Skip to content

Agoda Privacy Policy

Agoda's privacy policy update (June 2026 → September 2026) is mostly clarifications, broken-link fixes, and an EU representative address change, but it also adds 'country of residence' to the account data collected, expands review data collection to guests, adds 'business partners' as a new category that can create user accounts with your data, and clarifies that independent business partners handle your data under their own (not Agoda's) privacy rules.

New data point collected: country of residenceAgoda now explicitly collects your country of residence as part of your basic account…

Agoda now explicitly collects your country of residence as part of your basic account information, in addition to what it already collected.

“name, email address, phone number, date of birth, gender, country of residence, media”
DATA COLLECTION
Guest review data now collected and publishedIf someone you booked travel for (a guest) leaves a review, Agoda can now collect and…

If someone you booked travel for (a guest) leaves a review, Agoda can now collect and publish that guest's name, photos/videos, and country of residence, not just yours.

“If you (or your guest(s)) submit reviews on the Platform, we collect and may publish your personal data”

What you can do — Make sure any guests you book for know their review, name, and country may be published if they leave a review.

DATA COLLECTION
Business partners can now help create your accountAgoda expanded who can be involved in setting up user accounts on your behalf with your…

Agoda expanded who can be involved in setting up user accounts on your behalf with your data — 'business partners' were added alongside affiliated companies and Travel Suppliers. This means a wider set of third parties may receive your data during account creation.

“facilitate the creation of user accounts with our affiliated group companies, business partners or Travel Suppliers as may be authorized by you”
DATA SHARING
Agoda distances itself from independent business partners' data handlingAgoda now more clearly states that when a business partner (e.g., a loyalty program or…

Agoda now more clearly states that when a business partner (e.g., a loyalty program or bank) handles your data as its own separate controller, that partner's own privacy policy governs — not Agoda's protections. You're responsible for checking each partner's terms yourself.

“Where a business partner acts as an independent data controller, that partner will process your personal data in accordance with its own privacy notice and terms and conditions.”

What you can do — Review the privacy notice of any third-party business partner (e.g., loyalty programs, banks) shown alongside your Agoda booking before sharing further data with them.

LIABILITY LIMITS
20260918_rev01COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
11Agoda Privacy Policy
22
3Last Updated in June 2026
3Last Updated in September 2026
± CHANGEDPolicy date updated

The 'Last Updated' date changed from June 2026 to September 2026.

44
55This Privacy Policy describes how Agoda Company Pte. Ltd. (36 Robinson Road, #20-01 City House, Singapore 068877) ("Agoda," "we," "us," "our") collects, uses, and shares information about you when you visit and interact on our website (mobile and desktop) and mobile app (collectively, "Platform") or other means connected to a Platform. Undefined terms in this Privacy Policy have the same definition as in our [Terms of Use.](https://www.agoda.com/info/termsofuse.html)
66
77For California residents, please find additional disclosures [here]().
88
99**Table of Content**
3535**1\. What personal data do we collect about you?**
3636
3737We collect personal data about you when you interact or use our Platform to make a booking, explore or make plans related to an accommodation, flight, activity, such as tours or other travel activities, or other services that we may make available through our Platform or otherwise (such as partners' websites and social media) (each a "Travel Product"). If you plan, save or make a booking for any Travel Product with other guests, or on behalf of someone else, or if you provide us with any of your travel plans, it is your responsibility to ensure that the guests or any other third parties are aware and have acknowledged that Agoda will use their personal data as described in this Privacy Policy.
3838
3939**Information we may collect from you and your interactions with our Platform**
4040
41**Identification and account data** - such as Booking ID, your (and/or each of your guest's') name, email address, phone number, date of birth, gender, media (including images you decide to upload e.g. when leaving a review).
41**Identification and account data** - such as Booking ID, your (and/or each of your guest's') name, email address, phone number, date of birth, gender, country of residence, media (including images you decide to upload e.g. when leaving a review).
+ ADDEDCountry of residence added to account data

Agoda now lists 'country of residence' among the identification and account data it collects about you.

4242
4343**Travel Product Booking Data** - such as payment details, Travel Supplier, name, location, itinerary and depending on the Travel Product booking made, the length of stay, prices, the date of your booking, and other details of your itinerary (including if you or your guest(s) will arrive via air, sea or rail, arrival/departure times, pick up/drop off location), information about additional services purchased with the Travel Suppliers, such as extra baggage, upgrades, preferred tour/activity language, special dietary and accessibility needs, physical characteristics such as height, weight, mobile device models, IMEI numbers, SIM activation dates, other information about any other special preferences or requirements that Travel Suppliers may need to consider in connection with your (and your guests') Travel Product booking (including, child safety information) and travel plans or options and their related details or preferences.
4444
4545**Communications data** - If you need to get in touch with our customer support team or communicate with your Travel Supplier through our Platform, we will collect the information you share with us through the communication channels we make available (e.g. email, phone, in-app or platform messages, chatbots, Agoda's AI powered travel assistant, social media messaging apps).
4646
4747If you contact our customer service team via social media messaging apps such as (e.g. Whatsapp/Meta, Line, Kakao, WeChat etc.), the information you share with us may include your username, phone number, or other profile information. This is controlled by your social media messaging app provider or as authorized by you via your privacy settings there - please refer to their relevant privacy disclosures for information before using their app to contact us.
4848
49**Reviews and survey data** - If you submit reviews on the Platform, we collect and may publish your personal data such as your review, your first name, media (photos or videos), country of residence.
49**Reviews and survey data** - If you (or your guest(s)) submit reviews on the Platform, we collect and may publish your personal data such as your review, your first name, media (photos or videos), country of residence.
± CHANGEDReviews now cover your guests too

