Xiamen Airlines Privacy Notice

Release Date: March 12, 2019

Last Updated: May 18, 2026

Xiamen Airlines Co., Ltd. (hereinafter referred to as "Xiamen Airlines," "we," or "Xiamen Air") respects and legally protects your personal information. This Privacy Notice is intended to explain how we collect, use, share, store, and transmit your personal information, as well as how you may exercise your rights regarding the protection of your personal information.

This Privacy Notice applies to the collection and use of your personal information when you use the official website of Xiamen Airlines and our other online or offline services (hereinafter collectively referred to as the "Services"). Please note that this notice does not apply to other third-party products/services accessed through our products/services. Specific provisions should be referred to the privacy notice or similar statement of such third parties.

If you have any questions or concerns regarding our collection and use of your personal information, please contact us using the contact information provided at the bottom of this Privacy Notice.

About Xiamen Airlines

Xiamen Airlines is an airline headquartered in Xiamen City, China (its registered address is No. 321 Donghuang Road, Huli District, Xiamen City, Fujian Province, People's Republic of China). As the first airline in China to operate under a modern enterprise system, Xiamen Airlines has achieved steady development over the years and has become a distinctive carrier in China's civil aviation industry. It has been praised by President Xi Jinping as "a microcosm of the development of China's civil aviation." 

For additional information regarding Xiamen Airlines, please refer to the section titled "About Xiamen Airlines" on our official website.

Xiamen Airlines' Collection of Your Personal Information and Purposes

We collect your personal information for the purposes outlined below, specifically through the following means:

1. Information You Provide to Us

We will request the following personal information from you to fulfill our air transportation and related service agreements, comply with our legal obligations, protect public interests and safety, prevent and control public health emergencies, safeguard the life, health, and property safety of you or others, or protect our legitimate interests within the European Union or the European Economic Area.

l Contact Information: Including the names, phone numbers, addresses, email addresses, and fax numbers of you or the order contact persons, as well as the passengers and ticket transferees associated with the order. This information is used to notify you or relevant contacts regarding flight and order-related messages (including flight schedules, security checks, boarding procedures, reimbursement matters, flight delays, insurance services, and accident notifications, among others), to arrange your itinerary, to send you itineraries or other products, to verify your identity, to invite you to provide feedback on service quality, to accept your complaints and suggestions, and, subject to obtaining your consent, to deliver marketing information to you. Please be advised that when you make reservations for related services on behalf of others, you are required to submit the personal information of the traveler. Before providing us with such personal information, please ensure that you have obtained the traveler's consent and that they are aware of and accept this Privacy Notice.

l Required identification document information and images required for services: Information such as document number, nationality, address, and validity period of legally valid documents including ID card, passport, visa page, etc., and corresponding document images as may be required. Please note that the aforementioned information includes sensitive personal information relating to identity documents. However, we are obligated by regulations to collect such information. The sensitive personal information will be legally and compliantly used to verify your identity during services such as flight ticket booking, seat reservation, check-in, boarding, review and processing of entry and exit formalities, insurance services, provision of Xiamen Airlines e-wallet services, and other services provided to you (such as handling complaints).

l Payment Information: This includes, but is not limited to, your bank account number, bank credit card number, billing address, credit card expiration date, personal account information provided to us by online payment platforms (such as Alipay, WeChat Pay, and UnionPay), e-wallet account information, e-wallet account balance, purchase orders, and transaction records. This information is collected to facilitate the management of your payment details during ticket purchases, verify your identity, and provide Xiamen Airlines' e-wallet services. Please note that the aforementioned information includes sensitive personal information, such as financial account details. However, to fulfill payment services, you must provide at least one type of financial account; otherwise, you will be unable to complete the payment.

The aforementioned information is essential for us to provide you with the corresponding ticketing products or services. If you refuse to provide the above information, we may be unable to offer you basic ticketing products or services due to a lack of necessary information.

