Effective date: August 18, 2026 · Last reviewed: August 18, 2026 · Applies to: skywardbookings.com and all services provided by AGENCY 54, LLC
1. Who we are and what this policy covers
AGENCY 54, LLC ("we", "us", "our"), trading as Skyward Bookings, operates the website at skywardbookings.com and provides travel agency services by telephone, email and text message. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it and what rights you have.
This policy applies to our website, our telephone reservations service and any related communications. It does not apply to the practices of rail carriers, payment processors or other third parties whose services you may use, each of which maintains its own privacy policy.
By using our website or our services, you acknowledge that you have read and understood this policy. If you do not agree with it, please do not use the website or provide us with personal information.
2. Information we collect
We collect only the information reasonably necessary to quote, book and service travel arrangements, and to operate and secure our website.
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, postal address, email address, telephone number | You, directly |
| Travel details | Origin, destination, dates, passenger count, ages, class preference, accessibility requirements | You, directly |
| Commercial information | Bookings made, service fees paid, itinerary changes, refund requests | You and our booking systems |
| Payment information | Card details, billing address, transaction confirmation | You, via our PCI-DSS compliant processor |
| Communications | Call recordings (where notified), emails, text messages, form submissions | You, directly |
| Technical data | IP address, browser type, device type, operating system, referring URL, pages viewed | Automatically, via our servers and cookies |
| Sensitive information | Disability or mobility information you volunteer so we can arrange assistance | You, voluntarily |
We do not store full card numbers
Payment card data is transmitted directly to a PCI-DSS compliant payment processor. Our agents do not retain, and our systems do not store, your full primary account number after a transaction is authorised.
3. How we use your information
We use personal information for the following purposes, each of which has a clear and limited business justification:
- To search availability, quote fares and construct itineraries at your request
- To make, confirm, amend and cancel travel reservations on your behalf
- To process payment of the carrier fare and our service fee
- To send booking confirmations, travel documents, itinerary changes and disruption notices
- To arrange accessibility assistance, dietary requirements and special requests with carriers
- To respond to enquiries, complaints and refund requests
- To pursue delay or cancellation compensation on your behalf where you ask us to
- To maintain business records required by law, including tax and consumer protection records
- To detect, investigate and prevent fraud, abuse and security incidents
- To analyse aggregate website usage so we can improve the site
- To send marketing communications where you have opted in, and only until you opt out
4. Legal bases and consent
Where we process personal information to fulfil a booking you have requested, we do so because it is necessary to perform our agreement with you. Where we process information for fraud prevention, security and record keeping, we do so on the basis of our legitimate business interests and legal obligations. Where we send marketing communications or make marketing calls or texts, we do so only with your express prior consent.
Consent to marketing is never a condition of purchase. You may withdraw consent at any time — see “Your choices and rights” below.
5. How we share information
We do not sell personal information, and we do not share personal information with third parties for their own independent marketing purposes. We share information only as follows:
- Rail carriers and reservation systems — the information required to create and service your reservation, including name, travel dates and any assistance requirements
- Payment processors — to authorise and settle payment
- Service providers — hosting, email delivery, telephony and customer-service tools acting on our instructions under written confidentiality obligations
- Professional advisers — accountants, auditors and lawyers, where required
- Law enforcement and regulators — where required by law, subpoena, court order or to protect rights, safety or property
- Successors — in connection with a merger, acquisition or sale of assets, subject to this policy continuing to apply
6. Cookies and tracking technologies
Our website uses a limited set of cookies and similar technologies. Strictly necessary cookies keep the site functioning. Analytics cookies help us understand aggregate usage. We also use browser local storage to remember whether you have already been shown our on-site offer notice, so that it is not repeated.
You can control cookies through your browser settings. Blocking strictly necessary cookies may affect site functionality. Full detail is set out in our Cookie Policy.
We honour Global Privacy Control (GPC) and similar browser-based opt-out preference signals where our systems are able to detect them.