Previously only you could trigger review data collection. Now if a guest you booked for submits a review, Agoda collects and may publish their name, media, and country of residence as well.

5050
5151**Membership data** - such as information on loyalty or similar programs in place with your Travel Supplier and your Agoda account password when you create an Agoda account.
5252
5353**Online behavior data** - when you visit our Platform, we may automatically gather certain data such as your IP address, the date and time of access, and information about your device's hardware and software, including the operating system, browser type, software or application version, and language preferences. If you are using a mobile device, we also collect information specific to your device, including its unique identifiers, settings, and characteristics, as well as data related to app crashes and other system activities. We also record the channel you used to make bookings (e.g., the Platform used), as well as the source website or platform that directed you to us. We also collect data on your interactions, such as the pages you view and the links you click, for example through cookies - read more in ["Section 5. Cookies"]() below.
5454
5555**Location data** - You may choose to grant us access to your location data to enable us to provide the services you request, such as searching for Travel Products near you. Additionally, when uploading a picture from your mobile device, it may include location data as part of the tagging process.
5959**Special programs and promotions data** - from time to time, Agoda may offer programs or promotions on our Platform, alone or together with third parties as detailed in ["Section 4. Who do we share your personal data with?"]() below. If you participate in one of these programs or make a reservation through a dedicated landing page, we may collect additional information to facilitate the booking as further required and indicated in the program or promotion.
6060
6161Some of these programs may be initiatives carried out in conjunction with certain government agencies. In such case we may collect, store, process and disclose the personal data we have on you together with such other additional data elements including, but not limited to your national identification document, visa application, nationality, or date of birth as may be necessary to comply with the requirements set by the relevant government agencies for the specific programs. Please do not participate in the respective programs or promotions if you do not want your data to be processed by Agoda and, if applicable, disclosed to the relevant government agencies or their representatives for such purposes.
6262
6363_Sensitive Personal Data:_
6464
65Certain types of personal data, such as religion, health related data or children's data, are considered sensitive and may require additional protection under applicable laws. Although we do not ordinarily collect sensitive personal data as part of our standard Travel Product bookings, there may be a need , from time to time, to collect such information e.g. as contained in a government-issued identification document or medical certificate (e.g. if such information is supportive of a transaction or request that you ask us to perform on your behalf such as a cancellation or amendment of your booking, as part of legal requirements (e.g. accessibility or other special travel preferences) or if you may choose to share such information voluntarily through any contact you may have with Agoda. You may also elect to provide us with other information which may imply or suggest information like religion, health or other information, such as when specifying your dietary needs.
65Depending on applicable laws, certain personal data elements described above, including data collected as part of the usual provision of our Platform and Travel Products, may be classified as sensitive or special category personal data, or otherwise subject to heightened protections. Where this applies, we will process such data in accordance with the additional requirements and restrictions of those laws.
± CHANGEDSensitive data section reworded

The explanation of how Agoda handles sensitive data (health, religion, ID documents, etc.) was rewritten. It now more broadly acknowledges that data collected through normal use of the Platform can itself qualify as sensitive under some laws, and commits to applying extra legal protections in that case.

