The privacy and security of your information is very important to us. Whether you are booking a room or are a member of one of our loyalty programs, we want you to trust that the information that you have provided to us is being properly managed and protected.
We have prepared this Privacy Statement to explain more about who we are and how we collect and manage your information.
This Privacy Statement is issued by the InterContinental Hotels Group of Companies (collectively referred to as "IHG”, "we”, "us” or "our” in this Privacy Statement), which includes the direct and indirect subsidiaries of InterContinental Hotels Group PLC and covers information collected and used by us in the course of our business. When we mention "IHG", "we", "us", or "our" we are referring to the relevant company in the InterContinental Hotels Group that processes your personal information.
Your information may also be collected and used by IHG-branded hotels. In most cases, these hotels are independently owned and their use of your information is only covered in this Privacy Statement where specifically noted.
If you would like to learn more about IHG and our relationship with our IHG-branded hotels, click below.
We are committed to collecting and using your information in accordance with applicable data protection laws.
We will only collect, use and share your information where we are satisfied that we have an appropriate legal basis to do this.
This may be because:
If you would like to find out more about the legal basis for which we process personal information please contact our offices (details found in the “How to contact us" section). If you have provided your consent to our processing of your information you can withdraw this consent at any time by contacting the IHG Privacy Office (details found in the “How to contact us" section).
As we operate via a global network of corporate offices, reservation and service centers, data centers and hotels, it may be necessary to transfer your information to a country outside of the country where it was originally collected or outside of your country of residence or nationality. The information that you provide us during the course of a reservation or through the provision of any other services may be transferred to any of our IHG-owned or affiliated entities and hotels around the world for the purposes of carrying out or facilitating these services. It will also be necessary to transfer this information to third parties, including, without limitation, our Franchisees, partners and third-party service providers.
Where we transfer information which originates in the European Union ("EU") to a country outside of the EU, we will take steps to make sure such transfer is carefully managed to protect your privacy rights:
We and our third-party service providers use cookies, pixels, web beacons, tracking tools and other similar technologies on our websites, mobile applications and in other areas of our business to collect information and provide you with the services that you have requested or participate in and to provide targeted advertising. Subject to local consent requirements, we may use this and other information we collect, such as a hashed email address, to help us and our third-party service providers identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.). We, and our third party service providers, also may use the cross-device tracking and other information we learn about you to serve targeted advertising on your devices. We also use the information that we collect to improve our products and services as well as your experience when visiting our websites and using our mobile applications. For more information on these subjects, please click the relevant section below.
What is a cookie: A “cookie” is a small text file that is placed onto an Internet user’s web browser or device and is used to remember as well as obtain information about that party. You might be assigned a cookie when visiting our websites or when using our mobile applications. In some instances, where permitted under the applicable law, cookies may also be used for the purposes of certain email campaigns.
What types of cookies we use and how we use them: We use three primary types of cookies, which include:
To learn more about cookies and how they are used, please visit: http://www.allaboutcookies.org/.
Third-party cookies: As described above, we use a number of third-party service providers to help us manage, carry out and improve our advertising. These parties set cookies at our direction to help us collect information and provide you with advertisements that we believe would be relevant for you. In some instances these third parties may also assist us by providing certain statistical and analytics information in relation to our marketing practices. We also may share information collected through cookies (and other tracking technologies) with third parties to use for their own analytics and marketing purposes.
Managing cookies and opting out: You can choose to visit our web sites without cookies, but in some cases certain services, features and functionality may not be available. To visit without cookies, you can configure your browser to reject all cookies or notify you when a cookie is set. Each browser is different, so check the "Help" menu of your browser to learn how to change your cookie preferences. To manage Flash cookies, please click here.
In relation to third-party cookies, we participate in the Self-Regulatory Program for Online Behavioral Advertising managed by the Digital Advertising Alliance (“DAA”). As part of this commitment, IHG has agreed to comply with the standards and guidelines promulgated by the DAA. For more information regarding targeted advertisements and/or to opt out of automatic collection for these purposes, please visit http://www.aboutads.info/choices/ or http://www.networkadvertising.org/managing/opt_out.asp. Within the EU and Canada the local DAA organizations operate a similar "ad choices" scheme: see http://www.youronlinechoices.com (Europe) and http://youradchoices.ca/ (Canada). If you opt-out of these targeted advertising cookies, your opt-out will be specific to the web browser or mobile device from which you accessed the opt-out. If you use multiple devices or browsers, you will need to opt out each browser or device that you use.
Other technologies: Other technologies such as pixels and web beacons may also be used on our websites, mobile applications, in email messages and in other areas of our business. These technologies are used to improve our products and services as well as our marketing efforts.
Targeted advertising: We and our third-party service providers may serve targeted advertisements through the use of first-party or third-party cookies, pixels and web beacons when you visit our website, use our mobile applications, or visit third party websites. In some instances, these cookies may be persistent cookies. As described in the Using our websites, mobile applications and other technology section above, we and our third party service providers may also use cookie and other information to try to identify other devices and web browsers that you may use so we and our third-party service providers may serve targeted advertisements to those devices. We do this to provide you with advertising that we believe may be relevant for you as well as improve our own products and services, including the functionality and performance of our websites and mobile applications. To learn more about opting out of certain types of targeted advertising, please see the “Managing cookies and opting out” section above.
