1. Who We Are
Onward Sky is a global online travel compliance service providing verifiable flight reservations, commonly referred to as onward tickets, for proof of onward travel, immigration requirements, visa applications, airline check-in, and other travel compliance purposes. The business is operated from New Delhi, India.
Onward Sky is responsible for the personal information described in this policy.
Grievance and Privacy Contact: [email protected]
2. What This Policy Covers
This policy explains what personal information we collect when you visit onwardsky.com or place an order, why we collect it, who we share it with, how long we keep it, and the rights you hold over it. It applies to our website and to the ordering, delivery, and support of our flight reservation service, and should be read together with our Terms and Conditions and Refund Policy.
By using our website or placing an order, you confirm that you have read this policy. Where the law requires consent for a specific use of your information, we request it separately, as described below.
3. Information We Collect
We collect the minimum information our service requires. Onward Sky has no customer accounts; every order is placed as a guest.
3.1 Information you provide when ordering
- Full name, exactly as it should appear on the reservation
- Email address, used to deliver your reservation document and order updates
- Travel details required to create the reservation, such as departure city, destination city, and travel date
We do not require passport scans, photographs, or identity documents as part of the normal ordering process.
3.2 Payment information
Payments are handled by secure third-party payment processors. Your card or payment details are entered directly with the processor and are not intentionally collected or stored on our systems. We receive only what is needed to confirm and reference your payment: the transaction status, an order reference, and the amount paid.
3.3 Support communications
If you contact us by email or WhatsApp, we receive the contact details and message content you send, along with any information needed to locate your order.
We offer customer support through WhatsApp, which is operated by Meta Platforms and processes messages under its own privacy policy and terms. If you contact us on WhatsApp, your messages are handled by WhatsApp’s infrastructure in addition to being read by our support team. If you prefer not to use WhatsApp, email support is always available and offers the same level of service.
3.4 Information collected automatically
When you browse our website, our analytics and security tools collect technical information such as your IP address, approximate location (city or region level), device and browser type, and how you interact with our pages. Section 12 explains this in detail, including our use of behavioral analytics.
4. How We Use Your Information
We use your personal information only for the following purposes:
- Service delivery. Your name and travel details create your flight reservation; your email address receives the reservation document and order confirmations.
- Customer support. Your contact and order details allow us to answer questions, process change requests, and resolve issues.
- Payments and fraud prevention. Order and transaction records confirm payments, detect fraudulent or abusive orders, and provide evidence of purchase and delivery in payment disputes.
- Legal and tax obligations. Transactional records are retained as required by law.
- Website improvement. Aggregated analytics show how visitors use the site and where problems occur.
- Marketing, only with your consent. Section 13 explains how this works and how to opt out.
We do not sell your personal information, and we do not share it with third parties for their own marketing.
5. Legal Basis for Processing
Onward Sky processes personal data in India. We process personal information in accordance with applicable privacy laws and the principles described in this Privacy Policy. In practice, this means:
- We state what we collect and why, in this policy and in notices at the point of collection.
- We process your information to perform the service you request, and we obtain separate, explicit consent where the law requires it, such as for marketing.
- You may withdraw consent for optional processing at any time. Withdrawal does not affect processing that has already occurred, an order you have already placed, or a legal obligation.
- You can raise any privacy concern or complaint with us.
6. Who We Share Information With
We share personal information only where necessary to deliver the service, operate the business, or meet a legal obligation. We work with reputable providers in the following categories:
- Authorized booking partners and global airline reservation systems. Creating a verifiable flight reservation requires submitting your name and travel details to our booking partners, who enter them into airline reservation systems. A reservation cannot be verified unless it exists in a real airline system. These systems are operated by third parties and may be located outside India.
- Payment processors, who handle your payment under their own privacy policies and security certifications.
- Hosting and infrastructure providers, who store our website and order data.
- Transactional email providers, who deliver order confirmations and reservation documents.
- Analytics providers
- Customer support platforms
- Website security providers, who protect the site against attacks, bots, and abuse.
We may disclose personal information where required by law, a court order, or a lawful request from a government authority, or where necessary to investigate fraud, enforce our terms, or protect the rights and safety of our customers or our business.
If Onward Sky is restructured, sold, or merged, customer information may be transferred as part of that transaction and remains subject to this policy.
7. International Data Transfers
We serve customers worldwide, and some of the providers described above operate outside India. Airline reservation systems are global by nature, so the details required to create your reservation are processed in the countries where those systems and our booking partners operate.
We take reasonable measures to ensure that personal information remains protected when transferred internationally.