6666
67Unless requested by our customer service team, we discourage you from providing sensitive personal data (yours or of other guest or third parties) on any of our customer support channels. This extends to any other communication channels we may make available (e.g. email, phone, in-app or platform messages, chatbots, Agoda's AI powered travel assistant, or other trip planning or saving features, social media messaging apps). If you choose to disclose this data, we will treat this as you having given your explicit consent for use of that information as described in this Privacy Policy.
67We do not ordinarily seek to collect other sensitive personal data, such as religion, health related data or children's data, as part of our standard Travel Product bookings. However, we may need to collect such information from time to time, for example where it is contained in a government-issued identification document or medical certificate (e.g. if such information is to support a transaction or request that you ask us to perform on your behalf such as a cancellation or amendment of your booking, as part of legal requirements, accessibility or other special travel preferences). We may also collect such information if you choose to share it voluntarily with Agoda. You may further elect to provide information which may imply or suggest religion, health or other sensitive information, such as when specifying your dietary needs.
6868
69Unless requested by our customer service team, we discourage you from providing sensitive personal data (yours or that of other Guests or third parties) on any of our customer support channels. This extends to any other communication channels we may make available (e.g. email, phone, in-app or platform messages, chatbots, Agoda's AI powered travel assistant, or other trip planning or saving features, social media messaging apps). If you choose to disclose this data, we will treat this as you having given your explicit consent to Agoda's use of that information as described in this Privacy Policy.
70
6971_Children_
7072
7173Our Platform is not directed towards children or people under the legal age of majority where our Platform is accessed. If parents or guardians provide us with information about children, we may collect it to facilitate a Travel Product booking, provide related services or for other exceptional circumstances (such as features addressed to families). This will only be used and collected as provided by the parent or guardian.
7274
7375If you are a parent or guardian and believe we may have collected personal data from a minor other than as contemplated above, please notify us to request that we remove that personal data.
7476
9193**2\. How do we use your personal data?**
9294
9395We use your information for several purposes.
9496
9597_To facilitate a Travel Product booking and related requests:_
9698
97We may use your personal data to provide you with the requested services, such as creating a user account with us, facilitate the creation of user accounts with our affiliated group companies or Travel Suppliers as may be authorized by you, processing and confirming your booking, facilitating payments between you and Travel Suppliers, planning, saving your Travel Bookings or plans, and communicating with you about services requested such as pre-booking or post- booking customer support, to deal with special requests, responding to any questions you may have, helping you to contact the right Travel Supplier or business partner for amendments, cancellations, and rewards.
99We may use your personal data to provide you with the requested services, such as creating a user account with us, facilitate the creation of user accounts with our affiliated group companies, business partners or Travel Suppliers as may be authorized by you, processing and confirming your booking, facilitating payments between you and Travel Suppliers, planning, saving your Travel Bookings or plans, and communicating with you about services requested such as pre-booking or post- booking customer support, to deal with special requests, responding to any questions you may have, helping you to contact the right Travel Supplier or business partner for amendments, cancellations, and rewards.
± CHANGEDBusiness partners added to account-creation sharing

Agoda can now facilitate creating accounts with 'business partners,' not just affiliated group companies and Travel Suppliers, when you authorize it.

