BusinessHotels.com Privacy Policy
This Privacy Policy applies to BusinessHotels.com websites, hotel discovery tools, AI-assisted hotel tools, account features, support interactions, marketing, APIs and other services that link to it. It should be read with our booking Terms, Cookie Policy and applicable booking-provider terms. The Terms address booking responsibilities and dispute procedures; this Policy explains our information practices and privacy choices.
Scope, company and privacy roles
BusinessHotels.com is operated by Asian Airfares Group, LLC, based in San Francisco, California. In this Policy, “BusinessHotels.com,” “we,” “us” and “our” refer to BusinessHotels.com services operated by Asian Airfares Group, LLC.
BusinessHotels.com works with some of the world’s largest and most established travel companies, hotel suppliers and booking partners to provide competitive prices, special rates, extensive hotel inventory and reliable booking support. Hotel content, rates, support services and inventory are provided under applicable partner agreements and licenses.
We control information collected directly through BusinessHotels.com for our own purposes. When a booking provider, hotel, payment processor, social-login provider or other third party determines how and why it processes information, its own privacy notice applies. In some circumstances, parties may act as separate controllers or processors for different portions of the same travel journey.
This Policy does not promise that every data category, purpose or recipient described below applies to every visitor. Actual processing depends on the feature used, the information provided, location, consent choices and the provider involved.
Information we may collect
Unlock Preferred Rates: We use your email only to unlock Preferred Rates. It is processed temporarily and is not stored by our rate-unlock application. A temporary access token unlocks rates for up to one hour. No credit card or payment method is required or used.
Name, email address, telephone number, postal address, account identifier and authentication information you provide.
Destination, dates, occupancy, children’s ages, hotel preferences, language, currency, country, special requests and selected properties.
Booking reference, provider, property, room, price, status, cancellation or support information and transaction history made available to us.
Payment status or limited transaction references. We do not store customer credit-card details or saved payment methods on our servers. Payment details for reservations are handled by the hotel or booking supplier and its payment processor.
IP address, browser, device, operating system, referring page, timestamps, page views, clicks, logs, diagnostic and security signals.
Approximate location derived from IP address and, only with device permission, more precise location used for features such as Hotels Near Me.
Support messages, privacy requests, feedback, survey responses and other communications with us or participating support providers.
Registration, sign-in, password-reset, account preference and social-login information made available by the login method selected.
Hotel names, destinations, dates, preferences, prompts and tool responses submitted to AI Hotel Finder, ChatGPT integrations or agentic API features.
Campaign, click, affiliate, conversion and referral identifiers, subject to applicable law and consent settings.
Likely travel interests, preferred destinations or service preferences derived from searches and interactions.
Rate limits, session patterns, verification results and indicators used to identify bots, scraping, invalid traffic or unauthorized activity.
Privacy preferences and, when recorded in the applicable service or made available to us, the Terms version, acceptance action, timestamp and related booking or session reference.
Please do not submit sensitive information unnecessarily. Do not place passport numbers, complete payment-card details, government identifiers, health information or confidential documents into search boxes, AI prompts or ordinary support messages.
If you provide information about another traveler, you represent that you are authorized to do so and will make this Policy and the relevant provider’s notice available to that traveler.
Sources of information
- Directly from you: searches, accounts, forms, support communications, privacy requests and booking-related interactions.
- Automatically: cookies, local storage, server logs, security systems, analytics and device or network signals.
- Travel and booking providers: availability, reservation status, customer-service records, limited transaction details and provider identifiers.
- Referral and platform partners: search engines, hotel metasearch platforms, advertising services, affiliate networks, social-login services and ChatGPT or other tool platforms.
- Other travelers or organizations: a person, employer, travel organizer, authorized AI assistant or other representative arranging services for you.
- Public or licensed sources: hotel, destination and business information made available publicly or under partner licenses.
Google Hotel Ads and free booking links, for example, may pass hotel identifiers, dates, occupancy, country, language, currency, campaign or click information and verification parameters needed to display an appropriate landing experience and protect it from abuse.
When you authorize an AI assistant or another agent to interact with our Services, we process the information it sends through the relevant request. The platform or agent provider may separately process your messages and activity under its own privacy notice.
How we use information
Run searches, return hotel content and rates, preserve search context and connect you with an appropriate booking provider.
Register and authenticate users, reset passwords, locate trips, respond to questions and coordinate reservation support.
Remember language, currency, destination and other settings and tailor relevant hotel or destination content.
Understand traffic and performance, diagnose errors, test improvements and evaluate products and campaigns.
Authenticate legitimate traffic, protect landing pages, prevent fraud and scraping and investigate misuse or technical incidents.
Send service, reservation, account, security, support and, where permitted, promotional communications.
Maintain records, enforce terms, handle disputes, comply with law and manage audits, corporate transactions and reporting.
Create statistics and insights that do not reasonably identify an individual and use them for lawful business purposes.
Search ranking, fraud screening and personalization may use automated methods. Security or verification systems may flag a request for review or interrupt processing. Booking and payment providers may operate their own systems under their notices. Where applicable law provides safeguards or rights concerning automated decisions, those rights apply to the processing concerned.
