Agoda Privacy Policy
Agoda's privacy policy now explicitly covers communications it sends you outside its website and app, and discloses new tracking technology embedded in those communications (emails, texts, etc.) that can log when you open them, your approximate location, device info, and click behavior. It also adds a new use purpose to measure how you engage with its communications, expands data collection to cover engagement with Agoda's social media pages, and discloses that deleted AI-assistant chat threads are kept for 60 more days before being erased. Most other edits are grammar, typo, and section-title fixes.
Agoda can now track when you open and interact with its emails and messages
Agoda added tracking technology to the communications it sends you (like marketing emails), which can detect when and how often you open a message, your approximate location at the time, your device/browser details, and which links you click. It also added a new purpose to measure how you engage with these communications. This means Agoda's monitoring now extends beyond its website and app into your inbox and messages.
“our communications may contain tracking technologies that track certain information (such as open status, open time and frequency, approximate location, device/browser information, click behaviour and interaction patterns)”
What you can do — Check for unsubscribe or communication-preference settings in your Agoda account if you want to limit marketing messages; note that some tracking may still occur in transactional emails you can't opt out of entirely.
DATA COLLECTION
Engaging with Agoda's social media pages can now collect your data
Agoda expanded the situations where it collects your username, phone number, or profile information from social media to include simply engaging with Agoda's own social media pages, not just messaging its customer service team.
“or engage with our social media pages”
What you can do — Review the privacy settings on your social media accounts if you want to limit what Agoda can see when you interact with its pages.
DATA COLLECTION
Deleted AI chat threads aren't erased right away
Agoda now discloses that when you remove a chat from its AI travel assistant, the chat isn't deleted immediately — it's kept in Agoda's systems for up to 60 more days by default before being erased.
“such chats are automatically deleted from our systems after 60 days by default”
DATA RETENTION
| 1 | 1 | Agoda Privacy Policy |
| 2 | 2 | |
| 3 | Last Updated in September 2026 | |
| 3 | Last Updated in November 2026 | |
| 4 | 4 | |
| 5 | This Privacy Policy describes how Agoda Company Pte. Ltd. (36 Robinson Road, #20-01 City House, Singapore 068877) ("Agoda," "we," "us," "our") collects, uses, and shares information about you when you visit and interact on our website (mobile and desktop) and mobile app (collectively, "Platform") or other means connected to a Platform. Undefined terms in this Privacy Policy have the same definition as in our [Terms of Use.](https://www.agoda.com/info/termsofuse.html) | |
| 5 | This Privacy Policy describes how Agoda Company Pte. Ltd. (36 Robinson Road, #20-01 City House, Singapore 068877) ("Agoda," "we," "us," "our") collects, uses, and shares information about you when you visit and interact on our website (mobile and desktop) and mobile app (collectively, "Platform") or other means connected to a Platform including when we communicate with you outside the Platform. Undefined terms in this Privacy Policy have the same definition as in our [Terms of Use.](https://www.agoda.com/info/termsofuse.html) | |
± CHANGEDPolicy scope expanded to communications sent outside the Platform The policy now explicitly says it covers data collected when Agoda communicates with you outside its website and app, not just when you're actively using them. | ||
| 6 | 6 | |
| 7 | 7 | For California residents, please find additional disclosures [here](). |
| 8 | 8 | |
| 9 | **Table of Content** | |
| 9 | **Table of Contents** | |
| 10 | 10 | |
| 11 | 11 | [1\. What personal data do we collect about you?]() |
| 12 | 12 | |
| 13 | 13 | [2\. How do we use your personal data?]() |
| 14 | 14 | |
| 15 | 15 | [3\. Legal basis we rely on to process your personal data]() |
| 16 | 16 | |
| 17 | 17 | [4\. Who do we share your personal data with?]() |
| 18 | 18 | |
| 19 | [5\. Cookies]() | |
| 19 | [5\. Cookies and other tracking technologies]() | |
± CHANGEDCookies section renamed and broadened Section 5 was renamed from "Cookies" to "Cookies and other tracking technologies" throughout the document to reflect the new tracking methods described above. | ||
| 20 | 20 | |
| 21 | 21 | [6\. Cross border transfer of your data]() |
| 22 | 22 | |
| 23 | 23 | [7\. How do we protect your personal data?]() |
| 24 | 24 | |
| 25 | 25 | [8\. How long do we retain your personal data?]() |
| 35 | 35 | **1\. What personal data do we collect about you?** |
| 36 | 36 | |
| 37 | 37 | We collect personal data about you when you interact or use our Platform to make a booking, explore or make plans related to an accommodation, flight, activity, such as tours or other travel activities, or other services that we may make available through our Platform or otherwise (such as partners' websites and social media) (each a "Travel Product"). If you plan, save or make a booking for any Travel Product with other guests, or on behalf of someone else, or if you provide us with any of your travel plans, it is your responsibility to ensure that the guests or any other third parties are aware and have acknowledged that Agoda will use their personal data as described in this Privacy Policy. |
| 38 | 38 | |
| 39 | 39 | **Information we may collect from you and your interactions with our Platform** |
| 40 | 40 | |
| 41 | **Identification and account data** - such as Booking ID, your (and/or each of your guest's') name, email address, phone number, date of birth, gender, country of residence, media (including images you decide to upload e.g. when leaving a review). | |
| 41 | **Identification and account data** - such as Booking ID, your name (and/or each guest's name), email address, phone number, date of birth, gender, country of residence, media (including images you decide to upload e.g. when leaving a review). | |
