Skip to content

Privacy & security

Your privacy is important to us

MileagePlus Shopping UK respects your privacy. This Policy discloses MileagePlus Shopping UK’s privacy practices for your information and addresses the following topics:

  • Scope of this policy
  • Information we collect about you
  • Information we collect directly from you
  • Information we automatically collect
  • Information we collect through our mobile application(s)
  • Information we collect from third parties
  • How we use your information
  • The legal bases for using your personal information
  • Disclosing your information
  • Use of cookies, web beacons and other similar technologies
  • Targeted advertising
  • Third-party analytics
  • Protecting information collected
  • Your role in protecting your information
  • Opting out
  • Other sites/digital channels
  • Contact us
  • Legal effect and changes to the policy

While MileagePlus Shopping UK’s strives to take reasonable measures to protect your information, this Policy is not a contract and does not create any legal rights or obligations. Rather, the following are guidelines for protecting your information and, depending on your jurisdiction, describing your rights under applicable data protection laws. By using this website ("Site"), you acknowledge the handling of your information as described in this Policy.

As a member of MileagePlus, you can earn MileagePlus award miles from retailers displayed on this Site. The purchase of goods or services from participating retailers is subject to their terms and conditions. By using this Site you acknowledge the handling of your information as described in such retailers’ privacy policies.

In addition, as a member of MileagePlus, you acknowledge the handing of your information as described in the United privacy policy.

Scope of this policy

This Policy applies to the information that we collect about you in connection with this Site.

The information we collect is controlled by United Airlines, Inc., which is headquartered in the United States at 233 S. Wacker Drive, Chicago, Illinois 60606.

This Policy does not apply to any other United sites or services, including but not limited to:

  • United-managed websites and mobile websites, including, for example, united.com, mileageplus.com, mobile.united.com, hub.united.com;
  • United-managed mobile applications, such as the United App;
  • United Cargo transactions, including but not limited to, those conducted on unitedcargo.com;
  • United Wi-FiSM service portal;
  • United ClubSM locations’ Wi-Fi service;
  • United’s Technical Operations website; or
  • unitedcontinentalholdings.com.

In addition, this Policy does not apply to any website not owned and managed by United or any other third-party site.

With respect to the above, please see those respective sites for the privacy policies that may apply.

Information we collect about you

We collect and maintain information, including personal information, about you directly from you and automatically when you use this Site and participating retailers’ sites.

Information we collect directly from you

When you log into this Site, we and our third-party service providers collect your MileagePlus account number and password, other account security authentication information and email address if you choose to receive notifications regarding the MileagePlus Shopping UK’s program.

Children

This Site is not intended for use by children. We do not knowingly collect personal information from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided personal information through this Site, please contact us and we will endeavor to delete that information.

Information we collect automatically

We and our third-party service providers automatically collect information about your use of this Site through [cookies, web beacons, log files and other technologies. Such information includes but is not limited to, the following:

  • Domain name;
  • Browser type and operating system;
  • IP address;
  • Web pages you view;
  • Links you click;
  • Length of time of your visit;
  • Your activities on this Site including your movement through this Site; and
  • Referring URL or webpage that led you to our sites.

We and our third-party service providers may combine this information with information that we (or they) already have collected about you. For more information, refer to the "Use of cookies, web beacons and other similar technologies" section below.

Information we collect from third parties

We collect information about you from participating retailers, including details about your interactions or transactions with such retailers. This information, such as purchase history or visit history with participating retailers, may be made available to you through this Site.

Sensitive information we collect directly from you

We do not knowingly collect information on this Site that is defined as “sensitive” under applicable data protection laws.

How we use your information

We primarily use your information, including personal information, to provide mileage credit for program-related purchases and activities. In certain circumstances, such as for advertising purposes, United may combine your information with other information that we have about you, that is publicly available and/or that we have obtained from third parties, such as information about your interactions or transactions with participating retailers (either individually or in the aggregate). We also use your information for the following purposes:

  • To improve your user experience. To tailor the content and information that we may send or display to you and to otherwise personalize your experiences while using this Site.
  • For operational needs and providing services. To carry out our operations and services and to facilitate your transactions or requests.
  • For marketing and advertising. Consistent with applicable law, individually, in the aggregate, and/or combined with demographic information that we maintain or collect from third parties, for marketing and advertising purposes (via email, direct mail, telephone, web or other electronic advertising). Specifically, we use the information that we collect about you to send you email, direct mail, or telephone communications about offers, including those offered by United, its partners or other third parties, that might be of interest to you. We also use your information to determine appropriate advertising channels and venues and to place ads on such channels and venues, including placing advertising on social networking sites.
  • To improve and maintain our sites and our services. We use your information to improve and maintain our sites and services, respond to user desires and preferences, for research and analytical purposes, such as improving our operations, and for security purposes, including, but not limited to, protecting ourselves and users of our services.
  • To protect our rights and interests, and the rights and interests of other users of our services.
  • As permitted by law.

