Booking Holdings Privacy Notice

Last Updated March 2023

California Residents: See “Privacy Rights in Some Jurisdictions” section here and “Exercising California Consumer Rights” section here.

Customers of Booking Holdings’ Brands: Please see the Privacy Notice available on the relevant Brand’s website.

This Booking Holdings (“Booking Holdings” or “BHI”) website is owned and operated by Booking Holdings and is a non-transactional website (i.e. it does not provide a customer service to consumers and website visitors). By visiting the Booking Holdings website (the “Site”), you are consenting to the collection, use, disclosure, and processing of your Personal Data as described in this Privacy Notice.

Information We Collect
We collect personally identifiable information ("Personal Data") about you that you provide to us while using the Site. Personal Data includes information that can identify you as a specific individual, either alone or when combined with information from other sources, such as your name, address, phone number, or e-mail address. We may also collect non-personally identifiable information, which may be linked to your Personal Data, including your log-in name, and IP address. Third parties also may collect non-personally identifiable information on our Site as described below. Such third parties may be located in countries which may not provide for the same level of protection as the laws in your home jurisdiction.

Cookies and Other Tracking Technologies
We use various online tracking technologies to enhance the experience for users of our Sites, which may include cookies, pixels, and web beacons.

As described in more detail below, Booking Holdings' cookies have many benefits to enhance your experience on our website. The third-party cookies used on our site are also designed to improve your web site experience by facilitating the receipt of targeted advertisements while on our site and while you are viewing other, non-Booking Holdings web sites.

Cookies are small pieces of text that a website places on your computer to help remember information about your visit. It enables a website to “personalize” itself for each user by remembering information about the user's visit to the web site.  Web beacons are tiny graphics with a unique identifier that are embedded invisibly on the web pages. Booking Holdings' cookies have many benefits to enhance your experience on our website. Our cookies and web beacons may also come from third-party service providers who have permission to place such tools on our Site, and who are able to collect your online identifiers and information about your interaction with our Sites. Some third parties may use this information for building profiles of online users, that they use for enriched analytics or cross context behavioral advertising.

Booking Holdings Inc. Cookies (First-Party Cookies)
We at Booking Holdings use our cookies to improve your web-browsing experience. Booking Holdings cookies are associated with a user's Personal Data.  However, no third party has access to the information we collect through our Booking Holdings cookies.

Booking Holdings Inc. Cookies (Third-Party Cookies)
We use third-party cookies to gain insight into how our visitors use the website, to find out what works and what doesn't, to optimize and improve our website and to ensure we continue to be interesting and relevant. The data we gather may include which web pages you have viewed, which referring/exit pages you have entered and left from, which platform type you have used, date and time stamp information and details such as the number of clicks you make on a given page, your mouse movements and scrolling activity, the search words you use and the text you type while using our website.

Please note that our Site utilizes only strictly necessary and functional cookies.  You can delete all cookies that are already on your computer's hard drive by searching for and deleting files with "cookie" in it. Please note that refusing or deleting cookies may impact your browsing experience on the Site, and it may result in the deletion of any preferences you have set.

We do not support Do Not Track browser settings. You can also generally opt-out of receiving personalized ads from third party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt-out pages on the NAI website and DAA website.

In order to control the collection of data for analytical purposes by Google Analytics, you may want to visit the following link: Google Analytics Opt-out Browser Add-on=

How We Use the Personal Data We Collect
We will use the information provided by you in order to respond to your inquiries, provide you with requested information, and verify your identity where necessary to respond to your request. We also use information collected on our Sites for our own business and legal purposes, including to administer, improve, and personalize the Site and our services, to maintain network security and performance and protect against cyber-attacks, to market our and our affiliate’s services, and to comply with and enforce applicable laws, industry standards, contractual commitments, regulatory, law enforcement, civil, or judicial inquiries/subpoenas, and our own policies.

