Effective date: August 31, 2026 · Last reviewed: August 31, 2026 · Applies to: railwaytravel.net and all services provided by AGENCY 54, LLC
1. Who we are and what this policy covers
AGENCY 54, LLC ("we", "us", "our"), trading as Railway Travel, operates the website at railwaytravel.net and an independent rail travel information line reachable by telephone, email and text message. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it and what rights you have.
This policy applies to our website, our information line and related communications. It does not apply to any third-party travel provider your call may be connected to. Once a call is transferred, that company handles your information under its own privacy policy, and you should ask them for it. It likewise does not apply to rail carriers or other third parties whose services you may use.
By using our website or our services, you acknowledge that you have read and understood this policy. If you do not agree with it, please do not use the website or provide us with personal information.
2. Information we collect
We collect only what is reasonably necessary to answer your enquiry and to operate and secure our website. We do not take payments, so we do not collect payment card details at all.
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, postal address, email address, telephone number | You, directly |
| Enquiry details | Origin, destination, approximate dates, party size, accessibility requirements you choose to mention | You, directly |
| Enquiry records | What you asked about, notes taken during a call, whether a call was connected onward | Our own records of the enquiry |
| Payment information | None. We do not accept payments and never ask for card details | Not collected |
| Communications | Call recordings (where notified), emails, text messages, form submissions | You, directly |
| Technical data | IP address, browser type, device type, operating system, referring URL, pages viewed | Automatically, via our servers and cookies |
| Sensitive information | Disability or mobility information you volunteer so we can arrange assistance | You, voluntarily |
We never ask for card details
We do not sell anything and we take no payments, so there is no reason for us to request a card number. If anyone claiming to be Railway Travel asks you for payment details, it is not us — end the call and report it to us.
3. How we use your information
We use personal information for the following purposes, each of which has a clear and limited business justification:
- To answer the question you contacted us about
- To call you back where you have asked us to
- With your agreement, to pass the details necessary to progress an enquiry to an independent third-party travel provider
- To respond to enquiries, corrections and complaints
- To maintain business records required by law, including tax and consumer protection records
- To detect, investigate and prevent fraud, abuse and security incidents
- To analyse aggregate website usage so we can improve the site
- To send marketing communications where you have opted in, and only until you opt out
4. Legal bases and consent
Where we process personal information to fulfil a booking you have requested, we do so because it is necessary to perform our agreement with you. Where we process information for fraud prevention, security and record keeping, we do so on the basis of our legitimate business interests and legal obligations. Where we send marketing communications or make marketing calls or texts, we do so only with your express prior consent.
Consent to marketing is never a condition of purchase. You may withdraw consent at any time — see “Your choices and rights” below.
5. How we share information
We do not sell personal information, and we do not share personal information with third parties for their own independent marketing purposes. We share information only as follows:
- Independent third-party travel providers — where you ask to be connected, the details needed to progress that enquiry. Their own privacy policy then governs what they do with it
- Service providers — hosting, email delivery, telephony and customer-service tools acting on our instructions under written confidentiality obligations
- Professional advisers — accountants, auditors and lawyers, where required
- Law enforcement and regulators — where required by law, subpoena, court order or to protect rights, safety or property
- Successors — in connection with a merger, acquisition or sale of assets, subject to this policy continuing to apply
6. Cookies and tracking technologies
Our website uses a limited set of cookies and similar technologies. Strictly necessary cookies keep the site functioning. Analytics cookies help us understand aggregate usage. We also use browser local storage to remember whether you have already been shown our on-site offer notice, so that it is not repeated.
You can control cookies through your browser settings. Blocking strictly necessary cookies may affect site functionality. Full detail is set out in our Cookie Policy.
We honour Global Privacy Control (GPC) and similar browser-based opt-out preference signals where our systems are able to detect them.
7. Data retention
We keep personal information only as long as necessary for the purpose it was collected, and then for the period required by law.
| Record type | Typical retention period |
|---|---|
| Enquiry records | 24 months from last contact |
| Records of calls connected to a third party | 24 months, for referral reconciliation |
| Payment records | None held — we take no payments |
| Marketing consent records | Duration of consent plus 4 years after withdrawal |
| Call recordings, where made | 12 months, unless required for a dispute |
| Website analytics data | 26 months, in aggregate form |
8. Security
We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorised access, disclosure, alteration and destruction. These include encrypted transmission (TLS), access controls limiting staff access to what their role requires, PCI-DSS compliant payment handling and regular review of our security practices.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you provide information to us at your own risk. If we become aware of a breach affecting your personal information, we will notify you and any required regulator in accordance with applicable state breach-notification laws.
9. Your choices and rights
Subject to applicable law and to verification of your identity, you may:
- Access — request confirmation of whether we process your personal information and a copy of it
- Correct — ask us to correct inaccurate personal information
- Delete — ask us to delete personal information, subject to legal retention requirements
- Portability — request a copy in a portable, machine-readable format
- Opt out of sale or sharing — we do not sell or share personal information as those terms are defined under California law, but you may confirm this at any time
- Limit use of sensitive information — restrict our use of accessibility information to what is necessary to provide the service
- Withdraw marketing consent — unsubscribe by any email link, reply STOP to any text, or contact us directly
- Non-discrimination — we will not deny service, charge a different price or provide a different quality of service because you exercised a privacy right
10. How to exercise your rights
Submit a request by calling +1 (888) 821-4679 or emailing info@railwaytravel.net with the subject line “Privacy Request”. Please tell us which right you wish to exercise and provide enough information for us to locate your records and verify your identity.
We will acknowledge your request within 10 business days and respond substantively within 45 calendar days, extendable by a further 45 days where reasonably necessary, in which case we will notify you of the extension and the reason for it. There is no charge for a reasonable request.
An authorised agent may submit a request on your behalf with written permission signed by you, and we may still contact you directly to confirm the authorisation.
11. State-specific privacy rights
Residents of California have additional rights described in our California Privacy Notice and may exercise their opt-out rights through our Do Not Sell or Share My Personal Information page.
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy legislation have rights of access, correction, deletion, portability and opt-out substantially as described above, together with a right to appeal a refusal of a request. To appeal, reply to our decision with the subject line “Privacy Appeal”; we will respond within 45 days and, if we deny the appeal, will provide information about contacting your state Attorney General.
Nevada residents may submit a verified request that we not sell covered personal information. We do not engage in such sales.
12. Children's privacy
Our website and services are directed to adults and are not intended for children under 13. Consistent with the Children's Online Privacy Protection Act, we do not knowingly collect personal information directly from children under 13. Where a booking includes a child travelling with an adult, we collect only the minimum information the carrier requires and receive it from the responsible adult.
If you believe a child has provided us with personal information, contact us and we will delete it promptly.
13. International transfers
We are established in the United States and process personal information there. Where you book travel in the United Kingdom or Canada, information necessary to create your reservation is transmitted to carriers and reservation systems in those countries. By requesting such a booking you understand that this transfer is necessary to provide the service you have asked for.
14. Third-party links
Our website contains links to third-party websites, including carriers and reference sources. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.
15. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The “last reviewed” date at the top of this page indicates when it was last revised. Material changes will be highlighted on this page for at least 30 days. Your continued use of the website after a change takes effect constitutes acceptance of the revised policy.
Contact
Questions about this document should be directed to:
AGENCY 54, LLC (trading as Railway Travel)
927 Tan Tara TRL
Jacksonville, FL 32221, United States
Telephone: +1 (888) 821-4679
Email: info@railwaytravel.net