| 42 | 42 | |
| 43 | 43 | **Travel Product Booking Data** - such as payment details, Travel Supplier, name, location, itinerary and depending on the Travel Product booking made, the length of stay, prices, the date of your booking, and other details of your itinerary (including if you or your guest(s) will arrive via air, sea or rail, arrival/departure times, pick up/drop off location), information about additional services purchased with the Travel Suppliers, such as extra baggage, upgrades, preferred tour/activity language, special dietary and accessibility needs, physical characteristics such as height, weight, mobile device models, IMEI numbers, SIM activation dates, other information about any other special preferences or requirements that Travel Suppliers may need to consider in connection with your (and your guests') Travel Product booking (including, child safety information) and travel plans or options and their related details or preferences. |
| 44 | 44 | |
| 45 | 45 | **Communications data** - If you need to get in touch with our customer support team or communicate with your Travel Supplier through our Platform, we will collect the information you share with us through the communication channels we make available (e.g. email, phone, in-app or platform messages, chatbots, Agoda's AI powered travel assistant, social media messaging apps). |
| 46 | 46 | |
| 47 | If you contact our customer service team via social media messaging apps such as (e.g. Whatsapp/Meta, Line, Kakao, WeChat etc.), the information you share with us may include your username, phone number, or other profile information. This is controlled by your social media messaging app provider or as authorized by you via your privacy settings there - please refer to their relevant privacy disclosures for information before using their app to contact us. | |
| 47 | If you contact our customer service team via social media messaging apps such as WhatsApp/Meta, Line, Kakao, WeChat, etc. or engage with our social media pages, the information you share with us may include your username, phone number, or other profile information. This is controlled by your social media messaging app provider or as authorized by you via your privacy settings there - please refer to their relevant privacy disclosures for information before using their app to contact us. | |
± CHANGEDEngaging with Agoda's social media pages can now trigger data collection Previously only contacting customer service via social media apps was mentioned as a source of data like your username or phone number. Now simply engaging with Agoda's social media pages is also listed as a way this data is collected. | ||
| 48 | 48 | |
| 49 | 49 | **Reviews and survey data** - If you (or your guest(s)) submit reviews on the Platform, we collect and may publish your personal data such as your review, your first name, media (photos or videos), country of residence. |
| 50 | 50 | |
| 51 | 51 | **Membership data** - such as information on loyalty or similar programs in place with your Travel Supplier and your Agoda account password when you create an Agoda account. |
| 52 | 52 | |
| 53 | **Online behavior data** - when you visit our Platform, we may automatically gather certain data such as your IP address, the date and time of access, and information about your device's hardware and software, including the operating system, browser type, software or application version, and language preferences. If you are using a mobile device, we also collect information specific to your device, including its unique identifiers, settings, and characteristics, as well as data related to app crashes and other system activities. We also record the channel you used to make bookings (e.g., the Platform used), as well as the source website or platform that directed you to us. We also collect data on your interactions, such as the pages you view and the links you click, for example through cookies - read more in ["Section 5. Cookies"]() below. | |
| 53 | **Online behavior data** - when you visit our Platform or when we communicate with you outside of the Platform, we may automatically gather certain data such as your IP address, the date and time of access, and information about your device's hardware and software, including the operating system, browser type, software or application version, and language preferences. If you are using a mobile device, we also collect information specific to your device, including its unique identifiers, settings, and characteristics, as well as data related to app crashes and other system activities. We also record the channel you used to make bookings (e.g., the Platform used), as well as the source website or platform that directed you to us. We also collect data on your interactions, such as the pages you view, the links you click and your interactions with the communications we send to you, for example through cookies or other tracking technologies - read more in ["Section 5. Cookies and other tracking technologies"]() below. | |
± CHANGEDOnline behavior tracking now explicitly includes your interactions with Agoda's messages The description of automatically collected "online behavior data" was updated to say Agoda also tracks your interactions with the communications it sends you, not just your activity on the Platform. | ||
| 54 | 54 | |
| 55 | 55 | **Location data** - You may choose to grant us access to your location data to enable us to provide the services you request, such as searching for Travel Products near you. Additionally, when uploading a picture from your mobile device, it may include location data as part of the tagging process. |
| 56 | 56 | |
| 57 | 57 | **Government issued identification data** - such as your (or your guests') passport or national ID number, driver's license, country of issue, expiry date, nationality, visas. In some countries, we are legally required to collect and process Tax IDs, such as Brazilian CPF numbers or Indian PAN numbers, if you pay in certain currencies on our Platform. This information will be shared with the national bank of the respective countries. |
| 58 | 58 | |