Do-Not-Track: Currently, our systems do not recognize browser “do-not-track” signals. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies); you also may opt-out of targeted advertising by following the instructions at the DAA and the Network Advertising Initiative websites.
We receive information about you when you use our mobile applications. Some information such as your device manufacturer, type and operating system version are collected automatically, while other information is only collected if you choose to provide it, such as your location information. Where we process and use your personal information in connection with any mobile applications, we will do this in line with the general principles outlined in this Statement unless we tell you otherwise.
If you use our mobile app, we also send you push notifications from time-to-time in order to update you about any events or promotions that we may be running. If you no longer wish to receive these types of communications, you may turn them off at the device level. To ensure you receive proper notifications, we will need to collect certain information about your device such as operating system and user identification information.
We use mobile analytics software to allow us to better understand the functionality of our mobile applications on your phone. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where the application was downloaded from. We do not link the information we store within the analytics software to any personally identifiable information you submit within the mobile application.
We may use information from online sources, such as websites, social media and information sharing platforms. This information may be used to help tailor and improve our services and communicate with you effectively, as we know many of our customers use a range of media channels to communicate and share information.
We may use various social media features such as the Facebook “Like” button on our websites and mobile applications. Certain information may be shared or otherwise provided to us through your use of these features in conjunction with our services and programs. Subject to your account and privacy settings, we may also be able to see information that you post when using these social media platforms whether or not you are using one of our services. In some instances, depending on the circumstances, we may contact you on these social media platforms. The information you post on social media sites as well as the controls surrounding these disclosures are governed by the respective policies of these third parties.
Where we use information from these sources, we will respect any permissions you have set about how you would like your information to be used for each source.
We recommend you routinely review the privacy notices and preference settings that are available to you on any social media platforms To learn more about opting out of certain types of targeted advertising, please see the “Managing cookies and opting out” section above.
When you use the IHG Connect WI-FI service (IHG Connect), we may collect and process certain additional information.
We use personal information only for the purposes described in this Policy, except if otherwise disclosed to you at the time the data is collected or further authorized by law or by you.
We use the personal information that we collect through IHG Connect to understand and analyze the usage trends and preferences of our users, to improve the IHG Connect service, and to develop new products, services, features, and functionality. If you provide your contact information or your IHG Rewards club number, we may send you personalized offers based on your web usage and location. You can opt out of receiving these offers when signing in to use the IHG Connect service or at any time within your IHG Rewards account. Please see the 'Managing your preferences and information' section below.
As described in the section above in relation to cookies, we have relationships with third parties such as Google and Facebook which enable us to serve targeted advertising. In addition to the activities described under the heading Targeted Advertising above, we also match Facebook and Google users across sites and devices which enables us to better understand your interests. We use this information to enable us to tailor our marketing communications to you so we can make sure we tell you about things which are most likely to be of interest to you. You can opt out of receiving these offers when signing in to use the IHG Connect service or at any time within your IHG Rewards account. Please see the 'Managing your preferences and information' section below.
We are committed to protecting the confidentiality and security of the information that you provide to us. To do this, technical, physical and organizational security measures are put in place to protect against any unauthorized access, disclosure, damage or loss of your information. The collection, transmission and storage of information can never be guaranteed to be completely secure, however, we take steps to ensure that appropriate security safeguards are in place to protect your information.
We want to ensure that you have the necessary tools at your disposal to control the information that you provide to us, including how we communicate with you. It is also important that you contact us to update your information if any of it is inaccurate or changes. Please click the relevant section below to learn more about how to control how we communicate with you and how to update, modify and delete your information.
Through the provision of the services described above, we and in some instances our Franchisees, third-party partners and service providers, may communicate with you in relation to a reservation, as a member of any of our loyalty programs, through online digital services (e.g. online advertising, social media communications), or to support any other services that we provide.
In some instances, especially if you are a member of IHG® Rewards Club or an InterContinental Ambassador, you can go to your account, sign in and click on the “Communication Preferences” section to revise your communication preferences. IHG® Rewards Club members can also contact any of our IHG Rewards Club Service Centres. Additionally, the option to unsubscribe from marketing communications will be included within the communication itself. In all other cases, or if you are having difficulties with unsubscribing from any particular communication, please contact one of our global customer care offices or the IHG Privacy Office (details found in the “How to contact us section”).
Please be aware that unsubscribing from one type of communication may not unsubscribe you from another type. Likewise, unsubscribing from our communications may not mean that you are unsubscribed from certain communications carried out independently by our Franchisees.
In the event any information that you provide to us is inaccurate, changes or you would like this information deleted, your information can be updated by contacting one of our global customer care offices. In some instances, especially if you are an IHG® Rewards Club or InterContinental Ambassador member, you can update certain aspects of your personal information by going to your account, signing in and clicking on the “Personal Information” section to update and amend your personal information. For all other cases, please contact the IHG Privacy Office (details found in the “How to contact us section”). We will respond to your request within a reasonable timeframe.