The legal bases for using your personal information

We collect, use, and share your personal information where we are satisfied that we have an appropriate legal basis to do this. This may be because:

  • Our use of your personal information is in our legitimate interest as a commercial organization (for example in order to make improvements to our products and services and to provide you with information you request); you have a right to object to processing as explained in the section below titled Your legal rights;
  • Our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you (for example where we use your name and contact information to make travel reservations in the performance of our services); and/or
  • Our use of your personal information is necessary to comply with a relevant legal or regulatory obligation that we have (for example, where we are required to undertake vetting to comply with safety and security regulations or where we are required to disclose personal information to a court or tax authority).

If you would like to find out more about the legal bases on which we process personal information, please contact us using the details below.

Disclosing your information

United may disclose your personal information to the following persons/entities:

  • Affiliates. We may disclose information we collect from you to our affiliates or subsidiaries. Our affiliates and subsidiaries may use your information for various purposes, including marketing their products and services to you.
  • Service providers. We may share your information with third parties that assist us and perform functions on our behalf. These entities may include technical support, website hosting, customer service among others. In some cases, third-party service providers, such as information technology and data processing vendors, data storage services, etc., may be located outside the United States and your personal information may be processed or stored in other countries; please see the section on Cross-border transfers of information below. We also use third parties to assist us in determining and placing relevant advertising.
  • Non-affiliated third parties. We may also share your information with third parties as necessary to complete your transaction or fulfill your requests. Consistent with applicable law, United may also share your information with third parties for marketing purposes including but not limited to the third party’s own marketing or promotional purposes or other companies’ marketing purposes in order for them to present you with offers on services or products that may be of interest to you.
  • Research and analytics. We may use and disclose your information for research and analytics purposes.
  • Aggregate information. Aggregate information, such as demographic information, domain names, other site traffic information, etc., may at times be shared with United partners or other third parties. Examples of aggregate information are X% of eligible tickets purchased are eTickets; X% of subscribers use a mobile application, etc.
  • Law enforcement/Legal processes/other uses. United may also disclose your information: if required to do so by law, court order, subpoena or other legal process; as requested by a governmental or law enforcement authority; to protect the rights or property of United, its customers, its sites or site users; or when we believe in good faith that it is in the interests of aviation security or that disclosure is otherwise necessary or advisable. In certain circumstances, United’s third party service providers may be required to disclose information to government or law enforcement authorities. Security, health and customs and immigration laws in the U.S. and many other countries require all airlines, including United, to provide border control agencies or other governmental authorities with passenger data. In order to comply with these laws we may disclose information about you and your travel arrangements to such authorities.
  • Business transactions. If United is or may be acquired by or merges with another entity, if any of our assets are transferred to another entity, or as part of a bankruptcy proceeding, we may transfer the information that we collected from and about you to the other entity.

Use of cookies, web beacons and other similar technologies

United and our third-party service providers collect information by using technologies and methodologies, such as "cookies", tags, web beacons or other similar technologies that enable tracking as you browse this Site. We use these technologies to authenticate you as a user, to remember your preferences for using this Site, to present offers that may be of interest and to facilitate transactions, such as your transactions with participating retailers. We and our third party service providers also use these tools to analyze use of our sites and our services. We may use this information in the aggregate or combine it with information that we have already collected about you.

Cookie. "Cookies" are small bits of information that are stored on your computer by your web browser. Web beacons or “pixel tags” are small strings of code placed on a web page or in an email message for the purpose of transferring information. Cookies and the other technologies discussed in this section allow us to recognize your preference information, to track your transactions and to facilitate effective website administration.

Cookies help establish a user session and allow our server to provide site users with the appropriate information, advertisements and services. We also use cookies to ensure you obtain the information you request, to authenticate your authority to access the site and to track the usage of our websites in order to improve the site(s) according to our customers’ needs. If you are a registered user on our site the cookie stored on your computer will not contain your MileagePlus number.

If you do not want your information to be collected through cookies, you can change the preferences in your particular Internet browser. Some website functionality may not work properly if your browser does not accept cookies. Specifically, if you choose not to accept our cookies and are a registered user, you will not have access to your account information on this Site. Please consult your chosen Internet browser for instructions on how to change your cookie settings.

Clear GIFs, pixel tags and other technologies. These technologies allow us to recognize your preference information, keep track of your transactions and facilitate effective website administration. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We and our third-party service providers may use clear GIFs (also known as web beacons, web bugs or pixel tags), in connection with our sites and services to, among other things, track the activities of visitors, help us manage content and compile statistics about usage. We and our third party service providers may also use clear GIFs in HTML emails sent to you to help us track email response rates, identify when our emails are viewed and track whether our emails are forwarded.

Third-party analytics

We also use automated devices and applications, such as Google Analytics, to evaluate the use of our websites and apps and the services we provide. We use these tools to gather information about users to help us improve our services, performance and user experiences. These analytics providers may use cookies and other technologies to perform their services, and may combine the information that they collect about you on our websites with other information that they have collected. This Policy does not cover such third parties’ use of the data.