| 59 | 59 | **Special programs and promotions data** - from time to time, Agoda may offer programs or promotions on our Platform, alone or together with third parties as detailed in ["Section 4. Who do we share your personal data with?"]() below. If you participate in one of these programs or make a reservation through a dedicated landing page, we may collect additional information to facilitate the booking as further required and indicated in the program or promotion. |
| 83 | 83 | If you access or sign in to our Platform through social media service providers, such as Meta (Facebook, WhatsApp), Google, Kakao, etc. we may receive information about you such as your username and other information you may make available to us via such services. |
| 84 | 84 | |
| 85 | 85 | We also integrate with payment services providers to facilitate payments between you and Travel Suppliers. They may share payment information so we can facilitate your Travel Product booking. If you are an eligible user of our Platform and have signed up for an AgodaWallet, we may receive limited information from Booking Holdings Financial Services UK Limited ("BHFS UK") relating to your use of the AgodaWallet. |
| 86 | 86 | |
| 87 | 87 | We may also receive information such as additional cookie data, which our service providers, such as advertising partners, may make available to us. |
| 88 | 88 | |
| 89 | In some cases, we may provide links to other websites or mobile apps that are not owned or operated by us ("Third-Party Websites"). When you click on these Third-Party Websites, such third parties may share certain personal data related to you or your interactions on these Third-Party Websites with us in accordance with their privacy policies. You will be subject to that Third-Party Websites' privacy and security practices, which may differ from ours. | |
| 89 | In some cases, we may provide links to other websites or mobile apps that are not owned or operated by us ("Third-Party Websites"). When you click on these Third-Party Websites, such third parties may share certain personal data related to you or your interactions on these Third-Party Websites with us in accordance with their privacy policies. You will be subject to those Third-Party Websites' privacy and security practices, which may differ from ours. | |
| 90 | 90 | |
| 91 | 91 | We encourage you to carefully review the privacy and cookie policies of any Third-Party Websites you use to understand how your personal data is managed and shared by them, and what controls you might have over your data with such third parties. We have no control over, and are not responsible for, the content, services, or privacy and security practices of any Third-Party Websites. |
| 92 | 92 | |
| 93 | 93 | **2\. How do we use your personal data?** |
| 94 | 94 | |
| 95 | 95 | We use your information for several purposes. |
| 105 | 105 | Similarly, opting into receiving Price Alerts will not affect any other choices you have made regarding receiving communications from us. If you elect to receive Price Alerts, you will be able to opt out of receiving the same by clicking on the "turn off price alerts" or a similar message found in the Price Alert sent to you. |
| 106 | 106 | |
| 107 | 107 | If you have not finalized a booking online, we may send you up to two reminders to continue with your booking. We believe that this additional service is useful to you because it allows you to carry on with a booking without having to search for the booking again or fill in all the booking details from scratch. Booking information used for such reminders will be deleted from our systems in accordance with our data retention policy detailed below. |
| 108 | 108 | |
| 109 | 109 | _To enable your use of Agoda's AI powered travel assistant_ |
| 110 | 110 | |
| 111 | As further described in [Agoda's AI powered travel assistant Terms of Use](https://www.agoda.com/info/ai-assistant-terms-of-use.html), our AI powered travel assistant can be used to explore travel options and plan your travel including identifying available Travel Products available from Travel Suppliers on the Platform and make suggestions for your itinerary. It allows you to start a separate chat for each trip you wish to plan ("**Conversation Thread**"). If you use Agoda's AI powered travel assistant, it will collect data you input or link through a Conversation Thread and retain and build upon that data throughout the Conversation Thread. Agoda's AI powered travel assistant uses third party hosted products including large language model tools to process this data together with other data about your past booking details to build a profile about your travel preferences that is applied in responding to you in that Conversation Thread. Do not input any sensitive data, such as credit card details, and we strongly urge you to limit the data you input to what is strictly necessary. | |
| 111 | As further described in [Agoda's AI powered travel assistant Terms of Use](https://www.agoda.com/info/ai-assistant-terms-of-use.html), our AI powered travel assistant can be used to explore travel options and plan your travel including identifying available Travel Products from Travel Suppliers on the Platform and making suggestions for your itinerary. It allows you to start a separate chat for each trip you wish to plan ("**Conversation Thread**"). If you use Agoda's AI powered travel assistant, it will collect data you input or link through a Conversation Thread and retain and build upon that data throughout the Conversation Thread. Agoda's AI powered travel assistant uses third party hosted products including large language model tools to process this data together with other data about your past booking details to build a profile about your travel preferences that is applied in responding to you in that Conversation Thread. Do not input any sensitive data, such as credit card details, and we strongly urge you to limit the data you input to what is strictly necessary. | |
| 112 | 112 | |
| 113 | We may review Conversation Threads as part of monitoring the performance of our AI powered travel assistant, (e.g. for quality assurance purposes) and making improvements. | |