In addition, to provide you with the services specified in the membership handbook and the activities required for membership, to offer you convenience, to ensure and further improve our services, and to enhance the functionality of our products, we may collect the following information from you based on your consent, to fulfill the obligations stipulated in our membership handbook, or for our legitimate interests (where permitted by applicable data protection laws). If you do not provide the following information, you may not be able to enjoy the corresponding product features or services (for example, if you refuse to provide registration information and fail to register as a member of Egret Miles, you will not be able to enjoy the membership services outlined in the Egret Miles Handbook). However, this will not affect your use of our basic ticketing services.

l Egret Miles Member Information: Such as your membership account and profile photo, date of birth, gender, professional identity verification, which are used to manage our Egret Miles members, verify member identities, and to facilitate your mileage accrual, rewards, redemption, and other services within the frequent flyer program.

l Geolocation Information: Such as when you fill out an order, to assist you in completing travel addresses more quickly and conveniently, we will collect your location information with your consent. Please be advised that this involves the collection of your sensitive personal information solely for the purpose of assisting you in completing your travel address. You may also choose not to provide authorization and enter the relevant address manually.

l Interests and Preferences: such as in-flight meal preferences, seat preferences, and in-flight service preferences, are used to enhance the relevance of our products and services, improve our services, and provide you with more tailored services, as well as to deliver our marketing advertisements or materials to you with your consent.

l Information Provided During Your Flight: Such as communications with cabin crew before or during a flight, as well as any requests you make in the cabin for upgrades, baggage, or in-flight services.

l Guardian's Name and Contact Information for Minors: Used to assist guardians in managing the ticketing and services for minors within the youth membership system.

l Information of Corporate Clients: Contact details of the corporate client's contract representative (such as name, position, address, telephone number, email address, etc.) to facilitate our communication with the corporate contact and the delivery of contracts or related documents.

l Information that you provide to us through our interactive areas for interaction with us, including your registration for our marketing activities, providing your email or contact number to receive our promotional discount information, and interacting with us by subscribing to and following Xiamen Airlines' official social media accounts; personal information provided to Xiamen Airlines for investigating and resolving issues, such as information to verify your identity.

We utilize this personal information to provide convenience for your travel, provide other travel-related goods and services, manage our "Egret Miles", conduct marketing activities, and furnish you with information and contact details about us. The types of personal information we request from you, along with the specific purposes and methods, will be clearly disclosed to you at the time of collection. You consent to our analysis of the data for service and marketing purposes, while retaining the right to refuse targeted marketing by the Xiamen Airlines Group or the analysis conducted for such purposes at any time.

2. Information We Collect Automatically

When you use our services, we may automatically collect certain information from your device. This automatically collected information will include:

l Your device information, including AndroidID, OAID, IDFA, IDFV, AAID, VAID, HarmonyOS (UUID), DeviceId, IP address, device operating system, system version, device model, brand, hardware serial number, device identification number, device identifier, WiFi information, network type, carrier information, DHCP, SSID, BSSID, device settings, device environment, device orientation, CPU information, application list information, ROOT identifier, merchant APP package name information, RegisterId, appKey, appSecret, MCS application package name, EmmCID, UFSID, GUID, GAID, OPENID, notification bar status, system status, specific types of sensors, sensor list, location-related information, time zone, clipboard, screen resolution, camera, language, service and operation log information, is collected to enable us to push service notification messages to your client and implement related security risk control measures. This constitutes the essential basic information required to provide you with services.

l Information regarding the approximate geographic location of your device (such as country or city-level location), as well as other technical information. We may also collect information about how your device interacts with us, including the web pages you visit and the links you click, which we use for operational purposes to better understand how visitors use our services.

For detailed information regarding device permissions, please refer here. Some of this information may be collected by cookies and similar tracking technologies, as detailed in the section titled "Cookies and Similar Tracking Technologies" mentioned below.

3. Information We Collect from Third Parties

When you choose products or services jointly offered by us and third parties, we may collect your personal information from such third parties. This shall occur only in the following circumstances: when it is necessary for the third party to fulfill the product or service agreement entered with you; when it is required for the public interest or for the prevention and control of public health events (such as epidemic prevention and control); when the third party is legally required to disclose your personal information to us; or when your consent has been obtained. 

We collect information from third parties, including affiliated companies and business partners such as professional travel agencies and other organizations that assist with ticket bookings and travel arrangements, as well as information provided by agents or agencies through Xiamen Airlines' group booking platform for booking tickets and arranging travel on your behalf. We use this information collected from third parties to provide services to you and to ensure the accuracy of relevant records we maintain about you. Additionally, please note that professional travel agencies may have their own specific privacy policies regarding the collection and processing of your personal information. Such privacy notices do not form part of Xiamen Airlines' privacy notice, and you should carefully review them before deciding whether to agree. Generally, we will only use the personal information we collect from you for the purposes described in this Privacy Notice or for the purposes explained to you at the time of collection. If we collect or process your personal information for purposes unrelated to those stated in this Privacy Notice, we will seek your additional consent.

