Privacy Policy

Last updated: July 26, 2026. This policy explains how HotelsLove collects, uses, shares, and protects your personal information when you use our hotel booking platform.

1. Information We Collect

We collect information in the following categories:

Information you provide. When you make a booking, create an account, or contact support, you provide your name, email address, phone number, payment details, and guest information. If you use the contact form, we collect the name, email, topic, and message content you submit.

Automatic information. When you browse HotelsLove, we automatically collect your IP address, browser type, device information, pages visited, search queries, referral source, and timestamps. This data helps us improve the platform and troubleshoot issues.

Cookies and local storage. We use cookies and browser storage to maintain your session, remember preferences, and measure site performance. See Section 5 for specific cookie details.

2. How We Use Your Information

We use your information for the following purposes:

  • Processing hotel bookings and sending confirmation emails
  • Providing customer support and responding to inquiries
  • Displaying hotel prices in your preferred currency
  • Comparing prices across travel sites on your behalf
  • Improving search results, site performance, and user experience
  • Preventing fraud and unauthorized access
  • Sending booking-related communications (confirmations, reminders, updates)

We do not sell your personal data to third parties. We do not use your information for purposes unrelated to the services described above.

3. Data Sharing

We share your information only with the parties necessary to provide our services:

  • Hotel suppliers. Your booking details (name, dates, room selection, guest information) are shared with the hotel and our wholesale supplier network to confirm your reservation.
  • Payment processors. Your payment information is transmitted directly to our PCI-compliant payment partners for processing. We do not store your full card number on our servers. Payment partners include card processors, PayPal, Sezzle (buy-now-pay-later), and NOWPayments (cryptocurrency).
  • Price comparison providers. When you view a hotel detail page, we send the hotel location and your search dates to our price comparison partner to retrieve competitor rates. No personal information is included in these requests.
  • Infrastructure providers. Our hosting, content delivery, and data storage are provided by Cloudflare. Cloudflare processes request data (IP address, headers) as part of delivering the site to your browser.
  • Map services. Hotel location maps are provided by Mapbox. When you load a map, your browser sends a request to Mapbox servers. No personal booking data is shared with Mapbox.

We may also share information if required by law, court order, or governmental authority, or if necessary to protect the rights, property, or safety of HotelsLove, its users, or the public.

4. Data Retention

Booking records are retained for 3 years from the checkout date for customer support, dispute resolution, and legal compliance purposes. Account information is retained as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law.

Automatic browsing data (IP addresses, page visits, search queries) is retained for up to 12 months and then deleted or anonymized.

5. Cookies

HotelsLove uses the following cookies:

  • access_token (httpOnly, secure). Authenticates your session when you are signed in. Expires after 15 minutes and is refreshed automatically.
  • refresh_token (httpOnly, secure). Used to renew your session token. Expires after 7 days.
  • currency. Stores your preferred display currency. Persistent until you change it.
  • language. Stores your preferred language setting. Persistent until you change it.

You can disable cookies in your browser settings. If you disable authentication cookies, you will not be able to sign in or access your booking history. Currency and language preferences will reset to defaults on each visit.

6. Security

We protect your data using industry-standard security measures. All data transmitted between your browser and HotelsLove is encrypted using HTTPS/TLS. Payment processing is handled by PCI-compliant providers. Authentication tokens are stored as httpOnly, secure cookies that cannot be accessed by client-side scripts. We apply Content Security Policy headers and additional security controls to protect against cross-site scripting and injection attacks.

7. Your Rights

You have the following rights regarding your personal data:

  • Access. You can request a copy of the personal data we hold about you.
  • Correction. You can request that we correct inaccurate or incomplete data.
  • Deletion. You can request that we delete your personal data, subject to legal retention requirements.
  • Portability. You can request your data in a machine-readable format.
  • Opt-out. You can opt out of promotional emails at any time using the unsubscribe link in any email we send.

To exercise any of these rights, email hi@hotelslove.com with your request. We will verify your identity and respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know. You can request the categories and specific pieces of personal information we have collected about you in the past 12 months.
  • Right to delete. You can request deletion of your personal information, subject to legal exceptions.
  • Right to opt out of sale. HotelsLove does not sell your personal information. We never have. No opt-out is necessary, but you may contact us to confirm.
  • Non-discrimination. We will not discriminate against you for exercising your privacy rights.

To submit a CCPA request, email hi@hotelslove.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days.

9. Canadian Privacy Rights (PIPEDA)

If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) provides you with the right to access your personal information, challenge its accuracy, and withdraw consent for its collection and use. HotelsLove collects only the personal information necessary to provide our booking services. To make a PIPEDA request, email hi@hotelslove.com.

10. Children's Privacy

HotelsLove is not directed at children under 18. We do not knowingly collect personal information from anyone under 18 years of age. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, contact us at hi@hotelslove.com.

11. International Data Transfers

HotelsLove is hosted on Cloudflare's global network, which means your data may be processed in data centers outside your country of residence. Our hotel suppliers and payment processors also operate internationally. By using HotelsLove, you consent to the transfer of your data to these providers for the purpose of delivering our services.

12. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates the most recent revision. Continued use of HotelsLove after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact

For privacy-related questions or data requests, email hi@hotelslove.com. For general support, visit our Help Center or contact page.