. We are not responsible for the effectiveness of, or compliance with, any opt out options or programs, or the accuracy of any third-party statements regarding their opt-out options or programs.

D. Communications

• E-mails. You can opt-out of receiving promotional emails from us at any time by following the instructions as provided in emails to click on the unsubscribe link or contacting us as set out in the “Contact Us” section. Please note that you cannot opt-out of non-promotional emails, such as those about your account, transactions, servicing, or JetBlue’s ongoing business relations.
  ‍
• Push Notifications. If you have opted-in to receive push notification on your device, you can opt-out at any time by adjusting the permissions in your device or uninstalling our app.
  ‍
• Text Messages and Calls. You can opt-out of receiving text messages or calls to your phone number at any time by (i) for text messages, texting “STOP” in response to any text message you receive from us or contacting us as set out in the “Contact Us” section and specifying you want to opt-out of text messages; and (ii) for calls, requesting opt-out during any call you receive from us or contacting us as set out in the “Contact Us” section specifying you want to opt-out of calls.

Please note that your opt-out is limited to the email address, device, and phone number used and will not affect subsequent subscriptions.

‍

10. TSA Secure Flight Screening.

The Transportation Security Administration (“TSA”) screens all commercial airline customers and baggage.

As part of TSA's mission to secure airports in the United States, TSA requires you to provide certain personal information, such as your full name, date of birth, and gender, for the purpose of watch list screening, under the authority of 49 U.S.C. section 114, the Intelligence Reform and Terrorism Prevention Act of 2004 and 49 C.F.R parts 1540 and 1560. The TSA or U.S. Customers and Border Protection may also require you to provide certain Biometric Data, such as fingerprint scans and facial recognition data. You may also provide your Redress Number, if available. Failure to provide your full name, date of birth, gender or any other information required by TSA may result in denial of transport or denial of authority to enter the boarding area. TSA may share information you provide with law enforcement or intelligence agencies or others under its published system of records notice. For more on TSA privacy policies, or to review the system of records notice and the privacy impact assessment, please visit www.tsa.gov.

‍

11. Change in Control.

Should there be a corporate change in control, reorganization, acquisition, merger or consolidation of JetBlue or a sale, lease or other disposition of all or a portion of the assets or business of JetBlue or any of its divisions or subsidiaries, or a bankruptcy or insolvency resulting in a change of control, we reserve the right to transfer any information collected from you to the surviving entity or the new party in control of JetBlue.

‍

12. Privacy Policy Changes.

By using the JetBlue Services, you consent to the collection, storage, and use of your information as described in this policy.

We reserve the right to modify this Privacy Policy in our sole discretion, at any time, in whole or in part, and related business practices at any time, without notice or liability to you, by posting updated text on this site. Please review these terms and conditions periodically to ensure you are aware of any changes and are familiar with the most current version of these terms. Your continued use of the JetBlue Services indicates your consent to the Privacy Policy then posted.

‍

13. Disability Accommodations.

If you have a disability and would like to access this Privacy Policy in an alternative format, please see our accessibility information available at Privacy Policy in an alternative format, please see our accessibility information available at jetblue.com/at-the-airport/accessibility-assistance/accessibility-information.

‍

14. Contact Us.

If you wish to submit any request outlined in this Privacy Policy, have any questions about this Privacy Policy or JetBlue's privacy practices, or wish to contact us, please fill out this form or write us at:

JetBlue Airways Corporation
Att'n: Legal Department
P.O. Box 17435
Salt Lake City, UT 84117-0435

‍

15. For Users Outside the United States.

Because JetBlue is based in the U.S. with many flights in or to the U.S., this policy is consistent with U.S. law and practice. If you are accessing any JetBlue Service from outside of the U.S., please be aware that information collected through the JetBlue Service may be transferred to, processed, stored, and used in the U.S. and other jurisdictions. Data protection laws in the U.S. and other jurisdictions may be different from those of your country of residence. Your use of the JetBlue Services or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, sharing, and storage of information about you in the U.S. and other jurisdictions as set out in this Privacy Policy.

If you are a data subject in Europe, please see the “Additional Disclaimers for EU Data Subjects” section below.

‍

16. Notice to Certain U.S. State Residents.

Certain U.S. states may provide for additional disclosure to and/or rights for their residents under state-specific privacy laws, which may not apply to you or only apply in certain circumstances. To the extent such laws apply, JetBlue will comply with applicable law.