98100
99101_To communicate with you:_
100102
101103We may get in touch with you through email, text, phone call, social media channels or through push notifications after you book with us on our Platform to confirm your booking, to remind you of your upcoming bookings and payments or to inform you of important messages or instructions relating to your bookings. To manage Cashback Rewards, we may send you notifications to inform you of your eligibility, reward balance and to remind you of upcoming expiry dates. These are part of your booking process and are not marketing messages. You will continue to receive them, even if you have opted out of our marketing messages. If you are making a booking for another person, you also have the option to insert the guest's email address for the purpose of the guest receiving the booking confirmation.
102104
103105Similarly, opting into receiving Price Alerts will not affect any other choices you have made regarding receiving communications from us. If you elect to receive Price Alerts, you will be able to opt out of receiving the same by clicking on the "turn off price alerts" or a similar message found in the Price Alert sent to you.
111113We may review Conversation Threads as part of monitoring the performance of our AI powered travel assistant, (e.g. for quality assurance purposes) and making improvements.
112114
113115_To send you marketing communication or provide you with tailored advertisements or suggestions:_
114116
115117We use your personal data to send you marketing communications about products, services, news, offers, promotion or surveys that may be relevant to you.
116118
117Subject to your choices, the marketing channels we may use to communicate with you include email, SMS, mobile messaging apps (e.g., WhatsApp, Line, Messenger, KakaoTalk), push notifications when you have installed the Agoda app on your device and interest-based advertising, tailored content and ads, delivered through our Platform and Third-Party Websites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. The marketing channels we use to communicate with you will depend on your choices, such as the communication platforms you use, if you have opted to join an Agoda group on that channel, and the settings you have in place for the channel. Our ability to communicate with you through one of these marketing channels may also depend on the settings you have in place for the channel. Please read the instructions of the specific channel or your mobile device to understand how to change the settings and enable the sharing of such information. For instance, you may change the setting of your mobile device to opt out of receiving push notifications (including Software Development Kit ("SDK") and push token data). Different device operating systems may have varying default settings, so it is important to familiarize yourself with these settings governing e.g. push notifications.
119Subject to your choices, the marketing channels we may use to communicate with you include email, SMS, mobile messaging apps (e.g., WhatsApp, Line, Messenger, KakaoTalk), push notifications when you have installed the Agoda app on your device and interest-based advertising, tailored content and ads, delivered through our Platform and Third-Party Websites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. The marketing channels we use to communicate with you will depend on your choices, such as the communication platforms you use, if you have opted to join an Agoda group on that channel, and the settings you have in place for the channel. Our ability to communicate with you through one of these marketing channels may also depend on the settings you have in place for the channel. Please read the instructions of the specific channel or your mobile device to understand how to change the settings and enable the sharing of such information. For instance, you may change the setting of your mobile device to opt out of receiving push notifications (including Software Development Kit ("SDK") and push token data). Different device operating systems may have varying default settings, so it is important to familiarize yourself with these settings governing e.g. push notifications.You can withdraw your consent from receiving marketing communications from us at any time by using the "Unsubscribe" link, through your device settings, your Agoda account (depending on the channel you are trying to withdraw your consent from) or other withdrawal mechanisms provided for in the relevant marketing communication channels.
118120
119You can withdraw your consent from receiving marketing communications from us at any time by using the "Unsubscribe" link, through your device settings, your Agoda account (depending on the channel you are trying to withdraw your consent from) or other withdrawal mechanisms provided for in the relevant marketing communication channels.
120
121121Where required by law and subject to your choices, we may also show you personalized advertisements on our Platform, including promotions, travel options or suggestions, surveys, or any other updates about our Travel Products, based on what we think you may find interesting.
122122
123123_To maintain, operate and improve our Platform:_
124124
125125We may use your personal data to maintain and improve your user experience and our Platform, to keep it updated and relevant, and to ensure compliance with the Agoda Platform Terms of Use. We may generate statistics about our business for these purposes and also to conduct internal training or to inform our marketing strategy, provide you with tailored content based on your interactions, both here and on other websites, apps, and social platforms.
126126
141141_To respond to legal demands and other compliance matters:_
142142
143143Where necessary or appropriate we may use your personal data to handle/resolve legal claims, respond to regulatory requests/demands or to ensure compliance with obligations conferred or imposed by law.
144144
145145_Algorithms and Artificial Intelligence (AI):_
146146
147As further described in our [Terms of Use](https://agoda.com/info/termsofuse.html), we may deploy tools that utilize algorithms and AI to provide, improve, and develop our services. These tools may make use of your information, including personal data, to help us deliver, personalize, and enhance your experience. This may include, for example, generating personalized content, promotions or recommendations, tailoring the customer experience and support to you, and identifying potentially suspicious transactions to help prevent fraudulent use of our services.
147As further described in our [Terms of Use](https://www.agoda.com/info/termsofuse.html), we may deploy tools that utilize algorithms and AI to provide, improve, and develop our services. These tools may make use of your information, including personal data, to help us deliver, personalize, and enhance your experience. This may include, for example, generating personalized content, promotions or recommendations, tailoring the customer experience and support to you, and identifying potentially suspicious transactions to help prevent fraudulent use of our services.