With Whom We Share Your Personal Information

We strictly limit the sharing of information in accordance with legal and regulatory provisions. In compliance with laws and regulations, we may disclose your personal information to the following categories of entities:

Service providers entrusted by us to provide support (such as our ticket sales or freight forwarding agents, ground service providers, information system providers, airport transfer service providers, security service providers, etc.) may share personal information for the purposes described in this Privacy Notice or as disclosed to you at the time of collection, and will process personal information in accordance with the requirements set forth in this Privacy Notice.

For the other airlines under the group that operate and manage the Egret Miles with us, namely Hebei Airlines and Jiangxi Airlines, we will provide you with the Egret Miles Handbook to uniformly manage the member information of the Egret Miles, offering services such as unified mileage accrual and redemption, and mileage mall consumption. For specific information regarding the Egret Miles, please refer to the following link.

Third-party service providers collaborating with us, including airports at your departure, destination, or transit locations, the SkyTeam Alliance and airlines partnering with us to offer you more options regarding routes, fares, mileage accrual, and redemption through code-sharing, interline, and joint venture agreements. You may click here to access the privacy notice database of various airlines provided by the International Air Transport Association (IATA); land or sea transportation service companies engaged in intermodal cooperation with us, providing services when you select specific intermodal products or services; online travel ticketing agencies, ticket distributors, travel agencies, and hotels collaborating with us, delivering more convenient and efficient quality services for your travel and accommodation needs, and arranging discounted prices and point redemption on your behalf; insurance companies partnering with us, offering insurance products and services when you select a specific insurance provider; financial/payment institutions collaborating with us, sharing personal financial information necessary for the service only when you opt to use wallet and payment services. Please be advised that we do not guarantee the personal information protection compliance of third-party companies. Before selecting services related to these third parties, you must carefully review their privacy policies.

For our corporate, institutional, or government clients, or individuals traveling or obtaining products or services on behalf of such clients, we will disclose your travel details and information regarding your use of our services to our corporate, institutional, or government clients (or their authorized employees).

In accordance with legal and regulatory provisions, or as mandated by competent government authorities, we may share data with competent government agencies, law enforcement agencies, regulatory authorities, judicial bodies, or other such third parties (such as civil aviation, customs, border control, and other administrative, judicial, or regulatory authorities) only under the following circumstances and to the extent necessary: (1) to comply with legal and regulatory requirements, such as those pertaining to national security, defense security, public security, public health, or significant public interests, or in relation to criminal investigation, prosecution, trial, or execution of judgments; (2) to implement, establish, or safeguard our legitimate rights; (3) to protect the vital interests, such as life or property safety, of you or others.

We may communicate with actual or prospective purchasers (and their agents and advisers) regarding any actual or proposed transaction, merger, or acquisition of any part of our business, provided that we inform such purchasers that your personal information may only be used for the purposes set out in this Privacy Notice.

Any other person to whom you have consented to disclose your personal information. For example, you authorize others to book and manage your travel arrangements on your behalf using your personal information.

Providers of SDKs on our website. We have also deployed certain SDKs on our official website to ensure website security and fulfill specific functional requirements of the website. The third-party SDKs we integrate primarily serve the needs of you and other users. Please click here for information regarding the providers of SDKs used on Xiamen Airlines' official website.

Cross-Border Transfer of Your Personal Information

Personal information collected and generated within the territory of the People's Republic of China will be stored within the territory of the People's Republic of China.

For the purposes set forth in this Privacy Notice, your personal information may be transferred to and processed in countries or regions other than your habitual residence. In such cases, we will protect the security of your personal information in accordance with applicable laws and regulations and transfer your personal information globally, including but not limited to:

If your personal information is transferred outside the territory of the People's Republic of China, we will implement measures required by laws and regulations, such as conducting security assessments for outbound data transfers, in accordance with legal and regulatory requirements. You may click here for detailed information regarding cross-border data transfers.

If your personal information is transferred to a country for which the European Commission has not made an adequacy decision, we will comply with the requirements of EU data protection laws by signing the standard contractual clauses approved by the European Commission and implementing security measures to safeguard the security of your personal information.

Xiamen Airlines' cross-border data transfers within the SkyTeam Alliance have successfully completed the security assessment required by the Cyberspace Administration of China. If you wish to exercise your rights under the Personal Information Protection Law, please refer to the methods for exercising such rights as outlined in Xiamen Airlines' Privacy Notice.

