Boeing

Privacy and Cookie Statement

Privacy and Cookie Statement

Privacy Notice for California Residents

Boeing is providing this supplemental privacy notice to give California residents the additional information required by the California Consumer Privacy Act (the “CCPA”).

All of the companies in the Boeing group are committed to protecting the privacy and security of all the personal information that is entrusted to us. Boeing has a global privacy policy that protects your personal information no matter how or where it is collected, used or stored. Boeing also complies with applicable privacy and security laws, including the CCPA. The Boeing Privacy and Cookie Statement describes our privacy and security practices in detail.

1. Your Rights

The CCPA provides California residents with specific privacy rights, including the right to receive a privacy notice, the right to know what information we have collected about you during the past 12 months, and the right to know what categories of personal information we have shared with third parties. CCPA gives California residents the right to opt-out of having their personal information sold. CCPA also gives California residents the right to request deletion of their personal information.

This notice provides information about the categories of information that we collect from California residents generally, the sources of the information, the purposes for which we use the information, and the categories of third parties to whom we disclose the information for business purposes.

Please note that Boeing does not sell your personal information. Additionally, we do not offer financial incentives for the collection or sale of your personal information. We will also not discriminate against you if you exercise your rights under CCPA.

If you are a California resident, you may exercise your rights or authorize another person to act on your behalf by:

  • Calling the Boeing Global Privacy Office toll-free line at +1-877-544-2407
  • Visiting our CCPA Rights Portal at https://boeing.com/privacy/rightsexerciseportal
  • Writing us at:
      CCPA Rights Request
      Boeing Global Privacy Office
      Mail Code 11-503
      7755 East Marginal Way S.
      Seattle, WA 98108
  • You may also obtain a privacy rights request form from customer service staff at our retail locations.

Please note that we may need to verify your identity before we can fulfill your request. If you have an account with us, please have your account information available when you call or visit our portal to facilitate verification. If you are exercising access or deletion rights on behalf of another person, please either confirm that the person has authorized you to act as an agent or be prepared to provide proof that you have been designated as an authorized agent. Also, please understand that these rights are subject to some limitations, such as when we are retaining data for Everyday Business Purposes or to comply with our own legal obligations.

2. CCPA Right To Know Disclosures

Category and Sources of Personal Information (PI) Representative Data Elements Purpose for Collecting and Sharing the PI Categories of Third Parties to whom this type of Personal Information is Disclosed for a Business Purpose Categories of Third Parties to whom this type of Personal Information is Sold Information about Your Rights and Choices

Contact Information

We collect this type of information from:

  • You
  • Third parties, such as companies that help us maintain the accuracy of our data and data aggregators that help us complete and enhance our records

Data elements in this category include:

  • Full name, nicknames or previous names (such as maiden names)
  • Honorifics and titles, preferred form of address
  • Mailing address
  • Email address
  • Telephone number
  • Mobile number
  • Contact information for related persons, such as authorized users of your account

We use this type of information to identify you and communicate with you, including:

  • To send transactional messages (such as account statements or confirmations)
  • To send marketing communications, survey and invitations
  • To personalize our communications and provide customer service
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and to:

  • Service providers, including to social media companies which use the data only to identify which of our customers use their platforms so that we can deliver ads to you on the platform
  • Third parties who deliver our communications, such as a postal delivery service
  • Third parties who assist us with address hygiene and fulfillment
  • Other third parties (including government agencies) as required by law

We do not sell this personal information.

You can opt-out of having your contact information used by Boeing for direct marketing. To do this, click “unsubscribe” on any marketing communication you receive from us.

We will retain a record of your marketing choice.

Government issued identification information numbers

We collect this type of information from:

  • You
  • Third parties, such as aviation regulatory agencies, which verify the information you provided

Data elements in this category include:

  • Driver’s license number
  • Passport number
  • Aircraft tail numbers

We use this type of information:

  • To book requested travel reservations
  • To identify you
  • To maintain the integrity of our records
  • For customer verification
  • For security and risk management, fraud prevention and similar purposes
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and service providers and to:

  • Our lawyers, auditors, consultants
  • Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information visit the “Your Rights” section of this document.

Unique Identifiers

We assign a member ID to you when you register an account.