148148
149149Where we deploy such tools, we do so in accordance with applicable laws and with appropriate safeguards. In certain cases we may ask that you do not input personally identifiable information.
150150
151151**3\. Legal basis we rely on to process your personal data**
152152
153153Where required by law, we rely on the following legal bases to process personal data:
155155**Necessity to Perform Contract with You** - we need to process your personal data in order to provide our Travel Product services to you, answer questions and requests from you, and provide customer support;
156156
157157**Our Legitimate Interests** - we process your personal data: (i) for security and safety; (ii) account reconciliation and debt recovery purposes; (iii) to detect and prevent fraud; (iv) to protect and defend the rights or property of others, or our own rights and interests; (v) to analyze, improve, customize and provide our Travel Product booking and related services to you or communicate with you as necessary to provide you with the requested services; (vi) to maintain, operate and improve the Platform, including to keep it updated and relevant, (vii) to develop our business and to inform our marketing strategy and (viii) to respond to domestic and foreign law enforcement requests, court orders, and legal process;
158158
159159**Compliance with Legal Obligations** - we need to process your personal data to comply with relevant laws and regulatory requirements;
160160
161**Consent** - we rely on your consent for us to collect sensitive personal data and send marketing communications and provide you with tailored content and ads on this and other sites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. You can withdraw your consent provided to us at any time by following the instructions set out in this Privacy Policy (see also ["Section 9. Your rights pertaining to the personal data we collect about you (DSRR)" and "Section 5 Cookies (Your Choices)", both below )](); and
161**Consent** - we rely on your consent for us to collect sensitive personal data and send marketing communications and provide you with tailored content and ads on this and other sites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. You can withdraw your consent provided to us at any time by following the instructions set out in this Privacy Policy (see also ["Section 9. Your rights pertaining to the personal data we collect about you (DSRR)" and "Section 5 Cookies (Your Choices)", both below]()); and
162162
163163**Protect Vital Interest** - we may need to process your personal data in case of emergency involving an individual's life or health.
164164
165165**4\. Who do we share your personal data with?**
166166
167167We may share your personal data with third parties in order to provide our Travel Product services to you, namely Travel Suppliers, service providers, business partners, or our affiliated group companies.
175175_Service Providers:_
176176
177177To support us in providing our services we use third party service providers that may process your personal data for purposes such as payment processing, business analytics, customer service, marketing, distribution of surveys, to facilitate the delivery of online services, insurance, security, IT infrastructure services and/or fraud prevention. Some third party service providers (e.g. payment service providers such as [Wise](https://wise.com/gb/legal/privacy-notice-personal-en) and [Adyen](https://www.adyen.com/privacy-policy)) may process your personal data as data controllers under their own privacy notices, for purposes such as to meet their legal or regulatory obligations, or support and improve the delivery of their services to us.
178178
179179When a chargeback is requested for your reservation, we may need to share relevant booking details with payment providers and financial institutions to process or defend the chargeback. We may also share information with relevant financial institutions if we consider it necessary for fraud prevention, such as the use of stolen cards.
180180
181We may also engage with service providers, such as advertising partners, for the delivery of content and advertising tailored to your interests with which we may share one-way hashed information about you. They may combine the hashed information with other identifiers to facilitate the delivery of business analytics on advertising effectiveness. As this may involve cookies (or similar technologies) please also check " [Section 5. Cookies".]()Our third-party service providers are required to only process information as needed to perform their functions.
181We may also engage with service providers, such as advertising partners, for the delivery of content and advertising tailored to your interests with which we may share one-way hashed information about you. They may combine the hashed information with other identifiers to facilitate the delivery of business analytics on advertising effectiveness. As this may involve cookies (or similar technologies) please also check "[Section 5. Cookies".]() Our third-party service providers are required to only process information as needed to perform their functions.
182182
183183_Business Partners:_
184184
185We may share your personal data with business partners, acting as independent controllers, with whom we may integrate our Travel Products or services, or whose products or services may be offered on our Platform. You can tell when a third-party business partner is involved in a product or service you have requested because their name will appear, either alone or with ours. Examples of business partners include third-party loyalty program providers that you may earn points from when you make certain Travel Product bookings on our Platform, banks, other online travel agencies (OTAs) etc.
185We may share your personal data with business partners, with whom we may integrate our Travel Products or services, or whose products or services may be offered on our Platform. You can tell when a third-party business partner is involved in a product or service you have requested because their name will appear, either alone or with ours. Examples of business partners include third-party loyalty program providers that you may earn points from when you make certain Travel Product bookings on our Platform, banks, other online travel agencies (OTAs) etc. Where a business partner acts as an independent data controller, that partner will process your personal data in accordance with its own privacy notice and terms and conditions. We encourage you to review those notices and terms carefully, as they govern the partner's processing of your personal data and your participation in its products or services.
± CHANGEDBusiness partners clarified as independent controllers

