Privacy Policy
Last updated: 1 October 2026
Onwardify ("we", "us", "our"), operator of onwardify.net ("the Service"), is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, who we share it with, and your rights.
1. Who we are (Data Controller)
The data controller is Onwardify. Contact: [email protected].
2. Personal data we collect
- Passenger details: title, given name, family name, and (where required) date of birth.
- Contact details: email address and, where provided, phone number.
- Trip details: origin, destination, dates, and the flight you select.
- Payment data: processed by our payment processor (Stripe). We receive confirmation of payment and limited metadata; we do not receive or store your full card number, CVC or expiry.
- Technical data: IP address, browser type, and basic usage/session data, used to operate the site, prevent abuse and rate-limit searches.
3. How we use your data (purposes & legal bases)
- To create your flight Reservation with our airline reservation partner and deliver it to you — performance of a contract.
- To process payment and prevent fraud — legitimate interests / legal obligation.
- To provide customer support and respond to enquiries — legitimate interests.
- To operate, secure and improve the Service — legitimate interests.
- To comply with legal, accounting and tax obligations — legal obligation.
4. Who we share data with
- Airline / GDS reservation partner — passenger name and trip details are transmitted to create your PNR in the airline system.
- Stripe — to process your payment securely.
- Email delivery provider (Resend) — to send your reservation and receipts.
- Hosting/infrastructure providers — to run the website.
- Authorities — where required by law or to prevent fraud or unlawful activity.
We do not sell your personal data.
5. International transfers
Your data may be processed in countries outside your own, including where our service partners operate. Where required, we rely on appropriate safeguards for such transfers.
6. Data retention
We keep order and transaction records for as long as necessary to provide the Service and to meet legal, accounting and tax requirements, after which we delete or anonymise them.
7. Your rights
Depending on your location, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise these rights, email [email protected]. You may also have the right to lodge a complaint with your local data-protection authority.
8. Cookies
We use minimal, essential cookies and local/session storage required to operate the site (for example, to keep your booking session and prevent abuse). We do not use third-party advertising cookies on this site.
9. Security
We use industry-standard measures, including HTTPS/TLS encryption in transit, to protect your data. No method of transmission or storage is completely secure, but we work to protect your information.
10. Children
The Service is not directed at children under 18. We do not knowingly collect data from children except passenger details provided by an authorising adult.
11. Changes to this policy
We may update this policy and will post the revised version here with a new "Last updated" date.
12. Contact
Privacy questions or requests: [email protected].