We collect this type of information from:

  • You, when you interact with us using your member ID

Data elements in this category include:

  • Member ID
  • System identifiers (e.g., usernames or online credentials)
  • Device identifier
  • Advertising ID

We use this type of information:

  • To identify you or your device
  • For record-keeping and reporting, including for data matching
  • For metrics and analytics,
  • To track your use of products, services, websites, limited to our own ad delivery and personalization
  • For our Everyday Business Purposes.

We may disclose this type of information to our affiliates and service providers and to:

  • Third parties who assist with our information technology and security programs
  • Third parties who assist with fraud prevention, detection and mitigation
  • Our lawyers, auditors and consultants
  • Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information visit the “Your Rights” section of this document.

Relationship Information

We collect this type of information from:

  • You
  • Third parties that provide information that helps us understand our customers, including data aggregators and public records providers.
  • We may also infer information about you based on information that you have given us and your past interactions with us and other companies.

Data elements in this category include:

  • Personal characteristic and preferences, such as your shopping preferences, languages spoken
  • Loyalty and rewards program data
  • Professional information
  • Hobbies and interests

We use this type of information:

  • To better understand you and to understand our customers generally
  • To design products, services and programs that delight our customers, including loyalty programs
  • To identify prospective customers
  • For internal business purposes, such as quality control, training and analytics
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and service providers and to:

  • External partners, with your consent, with whom we have joint marketing arrangements
  • Our lawyers, auditors and consultants
  • Other third parties as required by law

We do not sell this personal information.

You can opt-out of having your contact information used by Boeing for direct marketing. To do this, click “unsubscribe” on any marketing communication you receive from us.

We will retain a record of your marketing choice.

Transaction and Interaction Information

We collect this type of information from:

  • You
  • Third parties that process transactions for us, such as resellers and affiliates

Data elements in this category include:

  • Customer account information, purchase history and related records (returns, product service records, records of payments, credits etc.)
  • Records related to downloads and purchases of products and applications, including app usage
  • Data collected for consumer authentication (passwords, account security questions)
  • Customer service records
  • Visitor logs

We use this type of information:

  • To fulfill our business relationship with you, including customer service
  • For recordkeeping and compliance, including dispute resolution
  • For internal business purposes, such as finance, quality control, training, reporting and analytics
  • For risk management, fraud prevention and similar purpose
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and service providers and to:

  • External partners, with your consent, with whom we have joint marketing arrangements
  • Third parties as needed to complete the transaction, including delivery companies, agents and manufacturers
  • Our lawyers, auditors and consultants
  • Customers, in connection with their audits of Boeing
  • Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information visit the “Your Rights” section of this document.

Online & Technical Information

We collect this type of information from:

  • You and from your computer or devices when you interact with our platforms, websites and applications. For example, when you visit our websites, our server logs record your IP address and other information.
  • Automatically, via technologies such as cookies, web beacons, when you visit our website or other websites.
  • Third parties, including computer security services and advertising partners
  • We also associate information with you using unique identifiers collected from your devices or browsers.

Data elements in this category include:

  • IP Address
  • MAC Address, SSIDs or other device identifiers or persistent identifiers
  • Online user ID
  • Device characteristics (such as browser information)
  • Web Server Logs
  • Application Logs
  • Browsing Data
  • First Party Cookies
  • Third Party Cookies
  • Flash Cookies
  • Web beacons, clear gifs and pixel tags

We use this type of information:

  • For system administration, technology management, including optimizing our websites and applications,
  • For information security and cybersecurity purposes, including detecting threats
  • For recordkeeping, including logs and records that maintained as part of Transaction Information
  • To better understand our customers and prospective customers and to enhance our Relationship Information, including by associating you with different devices and browsers that they may use
  • For online targeting and advertising limited to our own purposes
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and service providers and to:

  • Third parties who assist with our information technology and security programs, including companies such as network security services who retain information on malware threats detected
  • Third parties who assist with fraud prevention, detection and mitigation
  • Contracted third party advertising partners
  • Our lawyers, auditors and consultants
  • Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information visit the “Your Rights” section of this document.