A. Notice of Collection.

JetBlue has collected personal information, including during the last 12 months, corresponding to the following categories of personal information:

• Identifiers, including name, address, email address, account name, IP address, biometric identifiers, passport numbers, and an ID number assigned to your account.
• Customer records, phone number, billing address, credit or debit card information, employment, or education information.
• Demographic information, such as your age or gender. This category includes pieces of personal information that also qualify as protected classification characteristics under applicable laws.
• Commercial information, including your purchases and engagement with the JetBlue Services.
• Internet activity, including history of visiting and interacting with the JetBlue Services, browser type, browser language and other information collected automatically.
• Geolocation data, including location-enabled services such as Wi-Fi and GPS.
• Employment and education data, including information you provide when you apply for a job with us.
• Inferences, including information about your interests, preferences, and favorites.

For more information on what we collect, including the sources from which we receive information, please review the “How do we use the information we collect?” section above—we collect and use these categories of personal information for the business purposes described in this section, including to provide and manage the JetBlue Services.

JetBlue discloses the following categories of personal information for commercial purposes:

• Commercial information;
• Demographic data;
• Location data;
• Identifiers;
• Inferences; and
• Internet activity.

We use and partner with different types of entities to assist with our daily operations and manage the JetBlue Services. Please review the “How do we use the information we collect?” section above for more detail about the parties we have shared information with.

B. Roles.

In some circumstances, JetBlue Services process the information of employees of our business partners and job applicants. In such circumstances, as an employee of a JetBlue business partner or as a job applicant, you understand and agree that information collected about you is solely within the context of (i) your role as an employee, job applicant, owner, director, officer, or contractor or (ii) JetBlue conducting due diligence regarding, or providing or receiving a product or service to or from your employer, including your travel reservations and bookings.

C. Requests to Know and Delete.

To the extent required by applicable law, you may have the right to request to know certain information about our data practices in the preceding 12 months. In particular, a “request to know” may entail providing you with the following based on the details of your request:

• The categories of personal information we have collected about you;
• The categories of sources from which the personal information was collected;
• The categories of personal information about you we disclosed for a business purpose or sold;
• The categories of third parties to whom the personal information was disclosed for a business purpose or sold;
• The business or commercial purpose for collecting or selling the personal information; and
• The specific pieces of personal information we have collected about you.

In addition, in certain circumstances you may request us to delete the personal information we have collected from you.

If applicable law grants you a right to know or delete and you want to make a corresponding request, please contact us as set out in the “Contact Us” section. When contacting us, please specify what kind of request you are seeking to make and the scope of the request. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your residency and identity or we are not required by law to comply with such a request, we may deny your requests to know or delete.

D. Do Not Sell My Personal Information.

Please note that JetBlue does not sell information as the term “sell” is traditionally understood. However, to the extent “sale” under the California Consumer Privacy Act is interpreted to include advertising technology activities such as those disclosed in the “Analytics and Advertising” section, we may incorporate opt-outs of these technologies into an opt-out of sale. To specifically opt-out of these advertising technologies, you should review the mechanisms in the “Analytics and Internet-based Advertising” sub-section of the “Your Rights and Choices” section above.

To the extent JetBlue sells personal information we hold about you as the term “sell” is defined under the California Consumer Privacy Act and to the extent such act applies, you have the right to request us to stop “selling” your information by contacting us as set out in the “Contact Us” section. When contacting us, please specify what kind of request you are seeking to make and the scope of the request. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your residency and identity or we are not required by law to comply with such a request, we may deny your request.

E. Right to Non-Discrimination.

You have the right not to receive discriminatory treatment by us for the exercise of any of your rights.

F. Shine the Light.

California’s “Shine the Light” law permits customers in California to request certain details about how certain types of their information are shared with third parties and, in some cases, affiliates, for those third parties’ and affiliates’ own direct marketing purposes. Under the law, a business should either provide California customers with certain information upon request or permit California customers to opt in to, or opt out of, this type of sharing.

JetBlue may share personal information as defined by California’s “Shine the Light” law with third parties and/or affiliates for such third parties’ and affiliates’ own direct marketing purposes. If you are a California resident and wish to obtain information about our compliance with this law, please contact us as provided in the Contact Us section above. In your message, please include a description or your request, as well as your name, street address, city, state, and ZIP code. Please note that JetBlue is not required to respond to requests made by means other than through the provided email, online form, or postal addresses.

