Privacy Policy | Omni Aviation

Effective date: October 14, 2026 · Last updated: October 14, 2026

1. Who We Are and What This Policy Covers

This Privacy Policy explains how Omni Aviation, LLC, a Georgia limited liability company, with its principal place of business in Douglasville, Georgia ("Omni," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you:

visit or use our website at oajets.com and any related pages (the "Site");
request a charter quote, sign up for empty-leg alerts, submit a referral inquiry, or otherwise contact us;
book, travel on, or are listed as a passenger on a charter flight we arrange; or
otherwise interact with us by email, phone, text message, social media, or in person

(together, the "Services").

About our role. Omni Aviation, LLC is an air charter broker, not a direct air carrier. All flights are operated by FAA-certificated Part 135 or Part 121 air carriers, or foreign air carriers holding equivalent authority, which exercise full operational control of charter flights. Omni does not operate aircraft. The air carriers that operate the flights we arrange hold the required U.S. Department of Transportation authority and are certificated by the FAA under 14 C.F.R. Part 135 or Part 121 or, for foreign air carriers, hold equivalent authority from the appropriate foreign civil aviation authority. Each operator handles personal information under its own privacy policy and legal obligations, as explained in Section 6.

For purposes of the EU and UK General Data Protection Regulation ("GDPR"), Omni is the "controller" of the personal information described in this Policy, except where we state otherwise.

This Policy does not apply to information about our employees or job applicants, or to third-party websites, apps, or services that we link to or that are operated by others (including aircraft operators), which have their own privacy policies.

2. Summary of Key Points

We collect the information you give us when you request a quote, sign up for empty-leg alerts, or submit a referral inquiry: for example, your name, email, phone number, organization, travel details, passenger counts, and notes.
Our Site is hosted on Webflow, which, together with our analytics tools, uses cookies and similar technologies to operate the Site and measure how it is used.
We use your information to respond to you, arrange and support charter flights, send you alerts and updates you ask for, operate our business, and comply with the law.
We share passenger and trip information with the aircraft operators that perform your flight, and with service providers who help us run our business.
We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising.
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your information, and to opt out of certain processing. See Sections 13 and 14.
You can unsubscribe from marketing emails at any time and reply STOP to any text message to opt out.

3. Personal Information We Collect

"Personal information" means information that identifies, relates to, describes, or could reasonably be linked to you or your household. The chart below describes what we collect, using the categories in the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), and how we obtain it.

Identifiers and contact details: Examples: Name, email address, phone number, postal address, IP address, online identifiers; Source: You; your referral partner, assistant, or travel arranger; automatically from your device
Customer records (Cal. Civ. Code § 1798.80(e)): Examples: Name, address, phone, and, if you book, billing and payment details (payment card data is collected and processed by our payment processor); Source: You; your travel arranger; our payment processor
Professional or employment information: Examples: Organization or company name, job title; Source: You; your referral partner
Commercial and travel information: Examples: Departure and destination airports or cities, travel dates and times, one-way or round-trip, number of passengers, aircraft preferences, quotes requested, trips booked, empty-leg routes of interest, catering and ground-transportation requests, and notes you provide; Source: You; your travel arranger or referral partner; operators and service providers that support your trip
Passenger and travel-document information (only if you book): Examples: Full legal names of passengers, dates of birth, gender, nationality, passport or government ID details, and similar information that operators or government authorities require for manifests, security, customs, and immigration; Source: You or the person booking on your behalf
Internet or other electronic network activity: Examples: Pages viewed, links clicked, referring URL, time on page, browser type, device type, operating system, and similar usage data; Source: Automatically, through cookies and similar technologies on our Site (see Section 9)
Approximate geolocation: Examples: City, region, or country inferred from your IP address (we do not collect precise geolocation through the Site); Source: Automatically from your device
Communications: Examples: Emails, texts, chat messages, form submissions, and the content of phone calls with us; Source: You
Inferences: Examples: Travel preferences and likely interests derived from your requests and trips; Source: Created by us from the information above
Sensitive personal information (only where needed): Examples: Passport or government ID numbers; information about health, mobility, or accessibility needs, dietary requirements, or pets that you choose to share so a trip can be arranged; Source: You or the person booking on your behalf

Information about other people. If you give us information about other passengers or another person (for example, as an assistant, family member, travel manager, or referral partner), you confirm that you have the authority to do so and have told them how their information will be used under this Policy.

