Privacy Statement

Categories of Personal Information We Collect

Use of Personal Information

Sharing of Personal Information

Your Rights and Choices

International Data Transfer & Privacy Shield

Security

Record Retention

Updates to Privacy Statement

Contact Us

Categories of Personal Information We Collect

We receive and store any information you provide to us through the Site or given to us in any other way. This includes information that can identify you, such as your first and last name, telephone number and postal and email addresses (“personal information”).  We may collect the following categories of personal information:

• Name, email address, telephone number, business, and billing addressees
• [OPTIONAL, if collected] Payment information such as payment card number, expiration date, and billing address where required
• Non-specific geolocation data
• Images, videos, and other recordings
• [OPTIONAL, if collected] Social media account ID and other publicly available information
• Communications with us
• Searches you conduct, transactions, and other interactions with you on our online services
• [OPTIONAL, if collected] Other communications that occur through the platform among partners and travelers, and in-group chat and traveler-collaboration tools
• [OPTIONAL, if collected] The searches and transactions conducted through the platform
• Data you give us about other people associated with you or your company
• We also may periodically obtain both personal and non-personal information about you from affiliated entities, business partners and other independent third-party sources.

 [OPTIONAL, if collected] Sensitive Personal Information. We only collect sensitive personal information either with consent or in accordance with local law. This may include information which could reveal your racial or ethnic origin, religious or philosophical beliefs, sexual orientation, trade union or other professional membership, and health or disability information.

Automatically Collected Information. We automatically collect some information about your computer and your online activity when you visit the Site. For example, we may collect your IP address and information about what web browser software you use to access the Site (such as Google Chrome, Firefox, Safari or Internet Explorer) and referring website. Where permitted by local law, we may also automatically collect information you enter into any data fields shown on the Site, including your email address and log-in credentials. We may also collect information about your online activity, such as trips viewed or bookings made. Our goals in collecting this automatic information include helping to customize your user experience and inhibiting fraud. For more information, please see the.

Use of Personal Information

We use information about you for the following general purposes:

• Provide you with the products and services you request;
• Communicate with you in general;
• Respond to your questions and comments;
• Measure interest in and improve our products, services and the Site;
• Customize your experience with this Site;
• Solicit information from you, including through surveys; to resolve disputes, or troubleshoot problems;
• Prevent, investigate or take action on potentially prohibited or illegal activities;
• Enforce the Site’s Terms of Use;
• Activities related to our business; and
• As otherwise described to you at the point of collection.

Email Communications. We want to make it easy for you to take advantage of opportunities on our Site. One way we do this is by sending you email messages that contain information about your apparent interests. We believe these email messages will provide you with useful information about opportunities available to Expedia partners through our Site. Please note that you will have the opportunity to choose not to receive these email messages in any such email we send.

Clickstream data. In certain instances, we may use clickstream data to render an illustration of your usage of our site. Clickstream data is the collection of a sequence of events that represent visitor actions on a website. We may reconstruct your site journey modeled on the timing and location of your actions. This data is primarily used for customer service purposes, to verify the legitimacy of a claim, or to defend ourselves. This data may also be used for other internal purposes such as improving the user experience on our website and identifying website malfunctions.

Sensitive Personal Information. We will only use your sensitive personal information for the purposes for which it was collected.

Lawful bases for processing:

We will collect personal information from you only (i) where the personal information is necessary to perform a contract with you (e.g., manage your booking, process payments, or create an account at your request), (ii) where the processing is in our legitimate interests and not overridden by your rights (as explained below), or (iii) where we have your consent to do so (e.g., sending you marketing communications where consent is required). In some cases, we will have a legal obligation to collect personal information from you such as where it is necessary to use your transaction history to complete our financial and tax obligations under the law.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). 

Certain countries and regions allow us to process personal information on the basis of legitimate interests. If we collect and use your personal information in reliance on our legitimate interests (or the legitimate interests of any third-party), this interest will typically be to operate or improve our platform and communicate with you as necessary to provide our services to you, for security verification purposes when you contact us, to respond to your queries, undertaking marketing, or for the purposes of potentially detecting or preventing illegal activities. 

We may use artificial intelligence, machine learning, and other automated decision-making to enhance your user experience and keep our site safe.

For example, we may use it in relation to:

• the sort order you see on our site,
• destinations, property or activity recommendations,
• flight price insights and alerts,
• the content you upload on our site (e.g., images of your properties) to ensure they meet our quality or formatting requirements, and to identify relevant amenities included in your listing,
• the reviews you share with us to ensure they do not contain identifiable personal information or to assess customer satisfaction,
• the prevention and detection of breach of our terms and conditions or other fraudulent activities to keep our site safe,
• our language and dialects within our virtual agents’ experience.

Automated decisions may be made by putting your personal information into a system and the decision is calculated using automatic processes.

We will not engage in automated decision-making that involves a decision with legal or similarly significant effects solely based on automated processing of personal information, unless you: (1) explicitly consented to the processing, (2) the processing is necessary for entering into a contract, or (3) when otherwise authorized by applicable law.

You may have rights in relation to automated decision making, including the ability to request a manual decision-making process instead or contest a decision based solely on automated processing. If you want to know more about your data protection rights, please see the Your Rights and Choices section below.

SHARING OF PERSONAL INFORMATION

We share your personal information as described below and in this Privacy Statement, and as permitted by applicable law.

• Expedia Group Companies.We share your personal information within the Expedia Group companies, listed at com. Expedia Group companies either autonomously or as joint data controllers, where applicable share, access and use your personal information as described in this Privacy Statement. The Expedia Company responsible for the Expedia site you are using (including to make your booking) will be the main company responsible for your Personal Information, known as the controller. Where you use multiple Expedia sites, then each controller of those sites may act together to give you access to services such as our combined loyalty program, single account access to all our sites (each as they become available where you are) and for other support functions and operations to manage and improve our services across the Expedia Group companies. These are called joint controllers. This will not affect any marketing preferences that you have made and not updated with any particular Expedia Group company.
• Third-party service providers. We share personal informationwith third-party vendors who provide services or functions on our behalf, including business analytics, customer service, and fraud prevention. Third-party vendors have access to and may collect information only as needed to perform their functions and are not permitted to share or use the information for any other purpose. They are also required to follow the same data security practices that we ourselves adhere to.
• Legal rights and obligations. We may disclose your personal information to enforce our policies, as necessary to satisfy our tax or regulatory reporting requirements, or where we are permitted (or believe in good faith that we are required) to do so by applicable law, such as in response to a request by a law enforcement or governmental authority, in connection with actual or proposed litigation, or to protect and defend our property, people and other rights or interests. We may also share your personal information pursuant to a subpoena or other legal request, or as necessary to remit certain taxes in the course of processing payments as required by law or legal process.
• Companies within our corporate family.  To the extent that our corporate affiliates have access to your information, they will follow practices that are at least as restrictive as the practices described in this Privacy Statement.
• Corporate Transactions. We may share your personal information in connection with a corporate transaction, such as a divestiture, merger, consolidation or asset sale, or in the unlikely event of bankruptcy.

Other than as set forth above, you will be notified when personal information about you will be shared with third parties, and you will have an opportunity to choose not to have us share such information.

We also may share aggregate or anonymous information with third parties, including advertisers and investors. This information does not contain any personal information and is used to develop content and services we hope you will find of interest.