Privacy policy

Last updated: September 4, 2026

This Privacy Policy explains how ECOM EVO LLC, doing business as OnwardTicketFly.com (“OnwardTicketFly,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you visit OnwardTicketFly.com, search for an itinerary, place an order, access a delivered document, create or use a customer account, or communicate with us.

For applicable data-protection laws, ECOM EVO LLC is the controller of the personal information described in this Policy. Our store and checkout are powered by Shopify.

1. Personal information we collect

The information we collect depends on how you use the service and may include:

Contact and account information: your name, email address, phone or WhatsApp number, billing address, account identifiers, login and security information, language, and communication preferences.
Passenger and itinerary information: passenger title, first and last name, optional date of birth, number of travelers, origin and destination, airports, travel dates, trip type, selected airline, flight number, itinerary identifier, reservation reference or PNR, and the booked-itinerary PDF. We currently do not ask for a passport number in the website booking form.
Order and transaction information: order number, purchased service, price, discounts, payment status, refunds, modification requests, and delivery history. Shopify and its payment providers process payment-card information; we do not receive or store your complete card number.
Search and usage information: flight-search criteria, pages and features used, referring pages, interactions, and approximate timestamps.
Device and technical information: IP address, browser, device, network connection, cookie or similar identifiers, and security logs.
Communications: messages and attachments you send by email, contact form, WhatsApp, or customer support, and our responses.
Marketing information: whether you asked to receive or opted out of promotional communications.

Please do not send passport scans, passport numbers, financial documents, or other sensitive records through ordinary email or WhatsApp unless we specifically request them and provide an appropriate method.

2. Where information comes from

We collect information directly from you or the person placing an order for you; automatically from your browser or device; from Shopify and payment providers when an order is processed; and from airlines, reservation systems, flight-data providers, or other service providers when needed to search for, prepare, verify, deliver, support, or update your itinerary.

3. How and why we use personal information

We use personal information to:

search for suitable flights and prepare the itinerary you selected;
create, quality-check, publish, and deliver your booked reservation and PNR;
process payment, confirm the order, handle modifications, refunds, and customer support;
make the PDF available through the relevant order-status or customer-account page;
send service messages, security notices, and, where you have chosen them, marketing communications;
operate, personalize, troubleshoot, measure, and improve the website and service;
detect fraud, misuse, security incidents, and violations of our Terms;
keep business, tax, accounting, and compliance records; and
respond to lawful requests and establish, exercise, or defend legal claims.

Where the law requires a legal basis, we rely on performance of our contract with you, steps requested before entering a contract, compliance with legal obligations, our legitimate interests in operating and securing the business and improving the service, and consent where required, including for certain marketing and cookie uses. You may withdraw consent at any time, without affecting processing already performed.

4. Information about other travelers, including children

The person placing the order may provide information about other travelers. By doing so, that person confirms that they are authorized to provide the information and, where required, have given the traveler this Policy. Purchases must be made by an adult. A parent, guardian, or other authorized adult may provide a child traveler’s name and optional date of birth only as needed to prepare the requested itinerary. We do not knowingly use a child traveler’s information for advertising or sell it.

5. How we disclose information

We disclose only the information reasonably needed for the relevant purpose to:

Shopify, which hosts the store, checkout, customer accounts, order records, notifications, fraud-prevention features, analytics, and related ecommerce services;
payment providers selected at checkout to authorize and settle payments and prevent fraud;
Cloudflare for application hosting, security, and private storage and controlled delivery of booked-itinerary PDFs;
Aviationstack for flight and airport search data. Our integration sends search details such as route and dates, not passenger names or dates of birth;
airlines, reservation systems, and travel-service providers where needed to create or support the requested reservation, which may require passenger and itinerary information;
Hostinger and messaging providers for professional email and customer communications;
professional advisers and authorities where reasonably necessary for accounting, legal advice, compliance, fraud prevention, safety, or a valid legal request; and
a successor or prospective purchaser in a merger, financing, reorganization, or sale of all or part of the business, subject to appropriate confidentiality protections.

We do not sell passenger names, dates of birth, itinerary details, PNRs, or booked-itinerary documents for money, and we do not use that reservation information for targeted advertising.

6. Shopify and advertising choices

Shopify collects and processes information about access to and use of our store to provide and improve its services. Some Shopify features may combine activity from our store with activity involving other merchants or Shopify to support security, analytics, personalization, or advertising. In those circumstances, Shopify may be independently responsible for parts of the processing.

You can learn more in the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal. Where applicable, you may opt out of sale, sharing, or targeted advertising through our Data Sharing Opt-Out page. Where required, Shopify may also honor a Global Privacy Control signal sent by your browser.

7. Cookies and similar technologies

We and Shopify use cookies and similar technologies to keep the store and checkout working, remember preferences, prevent fraud, understand performance, and, where permitted, support analytics and advertising. Non-essential cookies are handled according to the choices available in our cookie banner or privacy settings. Blocking some cookies may affect site functionality.

8. Document security and retention

Booked-itinerary PDFs are stored in a private storage bucket and are not assigned a permanent public URL. When an authorized customer opens an order page, the system creates a time-limited private link for viewing or downloading the document.

A published PDF is intended to remain available in the associated order details on an ongoing basis so the customer can retrieve it later, unless it is deleted at the customer’s valid request, must be removed for security or legal reasons, or is no longer reasonably needed. A temporary PDF that is uploaded but not published is ordinarily scheduled for deletion after 30 days.

Other personal information is retained only as long as reasonably necessary for the purposes described above, including providing the service, maintaining the account, meeting tax and accounting obligations, resolving disputes, preventing fraud, and enforcing agreements. Retention periods may differ by record type and legal requirement.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These include private document storage, controlled access, encrypted connections, short-lived download links, and access limited to authorized staff and providers. No transmission or storage system is completely secure, so we cannot guarantee absolute security. Please protect your account and order-access links and contact us promptly if you suspect unauthorized access.

10. International transfers

We are based in the United States and use providers that may process information in the United States and other countries. Those countries may have different data-protection laws. Where required for transfers from the European Economic Area, United Kingdom, or Switzerland, we rely on recognized safeguards such as adequacy decisions or approved contractual clauses.

11. Your privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to restrict or object to certain processing; to withdraw consent; and to opt out of certain targeted advertising, sale, or sharing. You may also have the right to appeal a refusal and to complain to your local data-protection authority.

To exercise a right, email contact@onwardticketfly.com with the subject “Privacy Request.” Describe your request and the order or account involved. We may verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, but we may require proof of authorization. We will not discriminate against you for exercising a privacy right.

You can unsubscribe from promotional emails using the link in the message. You may still receive non-promotional communications about orders, documents, security, or customer service.

12. Third-party websites

Our website may link to airline, payment, social, or other third-party websites. We do not control their privacy or security practices. Review the privacy policy of a third party before providing information to it.

13. Changes to this Policy

We may update this Policy when our practices, providers, services, or legal obligations change. We will post the revised version here, update the date above, and provide additional notice where required by law.

14. Contact and complaints

ECOM EVO LLC
Doing business as OnwardTicketFly.com
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110, United States
Email: contact@onwardticketfly.com
WhatsApp/telephone: +1 (815) 910-0266

If you are not satisfied with our response, you may contact the data-protection or consumer-privacy authority that applies where you live. EEA residents can find supervisory authorities through the European Data Protection Board.