Information you choose not to provide. You do not have to provide personal information, but if you do not, we may be unable to respond to your request or arrange your flight.

We do not knowingly collect biometric, genetic, or precise geolocation data through the Site, and we ask that you not include unnecessary sensitive information in free-text "notes" fields.

4. How We Use Personal Information

We use personal information for the following purposes:

To respond to inquiries and provide quotes, including contacting you about quote requests, aircraft options, availability, and pricing.
To arrange, manage, and support charter flights, including sourcing aircraft and operators, confirming bookings, preparing passenger manifests, coordinating catering, ground transportation, and other trip services, and communicating with you before, during, and after your trip.
To provide empty-leg alerts and other notifications you request.
To manage referral relationships, including processing referral inquiries, recording who introduced a client to us, and calculating referral commissions.
To process payments, issue invoices and refunds, prevent fraud, and manage chargebacks.
To send marketing communications about our services, where permitted by law and subject to your choices (see Sections 11 and 12).
To operate, maintain, secure, and improve the Site and our Services, including analytics, troubleshooting, and understanding how visitors use the Site.
To meet our legal, regulatory, and safety obligations, including obligations under U.S. Department of Transportation air charter broker rules (14 C.F.R. Part 295), tax and accounting laws, security screening, customs and immigration requirements, sanctions screening, and responding to lawful requests from authorities.
To protect rights and safety, including detecting and preventing fraud, abuse, security incidents, and illegal activity, and establishing, exercising, or defending legal claims.
For business transactions, such as a merger, acquisition, financing, or sale of assets (see Section 6).
For any other purpose we describe when we collect the information or with your consent.

We use sensitive personal information only as reasonably necessary to provide the Services you request, to comply with law, and for other purposes permitted under CCPA Regulations § 7027(m). We do not use or disclose sensitive personal information to infer characteristics about you.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

5. Legal Bases for Processing (EEA, UK, and Switzerland)

If the GDPR, UK GDPR, or Swiss data protection law applies, we rely on the following legal bases:

Responding to quote requests and arranging, managing, and supporting flights; processing payments: Legal basis: Performance of a contract with you, or steps taken at your request before entering into a contract (Art. 6(1)(b))
Sharing passenger information with operators and authorities as required for manifests, security, customs, and immigration: Legal basis: Performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c))
Empty-leg alerts and marketing emails and texts: Legal basis: Consent (Art. 6(1)(a)), or, for existing clients where permitted, our legitimate interests in promoting similar services (Art. 6(1)(f))
Non-essential cookies and analytics: Legal basis: Consent (Art. 6(1)(a)) where required by ePrivacy law
Site security, fraud prevention, improving our Services, managing referral relationships, and business administration: Legal basis: Legitimate interests (Art. 6(1)(f)), balanced against your rights
Tax, accounting, and regulatory compliance: Legal basis: Legal obligation (Art. 6(1)(c))
Establishing, exercising, or defending legal claims: Legal basis: Legitimate interests (Art. 6(1)(f))

Where we process health or other special category data (for example, mobility or medical needs you share), we do so with your explicit consent (Art. 9(2)(a)) or where necessary for legal claims (Art. 9(2)(f)). You may withdraw consent at any time; this will not affect processing that took place before withdrawal.

6. How We Disclose Personal Information

We disclose personal information only as described below:

Aircraft operators. To fulfil your charter, we share passenger and trip information (such as passenger names, contact details, travel dates and routes, passenger counts, travel-document details, and special requests) with the direct air carrier that will operate your flight (an FAA-certificated Part 135 or Part 121 air carrier, or a foreign air carrier holding equivalent authority), and, if needed, with a substitute or recovery operator. Operators use this information for their own operational, safety, security, and legal purposes under their own privacy policies, and act as independent controllers of that information.
Trip service providers. Fixed-base operators (FBOs), ground-transportation providers, caterers, hotels, and other vendors that you ask us to arrange, as needed to provide those services.
Service providers and processors. Companies that process information on our behalf under contracts that limit their use of it, such as website hosting and form processing (Webflow), customer-relationship management, email and text-messaging service providers, analytics service providers, payment processors, cloud storage, IT and security providers, customer-support tools, and professional advisers (lawyers, accountants, auditors, and insurers).
Referral partners. If a referral partner introduced you to us, we may tell that partner that you contacted us and whether a trip was completed, to the extent needed to administer the referral relationship. We do not give referral partners your trip details or pricing unless you ask us to or they are booking on your behalf.
People acting for you. Your assistant, travel arranger, family office, or employer, if they make or manage requests on your behalf.
Government authorities and legal process. Airport authorities, the Transportation Security Administration, U.S. Customs and Border Protection, foreign customs and immigration authorities, and other government agencies as required for travel, and law enforcement, regulators, courts, or other parties where we believe disclosure is required by law, subpoena, or legal process, or is necessary to protect the rights, property, or safety of Omni, our clients, passengers, or others.
Business transfers. A buyer, successor, investor, lender, or other party (and their advisers) in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets.
Affiliates. Any current or future parent, subsidiary, or affiliate under common control, consistent with this Policy.
With your consent or at your direction.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you. We will maintain and use de-identified information only in de-identified form and will not try to re-identify it, except as permitted by law.

