Delta Privacy Policy

This document is Delta Air Lines' Privacy and Security Policy, governing the collection, use, sharing, and protection of personal information submitted through delta.com and related services, with the stated basis of providing airline services, administering the SkyMiles loyalty program, and fulfilling legal and regulatory obligations. The policy asserts Delta's right to collect a broad range of personal data including contact information, payment details, travel preferences, biometric identifiers used in voluntary identity verification programs, and behavioral data derived from website and app interactions, and the terms authorize sharing this information with promotional partners, SkyMiles partners, government authorities, and service vendors. Notably, the policy discloses data sharing with promotional partners for marketing purposes and references voluntary participation in biometric programs (such as facial recognition for boarding), which are operationally distinct from typical airline privacy disclosures and warrant independent assessment under state biometric privacy laws; the agreement's assertions about broad sharing with partners may be constrained by applicable federal and state law. The policy engages the FTC Act (unfair or deceptive practices), the California Consumer Privacy Act, and potentially state biometric privacy statutes such as the Illinois Biometric Information Privacy Act and the Texas Capture or Use of Biometric Identifier Act; international travelers served through Delta's localized sites may also trigger GDPR obligations. Material compliance considerations include the adequacy of consent mechanisms for biometric data collection, the specificity of opt-out rights for promotional data sharing, and the scope of data retention practices disclosed in a separate linked retention notice.