Last Updated: 12 April 2022

This California Privacy Notice applies to California residents who use the services provided by KrisShop Pte. Ltd.  (“KrisShop”, “we,” “us” and “our”).  This California Privacy Notice is intended to supplement the Privacy Policy located here.  The California Consumer Privacy Act (“CCPA”) provides some California residents (“you” or “your”) with the following rights, including the right to: (i) request information about the personal information we have collected about you; (ii) request information about our sale or disclosure for business purposes of your personal information to third parties; (iii) opt-out of the sale of your personal information to third parties; and (iv) not be discriminated against for exercising any of these rights. 

WHAT IS PERSONAL INFORMATION?

For purposes of this California Privacy Notice, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

INFORMATION WE COLLECT

California residents have the right to know the categories of personal information we collect, the purpose for collecting such personal information, and the categories of third parties to whom the personal information was shared for a business purpose or sold. 

Category of personal information	How we share it
Identifiers (such as name, postal address, KrisFlyer membership number, Internet Protocol address, email address, cookie information or other similar identifiers)	Sharing for a business purpose: Within the SIA group of companies, which include Singapore Airlines Limited, Scoot Tigerair Pte. Ltd. (“Scoot”) Tradewinds Tours & Travel Private Limited, and Encounters Pte. Ltd. (collectively with SIA, the “SIA Group”) for internal business purposes With service providers who process personal information on our behalf in order to help us provide our services With advertisers and advertising networks that require the data to select and serve relevant adverts to you With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes or where such disclosure may be reasonably necessary to comply with any legal obligation, to enforce our rights and to prevent fraud or technical issues.   Selling: To selected partners to enable them to better tailor offers, promotions and other direct marketing to you
Personal Information categories listed in the California Customer Records statute Cal. Civ. Code § 1798.80(e)) (such as name, address, telephone number)	Sharing for a business purpose: Within the SIA Group With service providers who process personal information on our behalf in order to help us provide our services With advertisers and advertising networks  that require the data to select and serve relevant adverts to you With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes
Protected classification characteristics under California or federal law (such as age, national origin, medical condition, sex, marital status or disability)	Sharing for a business purpose: Within the SIA Group With service providers who process personal information on our behalf in order to help us provide our services With advertisers and advertising networks that require the data to select and serve relevant adverts to you With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes   Selling: To selected partners to enable them to better tailor offers, promotions and other direct marketing to you NOTE: Not all examples listed are shared with these third parties here.  For example, we do not share medical conditions with partners who help us facilitate promotions.
Commercial information (such as products purchased, obtained or considered, or other purchasing or consuming histories or tendencies)	Sharing for a business purpose: Within the SIA Group With service providers who process personal information on our behalf in order to help us provide our services With advertisers and advertising networks that require the data to select and serve relevant adverts to you With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes
Internet or other similar network activity (such as browsing history, search history, information on a consumer’s interaction with a website, application or advertisement)	Sharing for a business purpose: Within the SIA Group With service providers who process personal information on our behalf in order to help us provide our services With advertisers and advertising networks that require the data to select and serve relevant adverts to you With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes   Selling: To selected partners to enable them to better tailor offers, promotions and other direct marketing to you
Inferences drawn from other personal information (such as a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, and attitudes)	Sharing for a business purpose: Within the SIA Group With service providers who process personal information on our behalf in order to help us provide our services With advertisers and advertising networks that require the data to select and serve relevant adverts to you With public agencies and regulatory authorities in Singapore and their subcontractors, for the purposes of participating in industry studies With law enforcement agencies, public or regulatory authorities, securities commissions or other organizations for security, health, customs and immigration purposes   Selling: To selected partners to enable them to better tailor offers, promotions and other direct marketing to you

 

We collect personal information from the following sources:

• Directly from you or persons authorised by you to act on your behalf;
• Collected automatically and indirectly from you;
• From entities within the SIA Group;
• From service providers that provide services to you on our behalf
• From third party sources, such as social media platforms when you interact with our social media channels or analytics providers.

HOW WE USE PERSONAL INFORMATION

We use personal information in the following ways and for the following business and commercial purposes:

• To provide and improve our services;
• To process and assist you with any transactions related to your purchase;
• To allow SIA to credit KrisFlyer miles to your KrisFlyer account for eligible purchases;
• To notify you about changes to our services or other updates;
• To administer and improve our website;
• To respond to your inquiries;
• For security and fraud prevention;
• For marketing and advertising; and
• For statistical analysis

RIGHT TO KNOW

You have the right to request that we disclose what personal information we collect, use, disclose and sell.  You also have the right to request the specific pieces of personal information we have collected about you, as well as information about our sale or disclosure for business purposes of your personal data to third parties.  Once we receive, verify and confirm your consumer request, we will endeavor to disclose to you the information you have requested.

RIGHT TO DELETE

You have the right to request the deletion of any of your personal information that we have collected from you and retained. Please note that this is a limited right as we may be able to retain certain personal information subject to an exception under the CCPA or another lawful obligation. Once we receive, verify and confirm your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

RIGHT TO OPT-OUT OF SALE

You have the right to opt-out of the sale of your personal information to third parties. Under the CCPA, “sell” includes the transfer or communication of personal information to another business in such a way that conveys value to the recipient business, even if that value is not monetary. This means that sharing for a number of common business activities may be considered a “sale” under the CCPA, even if there is no exchange of money.  If you would like to opt-out of the sale of your personal information to third parties, please submit a request via email at krisshopcustomercare@krisshop.com. Further details on how to submit this request can be found in the section titled “How to Exercise your CCPA Privacy Rights” below.

We do not knowingly sell the personal information of consumers under the age of 16 without affirmative authorization.

RIGHT TO NON-DISCRIMINATION

You have the right to not be discriminated against for exercising any of these rights. 

ADDITIONAL INFORMATION

If you are a California resident, California Civil Code Section 1798.83 permits you to make a request, once a year, for information regarding the disclosure of your personal information to third parties for those third parties’ direct marketing purposes. To make this request, please submit a request via email at krisshopcustomercare@krisshop.com.   

At this time, this website does not recognize automated browser signals regarding tracking mechanisms, which may include “Do Not Track” instructions. For information about “Do Not Track,” please visit http://allaboutdnt.com/.  

HOW TO EXERCISE YOUR CCPA PRIVACY RIGHTS

In order to process your request promptly, we kindly ask you to include the necessary identification details with your request as well as any other information necessary to confirm your identity or to process your request. Such information may include the following:

• Full Name;
• Mailing Address;
• Email Address;
• Contact Number;
• A copy of an official identity document (.e.g Identity Card or Passport Information) with all information apart from your full name and address redacted (if applicable); and
• KrisFlyer or HighFlyer number (if applicable). 

All data privacy requests should be sent to krisshopcustomercare@krisshop.com. Please note that requests sent in via other channels or which do not contain sufficient supporting information may take longer to process and/or we may not be able to respond within the prescribed timelines.

We will not use this additional information for anything other than handling your request. You may designate an authorized agent to make a request in certain circumstances on your behalf.  Such authorized agent must be registered with the California Secretary of State. 

We will endeavor to fulfill your request within 45 days of receiving that request. If we require additional time, we will inform you of the reason and extension period in writing.