Disclosures in the last 12 months. In the preceding 12 months, we may have disclosed each category of personal information listed in Section 3 for a business purpose to the categories of recipients described above, consistent with the purposes in Section 4.

7. We Do Not Sell Personal Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising (sometimes called "targeted advertising"), as those terms are defined under the CCPA and other U.S. state privacy laws. We have not done so in the preceding 12 months. We do not sell or share the personal information of consumers we know are under 16 years old.

We do not rent, sell, or trade passenger lists or email lists.

8. Retention

We keep personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain business and tax records, resolve disputes, enforce agreements, and comply with legal obligations. How long we keep information depends on its type and purpose. Our general retention periods are:

Quote requests that do not result in a booking: Typical retention period: 24 months after our last contact with you
Booking, trip, invoice, and payment records: Typical retention period: 7 years after the trip, to meet tax, accounting, and regulatory requirements
Passenger travel-document details (passport/ID): Typical retention period: Up to 90 days after the trip, unless you ask us to keep them on file for future trips or a longer period is legally required
Empty-leg alert and marketing subscriptions: Typical retention period: Until you unsubscribe, plus a suppression record so we can honor your opt-out
Text-message and call consent and opt-out records: Typical retention period: 5 years after your consent or opt-out
Referral records: Typical retention period: For the term of the referral relationship plus 7 years
Website analytics data: Typical retention period: 14 to 26 months, depending on the tool
Privacy-request records: Typical retention period: At least 24 months, as required by CCPA regulations

When we no longer need personal information, we delete it or de-identify it. We may keep information longer where needed to comply with law, resolve disputes, or for legal claims.

9. Cookies, Analytics, and Similar Technologies

What these are. Cookies are small files stored on your device. Similar technologies include pixels, tags, local storage, and scripts. They help websites function and help site owners understand how visitors use their sites.

Webflow hosting. Our Site is built and hosted on Webflow. Webflow and its infrastructure providers process technical information (such as IP address, browser, and device information) to deliver, secure, and maintain the Site, and Webflow processes the forms you submit on our Site. Webflow may set cookies or use similar technologies that are necessary for the Site to function and for security. For details, see Webflow's own privacy and cookie notices.

Types of technologies we use:

Strictly necessary: needed to operate and secure the Site, remember your cookie choices, and process forms. These cannot be switched off in our systems.
Analytics and performance: help us count visits and traffic sources and see which pages are most and least popular, so we can improve the Site. We use analytics service providers for this purpose, and they may set their own cookies subject to their own privacy notices.
Functional: remember choices you make, such as preferences on forms.
Advertising: We do not currently use advertising or retargeting cookies.

Your choices. Where required by law (for example, for visitors in the EEA, UK, or Switzerland), we will ask for your consent before placing non-essential cookies, and you can change your choices at any time through the cookie settings on our Site, where offered, or by contacting us. You can also block or delete cookies through your browser settings; if you block strictly necessary cookies, parts of the Site may not work.

10. Do Not Track and Global Privacy Control

Global Privacy Control (GPC). We treat a GPC signal from your browser as a valid request to opt out of the sale and sharing of personal information and of targeted advertising, for that browser and for any profile we can associate with it, as required by California and other state laws. Because we do not sell or share personal information, you do not need to take further action, but we honor the signal regardless.