Any California residents under the age of eighteen (18) who have registered to use the JetBlue Services and posted content or information on the JetBlue Services, can request that such information be removed from the JetBlue Services by contacting us as provided in the “Contact Us” section above. Requests must state that the user personally posted such content or information and detail where the content or information is posted. We will make reasonably good faith efforts to remove the post from prospective public view.

‍

Additional Disclaimers for EU Data Subjects

A. Roles

Data protection laws in the European Union distinguish between organizations that process personal information for their own purposes (known as “controllers”) and organizations that process personal information on behalf of other organizations (known as “processors”).

JetBlue acts as a controller with respect to the personal information it holds about you.

B. Legal Bases

Data protection laws in the European Union require a “lawful basis” for processing personal data. JetBlue’s legal bases include: (1) processing personal information about you in order to fulfill our contractual obligation to you, including providing you with flights, for schedule change notifications, and to administer your True Blue account; (2) using and disclosing personal information we hold about you as required for legal compliance, including required disclosures to the TSA or other governmental agencies; (3) processing personal information we hold about you where we have a legitimate interest in doing so, such as to prevent fraud and improve our customer service; and (4) you have given consent to the processing for one or more specific purposes, either to us or to our service providers, partners, or customers.

C. Your Data Subject Rights

If you are a data subject in the Europe Union, under certain conditions, you may have the right to require us to:

• provide you with further details on the use we make of personal information about you
• provide you with a copy of the personal information we hold about you
• update any inaccuracies in the personal information we hold about you
• delete any personal information we hold about you that we no longer have a lawful ground to use
• where processing is based on consent, stop that processing by withdrawing your consent
• object to any processing based on our legitimate interests unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights
• object to any processing for direct marketing purposes at any time
• restrict how we use personal information about you whilst a complaint is being investigated
• transfer personal information we hold about you to a third party in a standardized machine-readable format
• specify guidelines as to the management of your personal information in case of death.

In certain circumstances, we may need to restrict your rights to safeguard the public interest (e.g. the prevention or detection of crime) and our interests.

We are obliged to keep the personal information we hold about you accurate and up to date. Please help us to do this by advising us of any changes to such personal information.

If you wish to exercise any of the rights above, please contact us as set out in the “Contact Us” section above. In the request, please specify what kind of request you are seeking to make and the scope of the request. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your requests.

D. Cross Border Transfers of Your Personal Information

The global nature of our business means that personal information may be transferred across national boundaries, including, potentially, to countries that do not require organizations by law to look after your personal information in the way in which you have come to expect in your own country.

Where we transfer personal information about you across national boundaries, we will protect such personal information by ensuring that those transfers are made in compliance with all relevant data protection laws. Generally, this means when we transfer your data to these third countries/regions, we ensure an adequate level of protection for the information transferred to these third countries/regions by entering into data transfer agreements with these recipients based on the European Commission's standard contractual clauses ( as revised or superseded by the European Commission or supplemented by additional measures where necessary) or any other valid transfer mechanism that may become available in the future.

If you would like more details of how personal information is protected when transferred from one country to another, contact us.

E. Retention Period.

We do not keep your personal information for any longer than is necessary. The retention period of the information we have on you depends on the purposes for which this information is processed and the applicable statutory retention periods.

F. Location of Servers

This site is hosted on servers located in the United States of America. YOU EXPRESSLY ACKNOWLEDGE AND CONSENT THAT YOUR DATA MAY BE TRANSFERRED TO VARIOUS LOCATIONS AND THIRD-PARTY PROVIDERS, AND MAY BE MAINTAINED AND PROCESSED ON COMPUTERS LOCATED OUTSIDE OF YOUR STATE, PROVINCE, COUNTRY OR OTHER GOVERNMENTAL JURISDICTION WHERE THE PRIVACY LAWS MAY NOT BE AS PROTECTIVE AS THOSE IN YOUR JURISDICTION.

G. Your Right to Complain

If you have a complaint about our use of personal information about you or response to your requests regarding such personal information, then you have the right to complain to the authority that supervises our processing of your personal information or, where you are based in the European Union, the data protection authority in your country. We would, however, appreciate the opportunity to address your concerns before you approach a data protection regulator, and would welcome you directing an inquiry first to us by contacting us as set out in the “Contact Us” section above.