Agoda Privacy Policy

FIRST SEEN 2026-07-29 · VERSION 20260729_rev01 · COMPARED WITH 20210801_rev01

Full text changes — 20210801_rev01 to 20260729_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+Agoda Privacy Policy
+Last Updated in June 2026
+This Privacy Policy describes how Agoda Company Pte. Ltd. (36 Robinson Road, #20-01 City House, Singapore 068877) ("Agoda," "we," "us," "our") collects, uses, and shares information about you when you visit and interact on our website (mobile and desktop) and mobile app (collectively, "Platform") or other means connected to a Platform. Undefined terms in this Privacy Policy have the same definition as in our [Terms of Use.](https://www.agoda.com/info/termsofuse.html)
+For California residents, please find additional disclosures [here]().
+**Table of Content**
+[1\. What personal data do we collect about you?]()
+[2\. How do we use your personal data?]()
+[3\. Legal basis we rely on to process your personal data]()
+[4\. Who do we share your personal data with?]()
+[5\. Cookies]()
+[6\. Cross border transfer of your data]()
+[7\. How do we protect your personal data?]()
+[8\. How long do we retain your personal data?]()
+[9\. Your rights pertaining to the personal data we collect about you (DSRR)]()
+[10\. About this privacy policy]()
+[11\. Who is responsible for the processing of your personal data and how to contact us?]()
+[12\. Country-specific provisions]()
+**1\. What personal data do we collect about you?**
+We collect personal data about you when you interact or use our Platform to make a booking, explore or make plans related to an accommodation, flight, activity, such as tours or other travel activities, or other services that we may make available through our Platform or otherwise (such as partners' websites and social media) (each a "Travel Product"). If you plan, save or make a booking for any Travel Product with other guests, or on behalf of someone else, or if you provide us with any of your travel plans, it is your responsibility to ensure that the guests or any other third parties are aware and have acknowledged that Agoda will use their personal data as described in this Privacy Policy.
+**Information we may collect from you and your interactions with our Platform**
+**Identification and account data** - such as Booking ID, your (and/or each of your guest's') name, email address, phone number, date of birth, gender, media (including images you decide to upload e.g. when leaving a review).
+**Travel Product Booking Data** - such as payment details, Travel Supplier, name, location, itinerary and depending on the Travel Product booking made, the length of stay, prices, the date of your booking, and other details of your itinerary (including if you or your guest(s) will arrive via air, sea or rail, arrival/departure times, pick up/drop off location), information about additional services purchased with the Travel Suppliers, such as extra baggage, upgrades, preferred tour/activity language, special dietary and accessibility needs, physical characteristics such as height, weight, mobile device models, IMEI numbers, SIM activation dates, other information about any other special preferences or requirements that Travel Suppliers may need to consider in connection with your (and your guests') Travel Product booking (including, child safety information) and travel plans or options and their related details or preferences.
+**Communications data** - If you need to get in touch with our customer support team or communicate with your Travel Supplier through our Platform, we will collect the information you share with us through the communication channels we make available (e.g. email, phone, in-app or platform messages, chatbots, Agoda's AI powered travel assistant, social media messaging apps).
+If you contact our customer service team via social media messaging apps such as (e.g. Whatsapp/Meta, Line, Kakao, WeChat etc.), the information you share with us may include your username, phone number, or other profile information. This is controlled by your social media messaging app provider or as authorized by you via your privacy settings there - please refer to their relevant privacy disclosures for information before using their app to contact us.
+**Reviews and survey data** - If you submit reviews on the Platform, we collect and may publish your personal data such as your review, your first name, media (photos or videos), country of residence.
+**Membership data** - such as information on loyalty or similar programs in place with your Travel Supplier and your Agoda account password when you create an Agoda account.
+**Online behavior data** - when you visit our Platform, we may automatically gather certain data such as your IP address, the date and time of access, and information about your device's hardware and software, including the operating system, browser type, software or application version, and language preferences. If you are using a mobile device, we also collect information specific to your device, including its unique identifiers, settings, and characteristics, as well as data related to app crashes and other system activities. We also record the channel you used to make bookings (e.g., the Platform used), as well as the source website or platform that directed you to us. We also collect data on your interactions, such as the pages you view and the links you click, for example through cookies - read more in ["Section 5. Cookies"]() below.
+**Location data** - You may choose to grant us access to your location data to enable us to provide the services you request, such as searching for Travel Products near you. Additionally, when uploading a picture from your mobile device, it may include location data as part of the tagging process.
+**Government issued identification data** - such as your (or your guests') passport or national ID number, driver's license, country of issue, expiry date, nationality, visas. In some countries, we are legally required to collect and process Tax IDs, such as Brazilian CPF numbers or Indian PAN numbers, if you pay in certain currencies on our Platform. This information will be shared with the national bank of the respective countries.
+**Special programs and promotions data** - from time to time, Agoda may offer programs or promotions on our Platform, alone or together with third parties as detailed in ["Section 4. Who do we share your personal data with?"]() below. If you participate in one of these programs or make a reservation through a dedicated landing page, we may collect additional information to facilitate the booking as further required and indicated in the program or promotion.
+Some of these programs may be initiatives carried out in conjunction with certain government agencies. In such case we may collect, store, process and disclose the personal data we have on you together with such other additional data elements including, but not limited to your national identification document, visa application, nationality, or date of birth as may be necessary to comply with the requirements set by the relevant government agencies for the specific programs. Please do not participate in the respective programs or promotions if you do not want your data to be processed by Agoda and, if applicable, disclosed to the relevant government agencies or their representatives for such purposes.