Your Privacy Rights

You are entitled to the following personal information protection rights:

l If you wish to access, copy, transfer, correct, update, or request deletion of your personal information, you may do so at any time via the "Egret Miles -- My Account -- Account Settings" path on the official website, or via the "My Account" section under "Me" in the APP, or via the "My Account" section under "Me" -- in the mini-program to perform the relevant operations. Alternatively, you may contact us for assistance using the detailed contact information provided under the "How to Contact Us and Complaint/Reporting Channels" heading.

l You have the right to restrict and refuse our processing of your personal information. You may choose to deactivate your Egret Miles membership account with Xiamen Airlines. Upon account deactivation, we will cease providing you with the corresponding products and services. While logged in, you can submit a request for permanent account deactivation via the official website path: "Egret Miles -- My Account -- Account Settings -- Account Deactivation", or via the APP path: "Me -- My Account -- Account Status -- Permanently Deactivate Account" or "Me -- Personal Settings -- Permanently Deactivate Account", or via the Mini Program path: "Me -- My Account -- Account Status -- Permanently Deactivate Account". When a member deactivates their account, the Egret Miles will, within a reasonable timeframe, take measures such as freezing the account and reviewing for any pending transactions, and will delete or anonymize the relevant personal information as required by law. If you have not registered as a member of Egret Miles and are logging in via a mobile phone number, you may apply to deactivate your Xiamen Airlines account. Applying to deactivate your account means that your current Xiamen Airlines account will no longer be accessible via your mobile phone number. After deactivating your account, we will cease providing the corresponding products or services and will anonymize your personal information.

l You have the right at any time to unsubscribe from the marketing information we send to you. We will send you marketing information via email, text message, etc., with your prior consent, including personalized and targeted marketing content such as promotional routes, price discounts on products or services, etc. We will respect your choices regarding which information you wish to receive and the methods through which we send it to you. You may exercise this right by clicking the "Unsubscribe" or "Opt-out" link in the marketing SMS or email we send to you; if you are a member of Egret Miles, you can manage whether to receive push marketing information via the path on the official website: "My Account -- Account Settings -- Basic Information -- Receive the Latest Marketing Updates," or through the path in the APP: "My -- Personal Settings -- Push Notification Settings" or "My -- My Account -- Account Status -- Push Notification Settings." If you wish to unsubscribe from other marketing-related information, please contact us using the detailed contact methods provided under the heading "How to Contact Us and Complaint Reporting Channels."

l You have the right to enable or disable the personalized recommendations we provide to enhance your browsing and shopping experience at any time. In the Xiamen Airlines App, you can make the choice to enable or disable personalized recommendations by clicking "My -- Settings -- Privacy Settings -- Personalized Recommendations". Upon your selection to opt out, we will cease providing personalized recommendations based on your characteristics; however, we may still display advertisements or recommended content that are not tailored to your specific features.

l Similarly, if we have collected and processed your personal information with your consent, you retain the right to withdraw your consent at any time. Your withdrawal of consent will not affect the legality of any prior processing activities, nor will it impact the legality of processing your personal information based on statutory grounds rather than your consent. Should you need to withdraw your consent, please contact us using the detailed contact information provided under the heading “How to Contact Us and Channels for Complaints and Reports."

l If you do not understand our privacy notice, have any questions regarding our rules for processing your personal information, or require us to disclose specific information about you as mandated by law, please contact us using the detailed contact information provided under the heading "How to Contact Us and Channels for Complaints and Reports."

l If you are a close relative of a deceased passenger or user, you have the right to access, copy, correct, or delete the personal information of the deceased passenger or user for your lawful and legitimate interests. Please contact us using the detailed contact information provided under the section titled "How to Contact Us and Channels for Complaints and Reports."

l You have the right to complain to local internet information authorities, civil aviation authorities, and market supervision departments regarding our collection and use of your personal information.

We will respond to any requests relating to your privacy rights in accordance with the law, in a timely and reasonable manner, within the legally permitted timeframe. Prior to providing a substantive response to your request, to safeguard personal information security and prevent unnecessary data disclosure, we will verify your personal identity and require you to provide necessary supporting documentation. If you are exercising rights on behalf of another person, you should provide your identity proof and that of the other person, along with authorization documentation. If you are exercising rights as a close relative of the deceased, in addition to providing your identity proof, you must also furnish proof of your relationship with the deceased and a statement explaining your legitimate interest. We reserve the right to refuse requests for personal information rights that pose security risks, may lead to data breaches, or could cause Xiamen Airlines to violate confidentiality obligations.

We will respond to your request within 15 business days after it is submitted.

