Privacy Notice

1. Who we are (data controller)

This site is operated by JK & Associates ("JK", "we", "us", "our"), an aviation management consultancy based in Nairobi, Kenya. For the purposes of the Data Protection Act, 2019 (the "Act"), JK is the data controller for the limited personal data described in this notice.

• Registered entity: [JK & Associates's full registered legal name and company registration number]
• Registered / postal address: [registered office address, Nairobi, Kenya]
• Email:
• Data Protection Officer / contact for data matters: [name of appointed DPO, if any]
• ODPC data controller registration: [Office of the Data Protection Commissioner registration number, if registered]

2. How the tools handle your data

The Airline Health Scorecard, CASK Benchmarking Calculator, Operating Model Canvas, 48-Hour Data Request and Fuel Contract Optimizer Lite are client-side tools. They run as code in your browser. Any values you enter are processed on your device and, where you would otherwise lose them on refresh, are saved to your browser's local storage (see section 5).

• Your inputs are not transmitted to JK or to any server. There is no database, no account, and no upload.
• We use no cookies, no analytics, no advertising or tracking technologies, and no social-media pixels.
• Because nothing is sent to us, we cannot access, view, link or sell your inputs.

3. Personal data we process

Given the design above, the only personal data involved is:

(a) Information you send us

If you use a "contact" or "talk to JK" link, your own email application opens a draft addressed to us. If you send that email, we receive your email address, your name (if you include it) and whatever you choose to write — which may include information about your airline. You decide what to share.

(b) Technical data handled by our service providers

As with any website, when your browser loads our pages our hosting/content-delivery providers and our web-font provider automatically process limited technical data — such as your IP address, the page requested, browser type and timestamp — to deliver the page and keep it secure. We do not use this data to identify you and we do not build profiles from it. See sections 6 and 7.

4. Purposes and lawful bases

Under section 30 of the Act we process personal data only where we have a lawful basis:

• Responding to your enquiry and taking steps toward a possible engagement — basis: your consent in choosing to contact us, and the necessity of taking steps at your request prior to entering a contract.
• Delivering and securing the website (technical data via providers) — basis: our legitimate interest in operating a safe, functioning website, balanced against your rights.

Where we rely on consent, you may withdraw it at any time by contacting us; this does not affect processing already carried out.

5. Local storage on your device

To make the tools usable, your browser stores your entries under keys such as dn_airline_scorecard_v2, dn_operating_model_canvas_v1 and dn_data_request_v1. This is local storage, not a cookie: it stays in your browser, is not sent in network requests, and is not visible to us. You remain in control:

• Use the "Reset" / "Clear" buttons in the tools, or
• Clear your browser's site data for this domain, or
• Use a private/incognito window, which discards it when you close the window.

6. Who else is involved (processors & third parties)

We keep third parties to the minimum needed to serve a static website:

• Hosting / content delivery: Netlify and/or Vercel host the static files and serve them over HTTPS.
• Web fonts: typefaces are loaded from Google Fonts (Google LLC). When fonts load, your IP address is necessarily disclosed to Google as the font host. We set a strict referrer policy to limit what is shared.
• Email: if you email us, our email provider processes that message so we can read and reply.

These providers act as our processors or as independent controllers of the technical data described above. We do not sell or rent personal data, and we do not share your tool inputs with anyone because we never receive them.

7. International data transfers

Our hosting, content-delivery and web-font providers operate infrastructure outside Kenya, including in the United States and other countries. Consequently, loading the site, and any email you send us, may involve transferring the limited data described above outside Kenya. In line with sections 48 and 49 of the Act, such transfers are made in reliance on the providers' own data-protection commitments and appropriate safeguards. If you would like more detail on a specific provider's safeguards, contact us.

8. Retention

• Your tool inputs: retained only on your device, for as long as you keep them; we hold no copy.
• Emails and enquiry data: kept only as long as necessary to handle your enquiry and any resulting engagement, and to meet legal or accounting obligations, after which they are deleted or anonymised.
• Provider technical logs: retained by those providers under their own retention schedules.

9. Your rights

Subject to the Act (in particular section 26), you have the right to:

• be informed of the use of your personal data;
• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion or erasure of your data;
• object to, or request restriction of, processing;
• data portability, where applicable; and
• not be subject to a decision based solely on automated processing. (Our tools score only the figures you enter, on your device, and produce indicative guidance — they make no decision about you.)

To exercise any right, email us at . We will respond within the timeframes set by the Act and may need to verify your identity first.

10. Complaints to the ODPC

If you believe we have not handled your personal data lawfully, please contact us first so we can put it right. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya: website www.odpc.go.ke, email info@odpc.go.ke.

11. Children

This site is a professional tool intended for airline executives and is not directed at children. We do not knowingly collect the personal data of anyone under 18.

12. Security

The site is served over HTTPS with security headers (including content-security-policy controls on embedding). Because your tool inputs never leave your device and we operate no central store of them, the most sensitive data simply never reaches us. Email you send us is protected by our provider's security measures.

13. Changes to this notice

We may update this notice from time to time. The "last updated" date at the top shows the current version; material changes will be reflected here.

14. How to contact us

For any privacy question or to exercise your rights, contact [and/or the registered postal address above].

Read our Terms of Use →