The policy now explicitly states that when a business partner is an independent data controller, that partner handles your data under its own privacy notice and terms, not Agoda's, and tells you to review those separately.

186186
187187_Affiliated Group Companies:_
188188
189189We may share your personal data with our affiliated (group) companies who need to know and have access to this information with our permission to analyze how you use our independent and affiliated platforms, improve and provide new and personalized offers, products and services, and marketing; the exchange of your personal data with Booking Holdings Group companies in order to detect, prevent, and investigate fraudulent transactions and/or activities, other illegal activities, and data breaches; internal (audit/compliance) investigations; where these affiliated (group) companies may offer products or services on our Platform including but not limited to the AgodaWallet offering by BHFS UK; or as otherwise required or permitted by applicable law.
190190
191191_Law Enforcement Authorities & Legal Advisors (Where Required or Permitted by Law):_
209209| Functional Cookies | These cookies are set to provide the service, application, or resource requested. Without these cookies, your request cannot be delivered appropriately, and our website may not function as expected or in a secure way. These trackers are set to manage essential actions, such as requesting website visual elements, page resources, or due user login/logoff. We can also use these cookies to set up essential functionalities to guarantee the security and efficiency of the service requested, like authentication and load balancer requests. | Up to 2 years |
210210| Targeting Cookies | We and our advertising partners set these cookies to provide tailored content and ads, interest-based advertising and perform analytics. They may be used to build a profile of your interests and show you relevant content and ads on this or other sites/apps. They may not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. | Up to 2 years |
211211| Social media Cookies | These Cookies are used when you share information using a social media sharing button or "like" button on our Platform, or when you engage with our content on or through a social site such as Facebook or X (formerly known as Twitter). These Cookies collect information about your social media interaction with social media sites, such as whether or not you have an account with the social media site and whether you are logged into it when you interact with content on their sites. This information may be linked to targeting/advertising activities. | Up to 2 years |
212212
213213_Third Parties:_
214214
215Your use of the Platform may result in some Cookies being stored that are not controlled by us. This may occur when the part of the Platform you are visiting makes use of a third-party analytics or marketing automation/management tool or includes content displayed from a Third-Party Website. You should review the privacy and Cookie policies of these services to find out how these third parties use Cookies and whether your Cookie data will be transferred to a third country. The list of third parties who place Cookies on our Platform is available in our cookie banner (see also more in ["Section 4. Who do we share your personal data with?")]()
215Your use of the Platform may result in some Cookies being stored that are not controlled by us. This may occur when the part of the Platform you are visiting makes use of a third-party analytics or marketing automation/management tool or includes content displayed from a Third-Party Website. You should review the privacy and Cookie policies of these services to find out how these third parties use Cookies and whether your Cookie data will be transferred to a third country. The list of third parties who place Cookies on our Platform is available in our cookie banner (see also more in ["Section 4. Who do we share your personal data with?"]())
216216
217217_Interest Based Advertising:_
218218
219219We may allow certain third parties to place Cookies on our Platform to collect information about your online activities on our Platform (e.g., pages visited on the Platform and searches you performed) across different websites you visited. This information is used to provide advertising tailored to your interests from us (via email, on our Platform, and on other websites) and by third parties on other websites you may visit, also known as interest-based advertising and to analyze the effectiveness of such interest-based advertising. We may also share one-way hashed information with third party partners (e.g., Meta, Google), who may combine hashed information with other identifiers in order to serve custom Agoda advertisements on other websites or mobile apps based on your prior visits to the Platform or to facilitate the delivery of business analytics on advertising effectiveness. Agoda neither supports nor endorses the goals, causes, or statements of any websites or mobile apps that display our advertisements.
220220
221221_Cross-Device Tracking:_
236236
237237To learn more about certain Cookies used for interest-based advertising (including through cross-device tracking) and to exercise certain opt-out choices you may have regarding such n Cookies, please visit the [Digital Advertising Alliance](https://optout.aboutads.info/), [Network Advertising Initiative](http://optout.networkadvertising.org/), or [Digital Advertising Alliance-Canada](http://youradchoices.ca/choices), or for our mobile app, by updating your device settings or downloading the App Choices app.
238238
239239Please also visit the following third parties' websites to exercise certain opt-out choices over Cookies and other use of your data by these parties:
240240
241241- Google Analytics - [https://tools.google.com/dlpage/gaoptout?hl=en](https://tools.google.com/dlpage/gaoptout)
242- Appsflyer (mobile app analytics) - By emailing appsflyer at: [privacy@appsflyer.com](https://agoda.com/info/privacy@appsflyer.com)
242- Appsflyer (mobile app analytics) - By emailing appsflyer at: [privacy@appsflyer.com](mailto:privacy@appsflyer.com)
243243- Baidu - [http://www.baidu.com/duty/safe\_control.html](http://www.baidu.com/duty/safe_control.html)
244244- Apple - [https://support.apple.com/en-us/HT202074](https://support.apple.com/en-us/HT202074)
245245- Facebook - [https://www.facebook.com/ads/settings](https://www.facebook.com/ads/settings)
246246- Google Ads - [https://adssettings.google.com/](https://adssettings.google.com/)
247247- Criteo - [https://www.criteo.com/privacy/](https://www.criteo.com/privacy/)
248248- TikTok - [https://www.tiktok.com/legal/report/privacy](https://www.tiktok.com/legal/report/privacy)
272272_Protection of your personal data by a Third Party_
273273
274274Third party we share your personal data with in order to provide our Travel Product services to you are contractually obligated to keep your data secure and confidential.
275275
276276_Account Security_
277277
278Consistent with this policy and our [Terms of Use](https://agoda.com/info/termsofuse.html), you are responsible for the data and content you submit to us and how you use your Agoda Account, including taking reasonable measures to make your account secure. For added protection, we strongly recommend that you set up two-factor authentication for your Agoda Account. This adds an extra authentication step, to help ensure that anyone who gets hold of your username and password (e.g., through phishing or other similar techniques) won't be able to get into your account. You can set this up via your account settings.
278Consistent with this policy and our [Terms of Use](https://www.agoda.com/info/termsofuse.html), you are responsible for the data and content you submit to us and how you use your Agoda Account, including taking reasonable measures to make your account secure. For added protection, we strongly recommend that you set up two-factor authentication for your Agoda Account. This adds an extra authentication step, to help ensure that anyone who gets hold of your username and password (e.g., through phishing or other similar techniques) won't be able to get into your account. You can set this up via your account settings.
279279
280280**8\. How long do we retain your personal data?**
281281
282282We will retain your personal data, including sensitive personal data, for as long as necessary to facilitate your bookings and related requests, to communicate with you, provide, administer and secure our Platform and services, to exercise our legal rights, to resolve disputes and legal claims, protect our or other's interests, and comply with our legal or regulatory obligations.
283283
284284When we no longer need to keep your personal data, we will remove it from our IT systems and records where feasible, and/or deactivate it and/or take other reasonable steps so that you can no longer be identified from the data. You can always log into your personal Agoda account to delete, edit, or add your personal data including certain payment details. For security reasons, the credit card number cannot be edited (but the card details can be deleted).
285285
286286Please note that we will store the last 4 digits of your credit card securely upon any booking made (this is required to manage any refund requests for that booking).
287287
288288**9\. Your rights pertaining to the personal data we collect about you (DSRR)**
289289
290You can easily correct your personal data related to your account (subject to the cancellation policy attached to the booking) at any time by signing in to your account on the website.
290You can easily correct your personal data related to your account (subject to the cancellation policy attached to the booking) at any time by signing into your account on the website.
291291
292292You can opt out of receiving marketing communications from us at any time by using the "Unsubscribe" link or opt out mechanism in our marketing communication channels or through your Agoda account (depending on the channel you are trying to opt-out from).
293293
294Alternatively, please contact us via our [Customer Support page](https://www.agoda.com/info/contact.html) or at [privacy@agoda.com](https://agoda.com/info/privacy@agoda.com) to exercise any of the rights in bullet points below, to the extent such rights are granted to you under applicable laws and regulations.
294Alternatively, please contact us via our [Customer Support page](https://www.agoda.com/info/contact.html) or at [privacy@agoda.com](mailto:privacy@agoda.com) to exercise any of the rights in bullet points below, to the extent such rights are granted to you under applicable laws and regulations.
± CHANGEDBroken links and email references fixed

Several previously broken privacy/contact links (e.g. the AppsFlyer and privacy@agoda.com references, Terms of Use links, SDAIA site link) were fixed to proper URLs or mailto links.

