Privacy Policy

Information We Collect

We collect only the information necessary to generate your flight itinerary and deliver it to you securely. Our data collection is minimal and purpose-specific:

• Full Name (as it appears on your passport or travel document)
• Email Address (for secure ticket delivery and order confirmation)
• Travel Details (Origin airport, Destination airport, Departure date)
• Order Information (Transaction ID, timestamp, payment status)

We do not collect sensitive personal information beyond what is required for itinerary generation. No passport numbers, credit card details (handled by Stripe), or unnecessary personal data is stored on our systems.

Data Usage

All data transmitted through our service is protected with industry-standard SSL/TLS encryption. Your personal information is handled securely and used exclusively for the following purposes:

• Processing your itinerary generation request and creating the travel document
• Delivering the itinerary PDF securely to your email address
• Sending order confirmations and transaction receipts
• Providing customer support and responding to inquiries
• Maintaining transaction records for accounting and legal compliance

We never sell, rent, or share your personal information with third parties for marketing purposes. Your data is used solely to deliver the service you requested and maintain our business operations in compliance with applicable data protection regulations.

Data Retention

We implement a minimal data retention policy to protect your privacy while meeting our legal and operational obligations. Payment information is never stored on our servers as all transactions are processed securely through Stripe's payment infrastructure.

Flight itinerary data is automatically removed from our active systems after the temporary reservation period expires, typically within 48-72 hours. Transaction records containing order IDs and basic transaction metadata are retained for accounting purposes and legal compliance for a period of seven years, as required by financial regulations. However, these records do not include sensitive personal details or payment information beyond what is necessary for financial record-keeping.

Third-Party Services

We use Stripe for payment processing. Stripe's privacy policy applies to payment information. We do not have access to your full credit card details.

Your Rights

You have the right to request deletion of your data at any time. Contact us at support@onwardticket.global to exercise your data rights.