+_Sensitive Personal Data:_
+Certain types of personal data, such as religion, health related data or children's data, are considered sensitive and may require additional protection under applicable laws. Although we do not ordinarily collect sensitive personal data as part of our standard Travel Product bookings, there may be a need , from time to time, to collect such information e.g. as contained in a government-issued identification document or medical certificate (e.g. if such information is supportive of a transaction or request that you ask us to perform on your behalf such as a cancellation or amendment of your booking, as part of legal requirements (e.g. accessibility or other special travel preferences) or if you may choose to share such information voluntarily through any contact you may have with Agoda. You may also elect to provide us with other information which may imply or suggest information like religion, health or other information, such as when specifying your dietary needs.
+Unless requested by our customer service team, we discourage you from providing sensitive personal data (yours or of other guest or third parties) on any of our customer support channels. This extends to any other communication channels we may make available (e.g. email, phone, in-app or platform messages, chatbots, Agoda's AI powered travel assistant, or other trip planning or saving features, social media messaging apps). If you choose to disclose this data, we will treat this as you having given your explicit consent for use of that information as described in this Privacy Policy.
+_Children_
+Our Platform is not directed towards children or people under the legal age of majority where our Platform is accessed. If parents or guardians provide us with information about children, we may collect it to facilitate a Travel Product booking, provide related services or for other exceptional circumstances (such as features addressed to families). This will only be used and collected as provided by the parent or guardian.
+If you are a parent or guardian and believe we may have collected personal data from a minor other than as contemplated above, please notify us to request that we remove that personal data.
+**Information we may collect from third parties**
+These can include Travel Suppliers, affiliated group companies, service providers and other independent third parties. Information we receive from these third parties may be used together with other information about you.
+For example, Travel Suppliers or business partners may share certain information about you with us, such as your name and email address, your address, payment details and other relevant information to facilitate your Travel Product booking (including questions or any related disputes) and to identify the channel from which your reservation originated.
+If you access or sign in to our Platform through social media service providers, such as Meta (Facebook, WhatsApp), Google, Kakao, etc. we may receive information about you such as your username and other information you may make available to us via such services.
+We also integrate with payment services providers to facilitate payments between you and Travel Suppliers. They may share payment information so we can facilitate your Travel Product booking. If you are an eligible user of our Platform and have signed up for an AgodaWallet, we may receive limited information from Booking Holdings Financial Services UK Limited ("BHFS UK") relating to your use of the AgodaWallet.
+We may also receive information such as additional cookie data, which our service providers, such as advertising partners, may make available to us.
+In some cases, we may provide links to other websites or mobile apps that are not owned or operated by us ("Third-Party Websites"). When you click on these Third-Party Websites, such third parties may share certain personal data related to you or your interactions on these Third-Party Websites with us in accordance with their privacy policies. You will be subject to that Third-Party Websites' privacy and security practices, which may differ from ours.
+We encourage you to carefully review the privacy and cookie policies of any Third-Party Websites you use to understand how your personal data is managed and shared by them, and what controls you might have over your data with such third parties. We have no control over, and are not responsible for, the content, services, or privacy and security practices of any Third-Party Websites.
+**2\. How do we use your personal data?**
+We use your information for several purposes.
+_To facilitate a Travel Product booking and related requests:_
+We may use your personal data to provide you with the requested services, such as creating a user account with us, facilitate the creation of user accounts with our affiliated group companies or Travel Suppliers as may be authorized by you, processing and confirming your booking, facilitating payments between you and Travel Suppliers, planning, saving your Travel Bookings or plans, and communicating with you about services requested such as pre-booking or post- booking customer support, to deal with special requests, responding to any questions you may have, helping you to contact the right Travel Supplier or business partner for amendments, cancellations, and rewards.
+_To communicate with you:_
+We may get in touch with you through email, text, phone call, social media channels or through push notifications after you book with us on our Platform to confirm your booking, to remind you of your upcoming bookings and payments or to inform you of important messages or instructions relating to your bookings. To manage Cashback Rewards, we may send you notifications to inform you of your eligibility, reward balance and to remind you of upcoming expiry dates. These are part of your booking process and are not marketing messages. You will continue to receive them, even if you have opted out of our marketing messages. If you are making a booking for another person, you also have the option to insert the guest's email address for the purpose of the guest receiving the booking confirmation.
+Similarly, opting into receiving Price Alerts will not affect any other choices you have made regarding receiving communications from us. If you elect to receive Price Alerts, you will be able to opt out of receiving the same by clicking on the "turn off price alerts" or a similar message found in the Price Alert sent to you.
+If you have not finalized a booking online, we may send you up to two reminders to continue with your booking. We believe that this additional service is useful to you because it allows you to carry on with a booking without having to search for the booking again or fill in all the booking details from scratch. Booking information used for such reminders will be deleted from our systems in accordance with our data retention policy detailed below.
+_To enable your use of Agoda's AI powered travel assistant_
+As further described in [Agoda's AI powered travel assistant Terms of Use](https://www.agoda.com/info/ai-assistant-terms-of-use.html), our AI powered travel assistant can be used to explore travel options and plan your travel including identifying available Travel Products available from Travel Suppliers on the Platform and make suggestions for your itinerary. It allows you to start a separate chat for each trip you wish to plan ("**Conversation Thread**"). If you use Agoda's AI powered travel assistant, it will collect data you input or link through a Conversation Thread and retain and build upon that data throughout the Conversation Thread. Agoda's AI powered travel assistant uses third party hosted products including large language model tools to process this data together with other data about your past booking details to build a profile about your travel preferences that is applied in responding to you in that Conversation Thread. Do not input any sensitive data, such as credit card details, and we strongly urge you to limit the data you input to what is strictly necessary.
+We may review Conversation Threads as part of monitoring the performance of our AI powered travel assistant, (e.g. for quality assurance purposes) and making improvements.
+_To send you marketing communication or provide you with tailored advertisements or suggestions:_
+We use your personal data to send you marketing communications about products, services, news, offers, promotion or surveys that may be relevant to you.
