Skip to content
Here is the Privacy & Security

Privacy & Security

1. How do we collect data about you and your use of this website?

You are in control of what information we collect about you. However, if you choose not to share your information some areas of the website may not be accessible or useable.

If you disable the cookies, the British Airways Avios eStore (eStore) may be unable to track your online transaction through to the retailer's website and accordingly may not be able to award Avios for purchases of goods or products on an eStore affiliated retailer's website.  We and our eStore business partners collect information about your use of the website from cookies. For information about our use of cookies and how to decline them please read our Cookie Policy.

To collect ‘in store’ offers from participating merchants who will be displayed on the eStore, you will need to have registered valid payment card(s) on the eStore, to enable transaction monitoring to take place.  Transaction Monitoring will determine whether you have qualified for an offer linked to your payment card(s). 

Your card details will be kept secure.  We will not be taking any payments from registered cards and the storage of your cards will fully conform to Payment Card Industry (PCI) data standards.  For more information about PCI standards click here https://www.pcisecuritystandards.org/

You may opt-out of transaction monitoring on the payment card(s) you entered at any time by clicking “Remove” against each card registered. 

2. How do we use your data?

We use your data to improve the service we offer you and to try and ensure that you get the best out of our web-sites.

Non-marketing use

We will use the information you enter at the site for administration purposes and any other purposes made clear in the data entry forms themselves, in any relevant terms or conditions and on any pages or emails which link to such forms. If you make a booking with us we may use your personal data for the purposes explained below under the heading "How we use your booking data".

Certain cookies sent to your browser will help us to save you time are necessary to enable us to track your transactions.

Website customisation and targeting of adverts

We use the data you give us about yourself when you join the Executive Club or register online to build up a picture of your interests - we then try to ensure that when you visit the site, you don't miss the offers and information relevant to you.

British Airways appoints reputable third party advertising companies to collect and share with us, website usage information about visitors to our website, for the purposes of statistical analysis, tracking page usage and paths used by visitors through our site, targeting our Internet banner advertisements on our website and on other websites and tracking use of our Internet banner advertisements and other links from our marketing partners' websites to our website. For this purpose, we and our third party advertising companies note information on the path you take to get to our site and on some of the pages you visit on our website through the use of cookies. The information collected by these third party advertising companies is not personally identifiable. For information about these third party advertisers (including how to opt out of receiving their cookies) please visit our Cookie Policy.

3. How we use your transaction data

If you make a transaction with a BA eStore affiliated retailer whilst logged onto BA eStore website, we will record your personal details. Your data will be used principally to meet your requirements and to administer the award of Avios for purchases you make on affiliated retailers' websites. We retain the data you provide from time to time, including your transaction history and data we collect when you use our services and facilities. Your data may be used for the following purposes: accounting, billing and audit, authentication, health, administrative and legal purposes, statistical and marketing analysis, operation of frequent flyer programmes, systems testing, maintenance and development, customer relations and to help us in any future dealings with you, for example by identifying your requirements and preferences. For these purposes we may disclose your data to any of the following: other companies in the British Airways group, data processing companies, government and enforcement agencies. This may involve sending your data between different countries, including countries outside the European Economic Area.

If you register payment cards in connection with transaction monitoring, you authorise the eStore (via Sports Loyalty Card Limited (trading as Reward) to share your payment card information with Visa, MasterCard, Amex and other necessary payment service providers (Payment Service Providers) to confirm your enrolment. You authorise the Payment Service Providers to monitor transactions on your registered card(s) to identify purchases in order to determine whether you have qualified for an offer linked to your payment card, and for the Payment Service Providers to share such transaction details with Sports Loyalty Card Limited (trading as Reward) and the eStore to enable your card-linked offer(s) and target offers that may be of interest to you.

By registering your payment card(s) with the eStore you agree that these details may be shared with

1.     Any successors to Sports Loyalty Card Limited (trading as Reward)

2.     Any other company that performs the same or similar role for the eStore.

You may opt-out of transaction monitoring on the payment card(s) you have registered by clicking “Remove” against the registered cards.

4. Direct marketing and how can you change your marketing preference?

We may use your purchase history to communicate information we think may interest you. To improve our picture of your interests we may link the data you give us about yourself with any data we have gathered (via cookies) about your use of the site.