295295
296296Please note that to protect your privacy and security, we will verify your identity before responding to such request, and your request will be answered within a reasonable timeframe.
297297
298298- **Access:** You may be entitled at any time to obtain information about your personal data that we store, in accordance with applicable law and without any fee. However, in exceptional cases and where so permitted by applicable law, we may ask you to pay reasonable fees before we provide the information. We may not be able to allow you to access certain personal data in some cases e.g. if your personal data is connected with personal data of other persons, or for legal reasons. In such cases, we will provide you with an explanation why you cannot obtain this information.
299299- **Rectification:** You may request that we rectify any of your personal data that is incomplete or incorrect.
300300- **Deletion:** You may request that we delete your personal data. Please note, we may not be able to honour your request for deletion or rectification of your personal data if you have future/ongoing service with us or due to legal requirements, especially those affecting our accounting processes, processing or defence of claims, for fraud detection or prevention purposes, and mandatory data retention, which may prohibit deletion or anonymization.
337337Singapore 068877
338338
339339Please note that to protect your privacy and security, we will verify your identity before responding to such request.
340340
341341We treat all complaints seriously and will endeavor to investigate and respond to you on the concerns raised within a reasonable timeframe. If you have unresolved concerns, you may have the right to refer the matter to an appropriate data protection authority.
342342
343If you reside in the EU, you may also contact our local representative, Agoda International Hungary Kft 1139 Budapest
343If you reside in the EU, you may also contact our local representative, Agoda International Spain, S.L., Gran Via de les Corts Catalanes, 639, Eixample, 08010 Barcelona, Spain, or your local data protection authority with any questions or complaints about our privacy practices.
± CHANGEDEU representative moved from Hungary to Spain

The contact address for Agoda's EU privacy representative changed from an office in Budapest, Hungary to Agoda International Spain, S.L. in Barcelona, Spain.