Financial Information

We collect this type of information from:

  • You
  • Payment processors and other financial institutions
  • Third parties that provide security and fraud prevention services

Data elements in this category include:

  • Bank account number and details (if you use automated payments)
  • Payment card information

We use this type of information:

  • To fulfill our business relationship with you, including processing payments, issuing refunds and collections
  • For recordkeeping and compliance, including dispute resolution
  • For internal business purposes, such as finance, audits, reporting and analytics
  • For risk management, fraud prevention and similar purpose
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and service providers and to:

  • Payment processors, financial institutions and others as needed to complete the transactions and for authentication, security and fraud prevention
  • Our lawyers, auditors and consultants
  • Customers, in connection with their audits of Boeing
  • Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information visit the “Your Rights” section of this document.

Internet of Things and Sensor Data

We collect this type of information when you use products enabled with this functionality.

Data elements in this category include:

  • Aircraft device records

We use this type of information:

  • To enable product functionality
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and service providers and to:

  • Third parties who assist with our information technology and security programs, including network security services
  • Third parties who assist with fraud prevention, detection and mitigation
  • Our lawyers, auditors and consultants
  • Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information visit the “Your Rights” section of this document.

Geolocation Data

We collect this type of information when you use products enabled with this functionality.

Data elements in this category include:

  • Precise location (e.g., from mobile devices)

We use this type of information:

  • Provide the information, products or services requested
  • For information security and fraud prevention
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and service providers and to:

  • Third parties who assist with our information technology and security programs
  • Third parties who assist with fraud prevention, detection and mitigation
  • Our lawyers, auditors and consultants
  • Other third parties as required by law

We do not sell this personal information.

To request deletion of your personal information visit the “Your Rights” section of this document.

Children's Data

We collect this type of information from parents and guardians for use with certain apps, services, and events.

We do not knowingly collect any personal information directly from children under age 16.

Data elements in this category include:

  • Child's name
  • Child’s school, grade and/or teacher
  • Educational records
  • Travel planning information

We use this type of information:

  • Provide the information, products or services requested by the child’s parent, guardian or school
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and service providers and to:

  • Other third parties as required by law

We do not sell this personal information.

To request deletion of your child’s personal information visit the “Your Rights” section of this document.

Compliance Data

We collect this type of information from:

  • You
  • Third parties, including companies that help us conduct internal investigations

Data elements in this category include:

  • Compliance program data, including customer screening records, and other record maintained to demonstrate compliance with applicable laws, such as tax laws, ADA, et al.

We use this type of information:

  • To comply with and demonstrate compliance with applicable laws
  • For legal matters, including litigation and regulatory matters, including for use in connection with civil, criminal, administrative, or arbitral proceedings, or before regulatory or self-regulatory bodies, including service of process, investigations in anticipation of litigation, execution or enforcement of judgments and orders
  • For internal business purposes, such as risk management, audit, internal investigations, reporting, analytics
  • For our Everyday Business Purposes

We may disclose this type of information to our affiliates and service providers and to:

  • Our lawyers, auditors and consultants.
  • Other third parties (including government agencies, courts and opposing law firms, consultants, process servers and parties to litigation) in connection with legal matters

We do not sell this personal information.

To request deletion of your personal information visit the “Your Rights” section of this document.

3. Definitions

Everyday Business Purposes encompasses the Business Purposes (as defined in the CCPA) and following related purposes for which personal information may be used:

  • To provide the information, product or service requested by the individual or as reasonably expected given the context in which with the personal information was collected (such as customer credentialing, providing customer service, personalization and preference management, providing product updates, and dispute resolution)
  • For identity and credential management, including identity verification and authentication, system and technology administration
  • To protect the security and integrity of systems, networks, applications and data, including detecting, analyzing and resolving security threats, and collaborating with cybersecurity centers, consortia and law enforcement about imminent threats
  • For fraud detection and prevention
  • For legal and regulatory compliance, including all uses and disclosures of personal information that are required by law or for reasonably needed for compliance with company policies and procedures, such as: anti-money laundering programs, security and incident response programs, intellectual property protection programs, and corporate ethics and compliance hotlines
  • For corporate audit, analysis and reporting,
  • To enforce our contracts and to protect against injury, theft, legal liability, fraud or abuse, to protect people or property, including physical security programs
  • To de-identify the data or create aggregated datasets, such as for consolidating reporting, research or analytics,
  • To make back-up copies for business continuity and disaster recovery purposes, and
  • For corporate governance, including mergers, acquisitions and divestitures.

4. Effective Date

This notice is effective January 1, 2020.