Legal
Privacy policy
This document explains what information SKY LINE TRAVEL collects, why, who it is shared with and how long it is kept.
Last updated 2026-09-21
What this document covers
It covers the public website and the agency panel. Two kinds of data live here: information about the agency and its users, and information about the passengers an agency issues tickets for.
For passenger data, the agency is the party with the relationship to the traveller. We process that data in order to make the reservation and issue the ticket, and we do not use it for our own purposes.
What is collected
- Business identity
- Agency name, activity licence, company registration document and manager identity document — uploaded at registration.
- Contact details
- Names, email addresses and phone numbers of the account users.
- Financial records
- Credit account movements, deposits and payment receipts.
- Technical data
- IP address, browser type, sign-in times and the actions taken in the panel (the audit log).
- Travel identity
- Given and family name, gender, date of birth and, where required, passport details — because the airline requires exactly these to issue and accept a ticket.
- Booking data
- Route, date, fare class, booking reference, ticket number and any special service requests.
- Passenger contact
- Where the agency enters it for flight notifications.
A special service request such as a wheelchair may contain health information. It is processed solely to pass it to the airline and is used nowhere else.
Why it is processed
- To make the reservation and issue the ticket with the airline — without this data no ticket can exist.
- To verify agency eligibility and meet the legal requirements attached to selling air tickets.
- To maintain the credit account, statements and financial records.
- To support you and investigate a problem with a specific booking.
- For system security, abuse prevention and the audit log.
How long it is kept
- Booking and ticket records for as long as accounting duties and aviation regulation require.
- Agency eligibility documents for the life of the relationship and, after it, for the period the law sets.
- Technical and audit logs for a limited period, purely for security and troubleshooting.
Security
- Traffic to the site and the panel is encrypted.
- Access inside the panel is role-based; each user sees only what their permissions allow.
- Two-factor sign-in is available and recommended for administrator accounts.
- Data is backed up on a regular schedule.
No system is perfectly safe. If you believe your account has been accessed without authorisation, change the password immediately and tell us.
Your rights
You may ask to see the information we hold about you, to correct it, or to have it deleted to the extent the law allows.
If you are a passenger, take your request first to the agency that issued your ticket — the relationship is with them. If you get no answer, contact us directly.
- Some records cannot be deleted because of legal or accounting obligations.
- Data already transferred to the airline is subject to that airline privacy policy.
Contacting us about privacy
For any question or request about personal data, write to us using the channels on the contact page. Requests are reviewed as quickly as possible.
If anything here is unclear, ask before you open an account — we would rather answer it now than argue about it later.