Privacy Policy
Last updated: 25 June 2026
DISCOMILES LIMITED (“Discomiles,” “we,” “us,” or “our”) provides travel-rewards experiences that help consumers discover relevant offers and earn loyalty miles while browsing travel sites, and help advertisers and partners reach consenting audiences. We respect the privacy and confidentiality of the personal data of our users, visitors, and everyone with whom we interact while providing our services. While we are driven by the goal of providing users with a useful travel-rewards experience, we also understand that a key concern is the safety of personal data.
1. Scope and updates to this privacy notice
The purpose of this Privacy Notice (“Privacy Notice”) is to inform you as to how DISCOMILES LIMITEDmanages, collects, uses, and discloses Personal Data (as defined below) relating to you as a user of our services via our website, Chrome browser extension, software applications, mobile applications, and other platforms (“Platforms”), and to help you understand and exercise your privacy rights.
Changes to our Privacy Policy. We may modify and update this Privacy Notice from time to time in our sole discretion. If there are any material changes to this Privacy Notice, we will notify you as required by applicable law.
2. Personal data we collect and process
Under this Privacy Notice, “Personal Data” means any information that is defined as “personal data” or a similar term under applicable privacy laws, including information that relates to an identified or identifiable individual, or that may be used to identify an individual, household, or device — for example name, street address, telephone number, email address, photograph, IP addresses, device identifiers, or other persistent identifiers.
The categories of Personal Data we collect and process depend on how you interact with us, our services, products, and promotions, and the requirements of applicable law. We collect and process data that you provide to us, information we obtain automatically when you use our services, and information from other sources such as third-party services and organizations, as described below.
A. Personal data you provide to us directly
We may collect Personal Data that you provide to us, including when you:
- Create an account. When you create an account on our Platforms or visit, use, or install our extension, we may collect your name, email address, physical address, telephone number, gender, date of birth, and similar profile information.
- Link a loyalty program. When you choose to link a loyalty account (for example KrisFlyer or another supported program), we may collect program identifiers, membership details, and related account metadata necessary to estimate or award miles.
- Manage consent and preferences. We may collect consent choices, marketing preferences, and settings you configure in our extension or web dashboard.
- Communicate with us. When you request information, customer or technical support, marketing materials, or otherwise contact us, we may collect your email address, message content, phone number, and contact preferences.
- Participate in surveys or promotions. If you participate in surveys, sweepstakes, competitions, or similar events, we may collect Personal Data you submit in connection with those activities.
- Use interactive features.Information you submit through messaging, chat, commenting, forums, blogs, or social features may be collected. Information you provide through public sharing features is considered “public” unless otherwise required by applicable law.
- Apply for a job. If you respond to a job posting, we may collect your application, CV, cover letter, and related materials.
B. Personal data collected automatically
We may collect and process Personal Data automatically when you use our services or Platforms.
- Cookies and similar technologies.We, and third parties that provide content, advertising, or other functionality on our Platforms, may use cookies, pixel tags, and other technologies (“Technologies”) to automatically collect information through your use of our services. These Technologies may collect information about your interactions with us and partner sites (for example pages visited, time spent, searches, timestamps, referring pages, clicks, and redirects). You can manage Technology preferences through your browser or device settings where available.
- Performance and analytics.We use Technologies that help us count visits, measure traffic sources, and improve Platform performance. Analytics information is typically aggregated. We may use providers such as Google Analytics. For more information about Google's practices, see Google's Privacy Policy.
- Advertising. We may use Technologies to deliver relevant advertisements, measure effectiveness, and provide customized features. Approved third parties may also set Technologies when you interact with our website.
- Browser extension. When you use our Chrome extension with consent enabled, we may collect travel-intent signals from a fixed list of supported AI assistant, search, travel, and booking websites — for example domain, page context, non-sensitive keywords extracted from the visible page, browser type, operating system, and error or event logs. Capture activates only on travel-related pages or queries: the extension requires several travel keywords to be present on the page before any signal is processed, and we apply PII filtering at that point. We do not collect your email content, your general (non-travel) browsing or search history, or content from websites outside our supported domains. When you pause capture or revoke consent, intent processing stops.
C. Personal data collected from other sources
- Third-party services. If you access our services through a third-party application (for example an app store, login provider, or social network), we may collect Personal Data you have made available via your privacy settings with that provider.
- Referrals and partners. We may receive Personal Data if you are referred to us by business partners or third parties.
3. How we use your personal data
A. Provide our services
We may use your information to fulfill our contract with you and provide services, such as:
- Managing your information and accounts;
- Matching travel intent to relevant offers and partner deals;
- Processing clicks, attribution, miles estimates, and rewards accrual;
- Providing access to features of our Platforms;
- Understanding your preferences and delivering relevant content;
- Answering customer or technical support requests;
- Communicating about your account, activity, and policy changes; and
- Allowing you to register for events, loyalty programs, or promotions.
B. Administrative purposes
We may use your information for administrative purposes, such as:
- Pursuing legitimate interests including research, development, security, and fraud prevention;
- Detecting malicious, deceptive, fraudulent, or illegal activity;
- Investigating complaints, claims, and disputes;
- Improving, upgrading, or enhancing our services;
- Authenticating identities, including requests to exercise privacy rights;
- Sharing personal data with third parties as needed to provide the services;
- Enforcing our agreements and policies; and
- Complying with legal or regulatory obligations.