How We Share Your Personal Data

  • Booking Holdings does not share your Personal Data, except as disclosed in this Notice or unless we receive your consent. Booking Holdings may share your Personal Data with its subsidiaries and with other third parties as described in the categories below:
  • Certain Services: In order to provide you with certain services, we may share your Personal Data with our subsidiaries or third-party partners, or require that you transact directly with a third-party partner. Third-party partners consist of companies with which Booking Holdings has contracted in order to provide you with services or products featured on our Site.
  • Booking Holdings' Agents: Many of the operations we perform require us to hire other companies to help us with these tasks. For example, Booking Holdings hires companies to help us handle mail and e-mail (including sending and delivering packages, postal mail and e-mail) analyze the data we collect, market our products and services, and provide customer service. The companies we employ to help us with these tasks have access to Personal Data to perform their functions, but may not use it for other purposes. Booking Holdings requires all agents to whom Personal Data is disclosed to enter into confidentiality agreements and to agree to act in a manner consistent with the relevant principles articulated in this Notice. In some instances, we utilize service provider platforms to help us provide certain services to you such as our Career services provider where this Notice governs the collection and use of your Personal Data even though you are on a third-party website. In these instances, you will always know whose Privacy Notice governs the collection and use of your Personal Data by clicking on the Privacy Notice link provided.
  • Investor Relations Email Alerts and Other Offers: Booking Holdings collects your Personal Data only for strictly necessary and functional purposes. If you sign up for our Investor Relations Email Alerts, Booking Holdings or those companies that we have a commercial relationship with may send you email alerts and financial information about us or other offers that we think might be of interest to you. If you subscribed and no longer want to receive these emails please click here to unsubscribe.
  • Future Business Transfers: Our business is constantly changing. As part of that process, Booking Holdings may sell or buy other companies, and Personal Data may be transferred as part of these transactions. It is also possible that Booking Holdings, or substantially all of its assets, may be acquired by another company, whether by merger, sale of assets or otherwise, and Personal Data may be transferred as part of such a transaction.
  • Compliance with Law and Other Disclosures: Booking Holdings reserves the right to release Personal Data in order to comply with applicable law and when we believe that disclosure is necessary to comply with a judicial proceeding, court order, or legal process served on our Site. We may also release Personal Data to enforce or apply the terms and conditions applicable to our products and services, protect us or others against fraudulent or inappropriate activities, or otherwise protect the rights, property, or safety of Booking Holdings, our affiliated companies, our customers, or others.

How We Protect the Personal Data We Collect
To prevent unauthorized access, destruction, use, modification, or disclosure of your Personal Data, we have implemented and maintain reasonable security procedures, methods, and technologies appropriate to the nature of the information. This includes restricting access to Personal Data to those employees who need to know it, training our employees about the importance of privacy and security of Personal Data, and implementing internal policies and procedures governing the collection, use, retention, and disclosure of Personal Data.

How Long We Keep Your Personal Data
We retain Personal Data for as long as necessary for our business purposes.  How long is appropriate will depend on the type of data and the use to which it has been put. Our legal department may direct that information be retained for a longer period of time in the event of a litigation hold, reporting obligations, dispute resolution, agreement enforcement, or as deemed necessary to protect the interests of BHI or as otherwise required by law.

External Links
Our Sites includes links to other websites operated by our subsidiaries and third-party organizations. If you have an account with one of the Booking Holdings subsidiaries, you can update the accuracy of your information or change your communication preferences by either logging in and updating the information in your account on those respective websites (not available for all Booking Holdings companies) or contacting the relevant subsidiary through their customer service portal. If you access another organization’s website using a link provided, the other organization may collect information from you. Booking Holdings is not responsible for the content or privacy practices of linked websites or their use. You should refer to those websites' privacy policies, terms of use, and practices to determine how they will handle any information they collect from you.

Applicability of This Privacy Notice to International Users
This Privacy Notice is provided in accordance with and subject to U.S. law.  If you access our Sites from a location outside of the United States, you agree that your use of this Site is subject to the terms of this Privacy Notice, and you recognize and accept that your Personal Data may be transferred to and processed in the U.S. and other countries that may not be deemed to provide the same level of data protection as your home country and that may have been deemed to have inadequate data privacy laws under the laws of your jurisdiction. Whenever we engage a service provider, we require that its privacy and security standards adhere to this notice and applicable privacy laws. We commit to ensuring lawful transfer mechanisms with respect to onward transfers of your Personal Data.


Privacy Rights in Some Jurisdictions
Certain jurisdictions (ex. California, the United Kingdom, and the European Union) extend enhanced Personal Data rights to residents of or persons located in the jurisdiction. You may have some or all of the following rights in relation to the Personal Data we collect about or from you, depending on the jurisdiction and our reason for processing your information:

  • Right of access: You may ask us to confirm whether we are processing your Personal Data and the specific pieces of Personal Data we have collected and, if necessary, provide you with a copy of that Personal Data (along with certain other details).
  • Right to correct: If the Personal Data we hold about you is inaccurate or incomplete, you may be entitled to request to have it corrected, taking into account certain exceptions and, if necessary, independent verification, as well as the nature of the Personal Data and the purposes of the processing of your Personal Data.
  • Right to delete: You may have a right in some circumstances, such as where we no longer need it or if you withdraw your consent (where applicable), to request that we delete or remove your Personal Data.
  • Right to restrict/limit processing: You may have a right to restrict the processing, use, or disclosure of your Personal Data (including sensitive Personal Data) in certain circumstances, such as where you contest the accuracy of that Personal Data or you object to us.
  • Right to data portability: You may have the right to receive a copy of Personal Data we've obtained from you, where technically feasible, in a structured, commonly used and machine-readable format, and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
  • Right to withdraw consent: If we rely on your consent (or explicit consent) as our legal basis for processing your Personal Data, you may have the right to withdraw that consent. If you withdraw your consent, we may not be able to carry out your instructions or perform the contract we have or are trying to enter into with you.
  • Right to lodge a complaint: If you have a concern about any aspect of our privacy practices, including the way we've handled your Personal Data, you may report it to the relevant supervisory or regulatory authority. You may contact us as provided at the bottom of this Privacy Notice if you would like to receive contact information for your local authority.
  • Right to opt in or out of sale or sharing for cross-context advertising: Note that we do not “sell” the Personal Data about you that we collected (as the term is defined under California law) from third parties within the past twelve (12) months.
  • Right to non-discrimination: You may exercise your rights under law without discrimination. Please note that a legitimate denial of a request for information, deletion, or to opt out is not discriminatory, nor is charging a fee for excessive or repetitive consumer requests as permitted by the California Privacy Rights Act (“CPRA”).

To protect your privacy and security, we will verify your identity before granting access or making changes to your Personal Data. This means that we will ask you to provide a few pieces of information to confirm your identity in our records.

Any request to access your Personal Data will be answered in less than thirty (30) days (if properly submitted). If we need more time to process and respond to your request, we will notify you of that fact along with the reason for the delay. If we decline to act regarding your request, we will inform you of our decision and the reason for it.


Exercising Additional California Consumer Rights
If you reside in California, we are required to provide additional information to you about how we use and disclose your information, and you may have additional rights with regard to how we use your information. We have included this California-specific information below, which is incremental to the other rights and disclosures described in this Notice.

Please note that some of these rights may be limited where we have an overriding legitimate interest or legal, regulatory or contractual obligation to continue to process the Personal Data, or where the Personal Data may be exempt under applicable law. Clients and contacts of our businesses should review the relevant business’s privacy notice for how to exercise rights with respect to those business’s collection practices. All other inquiries may be sent to the contact email address below in the “Questions or Concerns” section.

After we receive your request, to ensure the security of the information we store and consumers’ privacy, we will verify that you are appropriately affiliated with the subject of the request, either as the consumer or as an authorized agent or guardian of the consumer. We will ask you to provide information to confirm your identity in our records.

You may designate an authorized agent to exercise your rights under the CPRA on your behalf. You must provide the authorized agent written permission to exercise your rights under the CPRA on your behalf, and we may deny a request from an agent on your behalf if we cannot verify that they have been authorized by you to act on your behalf. Even if you use an authorized agent to exercise your rights under the CPRA on your behalf, pursuant to the CPRA we may still require that you verify your own identity directly to us. This provision does not apply if you have provided a power of attorney under the California Probate Code.

California Shine the Light Requests
California Civil Code Section § 1798.83 permits users of our web site that are California residents to request certain information regarding our disclosure of Personal Data to other parties for their direct marketing purposes. To make such a request, please send an email to privacy@bookingholdings.com with the subject “Shine the Light Request.”

Children
This Site is not intended for children, and we do not knowingly collect, use, or disclose information of children under the age of thirteen (13) without the consent of their parents or legal guardians. In an instance where such information was collected, it would be purely accidental and unintentional. If we learn that we have collected Personal Data from a child under the age of 13, we will delete that information as quickly as possible. If you believe that a child under the age of 13 may have provided us their Personal Data, please contact us at privacy@bookingholdings.com.

Changes to the Privacy Notice
The Privacy Notice is subject to change at any time. If we make changes to this Privacy Notice, we will update the date at the top of this page or you may contact us at privacy@bookingholdings.com.  Any changes we make to this Privacy Notice become effective immediately when we post the revised Privacy Notice on this page.

Questions or Concerns?
If you have any questions, concerns, or complaints about this Privacy Notice, or our privacy practices in general, email us at privacy@bookingholdings.com. Booking Holdings is located at 800 Connecticut Avenue, Norwalk, Connecticut 06854.