We try to ensure that customers do not receive duplicate communications even if we have more than one marketing consent from the same customer. If you are an Executive Club Member and would like to receive marketing communications, we will send them to you as an Executive Club Member. If you are not an Executive Club Member but have signed up for marketing communications by registering online, we will communicate with you as a registered customer.

Your details may be shared within the British Airways group. The British Airways group consists of British Airways Plc and a number of subsidiary companies, including in particular British Airways Holiday Limited and Avios Group Limited.

You will not receive direct marketing from companies outside the British Airways group as a result of giving your details to us; if, in exceptional circumstances, we ever wanted to allow a third party to send you direct marketing, we would seek your consent before sharing your data with that third party.

We will normally send direct marketing by email if we have your email address.

If you would like us to stop sending direct marketing to you, we offer simple ways to do this. Whenever you receive direct marketing you will be told how to unsubscribe.

In addition, if you are an Executive Club Member you can change your marketing preferences at any time by amending your Membership profile online, or by telephoning or writing to the Executive Club.

If you tell us that you do not wish to receive further direct marketing, you will still receive communications confirming and servicing any transactions you make with us, and, if you are an Executive Club Member, we will continue to keep you informed about your Membership benefits and entitlements.

5. Who can your data be disclosed to?

Disclosure of your data to others may be necessary to ensure the smooth provision to you of the products and services provided by BA eStore website. Your transaction data including your cookie data may be disclosed to the other entities described above under the heading "How we use your booking data".

If you consent to direct marketing, your details will be used and disclosed in the manner set out under the heading "Direct Marketing and how can you change your marketing preference?".

6. How may you amend data submitted by you?

If you are an Executive Club Member you can change your personal details at any time by amending your Membership profile online, or by telephoning or writing to the Executive Club.

If you require any further guidance on updating the details we hold about you, please contact us.

7. What countries will your data pass through?

We want our customers to benefit from British Airways' international connections and the breadth of retailer's listed on this BA eStore website. Accordingly, in operating this site, as outlined in this privacy policy, we may send data about site visitors through or to other countries, both inside and outside Europe.

8. Why do we link to other websites?

We use links to other Internet sites to improve your experience of our website. We will always seek to make these links clear by opening them in a new window of your web browser. However, please be aware that the websites you will link to will be owned and run by other companies and organisations who may require you to provide them with personal information as a requirement of your transaction with them and subject to their own privacy and cookies policies. British Airways are not responsible for the information, material, products or services contained on or accessible through those websites. Your access and use of such websites remains solely at your own risk. We cannot accept responsibility for any information you divulge to a linked website.

9. How do we keep your data secure?

We take the security of your data very seriously. Please link to our security policy to see what steps we take to keep the information you give to us secure.

10. Do we take statistical data?

We try to ensure that our website offers visitors exactly what they are looking for - to help us achieve this goal we may analyse anonymous data collected by cookies about how visitors use the website. Such data also helps us to measure the success of our advertising campaigns.

We may also collect Internet Protocol addresses to help diagnose problems with our servers and for system administration, but we don't link these addresses to any person's name or identity.

11. Can we make changes to this policy?

There may be developments in how we use your data - all such developments will be notified to you by updating this policy.

Security Policy

Using BA eStore is quick, easy, convenient and safe.

British Airways makes every effort to maintain customer confidentiality when securing an online payment.

All of your personal information is encrypted as it travels over the Internet when processed by us.

As with any standard email, emails containing your personal data sent to or from British Airways will travel in a non-encrypted format.

You may be aware of recent media reports that have a highlighted a practice called "Phishing". This is the illegal gathering of personal information by deception. The unsolicited emails are sent to customers from lists illegally gathered by a third party, and ask them to enter or reconfirm bank or password details into a 'cloned' or illegal copy web site.

For your protection please be aware of the following facts:-

British Airways will never ask you to enter personal bank account or credit card details into an email or through a link sent via an email. It is your responsibility to confirm whether the third party websites you may link to follow similar practices.

British Airways takes all reasonable steps to prevent unauthorised and unlawful processing of personal data.

If you register payment card(s), your card details will be kept secure.  We will not be taking any payments from registered cards and the storage of your cards will fully conform to Payment Card Industry (PCI) data standards.  For more information about PCI standards click here https://www.pcisecuritystandards.org/

You may opt-out of transaction monitoring on the payment card(s) you entered at any time by clicking “Remove” against each card registered.