Last updated: July 2026
Fly Away Travel Co. (“we,” “us,” “our”) is a Canadian travel agency, registered with the Travel Industry Council of Ontario (TICO #1549342), operating as an independent agency under our host agency, Nexion Canada ULC. This policy explains what personal information we collect when you use flyaway.ca or work with us to book travel, why we collect it, and how we handle it.
If you have questions about this policy or how we handle your information, contact us at privacy@flyaway.ca.
1. Information We Collect
Information you give us voluntarily — when you contact us, request a quote, or sign up for our newsletter, we collect things like your name and email address.
Information required to book travel — this is not optional. To arrange flights, cruises, hotels, and tours on your behalf, our suppliers, our host agency, and applicable regulators require us to collect:
- Passport number, date of birth, and nationality
- Payment card details, processed and stored through PCI-compliant systems — we do not store unencrypted card numbers
- Where relevant to your specific trip, travel insurance details or accessibility/dietary information you choose to share with us
We collect this because we cannot issue tickets or confirm bookings without it — not for marketing purposes. If you decline to provide required information, we may be unable to complete your booking.
How we communicate with you — we may contact you by phone, email, or WhatsApp, particularly to reach you while you’re travelling. Each channel has different privacy characteristics: WhatsApp messages are end-to-end encrypted in transit, though WhatsApp’s owner, Meta, still processes related metadata (such as phone numbers and message timing) outside Canada; standard email is not end-to-end encrypted, though it stays within our own systems once received. Regardless of which channel you use, any sensitive information you share with us is transferred into our secure booking systems as part of our standard process.
Information collected automatically — when you visit our website, we automatically collect technical information such as your IP address, browser type, device information, and pages viewed, via Google Analytics. We explain more about this in our Cookie Policy.
2. How We Use Your Information
We use your information to:
- Book, confirm, and manage your travel arrangements
- Communicate with you about your bookings and respond to inquiries
- Send marketing communications, if you’ve opted in — you can unsubscribe at any time
- Meet our record-keeping obligations as a TICO-registered agency
- Improve our website and services
- Comply with legal and regulatory requirements
3. Our Legal Basis for Collecting This Information
For most of what we collect — passport details, payment information, and other data needed to book travel — our basis is contractual and regulatory necessity: we’re collecting it because you’ve asked us to book travel, and because TICO, our host agency, and travel suppliers require it. This is separate from consent, and doesn’t require you to opt in — it’s a condition of providing the service you’ve requested.
For marketing communications and optional information (like signing up for our newsletter), our basis is your consent, which you can withdraw at any time by contacting us or using the unsubscribe link in any marketing email.
4. Who We Share Your Information With
- Nexion Canada ULC (our host agency) — for accreditation, compliance, and back-office processing.
- Travel suppliers and carriers — airlines, cruise lines, hotels, and tour operators, as required to issue tickets and confirm your bookings.
- Government and border authorities — for international air travel, passport information may be transmitted to destination-country border authorities as Advance Passenger Information (API), as required by law.
- TICO and other applicable regulators — as required for compliance and record-keeping.
- Service providers who help us run our business, including our booking and CRM systems (TRAMS/ClientBase Online, Tern.Travel) and website analytics (Google Analytics). These providers only use your information to perform services on our behalf.
We do not sell your personal information.
5. International Data Transfers
Some of our service providers — including our CRM/booking systems, website analytics, and WhatsApp (Meta), which we use for travel-related communication — are based in the United States. If your personal information is transferred there, it may be subject to U.S. law, including potential access by U.S. authorities. We only work with providers that maintain appropriate security safeguards.
6. How Long We Keep Your Information
We keep your information for as long as necessary to provide our services and meet our legal and regulatory record-keeping obligations as a TICO-registered agency. When we no longer need it, we securely delete or anonymise it.
7. How We Protect Your Information
We use technical and organisational safeguards to protect your personal information, including PCI-compliant payment processing. No system is 100% secure, but we take reasonable steps to protect your data from unauthorised access, loss, or misuse.
If a breach occurs that creates a real risk of significant harm to you, we will notify you and report it to the applicable privacy regulator, as required by law.
8. Children’s Privacy
Our services are not directed at children under 18. We don’t knowingly collect information from children without a parent or guardian booking on their behalf. If you believe we’ve collected a child’s information inappropriately, contact us and we’ll delete it.
9. Your Privacy Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information (subject to our regulatory record-keeping obligations as a travel agency)
- Withdraw consent for marketing communications at any time
To exercise any of these rights, email us at privacy@flyaway.ca. We’ll respond within 30 days.
10. Cookies
We use cookies for website analytics via Google Analytics. See our Cookie Policy for full details and how to manage your preferences.
11. Changes to This Policy
We’ll update this policy as our practices or applicable laws change, and update the “Last updated” date above. We encourage you to review it periodically.