| 113 | We may review Conversation Threads as part of monitoring the performance of our AI powered travel assistant (e.g., for quality assurance purposes) and making improvements. If you elect to remove a chat from your chat window, such chats are automatically deleted from our systems after 60 days by default. | |
+ ADDEDAI assistant: deleted chats are kept for 60 more days by default Agoda added a disclosure that if you remove a chat from the AI travel assistant, it isn't erased immediately — it's automatically deleted from Agoda's systems only after 60 days by default. | ||
| 114 | 114 | |
| 115 | 115 | _To send you marketing communication or provide you with tailored advertisements or suggestions:_ |
| 116 | 116 | |
| 117 | 117 | We use your personal data to send you marketing communications about products, services, news, offers, promotion or surveys that may be relevant to you. |
| 118 | 118 | |
| 119 | Subject to your choices, the marketing channels we may use to communicate with you include email, SMS, mobile messaging apps (e.g., WhatsApp, Line, Messenger, KakaoTalk), push notifications when you have installed the Agoda app on your device and interest-based advertising, tailored content and ads, delivered through our Platform and Third-Party Websites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. The marketing channels we use to communicate with you will depend on your choices, such as the communication platforms you use, if you have opted to join an Agoda group on that channel, and the settings you have in place for the channel. Our ability to communicate with you through one of these marketing channels may also depend on the settings you have in place for the channel. Please read the instructions of the specific channel or your mobile device to understand how to change the settings and enable the sharing of such information. For instance, you may change the setting of your mobile device to opt out of receiving push notifications (including Software Development Kit ("SDK") and push token data). Different device operating systems may have varying default settings, so it is important to familiarize yourself with these settings governing e.g. push notifications.You can withdraw your consent from receiving marketing communications from us at any time by using the "Unsubscribe" link, through your device settings, your Agoda account (depending on the channel you are trying to withdraw your consent from) or other withdrawal mechanisms provided for in the relevant marketing communication channels. | |
| 119 | Subject to your choices, the marketing channels we may use to communicate with you include email, SMS, mobile messaging apps (e.g., WhatsApp, Line, Messenger, KakaoTalk), push notifications when you have installed the Agoda app on your device and interest-based advertising, tailored content and ads, delivered through our Platform and Third-Party Websites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. The marketing channels we use to communicate with you will depend on your choices, such as the communication platforms you use, if you have opted to join an Agoda group on that channel, and the settings you have in place for the channel. Our ability to communicate with you through one of these marketing channels may also depend on the settings you have in place for the channel. Please read the instructions of the specific channel or your mobile device to understand how to change the settings and enable the sharing of such information. For instance, you may change the setting of your mobile device to opt out of receiving push notifications (including Software Development Kit ("SDK") and push token data). Different device operating systems may have varying default settings, so it is important to familiarize yourself with these settings governing e.g. push notifications. You can withdraw your consent from receiving marketing communications from us at any time by using the "Unsubscribe" link, through your device settings, your Agoda account (depending on the channel you are trying to withdraw your consent from) or other withdrawal mechanisms provided for in the relevant marketing communication channels. | |
| 120 | 120 | |
| 121 | 121 | Where required by law and subject to your choices, we may also show you personalized advertisements on our Platform, including promotions, travel options or suggestions, surveys, or any other updates about our Travel Products, based on what we think you may find interesting. |
| 122 | 122 | |
| 123 | 123 | _To maintain, operate and improve our Platform:_ |
| 124 | 124 | |
| 125 | We may use your personal data to maintain and improve your user experience and our Platform, to keep it updated and relevant, and to ensure compliance with the Agoda Platform Terms of Use. We may generate statistics about our business for these purposes and also to conduct internal training or to inform our marketing strategy, provide you with tailored content based on your interactions, both here and on other websites, apps, and social platforms. | |
| 125 | We may use your personal data to maintain and improve your user experience and our Platform, to keep it updated and relevant, to measure the performance of our communications to you, and to ensure compliance with the Agoda Platform Terms of Use. We may generate statistics about our business for these purposes and also to conduct internal training or to inform our marketing strategy, provide you with tailored content based on your interactions, both here and on other websites, apps, and social platforms. | |
+ ADDEDNew stated purpose: measuring how you engage with Agoda's communications Agoda added a new reason for using your data: to measure the performance of the messages and communications it sends you. | ||
| 126 | 126 | |
| 127 | 127 | _To provide you with communication channels:_ |
| 128 | 128 | |
| 129 | 129 | We may offer you and certain Travel Suppliers various channels to communicate with each other about your booking(s) via our Platform. We may access communications on any channels we make available and may use automated systems to review, scan, and analyze communications for security purposes; fraud prevention; compliance with legal and regulatory requirements; investigations of potential misconduct; product development and improvement; research; customer engagement, including to provide you with information and offers that we believe may be of interest to you; and customer or technical support. |