Please note that in some instances it may not be possible to delete certain pieces of your information and a portion of the information may be needed for suppression purposes. In other instances, we may not have the ability to delete certain pieces of information that are stored on our systems or that have been provided to third parties in connection with the services discussed in this Privacy Statement.
California residents may request a list of certain third parties to which we have disclosed personally identifiable information about you for their own direct marketing purposes. You may make one request per calendar year. In your request, please attest to the fact that you are a California resident and provide a current California address for your response. You may request this information in writing by contacting us through one of the methods listed under the “How to contact us” section. Please allow up to thirty (30) days for a response.
Our websites and applications contain links to websites that are maintained and/or controlled by third parties. In some instances these websites may be co-branded and display our logos or other trademarks. You can always tell whether you are on one of our websites by checking the uniform record locator ("URL”) on the page that you are visiting. We encourage you to review the privacy policies of these third-party websites as their privacy practices may differ from ours.
Our websites are not intended for children and we do not intentionally solicit or collect personal information from individuals under the age of 18. If we are notified or otherwise discover that a minor’s personal information has been improperly collected, we will take all commercially reasonable steps to delete that information. In limited instances, we may have a campaign or program targeted toward children. In these instances, details on the information practices will be presented within the terms and conditions of the program or campaign.
We generally only keep your information for as long as is reasonably required for the reasons explained in this privacy policy. In some cases we keep transactional records (which may include your information) for longer periods if necessary to meet legal, regulatory, tax or accounting needs. We will also retain information if we reasonably believe there is a prospect of litigation.
We maintain a data retention policy which we apply to the records we hold.
For any questions or concerns regarding this Privacy Statement or our data privacy practices, please contact us:
InterContinental Hotels Group
Attn: Privacy Office
Three Ravinia Drive
Atlanta, Georgia 30346
You may also contact our Data Protection Officer by emailing privacyoffice@ihg.com.
To the extent permitted under the local law, you may also use the above contact details to request access to any of your personal information that is held by IHG. These requests will be reviewed and processed in line with the local law.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider here.
Where EU data protection laws apply, you have a right to lodge a complaint with your local data protection supervisory authority at any time. However, we ask that you please try to resolve any issues with us first before referring your complaint to the supervisory authority.
You have legal rights under EU data protection laws in relation to your personal information. Click on the links below to learn more about each right you may have. To exercise any of your rights please contact our Data Protection Officer by emailing privacyoffice@ihg.com.
You can ask us to confirm whether or not we have and are using your personal information and for a copy of your information.
You can ask us to correct any information about you which is incorrect. We will be happy to rectify such information but would need to verify the accuracy of the information first.
You can ask us to erase your information if you think we no longer need to use it for the purpose we collected it from you. You can also ask us to erase your information if you have either withdrawn your consent to us using your information (if we originally asked for your consent to use your information), or exercised your right to object to further legitimate use of your information, or where we have used it unlawfully or where we are subject to a legal obligation to erase your personal information.
We may not always be able to comply with your request, for example where we need to keep using your information to comply with our legal obligation or where we need to use your information to establish, exercise or defend legal claims.
You can ask us to restrict our use of your information in certain circumstances, for example:
We can continue to use your information following a request for restriction where we have your consent to use it; or we need to use it to establish, exercise or defend legal claims, or we need to use it to protect the rights of another individual or a company.
You can object to any use of your information which we have justified on the basis of our legitimate interest, if you believe your fundamental rights and freedoms to data protection outweigh our legitimate interest in using the information. If you raise an objection, we may continue to use your information if we can demonstrate that we have compelling legitimate interests to use the information.
You can also require us to stop using your data for direct marketing purposes.
You can ask us to provide your personal information to you in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller (e.g. another company).
You may only exercise this right where we use your information in order to perform a contract with you, or where we asked for your consent to use your information. This right does not apply to any information which we hold or process that is not held in digital form.
You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the European Union.
We may redact data transfer agreements to protect commercial terms.
We may ask you for proof of identity when making a request to exercise any of these rights. We do this to make sure that we only disclose information where we know we are dealing with the right individual.
We will not ask for a fee, unless we think your request is unfounded, repetitive or excessive. Where a fee is necessary, we will inform you before proceeding with your request.
We aim to respond to all valid requests within one month. It may however take us longer if the request is particularly complicated or you have made several requests. We will let you know if we think a response will take longer than one month. To help us respond more quickly, we may ask you to provide more detail about what you want to receive or are concerned about.
We may not always be able to do what you have asked, for example if it would impact the duty of confidentiality we owe to others, or if we are otherwise legally entitled to deal with the request in a different way.
In some instances, we may have to change, modify or amend this Privacy Statement in order to comply with the evolving regulatory environment or the needs of our business. Subject to any applicable legal requirements to provide additional notice, any changes to this Privacy Statement will be communicated through our websites and mobile applications. However, if there will be changes made to the use of your personal information in a manner different from that stated at the time of collection we will take appropriate steps to notify you, such as by posting a notice on our website for 30 days prior to the changes taking effect or by emailing you.
Effective Date: May 12, 2018