Do Not Track. Some browsers send a "Do Not Track" (DNT) signal. Because there is no common industry standard for how to respond to DNT signals, our Site does not currently respond to them, except that we honor GPC signals as described above.

11. Marketing Communications and Your Choices

Email. If you sign up for empty-leg alerts or other updates, or where otherwise permitted by law, we may send you emails about available flights, offers, and our services. Every marketing email includes an unsubscribe link, and we will honor your request within 10 business days, consistent with the CAN-SPAM Act. You can also opt out by emailing info@oajets.com with "Unsubscribe" in the subject line. Even if you opt out of marketing, we may still send you transactional or relationship messages, such as quote responses, booking confirmations, itinerary changes, and invoices.

Empty-leg alerts. You can stop empty-leg alerts at any time using the unsubscribe link in any alert, by replying STOP to any alert sent by text, or by contacting us.

12. Text Messages and Phone Calls (TCPA Consent)

Consent. If you provide your mobile number and check the box (or otherwise give consent) on our Site or another form, you agree that Omni Aviation may contact you at that number by phone call and text message (SMS/MMS), including messages sent using automated technology, about your quote request, bookings, empty-leg alerts, and, if you separately agree, marketing offers. Consent is not a condition of any purchase. You may still request a quote or book a flight without agreeing to receive marketing texts or calls.

Frequency and charges. Message frequency varies. Message and data rates may apply. Wireless carriers are not liable for delayed or undelivered messages.

How to opt out. Reply STOP to any text message to stop receiving texts from us, or reply HELP for help. You may also revoke consent by any reasonable means, including by emailing info@oajets.com or telling us during a call. We will process opt-out requests promptly and within the time required by law. After you opt out, we may send one message confirming your opt-out.

Mobile information. We do not sell, rent, or share your mobile phone number or text-messaging consent with third parties or affiliates for their own marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be shared with any third parties, except service providers that help us deliver messages.

Do-not-call. We maintain an internal do-not-call list and comply with the National Do Not Call Registry and applicable state do-not-call laws. You may ask to be placed on our internal do-not-call list at any time.

Accuracy. You agree to tell us if you change or give up the mobile number you provided.

13. Your U.S. State Privacy Rights

Depending on where you live, and subject to applicable thresholds, exceptions, and verification, you may have some or all of the following rights. We describe them here even if a particular law may not apply to us, and we may decline a request where the law permits.

13.1 California Residents

If you are a California resident, the CCPA gives you the right to:

Know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it;
Delete personal information we collected from you, subject to legal exceptions (for example, where we need it to complete a transaction, comply with law, or detect security incidents);
Correct inaccurate personal information;
Opt out of the sale or sharing of personal information (we do not sell or share personal information);
Limit the use and disclosure of sensitive personal information to permitted purposes (we use sensitive personal information only for purposes that do not give rise to this right); and
Not be discriminated or retaliated against for exercising your rights.

California "Shine the Light." Under California Civil Code § 1798.83, California residents may request information about disclosures of personal information to third parties for their direct-marketing purposes. We do not disclose personal information to third parties for their own direct-marketing purposes.

Notice at collection. This Policy serves as our notice at collection. The categories we collect, purposes, retention periods, and whether information is sold or shared are described in Sections 3, 4, 7, and 8.

13.2 Residents of Other States

Residents of states with comprehensive consumer privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, may have the right to:

confirm whether we process their personal data and access it;
correct inaccuracies;
delete personal data;
obtain a copy of their personal data in a portable format;
opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in these activities);
where applicable, obtain a list of the specific third parties (or categories of third parties) to which we have disclosed personal data (for example, under Oregon and Minnesota law);
where applicable, question the result of certain profiling and have it reconsidered (for example, under Minnesota law); and
appeal our decision on a request.

Nevada. Nevada residents may submit a request to opt out of the sale of covered information. We do not sell covered information, but you may submit a request using the contact methods below.

Consumer health data. If you share health-related information (such as mobility or medical needs), we use it only to arrange the services you request.

13.3 How to Exercise Your Rights

You may submit a request by:

emailing info@oajets.com with the subject line "Privacy Request"; or
calling 770-696-6483.

Verification. To protect your information, we will verify your identity before responding to requests to know, access, correct, or delete, by matching information you provide (such as your name, email, phone number, and details of a recent quote or trip) with information in our records. We may ask for more information if needed. We will use information provided for verification only for that purpose.