| 130 | 130 | |
| 131 | 131 | We reserve the right to block the delivery of or review communications on the channel that we, in our sole discretion, believe may contain malicious content, spam, or may pose a risk to you or to Travel Suppliers, us, or others. All communications sent or received using a Platform supplied communication channel will be received and stored by us. |
| 155 | 155 | **Necessity to Perform Contract with You** - we need to process your personal data in order to provide our Travel Product services to you, answer questions and requests from you, and provide customer support; |
| 156 | 156 | |
| 157 | 157 | **Our Legitimate Interests** - we process your personal data: (i) for security and safety; (ii) account reconciliation and debt recovery purposes; (iii) to detect and prevent fraud; (iv) to protect and defend the rights or property of others, or our own rights and interests; (v) to analyze, improve, customize and provide our Travel Product booking and related services to you or communicate with you as necessary to provide you with the requested services; (vi) to maintain, operate and improve the Platform, including to keep it updated and relevant, (vii) to develop our business and to inform our marketing strategy and (viii) to respond to domestic and foreign law enforcement requests, court orders, and legal process; |
| 158 | 158 | |
| 159 | 159 | **Compliance with Legal Obligations** - we need to process your personal data to comply with relevant laws and regulatory requirements; |
| 160 | 160 | |
| 161 | **Consent** - we rely on your consent for us to collect sensitive personal data and send marketing communications and provide you with tailored content and ads on this and other sites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. You can withdraw your consent provided to us at any time by following the instructions set out in this Privacy Policy (see also ["Section 9. Your rights pertaining to the personal data we collect about you (DSRR)" and "Section 5 Cookies (Your Choices)", both below]()); and | |
| 161 | **Consent** - we rely on your consent for us to collect sensitive personal data and send marketing communications and provide you with tailored content and ads on this and other sites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. You can withdraw your consent provided to us at any time by following the instructions set out in this Privacy Policy (see also ["Section 9. Your rights pertaining to the personal data we collect about you (DSRR)" and "Section 5 Cookies and other tracking technologies (Your Choices)", both below]()); and | |
| 162 | 162 | |
| 163 | **Protect Vital Interest** - we may need to process your personal data in case of emergency involving an individual's life or health. | |
| 163 | **Protect Vital Interests** - we may need to process your personal data in case of emergency involving an individual's life or health. | |
| 164 | 164 | |
| 165 | 165 | **4\. Who do we share your personal data with?** |
| 166 | 166 | |
| 167 | 167 | We may share your personal data with third parties in order to provide our Travel Product services to you, namely Travel Suppliers, service providers, business partners, or our affiliated group companies. |
| 168 | 168 | |
| 169 | 169 | _Travel Suppliers:_ |
| 175 | 175 | _Service Providers:_ |
| 176 | 176 | |
| 177 | 177 | To support us in providing our services we use third party service providers that may process your personal data for purposes such as payment processing, business analytics, customer service, marketing, distribution of surveys, to facilitate the delivery of online services, insurance, security, IT infrastructure services and/or fraud prevention. Some third party service providers (e.g. payment service providers such as [Wise](https://wise.com/gb/legal/privacy-notice-personal-en) and [Adyen](https://www.adyen.com/privacy-policy)) may process your personal data as data controllers under their own privacy notices, for purposes such as to meet their legal or regulatory obligations, or support and improve the delivery of their services to us. |
| 178 | 178 | |
| 179 | 179 | When a chargeback is requested for your reservation, we may need to share relevant booking details with payment providers and financial institutions to process or defend the chargeback. We may also share information with relevant financial institutions if we consider it necessary for fraud prevention, such as the use of stolen cards. |
| 180 | 180 | |
| 181 | We may also engage with service providers, such as advertising partners, for the delivery of content and advertising tailored to your interests with which we may share one-way hashed information about you. They may combine the hashed information with other identifiers to facilitate the delivery of business analytics on advertising effectiveness. As this may involve cookies (or similar technologies) please also check "[Section 5. Cookies".]() Our third-party service providers are required to only process information as needed to perform their functions. | |
| 181 | We may also engage with service providers, such as advertising partners, for the delivery of content and advertising tailored to your interests with which we may share one-way hashed information about you. They may combine the hashed information with other identifiers to facilitate the delivery of business analytics on advertising effectiveness. As this may involve cookies (or similar technologies) please also check "[Section 5. Cookies and other tracking technologies".]() Our third-party service providers are required to only process information as needed to perform their functions. | |
| 182 | 182 | |
| 183 | 183 | _Business Partners:_ |
| 184 | 184 | |
