Privacy Policy


Emirates Flight Catering Company LLC ("we" "us" or "our", as the context may be) respects your privacy and is committed to protecting your personal data. This Privacy Policy (together with our Terms of Use) describes how we look after your personal data when you visit our website our mobile websites (“Platforms”) and tells you about your privacy rights and how the law protects you.
We keep our Privacy Policy under regular review. This version was last updated on 24 August 2020. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.


About us
The Platforms are owned and operated by Emirates Flight Catering Company, a limited liability company incorporated in Dubai, whose principal office is at Airport Road, PO Box 22525, Dubai, United Arab Emirates. We are part of a wider group called the Emirates Group ("Emirates Group"), which includes (but is not limited to) the following entities and/or divisions: Emirates, dnata, dnata World Travel, Emirates Skycargo, Emirates Skywards, Emirates Business Rewards, Emirates Holidays, dnata Travel Arabian Adventures, Wolgan Valley Resort & Spa and associated brands and/or companies from time to time. A list is available here, and a list of our controlled subsidiaries is in our Annual Report here.

You can contact us:

a. by post, to PO Box 22525, Dubai International Airport Road, Dubai, UAE;
b. using our website contact form;
c. by telephone, on the contact number published on our website from time to time; or
d. by email, using the email address published on our website from time to time.

How this Privacy Policy applies

This Privacy Policy applies where we are acting as a data controller with respect to your personal data as a visitor of our website and/or user of our products or services; in other words, where we determine the purposes and means of the processing of your personal data.
We will only process your personal data in the manner set out in this Privacy Policy if you have specifically agreed or consented to us doing so (for example through your explicit acceptance of this Privacy Policy or via an electronic tick-box or other similar measures as required by applicable data protection laws) or if we have legitimate grounds to do so.

Third- party Links

Our Platforms may contain links, plug-ins and applications to third-party websites. Please be aware that we are not responsible for the privacy statements and privacy practices of websites not operated by us or an entity in the Emirates Group. We encourage you to read the privacy statements of each and every website you visit. This Privacy Policy applies solely to information collected by our Platforms.


Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data includes title, first name, last name, username, profession, function, educational attainment, nationality and gender.

  • Contact Data includes address, email address and telephone numbers.

  • Technical Data includes internet protocol (IP) address used to connect your computer to the internet, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website, information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed or searched for page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs)and methods used to browse away from the page.
  • Profile Data includes your username and password, your interests, preferences, feedback and survey responses.

  • Usage Data includes information about how you use our website, products and services.

  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

Aggregated data, data analytics and social media functionality

We also collect, use and share Aggregated Data such as statistical or demographic data in order to analyse patterns and improve our marketing and promotional efforts, to analyse Platform use, to improve our content and product offerings, and to customize our Platforms’ content, layout, products and services, and we may appoint third parties to do this on our behalf. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.

If you use buttons on our Platforms linked to social media or similar sites (for example "Like" and/or "Share" buttons), content from our Platforms may be sent back to that other website or service and, depending on your privacy settings, may be privately or publicly visible (for example to friends, followers or generally to anyone who has access to your profile page).

Where we process special categories of personal data relating to your health such as information on allergies, we will always obtain your explicit consent to those activities unless this is not required by law or the information is required to protect your health in an emergency.
Where we are processing data based on your consent, you have the right to withdraw that consent at any time.

If you fail to provide personal data

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.


We use different methods to collect data from and about you including through:

  • Direct interactions. You may give us your Identity and Contact Data by filling in forms on the Platforms or by corresponding with us by phone, e-mail or otherwise. This includes personal data you provide when you:
    •  apply for a vacancy;
    •  register on our website;
    •  give us feedback or contact us.

  •  Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy below for further details.

  • Third parties or publicly available sources. This is information we receive about you if you use any of the other sites we operate or the other services we provide. We may work closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies).

From time to time we may update the methods of collection and data fields above. Where there are significant changes we will endeavour to notify you in accordance with the section "Notification of changes to this Privacy Policy" below.

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

  • Where we need to perform the agreement we are about to enter into or have entered into with you;
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
  • Where we need to comply with a legal obligation.

Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.


Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest
To process your application for a vacancy (a) Identity
(b) Contact
Performance of the agreement and consent
To register you as an existing or prospective supplier (a) Identity
(b) Contact
Performance of the agreement and consent
To register you as a customer (a) Identity
(b) Contact
Performance of the agreement and consent
To answer any queries submitted through the Website or sent to us by email or other forms of communication (a) Identity
(b) Contact
Performance of the agreement and consent
To process and deliver your order

(a) Identity
(b) Contact
(c) Transaction
(d) Marketing and Communications

(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to recover debts due to us)
To manage our relationship with you which will include:
(a) Notifying you about changes to our terms or Privacy Policy
(b) Asking you to leave a review or take a survey
(a) Identity
(b) Contact
(c) Profile
(d) Marketing and Communications
(a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
To enable you to complete a survey (a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Marketing and Communications
(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Identity
(b) Contact
(c) Technical
(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
(b) Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you (a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Marketing and Communications
(f) Technical
Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services,
marketing, customer relationships and experiences

(a) Technical

(b) Usage

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To make suggestions and recommendations to you about goods or services that may be of interest to you (a) Identity
(b) Contact
(c) Technical
(d) Usage
(e) Profile
(f) Marketing and Communications
Necessary for our legitimate interests (to develop our products/services and grow our business)

The above reasons may not be exhaustive, and we may at any time process your Personal Data for any other legitimate reason. In such cases, we will notify you as soon as possible of the reason. Updates of this Privacy Policy may constitute such a notification.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Direct Marketing

We will also use your personal data for direct marketing purposes. This enables us to keep you informed about news updates through our newsletters. You give your explicit consent for this, but you may withdraw this at any time.

Promotional offers from us

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving that marketing.

Third-party marketing
We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

Opting out

You can ask us or third parties to stop sending you marketing messages at any time.
Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase.

Cookies and other tracking technologies

We use cookies on our website. A “cookie” is a small computer file which is downloaded to your device. It collects information as to how you navigate our Platforms and the Internet and helps us provide better Platform services to you and tailor certain content. Insofar as those cookies are not strictly necessary for the provision of our website, products and services, we will ask you to consent to our use of cookies when you first visit our website.
For more information on how we use cookies please read our Cookie Policy, where you can also find information so you can delete cookies or block certain types of cookie. You should note that this may have an impact on our ability to provide the Platform services to you.

Do Not Track
Currently, our systems do not honour browser do-not-track requests; you may delete cookies and other tracking technologies using the processes specified in our Cookie Policy.


For operational reasons, insofar as reasonably necessary for the purposes, and on the legal bases, set out in this Privacy Policy, we may share your personal data with:

  • Other companies in the Emirates Group who provide airport ground handling services or catering services.
  • External third-party service providers who administer our Platforms and provide internet services and host our facilities, provide data warehousing services, customer relationship management services, marketing services, car services or customer survey services.
  • Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
  • Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them.

We have implemented safeguards to ensure that our service providers treat personal data in a way that is consistent with the terms of this Privacy Policy and applicable laws, and that it is not used except to fulfil products or services to us or where we believe it is necessary for a legitimate reason connected with the products or services we offer.

These service providers and group companies may be located in your country, countries in the European Economic Area, in the United Arab Emirates or elsewhere in the world. Different privacy laws may apply in these countries. See further detail in our "International Transfers" section below.



We only make these arrangements or transfers where we are satisfied that adequate levels of protection are in place to protect any information held in that country or that the service provider acts at all times in compliance with applicable privacy laws. Where required under applicable laws we will take measures to ensure that personal data handled in other countries will receive at least the same level of protection as it is given in your home country.

Transfers will be protected by appropriate safeguards, namely the use of standard data protection clauses, a copy of which can be obtained from our legal team.

In the event your personal data is transferred to a foreign jurisdiction, it may be subject to the laws of that jurisdiction and we may be required to disclose it to the courts, law enforcement or governmental authorities in those jurisdictions but we will only do so where required by applicable laws.


We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

However, no internet-based site can be 100% secure and we cannot be held responsible for unauthorised or unintended access that is beyond our control.