Your legal rights

Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your personal information:

Right to access, correct, and delete your personal information: Please ensure that you tell us about changes in personal information (e.g., change of address, redress number) so that ensure that your information is up to date. You have the right to request access to the personal information that we hold about you and: (a) the source of your personal information; (b) the purposes, legal basis and methods of processing; (c) the data controller’s identity; and (d) the entities or categories of entities to whom your personal information may be transferred. MileagePlus members can create, view or update their MileagePlus account by accessing it through the MileagePlus profile section on united.com or by calling +1-800-421-4655. You also have the right to request that we delete your information. We are not required to comply with your request to erase personal information if the processing of your personal information is necessary for compliance with a legal obligation or for the establishment, exercise, or defence of legal claims.

Right to restrict the processing of your personal information: You have the right to restrict the use of your personal information when (i) you contest the accuracy of the data; (ii) the use is unlawful but you do not want us to erase the data; (iii) we no longer need the personal information for the relevant purposes, but we require it for the establishment, exercise, or defense of legal claims; or (iv) you have objected to our personal information use justified on our legitimate interests verification as to whether we have a compelling interest to continue to use your data. We can continue to use your personal information following a request for restriction, where: we have your consent; or to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.

Right to data portability: To the extent that we process your information (i) based on your consent or under a contract; and (ii) through automated means, you have the right to receive such personal information in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller.

Right to object to the processing of your personal information: You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.

Right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction: You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the EEA.

Right to lodge a complaint with your local supervisory authority: You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your personal information. We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.

How to exercise your rights: If you would like to exercise any of the rights described above, please send us a request via privacy@united.com. In your message, please indicate the right you would like to exercise. We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal information requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

Protecting information collected

United maintains physical, electronic and procedural safeguards to protect your information. Although United takes reasonable steps to safeguard and to prevent unauthorized access to your personal information, it cannot be responsible for the acts of those who gain unauthorized access and United makes no warranty, express, implied, or otherwise, that we will prevent unauthorized access to your personal information.

Please note that the collection, use and disclosure of your personal information by a third party is subject to your dealings with them and, if applicable, any of their privacy policies and practices. If you do not want an individual to obtain information on or make changes to your booking, you should not share your booking reference with them.

Your role in protecting your information

To protect your privacy and United's proprietary databases and systems, you should not share any of your information, such as MileagePlus number or password, with any unauthorized individuals or third-party information aggregators that would allow them access to your sensitive account information. You should also take all necessary steps to secure your mobile devices and protect information you may have stored on them. We do not have control over the security of your mobile device. United assumes no responsibility for the loss of information associated with security disrupting technologies, including but not limited to reverse engineering of mobile device applications or malware, that compromise the United mobile application(s) as a result of owner or third-party initiated changes to the mobile device. The security of that mobile device is the responsibility of its owner, not United.

Opting in

You can opt in to receiving marketing or promotion-related emails about MileagePlus Shopping UK by accessing your account on this Site and changing your notification settings to indicate you desire receive notifications. These emails will contain a message and link on how to opt out of that type of communication in the future. Regardless of your opt-out preferences, we reserve the right to send you emails or other communications for administrative purposes.

You can change your preferences for United marketing or promotion-related communications through your account on the United website or by contacting the MileagePlus Service Center by phone or in writing.

Location of your information/Data transfer/Notice to non-US persons

United will transfer, store, and process information that we collect about you, as described in this Policy, in the United States, which may not provide the same level of protection for your personal information as your home country. In addition, we may further transfer your information outside the United States for the purposes described in this Policy. Where personal information that we collect is transferred to and processed in the United States or anywhere else outside the European Economic Area (EEA) for the purposes described in this Policy, we will take steps to ensure that the information receives the same level of protection as if it remained within the EEA, including entering into data transfer agreements, using the EU Commission approved Standard Contractual Clauses, or by relying on certification schemes such as the EU - US Privacy Shield. You may have a right to details of the mechanisms under which your data is transferred outside the EEA. By submitting any personal information or by using the website and without limitation to any other rights or obligations we have, you acknowledge such transfer to, and processing in, the United States and these other countries, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions.

Other sites/digital channels

This Site may contain links to third-party sites, including participating retailer sites. Any access to and use of such linked sites is not governed by this Policy but instead is governed by the privacy policies of those third-party sites. We are not responsible for the information practices of such third-party sites.

Contact us

If you have comments or questions about this Policy, please submit your inquiry to United Customer Care. Please reference this Policy in those communications.

Legal effect and changes to this Policy

As previously stated, this Privacy Policy is not a contract nor does it otherwise create any legal rights or obligations in addition to those provided under applicable data protection laws. Rather, this Policy merely reflects guidelines setting forth United’s intended business practices. By using this Site you acknowledge the collection and use of such information by United its affiliates, partners, contractors and permitted agents as herein described and consistent with applicable laws. Also, United, in its discretion, may amend, interpret, modify or withdraw any portion of this Policy and related business practices at any time by posting updated text on this Site, and your continued use of this Site constitutes your acknowledgement of those changes. This Policy was last updated on April 30, 2019.