| 185 | 185 | We may share your personal data with business partners, with whom we may integrate our Travel Products or services, or whose products or services may be offered on our Platform. You can tell when a third-party business partner is involved in a product or service you have requested because their name will appear, either alone or with ours. Examples of business partners include third-party loyalty program providers that you may earn points from when you make certain Travel Product bookings on our Platform, banks, other online travel agencies (OTAs) etc. Where a business partner acts as an independent data controller, that partner will process your personal data in accordance with its own privacy notice and terms and conditions. We encourage you to review those notices and terms carefully, as they govern the partner's processing of your personal data and your participation in its products or services. |
| 186 | 186 | |
| 187 | 187 | _Affiliated Group Companies:_ |
| 193 | 193 | We may share your personal data to protect ourselves against liability or, to respond to subpoenas, judicial processes, legitimate requests, warrants or equivalent by law enforcement officials or authorities, to investigate fraud or other wrongdoing or as otherwise required or necessary in order to comply with applicable law, protect our legitimate interests or those of the purchasers in connection with any sale, assignment, or other transfer of all or a part of our business or company. We may also, in compliance with applicable law, disclose your personal data to enforce or apply the terms and conditions applicable to our services or to protect the rights, property, or safety of Agoda, our users, or others. |
| 194 | 194 | |
| 195 | 195 | _Any other third party in case of Business Reorganization:_ |
| 196 | 196 | |
| 197 | 197 | We may share your personal data as part of any sale, assignment or other transfer of our business, or transition of service to another provider. |
| 198 | 198 | |
| 199 | **5.Cookies** | |
| 199 | **5\. Cookies and other tracking technologies** | |
| 200 | 200 | |
| 201 | 201 | Our Platform may use and allow third parties to place cookies (session and persistent), pixels/tags, software development kits (usually referred to as SDKs), application program interfaces ("APIs"), and other tracking technologies (collectively, "Cookies") on our Platform that may collect and store certain information about you. |
| 202 | 202 | |
| 203 | We also use other types of Cookies. For example, our communications may contain tracking technologies that track certain information (such as open status, open time and frequency, approximate location, device/browser information, click behaviour and interaction patterns). We use this information to record how you interact with them. | |
+ ADDEDNew tracking technology added to Agoda's emails and messages Agoda added a new disclosure that its communications (like marketing emails) contain tracking tech that records whether and when you open them, how often, your approximate location, your device/browser, and which links you click. | ||
| 204 | ||
| 203 | 205 | _What Cookies do we use?_ |
| 204 | 206 | |
| 205 | 207 | You can find more information about the types of Cookies we use and the purposes for which we use them in the table below: |
| 206 | 208 | |
| 207 | 209 | | Type of cookie | Purpose | Duration until expiry | |
| 208 | 210 | | --- | --- | --- | |
| 231 | 233 | _Your Choices:_ |
| 232 | 234 | |
| 233 | 235 | Cookie management options, including choices about types of cookies used, are provided in accordance with the laws and regulations of your region. To review or adjust your Cookie preferences, please follow the instructions shown in the cookie banner, your account settings or your browser. |
| 234 | 236 | |
| 235 | 237 | Please review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies. If you disable or delete certain Cookies in your Internet browser settings, you might not be able to access or use important functions or features of this Platform, and you may be required to re-enter your log-in details. |
| 236 | 238 | |
| 237 | To learn more about certain Cookies used for interest-based advertising (including through cross-device tracking) and to exercise certain opt-out choices you may have regarding such n Cookies, please visit the [Digital Advertising Alliance](https://optout.aboutads.info/), [Network Advertising Initiative](http://optout.networkadvertising.org/), or [Digital Advertising Alliance-Canada](http://youradchoices.ca/choices), or for our mobile app, by updating your device settings or downloading the App Choices app. | |
| 239 | To learn more about certain Cookies used for interest-based advertising (including through cross-device tracking) and to exercise certain opt-out choices you may have regarding such Cookies, please visit the [Digital Advertising Alliance](https://optout.aboutads.info/), [Network Advertising Initiative](http://optout.networkadvertising.org/), or [Digital Advertising Alliance-Canada](http://youradchoices.ca/choices), or for our mobile app, by updating your device settings or downloading the App Choices app. | |
| 238 | 240 | |
| 239 | 241 | Please also visit the following third parties' websites to exercise certain opt-out choices over Cookies and other use of your data by these parties: |
| 240 | 242 | |
| 241 | 243 | - Google Analytics - [https://tools.google.com/dlpage/gaoptout?hl=en](https://tools.google.com/dlpage/gaoptout) |
| 242 | 244 | - Appsflyer (mobile app analytics) - By emailing appsflyer at: [privacy@appsflyer.com](mailto:privacy@appsflyer.com) |
| 243 | 245 | - Baidu - [http://www.baidu.com/duty/safe\_control.html](http://www.baidu.com/duty/safe_control.html) |
| 268 | 270 | _Payment Data Security_ |
| 269 | 271 | |
| 270 | 272 | We adhere to industry best practices and standards (PCI-DSS) to protect your payment data such as encryption, stringent access control, etc. |
| 271 | 273 | |
| 272 | 274 | _Protection of your personal data by a Third Party_ |
| 273 | 275 | |
| 274 | Third party we share your personal data with in order to provide our Travel Product services to you are contractually obligated to keep your data secure and confidential. | |
| 276 | Third parties we share your personal data with in order to provide our Travel Product services to you are contractually obligated to keep your data secure and confidential. | |
| 275 | 277 | |
| 276 | 278 | _Account Security_ |
| 277 | 279 | |