Protecting your details and protecting yourself against internet fraud

Here are some simple steps you can take to ensure your information is kept securely: Be aware of "Phishing", which is where someone tries to represent themselves as someone else to gain information from you - always check whether emails from any sender are actually from them, and if in doubt, go
directly to their website and do not click on links in emails, as these may take you to "clone" websites which use your information illegally.


How long will you use my personal data for?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We apply the following retention periods for your data

Identity Data 12 months
Contact Data 12 months
Profile Data Until removal of the data
Cookies Maximum 30 days


In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.


We have summarised some rights in relation to your personal data that you may have under applicable data protection law. You should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

You (may) have the following rights:

  a. the right to access;
  b. the right to rectification;
  c. the right to erasure;
  d. the right to restrict processing;
  e. the right to object to processing;
  f. the right to data portability;
  g. the right to complain to a supervisory authority; and
  h. the right to withdraw consent.

You may exercise any of your rights in relation to your personal data by written notice to us.

Access to your personal data

You may have the right to confirmation as to whether or not we process your personal data and, where we do, receive a copy of personal data we keep about you, including the sources of the data, the purposes and methods of processing, any electronic decision-making and the entities with whom we share your data. We will endeavour to provide the information you require within a reasonable time. There may be a small monetary charge for some requests, depending on the information requested, to the extent permitted by applicable law.

Correction/updating of personal data

If your personal data changes or is inaccurate, we will provide a way to correct, update or suppress your personal data provided to us. If you are concerned that any of the information we hold about you is incorrect please contact us. These rights are without prejudice to any legal rights you may have in applicable laws, including your right to object to certain processing of data.


Unless processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims, you may have the right to the erasure of your personal data without undue delay when (i) the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed; (ii) you withdraw consent to consent-based processing; (iii) you object to the processing under certain rules of applicable data protection law and we would not have overriding legitimate grounds for the processing; (iv) the processing is for direct marketing purposes; and (v) the personal data have been unlawfully processed.

Restriction to processing

You may have the right to restrict the processing of your personal data when (i) you contest the accuracy of the personal data; (ii) where our use of the data is unlawful but you do not want us to erase it; (iii) we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; and (iv) you have objected to processing, pending the verification of that objection.

Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.

Objection to processing

Unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims, you may have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: (i) the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or (ii) the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal data.

You may have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.

You may have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Data portability

You may have the right to receive your personal data from us in a structured, commonly used and machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Complaint to a supervisory authority

If you consider that our processing of your personal data infringes data protection laws, you may have a legal right to lodge a complaint with the relevant supervisory body responsible for data protection

Withdrawing your consent

Where we are relying on consent to process your personal data, you may have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

You do not have to provide us with your personal data. However, if you choose not to provide certain personal data we request and/or require, or consent to its use and disclosure, you will still be able to visit our Platforms but you may be unable to access certain options, products or services.

You also have the ability to change your cookie settings to block certain types of cookie - this is explained in more detail in our Cookie Policy.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.


If we decide to change our Privacy Policy, we will post those changes on our Platforms. If at any point we decide to use personal data in a manner materially different from that stated at the time it was collected (and/or where we are required under applicable law) we will notify you. You will have a choice as to whether or not we use your personal data in this different manner. We will use personal data in accordance with the Privacy Policy under which the personal data was collected until you agree otherwise, but if you do not accept the amended Privacy Policy please stop using our Platforms. Each version has a version number and date so you can check this easily.


You acknowledge, confirm, and expressly consent that we may disclose your personal data if this is required by law, or if we determine in good faith that such disclosure is required in order:

- to comply with any pending judicial inquiry, judicial order or litigation pertaining to the Platforms;
- to compel observance of the general terms and conditions of Emirates Flight Catering Company LLC;
- to respond to claims against us regarding personal data that violate any rights of third parties;
- to safeguard the rights, property and safety of the Emirates Group, its employees, users and the general public.

We may disclose your personal data to competent police or judicial authorities or other official government authorities if we deem this useful or necessary, in our sole discretion, for the investigation of fraud, intellectual property infringement or any other harmful activity, or if we reasonably suspect that such activity may expose us or you to any liability.


