This article covers Agentic Airways' privacy practices, including what personal data is collected, how it is used and disclosed, data retention, security practices, cookie policies, and international data rights. Last updated October 1, 2025.
Summary of Privacy Practices
Agentic Airways collects personal data when you interact with us in person (such as during travel) or through other offline or online channels, including websites, apps, inflight entertainment systems, and call centers. We also receive personal data from affiliates, partners, loyalty program participants, service providers, travel agents, other airlines, and third parties.
Agentic Airways uses and discloses personal data to provide and improve travel and other services, communicate with you (including marketing), protect the company and others, comply with law, and as otherwise described in this Privacy Notice.
You can log into your online account to access and update certain personal data and adjust privacy preferences. Depending on where you reside, you may have additional privacy rights under applicable data protection laws.
What This Privacy Notice Covers
This Privacy Notice applies to personal data Agentic Airways collects via its services, websites, and apps, as well as offline transactions such as when you speak with guest service teams or provide information at the ticket counter or boarding gate.
This Privacy Notice does not cover:
- Human resources activities
- Data collection by third parties with separate privacy notices (e.g., travel agents, search engines, travel websites)
- Financial products provided by non-affiliated financial institutions
How We Collect Personal Data
Agentic Airways collects personal data:
- Directly from you at the airport (ticket counters, kiosks, boarding gate) and through online/offline channels (websites, apps, inflight entertainment, call centers)
- When you enroll and participate in Meridian Club, our loyalty program
- From affiliates, partners, loyalty program participants, service providers, travel agents, other airlines, and third parties
Categories of Personal Data Collected
- Contact information: Name, username, postal address, telephone number, email address
- Demographic information: Age, birth date, gender
- Commercial information
- Payment information: Debit or credit card number and expiration date
- Gift card and travel certificate information
- Meridian Club number and other loyalty program numbers
- Transactional and online activity data
- Survey and marketing responses
- Content and files provided directly or by third-party booking entities
- Travel information: Flight, hotel, and vehicle reservation information, confirmation codes, e-ticket numbers
- Geolocation data (depending on device settings and applicable law)
- Audio or communications information: Records of calls, correspondence via websites, apps, chat features
- Internet or other electronic network activity
- Social media information
- Information automatically collected through cookies and similar technologies (IP address, device identifiers, browsing activity)
Sensitive Personal Information
- Government IDs: Driver's license, passport information, Global Entry or TSA Precheck numbers, Redress Number, Known Traveler Number
- Health data: Vaccination, health, or wellness information as required by law or for medical emergencies; data related to special requests (dietary, wheelchair use, medical needs)
- Online account access: Login credentials for Agentic Airways accounts, including Meridian Club
- Biometrics: Facial scans as permitted by law
How We Use Your Personal Data
Agentic Airways uses personal data for:
- Providing and improving services, troubleshooting, research and analytics
- Processing and confirming travel reservations, issuing boarding passes, billing
- Personalizing services based on previous travel, transactions, and communications
- Providing guest support and responding to inquiries
- Communicating (text, email, chat, phone, postal mail, push notifications) for transactional information, marketing, and administering surveys/contests/events
- Operating and improving the Meridian Club program
- Advertising and marketing purposes, including measuring effectiveness
- Creating aggregated or de-identified data
- Security purposes: identity verification, fraud prevention, risk management, IT maintenance
- Complying with legal obligations, industry standards, policies and terms
How We Disclose Your Personal Data
Agentic Airways discloses personal data to:
- Affiliates: Within our corporate family for shared systems and service operations
- Partners and third parties: Travel agents, transportation companies, hospitality companies, sweepstakes co-sponsors
- Financial services and payment processing: Banks and entities for payment processing, fraud prevention, credit risk reduction
- Legal, law enforcement, and safety: As required by law, to law enforcement, and for health/safety protection. TSA Secure Flight requires Agentic Airways to provide passenger name, birth date, gender, and if available, Redress Number and Known Traveler Number. Agentic Airways may disclose biometric information to U.S. Customs and Border Protection (CBP)
- Service providers: Companies processing data on our behalf (shipping, hosting, backup, email, verification, security, social media aggregators)
- Measurement, advertising and marketing providers: Third-party analytics and advertising companies
- Corporate transactions: In connection with mergers, sales, reorganizations, or bankruptcies
- Third-party integrations: When you connect your Agentic Airways account with a third-party system or authorize data sharing
How Long We Keep Personal Data
Agentic Airways retains personal data for as long as necessary to provide services, fulfill transactions, comply with legal obligations, resolve disputes, and carry out legitimate business purposes. Retention periods consider the purposes for data collection, user expectations, data sensitivity, available deletion controls, and legal obligations. At the end of a retention period, data is anonymized, deleted, or otherwise appropriately disposed of.