| 278 | 280 | Consistent with this policy and our [Terms of Use](https://www.agoda.com/info/termsofuse.html), you are responsible for the data and content you submit to us and how you use your Agoda Account, including taking reasonable measures to make your account secure. For added protection, we strongly recommend that you set up two-factor authentication for your Agoda Account. This adds an extra authentication step, to help ensure that anyone who gets hold of your username and password (e.g., through phishing or other similar techniques) won't be able to get into your account. You can set this up via your account settings. |
| 279 | 281 | |
| 280 | 282 | **8\. How long do we retain your personal data?** |
| 281 | 283 | |
| 282 | We will retain your personal data, including sensitive personal data, for as long as necessary to facilitate your bookings and related requests, to communicate with you, provide, administer and secure our Platform and services, to exercise our legal rights, to resolve disputes and legal claims, protect our or other's interests, and comply with our legal or regulatory obligations. | |
| 284 | We will retain your personal data, including sensitive personal data, for as long as necessary to facilitate your bookings and related requests, to communicate with you, provide, administer and secure our Platform and services, to exercise our legal rights, to resolve disputes and legal claims, protect our own or others' interests, and comply with our legal or regulatory obligations. | |
| 283 | 285 | |
| 284 | 286 | When we no longer need to keep your personal data, we will remove it from our IT systems and records where feasible, and/or deactivate it and/or take other reasonable steps so that you can no longer be identified from the data. You can always log into your personal Agoda account to delete, edit, or add your personal data including certain payment details. For security reasons, the credit card number cannot be edited (but the card details can be deleted). |
| 285 | 287 | |
| 286 | 288 | Please note that we will store the last 4 digits of your credit card securely upon any booking made (this is required to manage any refund requests for that booking). |
| 287 | 289 | |
| 288 | 290 | **9\. Your rights pertaining to the personal data we collect about you (DSRR)** |
| 295 | 297 | |
| 296 | 298 | Please note that to protect your privacy and security, we will verify your identity before responding to such request, and your request will be answered within a reasonable timeframe. |
| 297 | 299 | |
| 298 | 300 | - **Access:** You may be entitled at any time to obtain information about your personal data that we store, in accordance with applicable law and without any fee. However, in exceptional cases and where so permitted by applicable law, we may ask you to pay reasonable fees before we provide the information. We may not be able to allow you to access certain personal data in some cases e.g. if your personal data is connected with personal data of other persons, or for legal reasons. In such cases, we will provide you with an explanation why you cannot obtain this information. |
| 299 | 301 | - **Rectification:** You may request that we rectify any of your personal data that is incomplete or incorrect. |
| 300 | 302 | - **Deletion:** You may request that we delete your personal data. Please note, we may not be able to honour your request for deletion or rectification of your personal data if you have future/ongoing service with us or due to legal requirements, especially those affecting our accounting processes, processing or defence of claims, for fraud detection or prevention purposes, and mandatory data retention, which may prohibit deletion or anonymization. |
| 301 | - **Restrictions of Processing:** : You may ask us to cease processing of your personal data, for example if you have objected to the processing and the existence of legitimate grounds are still under consideration. | |
| 303 | - **Restrictions of Processing:** You may ask us to cease processing of your personal data, for example if you have objected to the processing and the existence of legitimate grounds is still under consideration. | |
| 302 | 304 | - **Objection:** You may object, at any time, to your personal data being processed for direct marketing purposes. You may also opt out of receiving marketing communications from us at any time by using the "Unsubscribe" link or opt-out mechanism in our marketing communication channels or through your Agoda account (depending on the channel you are trying to opt-out from). |
| 303 | 305 | - **Right to Revoke Consent:** Where processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of our processing based on such consent before it was withdrawn. |
| 304 | 306 | - **Data Portability:** If under law there is an applicable data portability requirement, you may request us to send you your personal data which we store, in a commonly used and machine-readable format (which shall be decided at our sole discretion). |
| 305 | 307 | - **Right to opt-out of profiling/ automated decision making:** You may have the right to opt out of processing of your personal data for purposes of profiling or automated decision making that produce legal or significant effects on your freedom. |
| 306 | 308 | |
| 307 | 309 | We may not be able to allow you to access certain personal data in some cases e.g. if your personal data is connected with personal data of other persons, or for legal reasons. In such cases, we will provide you with an explanation why you cannot obtain this information. We may also deny your request for deletion or rectification of your personal data if you have future/ongoing services with us or due to legal requirements, especially those affecting our accounting processes, processing or the defence of claims, for fraud detection or prevention purposes, and mandatory data retention, which may prohibit deletion or anonymization. This includes retaining your personal data for a period of 120 days after your last checkout to handle any post-booking matters such as in the case of complaints or claims, for fraud prevention, trade sanction reasons, legal claims or requests. |
| 395 | 397 | - **Other Information:** information associated with a tour or activity booking, including your passport details, date of birth, height and weight, pick-up location, your preferred tour/activity language, and information about any special requirements that we need to consider in connection with your participation in the respective tour/activity. |