Legal bases where required
Where privacy law requires a legal basis, processing may rely on:
- Contract or steps at your request: to provide searches, accounts, reservation connections and support you request.
- Legitimate interests: to operate, secure, improve and measure services; prevent fraud; maintain relationships; and communicate about similar services, balanced against your rights.
- Consent: for optional cookies, precise device location, certain marketing or another purpose presented when consent is requested. Consent can be withdrawn for future processing.
- Legal obligations: for tax, accounting, consumer-protection, regulatory, sanctions, law-enforcement or other requirements.
- Legal claims and vital interests: where necessary to establish, exercise or defend claims, protect safety or respond to an emergency.
Not providing information may prevent us or a provider from supplying a requested account, search, reservation, payment or support service.
Booking partners, hotels and licensed content
Our Priceline-powered hotel offers use inventory, rates, availability and licensed hotel content supplied through Priceline Partner Solutions (PPS), Priceline's partner distribution business. Priceline.com LLC is part of Booking Holdings Inc. BusinessHotels.com is independently operated by Asian Airfares Group, LLC. Other identified providers may supply separate services.
Review the privacy notice presented for your particular booking. The Priceline Privacy & Cookies Policy (opens in a new tab) provides information about Priceline's processing; the provider notice identified in your actual checkout determines the processing it covers.
When you select a rate, make or manage a reservation, provide payment information, request cancellation or seek booking support, the applicable hotel, booking provider, payment processor or support provider may collect information directly or receive information necessary to complete the service. That party may be identified in the booking flow, confirmation, payment page or support channel.
BusinessHotels.com does not independently control every rate, tax, fee, availability rule, cancellation term, payment process, hotel service or provider support interaction. Provider-controlled processing is governed by that provider’s terms and privacy notice. Contact the provider shown in your confirmation for reservation-specific privacy questions.
How information may be disclosed
- Hotels, booking and travel providers for searches, reservations, fulfillment, trip management, cancellations and support.
- Payment and fraud providers for transaction processing, identity or payment verification, chargebacks, security and risk management.
- Technology and operations vendors for hosting, content delivery, databases, email, authentication, support, monitoring, analytics and development.
- Advertising and referral partners for attribution, campaign measurement and advertising, subject to applicable law and consent choices.
- Affiliates and related services for integrated travel products, internal administration, security and lawful business operations.
- Government, regulators and legal parties when reasonably necessary to comply with law, legal process, safety, rights or fraud investigations.
- Transaction participants in a financing, merger, acquisition, reorganization, asset sale, insolvency or similar business event, subject to appropriate protections.
- Other parties at your direction when you ask us to share information or intentionally use an integrated third-party feature.
We do not sell personal information for direct monetary compensation. Some laws define “sale,” “sharing” or “targeted advertising” broadly enough to include certain disclosures of identifiers or online activity through optional advertising, analytics or affiliate technologies. Use the privacy choices below where those rights apply.
Cookies, advertising and privacy choices
Cookies, pixels, local storage and similar technologies can support essential functions, remember preferences, measure performance, attribute referrals and deliver or measure advertising. Our Cookie Policy and preference center explains the categories, typical durations and browser controls.
Essential booking cookies remain active. Cookies and browser storage needed for requested searches, reservation continuity, secure sessions, payment security or fraud prevention are distinct from optional tracking choices. An optional-tracking opt-out does not cancel a reservation or change the booking conditions you accepted.
Legacy “Do Not Track” signals are not consistently standardized. Where applicable law requires it, we treat a qualifying Global Privacy Control (“GPC”) signal as an opt-out request for the browser or device sending the signal.
Reading this Policy does not change your cookie preferences or booking details. This informational page does not use analytics or advertising tags and contains no controls that change browser storage. Required booking, session and payment-security technologies are handled by the applicable booking service.
For a BusinessHotels privacy choice or opt-out request, email info@businesshotels.com. Our Cookie Policy describes the separate choices available for optional technologies used elsewhere. Independent providers operate under their own notices.
Security, fraud prevention and abuse controls
We use reasonable administrative, technical and organizational measures designed to protect information. Measures may include encrypted transmission, access controls, authentication, monitoring, backups, data minimization, rate limiting, bot detection, request verification and incident-response procedures.
Security systems may analyze IP address, headers, cookies, session behavior, request frequency, device characteristics and provider verification signals to distinguish legitimate users and authorized search or booking traffic from bots, fraud, scraping or attacks.
Guest, payer, billing and contact information submitted by you or an authorized agent may be used or checked by the responsible provider to verify identity, payment authority or reservation details and to resolve incorrect-information or missing-confirmation issues. We may receive related status or support records when needed for our role. Use the approved checkout and verified support channels for any requested payment or identity information.
No website, database or transmission method is completely secure. Keep account credentials confidential, use a unique password and contact Support if you suspect unauthorized access. Do not send full payment-card details through ordinary email.
Security reports and unlawful demands
An allegation of unauthorized access, or possession of information said to have been stolen from BusinessHotels or a third party, does not by itself verify the allegation, establish the sender's identity or authority, or authorize disclosure of additional personal information. Any disclosure remains subject to the verification and authority requirements applicable to that request under this Policy and law.