+Subject to your choices, the marketing channels we may use to communicate with you include email, SMS, mobile messaging apps (e.g., WhatsApp, Line, Messenger, KakaoTalk), push notifications when you have installed the Agoda app on your device and interest-based advertising, tailored content and ads, delivered through our Platform and Third-Party Websites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. The marketing channels we use to communicate with you will depend on your choices, such as the communication platforms you use, if you have opted to join an Agoda group on that channel, and the settings you have in place for the channel. Our ability to communicate with you through one of these marketing channels may also depend on the settings you have in place for the channel. Please read the instructions of the specific channel or your mobile device to understand how to change the settings and enable the sharing of such information. For instance, you may change the setting of your mobile device to opt out of receiving push notifications (including Software Development Kit ("SDK") and push token data). Different device operating systems may have varying default settings, so it is important to familiarize yourself with these settings governing e.g. push notifications.
+You can withdraw your consent from receiving marketing communications from us at any time by using the "Unsubscribe" link, through your device settings, your Agoda account (depending on the channel you are trying to withdraw your consent from) or other withdrawal mechanisms provided for in the relevant marketing communication channels.
+Where required by law and subject to your choices, we may also show you personalized advertisements on our Platform, including promotions, travel options or suggestions, surveys, or any other updates about our Travel Products, based on what we think you may find interesting.
+_To maintain, operate and improve our Platform:_
+We may use your personal data to maintain and improve your user experience and our Platform, to keep it updated and relevant, and to ensure compliance with the Agoda Platform Terms of Use. We may generate statistics about our business for these purposes and also to conduct internal training or to inform our marketing strategy, provide you with tailored content based on your interactions, both here and on other websites, apps, and social platforms.
+_To provide you with communication channels:_
+We may offer you and certain Travel Suppliers various channels to communicate with each other about your booking(s) via our Platform. We may access communications on any channels we make available and may use automated systems to review, scan, and analyze communications for security purposes; fraud prevention; compliance with legal and regulatory requirements; investigations of potential misconduct; product development and improvement; research; customer engagement, including to provide you with information and offers that we believe may be of interest to you; and customer or technical support.
+We reserve the right to block the delivery of or review communications on the channel that we, in our sole discretion, believe may contain malicious content, spam, or may pose a risk to you or to Travel Suppliers, us, or others. All communications sent or received using a Platform supplied communication channel will be received and stored by us.
+Note that, business partners, through whose platform you made a booking and Travel Suppliers may choose to communicate with you directly via email or other channels that are beyond our control.
+_To provide you a safe and trustworthy service:_
+We use personal data for risk assessment and security purposes, including for the purposes of detecting and preventing fraud and harm when you report a safety concern, for the authentication of users and reservations, or when others report a fraud or safety incident about you. When we do this, we may have to stop or put certain bookings on hold until we've completed our assessment. If we have concerns about serious misconduct, we may decide to cancel your upcoming reservations or to decline future reservations via the Platform.
+During calls with our customer service team, live listening might be carried out or calls might be recorded for quality assurance and training, handling of claims, and fraud detection purposes. If you do not wish for your call to be recorded, you may end the call. Call recordings are kept for a limited amount of time and automatically deleted thereafter, unless Agoda has a legitimate interest to retain such recording for a longer period.
+_To respond to legal demands and other compliance matters:_
+Where necessary or appropriate we may use your personal data to handle/resolve legal claims, respond to regulatory requests/demands or to ensure compliance with obligations conferred or imposed by law.
+_Algorithms and Artificial Intelligence (AI):_
+As further described in our [Terms of Use](https://agoda.com/info/termsofuse.html), we may deploy tools that utilize algorithms and AI to provide, improve, and develop our services. These tools may make use of your information, including personal data, to help us deliver, personalize, and enhance your experience. This may include, for example, generating personalized content, promotions or recommendations, tailoring the customer experience and support to you, and identifying potentially suspicious transactions to help prevent fraudulent use of our services.
+Where we deploy such tools, we do so in accordance with applicable laws and with appropriate safeguards. In certain cases we may ask that you do not input personally identifiable information.
+**3\. Legal basis we rely on to process your personal data**
+Where required by law, we rely on the following legal bases to process personal data:
+**Necessity to Perform Contract with You** - we need to process your personal data in order to provide our Travel Product services to you, answer questions and requests from you, and provide customer support;
+**Our Legitimate Interests** - we process your personal data: (i) for security and safety; (ii) account reconciliation and debt recovery purposes; (iii) to detect and prevent fraud; (iv) to protect and defend the rights or property of others, or our own rights and interests; (v) to analyze, improve, customize and provide our Travel Product booking and related services to you or communicate with you as necessary to provide you with the requested services; (vi) to maintain, operate and improve the Platform, including to keep it updated and relevant, (vii) to develop our business and to inform our marketing strategy and (viii) to respond to domestic and foreign law enforcement requests, court orders, and legal process;
+**Compliance with Legal Obligations** - we need to process your personal data to comply with relevant laws and regulatory requirements;
+**Consent** - we rely on your consent for us to collect sensitive personal data and send marketing communications and provide you with tailored content and ads on this and other sites, apps or social media platforms based on your interactions on this and other sites or apps or social media platforms. You can withdraw your consent provided to us at any time by following the instructions set out in this Privacy Policy (see also ["Section 9. Your rights pertaining to the personal data we collect about you (DSRR)" and "Section 5 Cookies (Your Choices)", both below )](); and
+**Protect Vital Interest** - we may need to process your personal data in case of emergency involving an individual's life or health.
+**4\. Who do we share your personal data with?**
+We may share your personal data with third parties in order to provide our Travel Product services to you, namely Travel Suppliers, service providers, business partners, or our affiliated group companies.
+_Travel Suppliers:_
+Depending on your Travel Product booking, we collaborate and share your personal data with various Travel Suppliers, which are primarily accommodation providers (e.g. third party hotels, homes), other third-party accommodation platforms, airlines, activities providers, transportation services providers, eSIM providers or aggregators of such services to fulfill your booking.
