Privacy policy

Last updated: 10 November 2026

1. Who we are

OnlyCarryOn (onlycarryon.com) is provided by Website Coder Limited, registered in England and Wales (company number 17270865), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Contact: [email protected].

We are the data controller. We are registered with the Information Commissioner's Office (ICO), registration reference ZC188660.

2. What we collect

You cannot create an account on this site, and we do not ask for your name or email address.

  • Server logs. When you visit, our web server records your IP address, browser type, the pages you request and the time of each request.
  • Time zone. A cookie named tz stores the time zone set on your device. We use it to show the airlines for your region, and the right units and currency. It lasts for one year.
  • Session cookies. A session cookie and a security cookie (XSRF-TOKEN) keep the site working and protect its forms. They expire after a short period of inactivity.
  • Saved bags and units. Your saved bags and your choice of centimetres or inches are stored in your own browser, not on our servers. When you open your saved bags page, the list is sent to our server only to show those bags.
  • Analytics. Only if you allow analytics cookies, Statcounter records your IP address, your browser and device type, the pages you view and the site you came from.

We do not use advertising trackers. Our cookie policy lists every cookie.

3. Why we use it and our legal basis

We use this data to run the site, keep it secure and show you relevant content. Our legal basis is our legitimate interest in operating a working and secure website.

We use analytics to see how the site is used and to improve it. Our legal basis is your consent, which you can withdraw at any time in your cookie preferences.

4. Who receives your data

  • Our hosting provider, which stores the server logs for us.
  • Google (YouTube). Pages that show videos load the preview images from YouTube, so Google receives your IP address. A video itself only loads when you press play. Google may process this data outside the United Kingdom. See Google's privacy policy.
  • Statcounter, only if you allow analytics cookies. Statcounter is based in Ireland. See Statcounter's privacy policy.

We do not sell your data.

5. How long we keep it

Server logs are kept for a limited period and then deleted. The cookie lifetimes are listed in section 2. You can delete the cookies and the data stored in your browser at any time in your browser settings.

6. Links to other websites

This site links to airlines, shops and other websites. Those websites have their own privacy policies, and we are not responsible for them.

7. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of your personal data;
  • ask us to correct or delete it;
  • ask us to restrict how we use it, or object to our use of it.

To use these rights, email us at [email protected]. You also have the right to complain to the ICO at ico.org.uk.

8. Changes to this policy

If we change this policy, we will publish the new version on this page and change the date at the top.