8. How Long We Keep Your Information
We retain personal information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and protect our legitimate business interests.
| Category | Retention period | Reason |
|---|---|---|
| Passenger and travel details (name, route, travel dates) | 6 months after order completion, then deleted or de-identified | Covers order servicing, change requests, and payment disputes, which can be raised up to 120 days after a transaction |
| Transactional and financial records (order reference, amount, payment reference, invoice data) | As required by applicable legal and tax obligations | Legal requirement. Once the passenger data period expires, these records are kept without travel details attached |
| Support correspondence (email and WhatsApp threads) | 24 months | Resolving follow-up questions and disputes that reference earlier conversations |
| Technical and analytics data | Controlled by the retention settings of our analytics tools, and kept no longer than needed for analysis | Website improvement |
If you ask us to erase your information earlier, we will do so unless we are legally required to keep it or need it to resolve an active dispute (see Section 10).
9. How We Protect Your Information
We take reasonable and appropriate measures to protect your personal information, including:
- Encrypted connections (HTTPS/TLS) across our entire website
- Payment processing handled by certified third-party processors, so raw card data does not touch our systems
- Access to order data limited to the people who need it to run the service
- Website security tools that monitor for and block malicious activity
- Minimal collection by design: no accounts, no identity document uploads, and a short retention period for passenger details
While no online service can guarantee absolute security, we design our systems to minimize the amount of personal information we collect and retain.
10. Your Rights and How to Use Them
Every Onward Sky customer, wherever you live, has the right to:
- Access: request a summary of the personal information we hold about you and how it has been used and shared
- Correction: ask us to correct inaccurate or incomplete information
- Deletion: ask us to delete your personal information once it is no longer needed for its original purpose or a legal obligation
- Complain: raise a concern with us about how your information has been handled
- Nominate someone: appoint another person to exercise these rights on your behalf in the event of death or incapacity
To exercise any of these rights, email [email protected] from the address used on your order, including your order reference where available. We may request information to verify that the request is genuinely yours. We aim to respond within 48 hours.
11. Additional Rights for Visitors from the EEA and the United Kingdom
If you are located in the European Economic Area (EEA) or the United Kingdom, you may also have additional privacy rights under applicable law.
- The right to object to processing based on legitimate interests
- The right to restrict processing while a complaint or correction request is being resolved
- The right to data portability: to receive the personal data you provided to us in a structured, commonly used, machine-readable format
- The right to withdraw consent at any time for any processing based on consent
- The right to lodge a complaint with your local data protection authority
The legal grounds we rely on are: performance of the contract you enter when placing an order, our legitimate interests in operating, securing, and improving the service, compliance with legal obligations, and your consent where we have requested it.
12. Cookies, Analytics, and Behavioral Tracking
Our website uses cookies and similar technologies for three purposes: making the site work, understanding how it is used, and, where you consent, supporting marketing. We use the following categories of tools:
- Tag management tools that load and control the measurement tools running on the site.
- Website analytics tools that record the pages you visit, how you arrived at the site, your device and browser type, and your approximate location, and produce aggregated usage statistics.
- Behavioral analytics tools that use session replay technology to understand how visitors scroll, click, and navigate our website. These tools mask sensitive input fields by default, but you should be aware that your on-site interactions may be recorded for analysis.
You can manage these technologies in two ways:
- Cookie preferences tool: our cookie consent banner lets you accept or reject non-essential cookies, and you can change your choice at any time through the cookie settings link on the site.
- Browser controls: every major browser lets you block or delete cookies. Blocking essential cookies may affect how the ordering process works.
We do not use cross-site advertising trackers at this time. If that changes, we will update this policy and request consent through the cookie banner before any such tracking begins.
13. Marketing Communications
We send marketing or promotional emails only to people who have explicitly agreed to receive them. Placing an order does not subscribe you to marketing.
If you opt in, you can opt out at any time by clicking the unsubscribe link included in every marketing email. Opting out of marketing never affects transactional emails, such as your order confirmation and reservation document, which we must send to deliver the service you purchased.
14. Age Requirement
Our services are intended for adults. You must be at least 18 years old to place an order. We do not knowingly collect personal information from anyone under 18, and if we learn that we have done so, we will delete it. A parent or legal guardian who believes a minor has provided us with personal information can contact us.
15. Links to Other Websites
Our website and emails may contain links to external websites, including payment processor pages and airline verification pages. Those websites operate under their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policy of any external site you visit.
16. If a Data Breach Occurs
If a breach of security affects your personal information, we will assess it promptly, take steps to contain it, notify the relevant authorities where the law requires it, and inform affected customers without undue delay when the breach creates a real risk to them, along with practical guidance on what to do.
17. Changes to This Policy
We review this policy periodically and update it when our practices, providers, or legal obligations change. The “Last updated” date at the top of this page reflects the current version. For significant changes, we will post a clear notice on our website, and where a change affects how we use information you have already provided, we will seek fresh consent if the law requires it.
18. How to Contact Us
For any question, request, or complaint about your personal information:
Onward Sky
New Delhi, India
Email: [email protected]
We aim to acknowledge your request within 48 hours and provide a substantive response within 30 days, unless a different period is required by applicable law.
This policy should be read together with our Terms and Conditions and Refund Policy.