+We may also share your personal data (such as name, booking ID) with these Travel Suppliers (e.g. Booking.com) for reconciliation and commission-sharing purposes. These suppliers, acting as independent data controllers, may contact you as necessary to obtain additional information about you to facilitate your booking, including communicating with you prior to arrival about your upcoming stay, or responding to a review you may submit in accordance with their own independent privacy policies. Please note that some Travel Suppliers might require us to share your personal data with a partnered connectivity service provider to facilitate the completion and management of your booking. These connectivity services providers operate on behalf of the Travel Suppliers to assist in handling their reservation processes.
+_Service Providers:_
+To support us in providing our services we use third party service providers that may process your personal data for purposes such as payment processing, business analytics, customer service, marketing, distribution of surveys, to facilitate the delivery of online services, insurance, security, IT infrastructure services and/or fraud prevention. Some third party service providers (e.g. payment service providers such as [Wise](https://wise.com/gb/legal/privacy-notice-personal-en) and [Adyen](https://www.adyen.com/privacy-policy)) may process your personal data as data controllers under their own privacy notices, for purposes such as to meet their legal or regulatory obligations, or support and improve the delivery of their services to us.
+When a chargeback is requested for your reservation, we may need to share relevant booking details with payment providers and financial institutions to process or defend the chargeback. We may also share information with relevant financial institutions if we consider it necessary for fraud prevention, such as the use of stolen cards.
+We may also engage with service providers, such as advertising partners, for the delivery of content and advertising tailored to your interests with which we may share one-way hashed information about you. They may combine the hashed information with other identifiers to facilitate the delivery of business analytics on advertising effectiveness. As this may involve cookies (or similar technologies) please also check " [Section 5. Cookies".]()Our third-party service providers are required to only process information as needed to perform their functions.
+_Business Partners:_
+We may share your personal data with business partners, acting as independent controllers, with whom we may integrate our Travel Products or services, or whose products or services may be offered on our Platform. You can tell when a third-party business partner is involved in a product or service you have requested because their name will appear, either alone or with ours. Examples of business partners include third-party loyalty program providers that you may earn points from when you make certain Travel Product bookings on our Platform, banks, other online travel agencies (OTAs) etc.
+_Affiliated Group Companies:_
+We may share your personal data with our affiliated (group) companies who need to know and have access to this information with our permission to analyze how you use our independent and affiliated platforms, improve and provide new and personalized offers, products and services, and marketing; the exchange of your personal data with Booking Holdings Group companies in order to detect, prevent, and investigate fraudulent transactions and/or activities, other illegal activities, and data breaches; internal (audit/compliance) investigations; where these affiliated (group) companies may offer products or services on our Platform including but not limited to the AgodaWallet offering by BHFS UK; or as otherwise required or permitted by applicable law.
+_Law Enforcement Authorities & Legal Advisors (Where Required or Permitted by Law):_
+We may share your personal data to protect ourselves against liability or, to respond to subpoenas, judicial processes, legitimate requests, warrants or equivalent by law enforcement officials or authorities, to investigate fraud or other wrongdoing or as otherwise required or necessary in order to comply with applicable law, protect our legitimate interests or those of the purchasers in connection with any sale, assignment, or other transfer of all or a part of our business or company. We may also, in compliance with applicable law, disclose your personal data to enforce or apply the terms and conditions applicable to our services or to protect the rights, property, or safety of Agoda, our users, or others.
+_Any other third party in case of Business Reorganization:_
+We may share your personal data as part of any sale, assignment or other transfer of our business, or transition of service to another provider.
+**5.Cookies**
+Our Platform may use and allow third parties to place cookies (session and persistent), pixels/tags, software development kits (usually referred to as SDKs), application program interfaces ("APIs"), and other tracking technologies (collectively, "Cookies") on our Platform that may collect and store certain information about you.
+_What Cookies do we use?_
+You can find more information about the types of Cookies we use and the purposes for which we use them in the table below:
+| Type of cookie | Purpose | Duration until expiry |
+| --- | --- | --- |
+| Functional Cookies | These cookies are set to provide the service, application, or resource requested. Without these cookies, your request cannot be delivered appropriately, and our website may not function as expected or in a secure way. These trackers are set to manage essential actions, such as requesting website visual elements, page resources, or due user login/logoff. We can also use these cookies to set up essential functionalities to guarantee the security and efficiency of the service requested, like authentication and load balancer requests. | Up to 2 years |
+| Targeting Cookies | We and our advertising partners set these cookies to provide tailored content and ads, interest-based advertising and perform analytics. They may be used to build a profile of your interests and show you relevant content and ads on this or other sites/apps. They may not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. | Up to 2 years |
+| Social media Cookies | These Cookies are used when you share information using a social media sharing button or "like" button on our Platform, or when you engage with our content on or through a social site such as Facebook or X (formerly known as Twitter). These Cookies collect information about your social media interaction with social media sites, such as whether or not you have an account with the social media site and whether you are logged into it when you interact with content on their sites. This information may be linked to targeting/advertising activities. | Up to 2 years |
+_Third Parties:_
+Your use of the Platform may result in some Cookies being stored that are not controlled by us. This may occur when the part of the Platform you are visiting makes use of a third-party analytics or marketing automation/management tool or includes content displayed from a Third-Party Website. You should review the privacy and Cookie policies of these services to find out how these third parties use Cookies and whether your Cookie data will be transferred to a third country. The list of third parties who place Cookies on our Platform is available in our cookie banner (see also more in ["Section 4. Who do we share your personal data with?")]()
+_Interest Based Advertising:_
+We may allow certain third parties to place Cookies on our Platform to collect information about your online activities on our Platform (e.g., pages visited on the Platform and searches you performed) across different websites you visited. This information is used to provide advertising tailored to your interests from us (via email, on our Platform, and on other websites) and by third parties on other websites you may visit, also known as interest-based advertising and to analyze the effectiveness of such interest-based advertising. We may also share one-way hashed information with third party partners (e.g., Meta, Google), who may combine hashed information with other identifiers in order to serve custom Agoda advertisements on other websites or mobile apps based on your prior visits to the Platform or to facilitate the delivery of business analytics on advertising effectiveness. Agoda neither supports nor endorses the goals, causes, or statements of any websites or mobile apps that display our advertisements.