Protection of Minors' Personal Information

We respect and protect the personal information of minors. In accordance with the requirements of relevant national laws and regulations, if you are a minor under the age of 18, you should obtain the consent of your parent or legal guardian before using our services.

If you are a minor under the age of 14, we have prepared a specialized Children's Privacy Notice for you. Please read it carefully with your parent or legal guardian before using our services. Please be advised that you may only utilize our products and services upon obtaining consent from your parent or legal guardian, or upon securing valid ratification from your legal guardian regarding the contract between you and us.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time to accommodate legal, technological, or business developments. When we update this Privacy Notice, we will publish the updated version through channels such as the Xiamen Airlines official website, APP, and WeChat mini-program, in line with the purpose of the updates. If applicable data protection laws require us to obtain your consent for material amendments to this Privacy Notice, we will comply with the legal requirements.

You can check the latest update date of this Privacy Notice at the "Last Updated" date at the top of this Privacy Notice.

How to Contact Us and Channels for Complaints or Reports

We have established a dedicated personal information protection team and appointed a personal information protection officer. If you have any questions or concerns regarding our use of your personal information, or if you wish to file a complaint or report regarding the handling of personal information in violation of this notice, you may contact us using the following methods. We will respond to you as soon as possible within the timeframe required by applicable laws, and will provide a response within 15 business days after receiving your request in China.

Xiamen Airlines Personal Information Protection Team Email: dpo@xiamenair.com

Mailing Address: No. 321 Donghuang Road, Xiamen City, Fujian Province, China, to be forwarded to the Digital Committee (Attn: Mailroom).

The data controller for your personal information is Xiamen Airlines Co., Ltd.

Last updated: 25/05/2018

This Cookie Statement explains how Xiamen Airlines and its group companies (collectively “Xiamen Air”, "we", "us", and "our") use cookies and similar technologies to recognise you when you visit our websites at www.xiamenair.com ("Website"). It explains what these technologies are and why we use them, as well as your rights to control our use of them.

What are cookies?

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information.

Cookies set by the website owner (in this case, Xiamen Air) are called "first party cookies". Cookies set by parties other than the website owner are called "third party cookies". Third party cookies enable third party features or functionality to be provided on or through the website (e.g. like advertising, interactive content and analytics). The parties that set these third party cookies can recognise your computer both when it visits the website in question and also when it visits certain other websites.

Why do we use cookies?

We use first party and third party cookies for several reasons. Some cookies are required for technical reasons in order for our Websites to operate, and we refer to these as "essential" or "strictly necessary" cookies. Other cookies also enable us to track and target the interests of our users to enhance the experience on our Websites. Third parties serve cookies through our Websites for advertising, analytics and other purposes. This is described in more detail below.

The specific types of first and third party cookies served through our Websites and the purposes they perform are described in the table below (please note that the specific cookies served may vary depending on the specific Website you visit):

What about other tracking technologies, like web beacons?

Cookies are not the only way to recognise or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are tiny graphics files that contain a unique identifier that enable us to recognise when someone has visited our Websites. This allows us, for example, to monitor the traffic patterns of users from one page within our Websites to another, to deliver or communicate with cookies, to understand whether you have come to our Websites from an online advertisement displayed on a third-party website, to improve site performance, and to measure the success of marketing campaigns. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will impair their functioning.

Do you serve targeted advertising?

Third parties may serve cookies on your computer or mobile device to serve advertising through our Websites. These companies may use information about your visits to this and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology that is used to measure the effectiveness of advertisements. This can be accomplished by them using cookies or web beacons to collect information about your visits to this and other sites in order to provide relevant advertisements about goods and services of potential interest to you. The information collected through this process does not enable us or them to identify your name, contact details or other personally identifying details unless you choose to provide these.

How can I control cookies?

You have the right to decide whether to accept or reject cookies. You can exercise your cookies preferences by clicking on the appropriate opt-out links provided in the cookies table above.

You can set or amend your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our website though your access to some functionality and areas of our website may be restricted. As the means by which you can refuse cookies through your web browser controls vary from browser-to-browser, you should visit your browser's help menu for more information.

In addition, most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit http://www.aboutads.info/choices/ or http://www.youronlinechoices.com.

How often will you update this Cookie Statement?

We may update this Cookie Statement from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal or regulatory reasons. Please therefore re-visit this Cookie Statement regularly to stay informed about our use of cookies and related technologies.

The date at the top of this Cookie Statement indicates when it was last updated.

Where can I get further information?

 If you have any questions about our use of cookies or other technologies, please email us at dpo@xiamenair.com.