344344
345Fistyúk utca 4-8., 2. em., or your local data protection authority with any questions or complaints about our privacy practices.
346
347345If you reside in Thailand, you may also contact our local representative, Agoda Services Co., Ltd. (Head Office) 193, One Bangkok Tower 5 27th - 33rd Floor, Wireless Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand or your local data protection authority with any questions or complaints about our privacy practices.
348346
349If you reside in Türkiye, you may also contact our data controller representative, Esin Avukatlık Ortaklığı, resident at Akat Mahallesi, Gül Sokak No:2/1 Beşiktaş / İSTANBUL. Please note that Esin Attorney Partnership only represents us for your requests within the scope of this Privacy Policy and the Law on Protection of Personal Data No. 6698. Therefore, we kindly ask you to reach out to Esin Attorney Partnership only for your questions and complaints regarding the protection of your personal data. If you have any questions and/or concerns about your reservations, cancellations, payments and refunds, you can always reach out to us via Customer Support page.
347If you reside in Türkiye, you may also contact our data controller representative, Esin Avukatlık Ortaklığı, resident at Akat Mahallesi, Gül Sokak No:2/1 Beşiktaş / İSTANBUL. Please note that Esin Attorney Partnership only represents us for your requests within the scope of this Privacy Policy and the Law on Protection of Personal Data No. 6698. Therefore, we kindly ask you to reach out to Esin Attorney Partnership only for your questions and complaints regarding the protection of your personal data. If you have any questions and/or concerns about your reservations, cancellations, payments and refunds, you can always reach out to us via [Customer Support page](https://www.agoda.com/info/contact.html).
350348
351349Domestic Representative in Korea: Pursuant to the Personal Information Protection Act and the Act on the Promotion of the Use of the Information Network and Information Protection, information regarding the domestic agent is as follows:
352350
353351Name and representative: Agoda Payments Korea LLC (Representative: Joon Hwan Lee) Address, phone number, and email address: (Eulji-ro 2-ga, Pine Avenue Tower A) 9F, 100 Eulji-ro, Jung-gu, Seoul 04551, +82 2 3404 0105, [privacy@agoda.com](mailto:privacy@agoda.com).
354352
355353**12\. Country-specific provisions**
371369- request data portability (port your Personal Data);
372370- opt out of certain sales, sharing and targeted advertising;
373371- object to the processing of your Personal Data, including opting out of automated decision-making, including profiling, with significant legal effect;
374372- request the Personal Data about you that we have "sold"(as such term is defined under applicable law), shared, or disclosed for a business purpose within the past 12 months; and
375373- appeal a decision to decline a request.
376374
377Please contact us on our [Customer Support page](https://agoda.com/info/contact.html) or at [privacy@agoda.com](mailto:privacy@agoda.com) to exercise such rights. In some states, you can designate an authorized agent to make a request on your behalf. We will comply with your request as soon as reasonably practicable and as required by applicable law. You may also have the right to lodge a complaint with a supervisory authority.
375Please contact us on our [Customer Support page](https://www.agoda.com/info/contact.html) or at [privacy@agoda.com](mailto:privacy@agoda.com) to exercise such rights. In some states, you can designate an authorized agent to make a request on your behalf. We will comply with your request as soon as reasonably practicable and as required by applicable law. You may also have the right to lodge a complaint with a supervisory authority.
378376
379377To protect your privacy and security, we will verify your identity before responding to such request and may require you to provide us with information matching the identifiers and commercial information already maintained by Agoda about you or additional proof where necessary. If you are making this request on behalf of someone else, we may request the authorized agent to provide us with a copy of a valid power of attorney or evidence of the written authorization.
380378
381379Please note that we may need to retain certain information for recordkeeping purposes, to complete any transactions that you began prior to your request, or for other purposes as required or permitted by applicable law. In any event, should you choose to exercise any of your rights as detailed above, we will not discriminate against you based solely on your request.
382380
383381In certain jurisdictions, if we refuse to act on a request, you may appeal our decision within a reasonable period of time by contacting us as outlined below in the ["Who is responsible for the processing of your personal data and how to contact us?" section]() and specify your wish to appeal. Within 45 days, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. If the appeal is denied, you may submit a complaint to the appropriate regulatory authority for your jurisdiction.
403401**Use of CA Personal Data**. We process your personal data for the business and commercial purposes consistent with the the ["What personal data do we collect about you?" section]() above.
404402
405403**Disclosure of CA Personal Data for Business Purposes.** We disclose the following categories of personal data for business purposes: Identifiers, Commercial Information, Internet or Other Electronic Network Activity, Geolocation Data, Audio Information, and Other Information to web hosting, payment card and payment processing, business analytics, customer service, and business partners.
406404
407405**Selling or Sharing of CA Personal Data.** We may disclose the following categories of personal data for commercial purposes: Identifiers, specifically, preferences and interests on our Platform, collected via Cookies to advertising technology providers and, in limited instances, email addresses in hashed format, to social media companies, marketing, and survey service providers. These are sharing activities that are considered a sale under California Privacy Law.
408406
409**Retention of CA Personal Data.** We retain your personal data consistent with the ["How long do we retain your personal data" section]() .
407**Retention of CA Personal Data.** We retain your personal data consistent with the ["How long do we retain your personal data" section]().
410408
411409**Your Rights under California Privacy Law:**Subject to certain exceptions detailed in California Privacy Law and other applicable laws and regulations, as a California resident you have the right to:
412410
413411- Request to know/access/rectify your CA Personal Data, including the specific pieces and the categories of CA Personal Data we have collected or shared about you and the categories of sources from which we have collected the CA Personal Data;
414412- Request deletion of your CA Personal Data;
415413- Receive information about the CA Personal Data about you that we have "sold" to (as such term is defined under California Privacy Law) or "shared" with third parties within the past 12 months, including the categories of third parties;
454452Under Japanese privacy law, you may have the right to request further information about our personal data processing, for example, requesting further information about our security control measures, the procedures for exercising your privacy rights and our representative details. If you would like to request this information, please reach out to [privacy@agoda.com](mailto:privacy@agoda.com) with "Japan Privacy Request" in the subject line.
455453
456454**Saudi Arabia**
457455
458456**Cross border data transfer:** We may transfer personal data outside of the Kingdom of Saudi Arabia. In such cases, transfers are in reference to applicable data protection laws, including the Personal Data Protection Law in the Kingdom of Saudi Arabia, promulgated by Royal Decree No. M/19 of 9/2/1443H.
459457
460**Complaint to the SDAIA:** If you are not satisfied with how we process your complaint, or if we fail to respond, you can file a complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA). The contact details of the SDAIA can be found on their website (www.sdaia.gov.sa) and on the National Data Governance Platform (dgp.sdaia.gov.sa)
458**Complaint to the SDAIA:** If you are not satisfied with how we process your complaint, or if we fail to respond, you can file a complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA). The contact details of the SDAIA can be found on their website ([www.sdaia.gov.sa](https://www.sdaia.gov.sa/)) and on the National Data Governance Platform (dgp.sdaia.gov.sa)
461459
462460**Russia**
463461
464462If you are a Russian resident, we record, systematize, accumulate, store, clarify (update, change), extract your personal data using databases located on the territory of Russia. For this purpose, we use a third-party service, Yandex Cloud. Its provider (IRON HIVE DOO BEOGRAD (Bulevar Vojvode Bojovica 12 11000 Stari Grad, Belgrade, Serbia)) does not have access to your personal data, but acts as a data controller as it carries our storage of personal data on its facilities.
465463
466464**China**