+_Cross-Device Tracking:_
+We may also combine information collected through Cookies and certain usage information from a particular browser or mobile device with another computer or device that may be linked to you (cross-device tracking) to optimize our services and provide tailored Agoda communications and advertisements to you. If you do not wish to receive such tailored communications from us, please unsubscribe from the specific Agoda communications channels and/or adjust your mobile device or desktop setting.
+_Local Storage:_
+In addition to Cookies, our Platform uses local storage technologies like HTML5 local storage, session storage, and similar technologies to enhance your experience. Local storage allows us to store information directly on your device without expiration until explicitly deleted, whereas session storage is deleted automatically once the browsing session ends or when the app is closed. This data helps us remember your preferences, optimize performance, and provide enhanced functionalities.
+You have full control over the data stored in local storage. To manage or delete the data, you can use your browser's built-in developer tools or your app's storage settings.
+_Your Choices:_
+Cookie management options, including choices about types of cookies used, are provided in accordance with the laws and regulations of your region. To review or adjust your Cookie preferences, please follow the instructions shown in the cookie banner, your account settings or your browser.
+Please review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies. If you disable or delete certain Cookies in your Internet browser settings, you might not be able to access or use important functions or features of this Platform, and you may be required to re-enter your log-in details.
+To learn more about certain Cookies used for interest-based advertising (including through cross-device tracking) and to exercise certain opt-out choices you may have regarding such n Cookies, please visit the [Digital Advertising Alliance](https://optout.aboutads.info/), [Network Advertising Initiative](http://optout.networkadvertising.org/), or [Digital Advertising Alliance-Canada](http://youradchoices.ca/choices), or for our mobile app, by updating your device settings or downloading the App Choices app.
+Please also visit the following third parties' websites to exercise certain opt-out choices over Cookies and other use of your data by these parties:
+- Google Analytics - [https://tools.google.com/dlpage/gaoptout?hl=en](https://tools.google.com/dlpage/gaoptout)
+- Appsflyer (mobile app analytics) - By emailing appsflyer at: [privacy@appsflyer.com](https://agoda.com/info/privacy@appsflyer.com)
+- Baidu - [http://www.baidu.com/duty/safe\_control.html](http://www.baidu.com/duty/safe_control.html)
+- Apple - [https://support.apple.com/en-us/HT202074](https://support.apple.com/en-us/HT202074)
+- Facebook - [https://www.facebook.com/ads/settings](https://www.facebook.com/ads/settings)
+- Google Ads - [https://adssettings.google.com/](https://adssettings.google.com/)
+- Criteo - [https://www.criteo.com/privacy/](https://www.criteo.com/privacy/)
+- TikTok - [https://www.tiktok.com/legal/report/privacy](https://www.tiktok.com/legal/report/privacy)
+By exercising such choices regarding interest-based advertising, you may still receive advertisements, but the network from which you opted out will no longer deliver ads tailored to your interests. You should also know that logging out of your user account does not actually mean that you opt out of personalized advertisements.
+You may need to make such choices on each browser and device you may use to exercise choice regarding certain Cookies. Lastly, at this time the Platform is configured to honor browsers' "Do Not Track" signals, only where required by applicable law.
+**6\. Cross border transfer of your data**
+We implement appropriate safeguards for cross-border data transfers as required by applicable laws.
+Agoda is a global business. In connection with "How we use your personal data" as described above, your personal data may be transferred, stored and maintained at locations outside of your home country which may not have the same data protection laws. We maintain its confidentiality, ensure appropriate contractual, organizational and technical protections, and comply with the relevant international data transfer requirements as described in this Privacy Policy and as required by applicable law.
+Where required, we may rely on your consent, prescribed model clauses or standard contractual clauses and/or the need to process your personal data in order to provide the requested services (performance of a contract), to transfer your personal data.
+As permitted by applicable law, you may request details about the safeguards we have in place by contacting us as detailed in ["Section 11. Who is responsible for the processing of your personal data and how to contact us?" below.]()
+**7\. How do we protect your personal data?**
+We maintain reasonable physical, technical and organizational security measures to protect your personal data against accidental or unlawful destruction or accidental loss, alteration, or unauthorized disclosure or access.
+_Payment Data Security_
+We adhere to industry best practices and standards (PCI-DSS) to protect your payment data such as encryption, stringent access control, etc.
+_Protection of your personal data by a Third Party_
+Third party we share your personal data with in order to provide our Travel Product services to you are contractually obligated to keep your data secure and confidential.
+_Account Security_
+Consistent with this policy and our [Terms of Use](https://agoda.com/info/termsofuse.html), you are responsible for the data and content you submit to us and how you use your Agoda Account, including taking reasonable measures to make your account secure. For added protection, we strongly recommend that you set up two-factor authentication for your Agoda Account. This adds an extra authentication step, to help ensure that anyone who gets hold of your username and password (e.g., through phishing or other similar techniques) won't be able to get into your account. You can set this up via your account settings.
+**8\. How long do we retain your personal data?**
+We will retain your personal data, including sensitive personal data, for as long as necessary to facilitate your bookings and related requests, to communicate with you, provide, administer and secure our Platform and services, to exercise our legal rights, to resolve disputes and legal claims, protect our or other's interests, and comply with our legal or regulatory obligations.
+When we no longer need to keep your personal data, we will remove it from our IT systems and records where feasible, and/or deactivate it and/or take other reasonable steps so that you can no longer be identified from the data. You can always log into your personal Agoda account to delete, edit, or add your personal data including certain payment details. For security reasons, the credit card number cannot be edited (but the card details can be deleted).