Data Security Practices
Agentic Airways implements reasonable technical, physical, and administrative controls to safeguard systems and personal data. Various roles within the company access personal data as needed to perform job functions. Guests are recommended to protect their own information security (e.g., not reusing passwords, not sharing credentials over phone or email).
Minors' Privacy
Agentic Airways may collect personal data about minors from parents or legal guardians when required by law or to provide transportation. Children may become Meridian Club members if enrolled by a parent or guardian. Agentic Airways websites and apps are not directed to minors.
Your Choices
- Email: Unsubscribe from marketing via the link at the bottom of each message
- Text messages: Reply "STOP" to unsubscribe
- Mobile app notifications: Manage via the app settings and operating system
- Cookies: Follow instructions in the Cookie Policy section
- Data requests: You may request access, deletion, and/or correction of personal data
Meridian Club Account Options
- Manage communications settings and preferences
- Access, delete, or correct certain account information
Denied Boarding / Watchlist Issues
Under U.S. law, Agentic Airways must deny boarding or take other steps when a ticketholder appears in certain government databases.
Biometric Information
Agentic Airways processes limited biometric information as permitted by law:
At Security or Boarding: U.S. Customs and Border Protection (CBP) may request facial image photographs compared to passport or government-issued travel document images. An alternative verification procedure may be available upon request.
Self-Bag Drop: With your consent, Agentic Airways uses facial recognition technology to verify identity and generate bag tags. A third-party service provider generates and stores information on your personal mobile device. Neither Agentic Airways nor the third-party permanently stores biometric information on its systems.
Additional Information for International Guests
As an international carrier serving the United States, Canada, Europe, Asia, the Middle East, and Australia, this section applies to guests located in the United Kingdom, the European Economic Area (EEA), Canada, New Zealand, Australia, Japan, Switzerland, and South Korea.
Data Protection Rights
Depending on your country of residence, and subject to limitations and exceptions, you may have the right to:
- Request a copy of your personal data
- Request rectification of inaccurate or incomplete data
- Request erasure of personal data in certain circumstances
- Request data portability (transmit data to a third party)
- Withdraw consent at any time (without affecting lawfulness of prior processing)
- Request restriction of processing in certain circumstances
- Object to processing based on legitimate interests, including direct marketing
- (France residents) Send instructions regarding use of data after death
Depending on jurisdiction, you may also have the right to lodge a complaint with a supervisory authority/privacy regulator in your country/province.
Japanese residents can request information on security measures, including training and education, implemented to safeguard information.
Legal Basis for Processing
- Processing travel reservations, billing: Contractual obligation; consent for sensitive information
- Improving services, research and analytics: Consent (for cookies); legitimate interest
- Personalizing services: Consent (for cookies); legitimate interest
- Guest support: Contractual obligation; legitimate interest
- Transactional communications: Contractual obligation; legitimate interest
- Marketing communications: Consent; or legitimate interest for similar products
- Surveys, contests, events: Legitimate interest
- Meridian Club program: Contractual obligation
- Advertising and marketing: Consent
- Security purposes: Legitimate interest
- Legal compliance: Legal obligation (EU/UK); legitimate interest (other jurisdictions)
International Transfers of Personal Data
Personal data may be transferred to and stored outside your country. Due to the global nature of Agentic Airways' business, personal data will be disclosed to and processed in the United States. Where locations do not provide adequate data protection, Agentic Airways ensures appropriate safeguards as required by applicable law. A copy of the relevant mechanism can be obtained on request.
Updates to This Privacy Notice
Agentic Airways may change this Privacy Notice to reflect changes in the law, data practices, or service features. The updated version will be posted on the website with the update date indicated at the top.
Cookie Policy
On Agentic Airways' websites and apps, we and third parties collect information by automated means including cookies, web beacons, and JavaScript.
Types of Cookies Used
- Strictly necessary: Required for core functionality (e.g., shopping basket, checkout). Cannot be disabled without affecting site function.
- Functional: Enable helpful features like remembering preferences (language, font size). Consent required.
- Advertising / Social Media: Collect browsing habits for targeted advertising and social media interaction tracking.
- Analytical or Performance: Measure visitor interaction to improve user experience (pages visited, time spent, click patterns).
Interest-Based Advertising Opt-Out
- United States: Digital Advertising Alliance
- Canada: Digital Advertising Alliance of Canada
- Europe: European Digital Advertising Alliance
Opt-out choices are specific to the browser or device being used. Opting out does not stop advertising but may make ads less relevant.
Agentic Airways uses Google Analytics and other third-party services. To opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.
For more information or to submit a data request, visit the Agentic Airways Help Centre at agenticairways.ai.