7. Data retention
We keep personal information only as long as necessary for the purpose it was collected, and then for the period required by law.
| Record type | Typical retention period |
|---|---|
| Booking and itinerary records | 7 years from date of travel (tax and consumer-protection requirements) |
| Payment transaction records | 7 years from transaction date |
| Enquiries that do not result in a booking | 24 months from last contact |
| Marketing consent records | Duration of consent plus 4 years after withdrawal |
| Call recordings, where made | 12 months, unless required for a dispute |
| Website analytics data | 26 months, in aggregate form |
8. Security
We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorised access, disclosure, alteration and destruction. These include encrypted transmission (TLS), access controls limiting staff access to what their role requires, PCI-DSS compliant payment handling and regular review of our security practices.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you provide information to us at your own risk. If we become aware of a breach affecting your personal information, we will notify you and any required regulator in accordance with applicable state breach-notification laws.
9. Your choices and rights
Subject to applicable law and to verification of your identity, you may:
- Access — request confirmation of whether we process your personal information and a copy of it
- Correct — ask us to correct inaccurate personal information
- Delete — ask us to delete personal information, subject to legal retention requirements
- Portability — request a copy in a portable, machine-readable format
- Opt out of sale or sharing — we do not sell or share personal information as those terms are defined under California law, but you may confirm this at any time
- Limit use of sensitive information — restrict our use of accessibility information to what is necessary to provide the service
- Withdraw marketing consent — unsubscribe by any email link, reply STOP to any text, or contact us directly
- Non-discrimination — we will not deny service, charge a different price or provide a different quality of service because you exercised a privacy right
10. How to exercise your rights
Submit a request by calling +1 (888) 821-4679 or emailing info@skywardbookings.com with the subject line “Privacy Request”. Please tell us which right you wish to exercise and provide enough information for us to locate your records and verify your identity.
We will acknowledge your request within 10 business days and respond substantively within 45 calendar days, extendable by a further 45 days where reasonably necessary, in which case we will notify you of the extension and the reason for it. There is no charge for a reasonable request.
An authorised agent may submit a request on your behalf with written permission signed by you, and we may still contact you directly to confirm the authorisation.
11. State-specific privacy rights
Residents of California have additional rights described in our California Privacy Notice and may exercise their opt-out rights through our Do Not Sell or Share My Personal Information page.
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy legislation have rights of access, correction, deletion, portability and opt-out substantially as described above, together with a right to appeal a refusal of a request. To appeal, reply to our decision with the subject line “Privacy Appeal”; we will respond within 45 days and, if we deny the appeal, will provide information about contacting your state Attorney General.
Nevada residents may submit a verified request that we not sell covered personal information. We do not engage in such sales.
12. Children's privacy
Our website and services are directed to adults and are not intended for children under 13. Consistent with the Children's Online Privacy Protection Act, we do not knowingly collect personal information directly from children under 13. Where a booking includes a child travelling with an adult, we collect only the minimum information the carrier requires and receive it from the responsible adult.
If you believe a child has provided us with personal information, contact us and we will delete it promptly.
13. International transfers
We are established in the United States and process personal information there. Where you book travel in the United Kingdom or Canada, information necessary to create your reservation is transmitted to carriers and reservation systems in those countries. By requesting such a booking you understand that this transfer is necessary to provide the service you have asked for.
14. Third-party links
Our website contains links to third-party websites, including carriers and reference sources. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.
15. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The “last reviewed” date at the top of this page indicates when it was last revised. Material changes will be highlighted on this page for at least 30 days. Your continued use of the website after a change takes effect constitutes acceptance of the revised policy.
Contact
Questions about this document should be directed to:
AGENCY 54, LLC (trading as Skyward Bookings)
927 Tan Tara TRL
Jacksonville, FL 32221, United States
Telephone: +1 (888) 821-4679
Email: info@skywardbookings.com