+Please note that we will store the last 4 digits of your credit card securely upon any booking made (this is required to manage any refund requests for that booking).
+**9\. Your rights pertaining to the personal data we collect about you (DSRR)**
+You can easily correct your personal data related to your account (subject to the cancellation policy attached to the booking) at any time by signing in to your account on the website.
+You can opt out of receiving marketing communications from us at any time by using the "Unsubscribe" link or opt out mechanism in our marketing communication channels or through your Agoda account (depending on the channel you are trying to opt-out from).
+Alternatively, please contact us via our [Customer Support page](https://www.agoda.com/info/contact.html) or at [privacy@agoda.com](https://agoda.com/info/privacy@agoda.com) to exercise any of the rights in bullet points below, to the extent such rights are granted to you under applicable laws and regulations.
+Please note that to protect your privacy and security, we will verify your identity before responding to such request, and your request will be answered within a reasonable timeframe.
+- **Access:** You may be entitled at any time to obtain information about your personal data that we store, in accordance with applicable law and without any fee. However, in exceptional cases and where so permitted by applicable law, we may ask you to pay reasonable fees before we provide the information. We may not be able to allow you to access certain personal data in some cases e.g. if your personal data is connected with personal data of other persons, or for legal reasons. In such cases, we will provide you with an explanation why you cannot obtain this information.
+- **Rectification:** You may request that we rectify any of your personal data that is incomplete or incorrect.
+- **Deletion:** You may request that we delete your personal data. Please note, we may not be able to honour your request for deletion or rectification of your personal data if you have future/ongoing service with us or due to legal requirements, especially those affecting our accounting processes, processing or defence of claims, for fraud detection or prevention purposes, and mandatory data retention, which may prohibit deletion or anonymization.
+- **Restrictions of Processing:** : You may ask us to cease processing of your personal data, for example if you have objected to the processing and the existence of legitimate grounds are still under consideration.
+- **Objection:** You may object, at any time, to your personal data being processed for direct marketing purposes. You may also opt out of receiving marketing communications from us at any time by using the "Unsubscribe" link or opt-out mechanism in our marketing communication channels or through your Agoda account (depending on the channel you are trying to opt-out from).
+- **Right to Revoke Consent:** Where processing of your personal data is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of our processing based on such consent before it was withdrawn.
+- **Data Portability:** If under law there is an applicable data portability requirement, you may request us to send you your personal data which we store, in a commonly used and machine-readable format (which shall be decided at our sole discretion).
+- **Right to opt-out of profiling/ automated decision making:** You may have the right to opt out of processing of your personal data for purposes of profiling or automated decision making that produce legal or significant effects on your freedom.
+We may not be able to allow you to access certain personal data in some cases e.g. if your personal data is connected with personal data of other persons, or for legal reasons. In such cases, we will provide you with an explanation why you cannot obtain this information. We may also deny your request for deletion or rectification of your personal data if you have future/ongoing services with us or due to legal requirements, especially those affecting our accounting processes, processing or the defence of claims, for fraud detection or prevention purposes, and mandatory data retention, which may prohibit deletion or anonymization. This includes retaining your personal data for a period of 120 days after your last checkout to handle any post-booking matters such as in the case of complaints or claims, for fraud prevention, trade sanction reasons, legal claims or requests.
+For other country specific rights please see ["Country-Specific Provisions " section]() below. These prevail over the above to the extent of any inconsistency.
+In some cases, the law may prevent us from complying with your request or allow us to refuse your request.
+**10\. About this privacy policy**
+On occasion, Agoda may revise this Privacy Policy to reflect changes in the law, our information collection and use practices, the features of our Platform, or advances in technology. If we make revisions that change the way we collect or use your personal data, those changes will be posted in this Privacy Policy and the effective date will be noted at the beginning of this Privacy Policy. Therefore, you should review this Privacy Policy periodically so that you are up to date on our most current notice and practices.
+_Language_
+This Privacy Policy has originally been drawn up in the English language. Translations in other languages are available for your convenience. In case of conflict between the English language version and a translated version, the English language version shall prevail.
+_Terms of Use_
+Please review the Agoda Terms of Use for more details on using our Platform. This Privacy Policy forms an integral part of our Terms of Use.
+**11\. Who is responsible for the processing of your personal data and how to contact us?**
+If you have any questions or complaints about this Privacy Policy or our privacy practices, please contact our Agoda Data Protection Officer by email at [privacy@agoda.com](mailto:privacy@agoda.com) or by sending a registered letter to the address at:
+Agoda Company Pte. Ltd.
+c/o Data Protection Officer
+Robinson Road
+#20-01 City House
+Singapore 068877
+Please note that to protect your privacy and security, we will verify your identity before responding to such request.
+We treat all complaints seriously and will endeavor to investigate and respond to you on the concerns raised within a reasonable timeframe. If you have unresolved concerns, you may have the right to refer the matter to an appropriate data protection authority.
+If you reside in the EU, you may also contact our local representative, Agoda International Hungary Kft 1139 Budapest
+Fistyúk utca 4-8., 2. em., or your local data protection authority with any questions or complaints about our privacy practices.
+If you reside in Thailand, you may also contact our local representative, Agoda Services Co., Ltd. (Head Office) 193, One Bangkok Tower 5 27th - 33rd Floor, Wireless Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand or your local data protection authority with any questions or complaints about our privacy practices.
+If you reside in Türkiye, you may also contact our data controller representative, Esin Avukatlık Ortaklığı, resident at Akat Mahallesi, Gül Sokak No:2/1 Beşiktaş / İSTANBUL. Please note that Esin Attorney Partnership only represents us for your requests within the scope of this Privacy Policy and the Law on Protection of Personal Data No. 6698. Therefore, we kindly ask you to reach out to Esin Attorney Partnership only for your questions and complaints regarding the protection of your personal data. If you have any questions and/or concerns about your reservations, cancellations, payments and refunds, you can always reach out to us via Customer Support page.
