Privacy Policy

Last updated: June 2026 · Effective immediately

Plain English summary: We do not directly collect, store or sell your personal data. We earn commission when you click affiliate links and make purchases. Third-party services we use may set cookies. You can control cookies via your browser.

1. Who we are

jfklon.com ("we", "us", "our") is a travel information and affiliate website. We provide travel guidance, price comparisons and links to third-party booking platforms for the New York JFK to London route. We are not a travel agency, airline or hotel.

For privacy enquiries: hello@jfklon.com

2. Data we collect directly

We do not operate user accounts, payment systems or direct data collection forms. We do not directly store your name, email address, payment details or any personally identifiable information.

If you contact us by email, we receive the information you choose to include. We use it only to respond to your enquiry and do not add it to any mailing list.

3. Infrastructure: Cloudflare

jfklon.com is hosted on Cloudflare Pages and served through Cloudflare's global content delivery network (CDN). As a fundamental part of how this site operates, Cloudflare processes certain data automatically:

IP addresses: Every request to this site passes through Cloudflare's network. Cloudflare logs visitor IP addresses as part of its standard network operations, DDoS protection and security services.
Request metadata: Cloudflare processes HTTP request headers, browser type, operating system, referring URL and approximate geographic location (derived from IP) as part of normal CDN operation.
Cloudflare Web Analytics: If enabled, Cloudflare Web Analytics uses server-side data collection only — it does not set cookies on your device and does not track individual users. It collects only aggregate metrics (page views, visits) using data already processed by Cloudflare's servers. It is one of the most privacy-friendly analytics tools available.
Cloudflare security cookies: Cloudflare may set a cookie named __cf_bm (and in some cases cf_clearance) on your device for bot detection and security purposes. These are strictly functional cookies required to protect the site from automated attacks. They are not used for tracking or advertising. The __cf_bm cookie expires after 30 minutes of inactivity.
Cloudflare Zaraz / Rocket Loader: If enabled, these performance services may inject scripts at the edge. We do not currently use Zaraz or Rocket Loader — but if we enable them in future, this policy will be updated.

Cloudflare's processing of your data is governed by their Privacy Policy and their GDPR commitment. Cloudflare is certified under the EU-US Data Privacy Framework.

We have no ability to prevent Cloudflare from collecting the infrastructure-level data described above — it is a necessary consequence of using Cloudflare to host and deliver this site securely.

4. Other third-party services

The following additional third-party services are embedded on or linked from this site:

Google Fonts: Loaded from Google's CDN. Google may log font requests including your IP address per their Privacy Policy. To minimise this, fonts are loaded with display=swap and preconnected for performance.
Open-Meteo (weather API): Called client-side to fetch London weather data. Only fixed London coordinates are sent — no personal data or your location is transmitted. Open-Meteo is a privacy-first, open-source API that does not log personal data.
Open Exchange Rates (currency API): Called client-side to fetch USD/GBP exchange rates. No personal data is transmitted in these requests.
Unsplash (images): Photographs are served from Unsplash's CDN. Unsplash may log requests including IP addresses per their Privacy Policy.
Affiliate partners: When you click an affiliate link to Skyscanner/Travelpayouts, Booking.com, VRBO, Amazon, Wise, Revolut, GetYourGuide, Blacklane, Rideways, Addison Lee, American Express or Chase, those sites may set their own cookies and collect data per their own privacy policies. We have no control over their data practices once you leave jfklon.com.

5. Cookies

jfklon.com itself does not set first-party cookies. Affiliate partners and embedded third-party services may set cookies on your device when you interact with their content or click through to their platforms.

You can control, restrict or delete cookies via your browser settings. Disabling cookies will not affect your ability to read content on jfklon.com, but may affect functionality on third-party platforms you visit.

6. Affiliate links and commercial relationships

Many links on this site are affiliate links. When you click an affiliate link and complete a qualifying purchase or sign-up, we receive a commission. This is disclosed on every page of this site.

Our affiliate relationships do not affect our editorial recommendations. We only link to platforms we consider reputable.

The American Express link is a personal referral link. We may receive reward points (not cash) if you apply and are approved for an Amex card via our referral.

7. Your rights

Since we do not directly store personal data, there is no data to access, correct or delete from jfklon.com. For data held by third-party affiliate partners, please contact those companies directly using the contact details in their respective privacy policies.

UK/EU residents (GDPR): You have rights to access, rectify, erase, restrict processing, object to processing, and data portability. Contact us at hello@jfklon.com and we will assist where we can or direct you to the relevant third party.

California residents (CCPA): You have the right to know what personal information is collected, to delete it, and to opt out of its sale. We do not sell personal information. For data held by third parties, contact them directly.

8. Children's privacy

This site is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has submitted personal information via our contact email, please contact us and we will delete it promptly.

9. Data security

As we do not store personal data, there is no data at risk from us. We recommend using secure connections (HTTPS) when visiting any website. All pages on jfklon.com are served over HTTPS.

10. Links to third-party sites

This site contains links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before sharing any personal information with them.

11. Changes to this policy

We may update this privacy policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions: hello@jfklon.com

We aim to respond within 30 days as required under GDPR.