| 396 | 398 | |
| 397 | 399 | **CA Sensitive Personal Data.** Certain CA Personal Data that we collect about you may be considered sensitive personal data within the meaning of California Privacy Law, including: passport details (for transactional purposes), payment card information (for billing and transactional purposes in connection with Travel Products or other ancillary services purchased), and precise geolocation information (for providing services). Agoda only uses and discloses sensitive personal data as necessary in connection with the performance of services and the provision of goods, compliance with federal, state, or local laws, and as otherwise permitted by California Privacy Law. |
| 398 | 400 | |
| 399 | 401 | **Sources of CA Personal Data.** Consistent with the ["What personal data do we collect about you?" section]() of this privacy policy, we may collect personal data directly from you, as well as from Travel Suppliers, Accommodation Partners, business partners (including social media), and our affiliated group companies. |
| 400 | 402 | |
| 401 | **Use of CA Personal Data**. We process your personal data for the business and commercial purposes consistent with the the ["What personal data do we collect about you?" section]() above. | |
| 403 | **Use of CA Personal Data**. We process your personal data for the business and commercial purposes consistent with the ["What personal data do we collect about you?" section]() above. | |
| 402 | 404 | |
| 403 | 405 | **Disclosure of CA Personal Data for Business Purposes.** We disclose the following categories of personal data for business purposes: Identifiers, Commercial Information, Internet or Other Electronic Network Activity, Geolocation Data, Audio Information, and Other Information to web hosting, payment card and payment processing, business analytics, customer service, and business partners. |
| 404 | 406 | |
| 405 | 407 | **Selling or Sharing of CA Personal Data.** We may disclose the following categories of personal data for commercial purposes: Identifiers, specifically, preferences and interests on our Platform, collected via Cookies to advertising technology providers and, in limited instances, email addresses in hashed format, to social media companies, marketing, and survey service providers. These are sharing activities that are considered a sale under California Privacy Law. |
| 406 | 408 | |
| 407 | 409 | **Retention of CA Personal Data.** We retain your personal data consistent with the ["How long do we retain your personal data" section](). |
| 416 | 418 | - Not be discriminated against for exercising any of the above rights. |
| 417 | 419 | |
| 418 | 420 | **Authorized Agent.** You can designate an authorized agent to make a request under California law on your behalf in certain circumstances. If you use an authorized agent for this purpose, we may ask you to verify your identity or that you provided the authorized agent signed permission to submit a request on your behalf. If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4000 to 4465, it may not be necessary to perform these steps, and we will respond to any request from such authorized agent in accordance with California law. |
| 419 | 421 | |
| 420 | 422 | **Notice of Financial Incentive.** To the extent Agoda engages in financial incentives in connection with sweepstakes, loyalty programs, competitions, or other activities, we will provide information describing the material terms of the program and will obtain opt-in consent from users before they participate. Users can opt-out from a program at any time by following the instructions provided in such terms. |
| 421 | 423 | |
| 422 | **Right to Appeal Your Rights Requests.** You have the right to appeal our refusal to take action on your request. To exercise this right, you may submit your appeal in writing by contacting [privacy@agoda.com.](mailto:privacy@agoda.com) If your request to exercise your data subject rights is rejected, you will receive a notification with the details of reason for rejection and instructions about how to make an appeal. We will respond to you within 45 days of your appeal submission. If your appeal is denied, you may contact the Attorney General of California. | |
| 424 | **Right to Appeal Your Rights Requests.** You have the right to appeal our refusal to take action on your request. To exercise this right, you may submit your appeal in writing by contacting [privacy@agoda.com.](mailto:privacy@agoda.com) If your request to exercise your data subject rights is rejected, you will receive a notification with the details of the reason for rejection and instructions about how to make an appeal. We will respond to you within 45 days of your appeal submission. If your appeal is denied, you may contact the Attorney General of California. | |
| 423 | 425 | |
| 424 | 426 | To protect your privacy and security, we will verify your identity before responding to such request and may request you to provide us with information matching the identifiers and commercial information already maintained by Agoda about you or additional proof where necessary. If you are making this request on behalf of someone else, we may request the authorized agent provide us with a copy of a valid power of attorney or evidence of the written authorization. You will not be penalized for exercising your rights. |
| 425 | 427 | |
| 426 | 428 | **Türkiye** |
| 427 | 429 | |
| 428 | 430 | If you are a Turkish resident, the processing of your personal data will be subject to Law No. 6698 on Protection of Personal Data of Turkey ("Turkish Data Protection Law"). In this regard, the following terms apply to you, and in the event of any conflict between the following additional terms and the provisions of the rest of the policy, the following terms shall prevail. |
ALSO IN THIS CHANGE, NOT TIED TO ONE LINE
- ± CHANGEDMinor grammar, typo, and wording fixes
Numerous small corrections were made throughout the document (e.g. "Third party" to "Third parties," "Protect Vital Interest" to "Protect Vital Interests," fixing a stray typo "n Cookies," and similar fixes). These don't change any rights or practices.