+Domestic Representative in Korea: Pursuant to the Personal Information Protection Act and the Act on the Promotion of the Use of the Information Network and Information Protection, information regarding the domestic agent is as follows:
+Name and representative: Agoda Payments Korea LLC (Representative: Joon Hwan Lee) Address, phone number, and email address: (Eulji-ro 2-ga, Pine Avenue Tower A) 9F, 100 Eulji-ro, Jung-gu, Seoul 04551, +82 2 3404 0105, [privacy@agoda.com](mailto:privacy@agoda.com).
+**12\. Country-specific provisions**
+Depending on the jurisdiction applicable to you, we may be obligated to furnish additional data. If relevant, you will find specific details pertaining to your country or region outlined below.
+**United States**
+_US Residents (non-California):_
+We collect, use, and disclose Personal Data as described in the other sections of this Privacy Policy.
+Depending on the state where you reside, you may have specific rights under local state legislation to:
+- request access (right to know) to your Personal Data, such as the Personal Data that we have collected about you;
+- request rectification (correction) of your Personal Data;
+- request erasure (deletion) of your Personal Data;
+- request restriction of processing of your Personal Data;
+- request data portability (port your Personal Data);
+- opt out of certain sales, sharing and targeted advertising;
+- object to the processing of your Personal Data, including opting out of automated decision-making, including profiling, with significant legal effect;
+- request the Personal Data about you that we have "sold"(as such term is defined under applicable law), shared, or disclosed for a business purpose within the past 12 months; and
+- appeal a decision to decline a request.
+Please contact us on our [Customer Support page](https://agoda.com/info/contact.html) or at [privacy@agoda.com](mailto:privacy@agoda.com) to exercise such rights. In some states, you can designate an authorized agent to make a request on your behalf. We will comply with your request as soon as reasonably practicable and as required by applicable law. You may also have the right to lodge a complaint with a supervisory authority.
+To protect your privacy and security, we will verify your identity before responding to such request and may require you to provide us with information matching the identifiers and commercial information already maintained by Agoda about you or additional proof where necessary. If you are making this request on behalf of someone else, we may request the authorized agent to provide us with a copy of a valid power of attorney or evidence of the written authorization.
+Please note that we may need to retain certain information for recordkeeping purposes, to complete any transactions that you began prior to your request, or for other purposes as required or permitted by applicable law. In any event, should you choose to exercise any of your rights as detailed above, we will not discriminate against you based solely on your request.
+In certain jurisdictions, if we refuse to act on a request, you may appeal our decision within a reasonable period of time by contacting us as outlined below in the ["Who is responsible for the processing of your personal data and how to contact us?" section]() and specify your wish to appeal. Within 45 days, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. If the appeal is denied, you may submit a complaint to the appropriate regulatory authority for your jurisdiction.
+_California Residents:_
+If you are a resident of California, we are required by the California Consumer Privacy Act ("CCPA"), as amended by the Consumer Privacy Rights Act ("CPRA") (collectively, "California Privacy Law") to provide you with information about how we use and disclose your personal data, and you may have certain rights with regard to your personal data. We have included this California-specific information below.
+**CA Personal Data**. Consistent with the ["What personal data do we collect about you?" section]() of this privacy policy, we may collect and process certain categories of personal data about California residents ("CA Personal Data"), such as:
+- **Identifiers:** name, location, phone number, e-mail address, passport details, Agoda account password, IP address, device ID, cookie ID, information collected via Cookies;
+- **Commercial Information:** payment card details, name of and details about your accommodation, services purchased, search preferences, transaction history, demographic information;
+- **Internet or Other Electronic Network Activity:** browser, operating system, application version, pages shown;
+- **Geolocation Data:** you may grant us access to your location information in order to provide services requested by you;
+- **Audio Information:** we may record your calls to our support team with your permission;
+- **Inferences:** drawn from the information collected; and
+- **Other Information:** information associated with a tour or activity booking, including your passport details, date of birth, height and weight, pick-up location, your preferred tour/activity language, and information about any special requirements that we need to consider in connection with your participation in the respective tour/activity.
+**CA Sensitive Personal Data.** Certain CA Personal Data that we collect about you may be considered sensitive personal data within the meaning of California Privacy Law, including: passport details (for transactional purposes), payment card information (for billing and transactional purposes in connection with Travel Products or other ancillary services purchased), and precise geolocation information (for providing services). Agoda only uses and discloses sensitive personal data as necessary in connection with the performance of services and the provision of goods, compliance with federal, state, or local laws, and as otherwise permitted by California Privacy Law.
+**Sources of CA Personal Data.** Consistent with the ["What personal data do we collect about you?" section]() of this privacy policy, we may collect personal data directly from you, as well as from Travel Suppliers, Accommodation Partners, business partners (including social media), and our affiliated group companies.
+**Use of CA Personal Data**. We process your personal data for the business and commercial purposes consistent with the the ["What personal data do we collect about you?" section]() above.
+**Disclosure of CA Personal Data for Business Purposes.** We disclose the following categories of personal data for business purposes: Identifiers, Commercial Information, Internet or Other Electronic Network Activity, Geolocation Data, Audio Information, and Other Information to web hosting, payment card and payment processing, business analytics, customer service, and business partners.
+**Selling or Sharing of CA Personal Data.** We may disclose the following categories of personal data for commercial purposes: Identifiers, specifically, preferences and interests on our Platform, collected via Cookies to advertising technology providers and, in limited instances, email addresses in hashed format, to social media companies, marketing, and survey service providers. These are sharing activities that are considered a sale under California Privacy Law.
+**Retention of CA Personal Data.** We retain your personal data consistent with the ["How long do we retain your personal data" section]() .