If you experience any technical problems during your interaction with the Platforms, please contact us here.

Queries, concerns or complaints regarding your privacy or this Privacy Policy: If you have queries regarding this Privacy Policy please contact us.



We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website, products and services, we will ask you to consent to our use of cookies when you first visit our website.

Not accepting these cookies may affect your use of our Platforms. See below for more information about what cookies are, the tracking technology we use, and how we use them.

A cookie is a small file that is placed and stored on your browser or the hard drive of your computer. Cookies allow a website owner to distinguish the activities carried out from your device from other users of that website.

Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.

Our Platforms use both session and persistent cookies, and first and third-party cookies. Session cookies exist just for your session on our Platforms and persistent cookies exist for a longer period and are activated each time you visit our Platforms. First party cookies are cookies set by our Platforms and third-party cookies are set by third party platforms.

We also use cookies for different purposes. To assist you, we've provided a more detailed explanation of the types of cookies we use below categorised by the purpose of the cookies.

  • Strictly necessary cookies. these are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, progress or complete an order, use a shopping cart or make use of other online services we provide.
  • Functionality Cookies. these are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
  • Analytical or performance cookies. these allow us to recognize and count the number of visitors and to see how visitors move around our Platforms. We aggregate this data and analyse it to improve the way our Platforms work and the user experience, for example, by ensuring that users are finding what they are looking for easily.
  • Local Storage Objects.we may use Flash Local Storage Objects (“Flash LSOs”) to store your Platform preferences and to personalize your visit. Flash LSOs are different from browser cookies because of the amount and type of data stored. Typically, you cannot control, delete, or disable the acceptance of Flash LSOs through your web browser. For more information on Flash LSOs, or to learn how to manage your settings for Flash LSOs, go to the Adobe Flash Player Help Page, choose “Global Storage Settings Panel” and follow the instructions. To see the Flash LSOs currently on your computer, choose “Website Storage Settings Panel” and follow the instructions to review and, if you choose, to delete any specific Flash LSO.


Modern browsers allow you to change your cookie settings. You can set your browsers or devices to accept all cookies, to notify you when a cookie is issued, or not to receive cookies at any time. The last of these means that certain personalised features cannot then be provided to you and accordingly you may not be able to take full advantage of all of the website's features. Each browser is different, so check the ‘help’, 'options' or 'preferences' menu of your browser to learn how to change your cookie preferences.

You can also visit which contains comprehensive information on how to do this on a wide variety of browsers. This site includes details on how to delete cookies from your computer as well as more general information about cookies.

Please also note that if you delete your cookies, unless you were required to provide explicit consent, we may no longer automatically recognise that you have agreed to our Privacy Policy, this Cookies Policy and any other website terms of use, and we may ask for confirmation of this along with your language and country preferences.

In relation to advertising cookies, if you are in the EU you can use the website which allows you to set which advertising cookie providers you accept, and which you do not.


The following website gives information specifically about privacy issues around Internet advertising: - as referred to above this allows you to set which advertising cookie providers you accept.

In the table below is a list detailing some examples of the different cookies that our Platforms use. The table sets out information explaining the purpose of these cookies and where applicable, includes links to further information that may be of use.


Category Cookie Name Purpose Duration More Info
Functional Portal Created
XSRF-TOKEN To Check the session expiry. Session
Functional Portal Created
laravel_session Internally laravel uses laravel_session to identify a session instance for a user Session  
Functional Wordpress wordpress_XXX (X indicates a number, which can vary)
The cookie is used to store information about user authentication on the site, allowing their use more convenient and quick.
Functional Wordpress wordpress_logged_in_XXX (X indicates a number, which can vary)
The cookie takes care of storing the status of user authentication.
Functional Wordpress wordpress_test_cookie It is a cookie that checks if the browser is enabled to save cookies or not. Session  
Functional Wordpress wp-settings-X,
(X indicates a number, which can vary)
These cookies have no impact on the experience of navigation and do not contain personal information. They contain information about the geographical location of the visit and can be used to change the language of visualisation site content.

For further information about this policy, please contact