Privacy and Cookie Notice

At Cebu Pacific, we collect and process your Personal Information to deliver the services and experiences you expect from us as your airline of choice. This includes enabling you to book and manage your flights, access our digital platforms, and receive assistance throughout your travel.

We use your Personal Information for the following purposes:

• To manage your travel arrangements.

  This covers flight bookings, check-ins, baggage handling, and special assistance services.

• To communicate with you.

  This includes using your information to send booking confirmations, travel reminders, flight disruption notices, and other service-related updates.

• To provide customer support.

  This includes responding to your inquiries, complaints, and requests through our customer service channels or digital tools like Charlie the Chatbot.

• To ensure safety and compliance.

  This includes using your information to comply with aviation, immigration, customs, and other legal and regulatory obligations, and to support safety and security measures across our operations.

• To enhance your travel experience.

  With your consent, we may personalize your interactions with us, such as recommending products or services based on your travel history or preferences.

• To improve our products and services.

  We use Personal Information to better understand how you use our platforms, participate in surveys and promotions, and help us improve the quality of our offerings.

• To fulfill business and legal obligations.

  This includes accounting, auditing, fraud detection, dispute resolution, internal reporting, system maintenance, and regulatory compliance.

• To manage your Go Rewards points and membership.

  We process your information to enable the earning and redemption of points through Go Rewards, administered by Data Analytics Ventures, Inc. (DAVI). This applies when you link your MyCebuPacific account and/or provide your Go Rewards membership details during the booking process. This includes sharing data with DAVI to facilitate your rewards and provide you with customized lifestyle offers, discounts, and value-added benefits.

We collect a range of Personal Information necessary to provide our services and support your journey with us. The types of information we collect include:

• Identification and contact details – such as your name, gender, nationality, date of birth, passport details, postal address, email address, and phone number
• Travel-related information – including your flight bookings, travel history, travel preferences, seat selections, passport, and information about companions or unaccompanied minors traveling with you
• Payment and financial information – such as your credit/debit card details, billing address, and other payment-related data
• Customer service interactions – including call recordings, live chat transcripts, feedback, complaints, or compliments
• Account and loyalty program data – like your MyCebuPacific account details, Go Rewards membership, login credentials, and linked travel transactions
• Digital interaction data – such as browsing activity on our website and app, booking patterns, and participation in promotions or surveys
• Operational and compliance information – including CCTV footage in our offices and airport facilities, check-in and baggage records, and any incident reports
• Special categories of Personal Information – such as health information or special assistance needs, which may be collected with your express consent or as required for safety and regulatory purposes

We may also collect limited Sensitive Personal Information in specific situations, such as when you request medical assistance, indicate dietary preferences that may reveal religious beliefs, or when airport authorities share information related to safety and conduct.

We collect your Personal Information through various channels, depending on how you interact with us. The information may be collected directly from you or through authorized representatives, travel agents, online booking platforms, partner programs, government agencies, and service providers.

This may include:

• Information you provide directly when booking flights, checking in, updating your profile, or contacting our customer care team
• Data you submit through our website, mobile app, chatbot, and online forms
• Documents and forms submitted manually at our ticket offices, airport counters, or during events and promotions
• Information shared with us by third parties, such as travel agents, corporate travel coordinators, government agencies, partner airlines, and loyalty program partners. We may also collect information automatically when you use our digital platforms, such as browsing activity or usage data, through cookies and other technologies.

We process your Personal Information only when supported by a lawful basis under the Data Privacy Act of 2012. This may include your consent; the need to fulfill a contract, such as a booking or employment agreement; compliance with legal or regulatory obligations; the protection of your vital interests in case of emergencies; or our legitimate business interests, provided these do not override your rights and freedoms as a data subject.

We may share your Personal Information with trusted third parties when necessary to deliver our services, comply with legal obligations, or support our operations. These include:

• Government authorities such as immigration, customs, and border control agencies, as required by law
• Airline and airport partners, including ground handling agents, catering providers, and other carriers involved in your travel
• Technology and data service providers who support our websites, mobile apps, booking systems, and IT infrastructure
• Customer service and marketing partners who assist in communications, surveys, promotions, and analytics
• Freight and logistics providers, if applicable to your transactions
• Corporate or institutional clients, such as your employer, when travel or services are arranged on your behalf
• Security, legal, or investigatory teams, when required for fraud prevention, risk assessment, or regulatory compliance

We require all our partners, contractors, and service providers to process your Personal Information in accordance with applicable privacy laws and under strict contractual obligations that uphold confidentiality, security, and lawful use of your Personal Information.

We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws, regulations, or internal policies.

For customers, this may include the duration of your travel, the validity of your booking, or as needed for customer service, audit, or legal compliance. For employees and job applicants, retention follows employment-related and statutory requirements, including obligations under labor, tax, and regulatory laws.

When your Personal Information is no longer needed for these purposes, it is securely deleted or archived in accordance with our data retention and disposal policies.

Under the Data Privacy Act of 2012, you have the following rights in relation to your Personal Information:

• Right to be Informed – You can ask us to know when, how, and why your Personal Information is being processed.
• Right to Object – You can tell us to stop using your Personal Information for certain types of processing such as marketing.
• Right to Access – You can request to view your Personal Information that we hold about you.
• Right to Rectify – You may request to correct or update your Personal Information when needed.
• Right to Erasure or Blocking – You can ask us to delete your Personal Information under certain conditions.
• Right to Data Portability – You may request a copy of your Personal Information in a portable format, when applicable.
• Right to Damages – You can be compensated if your rights are violated and damage is proven.
• Right to File a Complaint – You may raise concerns with the National Privacy Commission if you believe your rights have been violated.

You may exercise your rights by submitting a request to our Data Protection Officer through dpo@cebupacificair.com. The complete contact details can be found at the end of this Privacy Notice. We may ask for proof of identity and other relevant documents to process your request securely and efficiently.

We will review and respond to your request in accordance with our internal procedures and applicable data protection laws.

We implement appropriate physical, technical, and organizational safeguards to protect your Personal Information from loss, misuse, unauthorized access, disclosure, or alteration.

These include:

• Use of secure servers and encrypted connections (e.g., SSL) for online transactions
• Strict access controls and role-based permissions for our employees and authorized personnel
• Confidentiality and data protection agreements with service providers, including cloud and IT vendors
• Regular employee training on privacy, data handling, and breach response protocols
• Monitoring and auditing of systems to detect and respond to security threats

Our security controls are regularly reviewed and updated to ensure they remain effective and appropriate to the sensitivity of the Personal Information we handle.

Cebu Pacific participates as a core coalition partner in the Go Rewards loyalty program. If you are a Go Rewards member, Data Analytics Ventures, Inc., the program operator, together with its core coalition partners— Robinsons Retail Group, and GoTyme Bank Corporation —act as joint Personal Information Controllers of your personal data in connection with your participation in the program. Your personal data is processed in accordance with the Go Rewards Privacy Notice, and, where applicable, for the performance of the Go Rewards Terms and Conditions.

We may update this Privacy Notice from time to time to reflect changes in our practices, legal or regulatory requirements, or improvements to our services. Any significant updates will be communicated through appropriate channels or through official announcements on our website.

We encourage you to review this Privacy Notice periodically to stay informed about how we protect and manage your Personal Information.