Authorized agents. You may use an authorized agent to submit a request. We may require the agent to provide your signed permission and may require you to verify your identity directly with us, unless the agent holds a valid power of attorney.

Timing. We will confirm receipt of a request within 10 business days and respond within 45 calendar days. If we need more time, we may extend this period by up to an additional 45 days, as the law permits, and will tell you why.

Appeals. If we decline your request, you may appeal by replying to our decision or emailing info@oajets.com with the subject line "Privacy Appeal" within 45 days. We will respond to your appeal within the time required by applicable law (generally 45 or 60 days). If you are not satisfied with our response to your appeal, you may contact your state Attorney General.

No fee; limits. We will not charge a fee for most requests. We may decline or charge a reasonable fee for requests that are manifestly unfounded, excessive, or repetitive, where the law allows.

Non-discrimination. We will not deny you services, charge you different prices, or provide a different level of quality because you exercised your privacy rights.

14. Rights for Individuals in the EEA, UK, and Switzerland

If the GDPR, UK GDPR, or Swiss law applies to our processing of your personal data, you have the right to:

access your personal data and receive a copy;
rectify inaccurate or incomplete data;
erase your data in certain circumstances;
restrict our processing in certain circumstances;
data portability, to receive data you provided to us in a structured, commonly used, machine-readable format and have it transmitted to another controller;
object to processing based on our legitimate interests, and to object at any time to direct marketing;
withdraw consent at any time, where we rely on consent; and
lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner).

To exercise these rights, contact us as described in Section 20. We will respond within one month, which may be extended by two further months where necessary, as the law permits.

15. International Data Transfers

Omni is based in the United States, and our Site and service providers primarily store and process information in the United States. If you are outside the United States, your information will be transferred to, stored in, and processed in the United States and, where your trip requires it, in the countries your flight departs from, arrives in, or passes through, which may have data protection laws different from those in your country.

Where the GDPR, UK GDPR, or Swiss law applies, we transfer personal data outside the EEA, UK, or Switzerland using appropriate safeguards, such as the European Commission's Standard Contractual Clauses (with the UK Addendum or UK International Data Transfer Agreement, as applicable), or to recipients certified under the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), where applicable. Some transfers, such as sending passenger details to an operator or to a foreign government to perform a flight you booked, are necessary to perform our contract with you or to take steps at your request (GDPR Art. 49(1)(b) and (c)). You may request more information about the safeguards we use by contacting us.

16. How We Protect Personal Information

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We ask that you not send passport or payment-card details through unencrypted email or Site notes fields; we will provide a secure method when needed.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you and regulators as required by applicable law, including Georgia's data breach notification law (O.C.G.A. § 10-1-910 et seq.).

17. Children's Privacy

Our Site and Services are intended for adults and are not directed to children. We do not knowingly collect personal information directly from children under 13 years of age through the Site, consistent with the Children's Online Privacy Protection Act (COPPA). If you are under 18, please do not submit any information through the Site. Children may travel as passengers only when a parent, legal guardian, or other authorized adult books and provides their information, and we use that information only to arrange the trip and meet legal requirements. We do not sell or share the personal information of anyone under 16. If you believe a child has provided personal information to us without appropriate consent, contact us at info@oajets.com and we will delete it as required by law.

18. Third-Party Links and Services

The Site may contain links to third-party websites and services, including operators, social-media platforms, and payment pages. We are not responsible for the privacy practices of those third parties, and this Policy does not apply to them. We encourage you to read their privacy policies.

19. Changes to This Policy

We may update this Policy from time to time. When we do, we will change the "Last updated" date at the top. If we make material changes, we will provide additional notice, such as a notice on the Site or an email to you, and will obtain your consent where required by law. Changes are effective when posted unless we state otherwise. We encourage you to review this Policy periodically. Prior versions are available on request.

20. Contact Us

If you have questions about this Policy or our privacy practices, or wish to exercise your rights, contact us:

Omni Aviation, LLC 4780 Highway 5, Suite A Douglasville, GA 30135, United States Privacy requests and general inquiries: info@oajets.com Charter inquiries: charter@oajets.com Phone: 770-696-6483

Omni Aviation, LLC is an air charter broker, not a direct air carrier. All flights are operated by FAA-certificated Part 135 or Part 121 air carriers, or foreign air carriers holding equivalent authority, which exercise full operational control of charter flights.