+**Your Rights under California Privacy Law:**Subject to certain exceptions detailed in California Privacy Law and other applicable laws and regulations, as a California resident you have the right to:
+- Request to know/access/rectify your CA Personal Data, including the specific pieces and the categories of CA Personal Data we have collected or shared about you and the categories of sources from which we have collected the CA Personal Data;
+- Request deletion of your CA Personal Data;
+- Receive information about the CA Personal Data about you that we have "sold" to (as such term is defined under California Privacy Law) or "shared" with third parties within the past 12 months, including the categories of third parties;
+- Limit the processing of Sensitive Data, as defined by California Privacy Law;
+- Opt-out of the "Sale" or "sharing" of your CA Personal Data, as such terms are defined under California Privacy Law; and
+- Not be discriminated against for exercising any of the above rights.
+**Authorized Agent.** You can designate an authorized agent to make a request under California law on your behalf in certain circumstances. If you use an authorized agent for this purpose, we may ask you to verify your identity or that you provided the authorized agent signed permission to submit a request on your behalf. If you provide an authorized agent with power of attorney pursuant to Probate Code sections 4000 to 4465, it may not be necessary to perform these steps, and we will respond to any request from such authorized agent in accordance with California law.
+**Notice of Financial Incentive.** To the extent Agoda engages in financial incentives in connection with sweepstakes, loyalty programs, competitions, or other activities, we will provide information describing the material terms of the program and will obtain opt-in consent from users before they participate. Users can opt-out from a program at any time by following the instructions provided in such terms.
+**Right to Appeal Your Rights Requests.** You have the right to appeal our refusal to take action on your request. To exercise this right, you may submit your appeal in writing by contacting [privacy@agoda.com.](mailto:privacy@agoda.com) If your request to exercise your data subject rights is rejected, you will receive a notification with the details of reason for rejection and instructions about how to make an appeal. We will respond to you within 45 days of your appeal submission. If your appeal is denied, you may contact the Attorney General of California.
+To protect your privacy and security, we will verify your identity before responding to such request and may request you to provide us with information matching the identifiers and commercial information already maintained by Agoda about you or additional proof where necessary. If you are making this request on behalf of someone else, we may request the authorized agent provide us with a copy of a valid power of attorney or evidence of the written authorization. You will not be penalized for exercising your rights.
+**Türkiye**
+If you are a Turkish resident, the processing of your personal data will be subject to Law No. 6698 on Protection of Personal Data of Turkey ("Turkish Data Protection Law"). In this regard, the following terms apply to you, and in the event of any conflict between the following additional terms and the provisions of the rest of the policy, the following terms shall prevail.
+Your rights: According to Article 11 of the Turkish Data Protection Law, you have the following rights with respect to your personal data:
+- the right to learn whether we process your personal data
+- the right to request information with regard to such processing, if we process your personal data
+- the right to learn the purposes of the processing and whether they are used for such purpose or not
+- the right to know the third parties within or outside the country, to whom we transfer your personal data
+- the right to request correction of incomplete or inaccurate personal data
+- the right to request deletion or destruction of your personal data under the conditions set forth in Article 7 of the Turkish Data Protection Law
+- the right to request that we notify the third parties, to whom we transferred your personal data, about the correction, deletion and/or destruction of your personal data per your request within the scope of the foregoing two items
+- the right to object to the negative results about you that are due to the analysis of your personal data processed solely by automated means
+- the right to claim indemnification for damages incurred due to illegal processing of your personal data
+**Special Categories of Personal Data:** We rely on your explicit consent to process your special categories of personal data as defined under Turkish Data Protection Law in the absence of other applicable legal grounds.
+**Cookies:** If you live in Türkiye, we rely on your explicit consent (opt-in consent) when processing your personal data through non-essential (i.e. non-Functional Cookies as explained under "Cookies") cookies.
+**Marketing Communications:** Under E-Commerce Law No. 6563 and secondary legislation, as a service provider, we rely on your explicit consent (opt-in consent) when sending marketing communications to you.
+**International Data Transfers**: In the event that we transfer your personal data to third parties in countries other than Turkey, we will comply with the requirements under the Turkish Data Protection Law, including obtaining your explicit consent, where and if necessary.
+**Japan**
+Under Japanese privacy law, you may have the right to request further information about our personal data processing, for example, requesting further information about our security control measures, the procedures for exercising your privacy rights and our representative details. If you would like to request this information, please reach out to [privacy@agoda.com](mailto:privacy@agoda.com) with "Japan Privacy Request" in the subject line.
+**Saudi Arabia**
+**Cross border data transfer:** We may transfer personal data outside of the Kingdom of Saudi Arabia. In such cases, transfers are in reference to applicable data protection laws, including the Personal Data Protection Law in the Kingdom of Saudi Arabia, promulgated by Royal Decree No. M/19 of 9/2/1443H.
+**Complaint to the SDAIA:** If you are not satisfied with how we process your complaint, or if we fail to respond, you can file a complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA). The contact details of the SDAIA can be found on their website (www.sdaia.gov.sa) and on the National Data Governance Platform (dgp.sdaia.gov.sa)
+**Russia**
+If you are a Russian resident, we record, systematize, accumulate, store, clarify (update, change), extract your personal data using databases located on the territory of Russia. For this purpose, we use a third-party service, Yandex Cloud. Its provider (IRON HIVE DOO BEOGRAD (Bulevar Vojvode Bojovica 12 11000 Stari Grad, Belgrade, Serbia)) does not have access to your personal data, but acts as a data controller as it carries our storage of personal data on its facilities.
+**China**
+If you are a Chinese resident using our Platform, you authorize us to share your information with the Chinese authorities, including the State Tax Administration, either directly or through our affiliated group companies or service providers, in response to an information request or reporting requirement under Chinese laws. We may require you to furnish us with such additional information as the Chinese authorities may require, from time to time, in order to satisfy such information request or reporting requirement.