C. Marketing and advertising
We may use Personal Data to tailor content and advertisements, including details about partner products, services, offers, and rewards, as permitted by applicable law. This may include email campaigns, in-product messages, and interest-based advertising. You may contact us to ask questions about our marketing practices.
D. With your consent
We may use Personal Data for other purposes clearly disclosed to you at the time you provide Personal Data or with your consent.
E. Automated decision making
We may engage in automated decision making, including profiling — for example to analyze intent signals, determine offer relevance, estimate miles, or evaluate fraud risk. Our processing will not result in a decision based solely on automated processing that significantly affects you unless such a decision is necessary under our contract with you, we have your consent, or we are permitted by law.
4. How we disclose your personal data
A. Disclosures to provide our services
We may share your Personal Data with:
- Service providers. Third parties that assist with hosting, IT, analytics, marketing, customer support, payment processing, fraud monitoring, legal advice, and related services.
- Business and affiliate partners.When you click an offer or deal presented on our Platforms, you direct us to disclose certain information (for example the link clicked and a unique tracking identifier) to an affiliate network, advertiser, or partner so purchases or referrals can be attributed. Each partner's privacy notice governs how they process Personal Data after disclosure.
- Loyalty aggregators. If you link a loyalty program, we may share information necessary to verify membership, estimate miles, or award rewards through our loyalty partners.
- Advertising partners. Third parties that set Technologies or deliver personalized advertising on or through our services.
- Affiliates. Our corporate affiliates for administrative, IT, or service-support purposes.
B. Disclosures to protect us or others
We may access, preserve, and disclose information we store about you to external parties if we believe doing so is required or appropriate to comply with legal process, protect rights or safety, enforce policies or contracts, collect amounts owed, or assist with investigations of suspected or actual illegal activity.
C. Business transactions
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of assets, your information may be transferred as part of such a transaction, as permitted by law and/or contract.
5. Your privacy choices and rights
Your privacy choices
- Email. Use the unsubscribe link in promotional emails to opt out. Transactional and service-related emails may continue.
- Extension consent. You can pause capture or revoke consent in the extension popup, which stops future intent processing.
- Push notifications and location. You may opt out via your device settings where applicable.
Your privacy rights
Depending on applicable law, you may have the right to confirm or access your Personal Data; receive a portable copy; correct inaccurate data; request deletion (subject to legal exceptions); and opt out of certain sharing for targeted advertising or profiling. Contact us using the details below to exercise these rights. We will process requests in accordance with applicable law.
Our extension and API also support data-subject requests such as export and deletion where implemented. We do not “sell” Personal Data as defined under applicable US state privacy laws.
6. Security of your data
We implement policies, practices, and processes to safeguard Personal Data in compliance with applicable personal data protection laws and this Privacy Notice. Unfortunately, no system is completely secure, and we cannot guarantee the security of Personal Data you provide. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized access, use, disclosure, or loss of Personal Data.
By using our services or providing Personal Data to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues. If we learn of a security breach, we may attempt to notify you electronically, by posting a notice on our services, by mail, or by email.
7. International data transfers
Data processed by us may be transferred, processed, and stored anywhere in the world, including countries that may have data protection laws different from those where you live. We endeavor to safeguard your information consistent with the requirements of applicable laws. Contact us for more information about safeguards used for international transfers.
8. Retention of personal data
We store Personal Data for as long as you use our services, as described in this Privacy Notice, or as necessary to fulfill the purposes for which it was collected, provide our services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws. Financial and attribution records may be retained in anonymized or aggregated form where required for compliance.
9. Supplemental notice for US residents
This section applies to our processing of Personal Data subject to US state privacy laws. US residents may have the right to know categories of Personal Data collected, sources, business purposes, and categories of third parties to whom data is disclosed. The categories described in Sections 2 and 4 above apply.
We do not sell Personal Data, nor do we have actual knowledge of any sale of Personal Data of minors under 16 years of age. US residents have the right not to receive discriminatory treatment for exercising privacy rights. We may take steps to verify your identity before fulfilling a request. Under certain laws, you may appeal a refusal to act on a request.
10. Supplemental notice for Nevada residents
Nevada residents may opt out of the sale of certain Personal Data to third parties who intend to license or sell that data. We do not currently sell Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A. To submit a request, contact us using the details below with the subject line “Nevada Do Not Sell Request” and provide your name and the email associated with your account.
11. Children's data
Our services are not directed to children under thirteen (13) years old, and we do not knowingly collect Personal Data from children. If you are a parent or guardian and believe your child has provided Personal Data without your consent, contact us as described below. If we become aware that a child has provided Personal Data in violation of applicable law, we will delete it unless we have a legal obligation to keep it, and terminate the child's account if applicable.
12. Other provisions
Our services may contain links to third-party websites or applications. Those services are not controlled by us. We encourage you to read the privacy policies of each website or application with which you interact. We do not endorse or approve the privacy practices or content of third-party services. Providing Personal Data to third parties is at your own risk.
13. Contact us
DISCOMILES LIMITED is the controller of the Personal Data we process under this Privacy Notice.
If you have questions, comments, or concerns about our privacy practices or this Privacy Notice, or wish to exercise your rights, contact us at:
DISCOMILES LIMITEDAttn: Data Protection Officer
hello@discomiles.com