We may use and retain relevant communications, technical logs and incident evidence as reasonably necessary to assess security reports, prevent fraud, protect information, establish or defend legal rights, or comply with legal obligations. Limited, relevant information may be shared with qualified security providers or legal advisers where reasonably necessary and lawful. Related disclosures and retention remain subject to the purposes, safeguards and legal requirements described in Sections 7, 9 and 10.
Our policy against ransom, blackmail, cyber extortion and purchasing stolen information is set out in our Terms & Conditions. Receiving, assessing or investigating a security report does not, by itself, confirm a breach, admit liability, accept a demand or create an entitlement to payment or a reward.
Nothing in this subsection limits our responsibilities under applicable privacy or data-protection law, including any required investigation, notification or reporting.
How long information is retained
We retain personal information only for as long as reasonably necessary for the purpose collected, including to provide services, maintain accounts, support reservations, comply with supplier agreements, prevent fraud, resolve disputes, enforce terms and satisfy legal, accounting or reporting obligations.
Retention depends on the information’s nature, sensitivity, operational need, security risk, applicable limitation periods and legal obligations. For example, transient search information may be retained briefly, while account, transaction, consent, security or support records may be retained longer. We may de-identify information instead of deleting it when permitted.
Where acceptance or verification records are maintained, their retention is based on the reservation or account lifecycle, the need to investigate fraud or billing disputes, applicable claim periods and required legal preservation. Any continuing retention must remain proportionate to those purposes and applicable law.
Hotels and booking providers set their own retention periods for information they independently control.
International data transfers
BusinessHotels.com is operated from the United States and serves travelers worldwide. Information may be processed in the United States and in countries where hotels, booking providers, technology vendors or support teams operate. Those countries may have different privacy laws.
Where required, transfers may rely on contractual protections, adequacy decisions, consent, necessity for a requested transaction or another lawful mechanism. The provider responsible for a reservation may use its own transfer safeguards described in its privacy notice.
Your privacy rights
Depending on your location, applicable law and our role, you may have rights to:
Request categories or copies of personal information and details about processing.
Ask us to correct inaccurate personal information, taking account of its purpose.
Request deletion, subject to reservation, security, legal and other permitted exceptions.
Receive certain information in a usable or machine-readable format where required.
Limit or object to certain processing, including direct marketing or processing based on legitimate interests.
Opt out of sale, sharing, targeted advertising or certain profiling where applicable.
Withdraw consent for future processing when consent is the legal basis.
Appeal a decision where provided by law or complain to an appropriate privacy authority.
Rights are not absolute. For requests that require verification, such as access, correction or deletion, we may need to verify identity, authority and jurisdiction and may deny or limit a request where law permits—for example, to protect another person, preserve security, fulfill a reservation, comply with a legal obligation or handle a manifestly unfounded or excessive request. A sale/sharing opt-out or qualifying GPC signal does not require identity verification; we may request only information needed to apply the choice to the relevant information.
We will not unlawfully discriminate against you for exercising a privacy right. Authorized agents may submit requests where law permits. We may request proof of authority where allowed, and direct identity verification only for a request that law permits us to verify.
Submit a privacy request by emailing info@businesshotels.com. Identify the request type, relevant account or service, and your country or U.S. state. Do not initially include passwords, full payment-card details or identity documents. We may provide verified instructions when additional information is needed.
U.S. state privacy disclosures
Residents of California and other U.S. states with comprehensive privacy laws may have the rights described above, subject to applicable thresholds and exemptions. Verification requirements depend on the type of request; sale/sharing opt-outs and qualifying GPC signals do not require identity verification. Rights can include access, correction, deletion, portability, opt-out of sale, sharing, targeted advertising or certain profiling, and an appeal of a denied request.
| Category | Examples | Typical sources | Business purposes | Typical recipient categories |
|---|---|---|---|---|
| Identifiers | Name, email, phone, account ID, IP address | You, devices, login and booking providers | Accounts, reservations, support, security | Travel, support, authentication and security providers |
| Customer and commercial records | Search, booking, transaction, property and support details | You, hotels and booking providers | Travel services, trip management, reporting | Hotels, travel, payment and support providers |
| Internet or network activity | Pages, clicks, referrals, browser, logs and interactions | Devices, cookies, analytics and security tools | Operation, measurement, security, attribution | Hosting, analytics, security and advertising providers |
| Geolocation | Approximate IP location; precise location with permission | Device, browser and network | Localization and Hotels Near Me | Location, map and travel providers as needed |
| Account credentials | Username, password hash, login or recovery data | You and authentication providers | Registration, authentication and security | Authentication, hosting and security providers |
| Communications | Support, feedback and privacy-request content | You and support providers | Respond, resolve and maintain records | Support, legal and travel providers as needed |
| Inferences | Likely hotel, destination or service interests | Search and interaction information | Personalization, measurement and improvement | Analytics or advertising providers when permitted |
| Sensitive information | Precise location with permission; account credentials | You, device and authentication services | Requested location feature and account security | Providers needed for the requested service |
Sale, sharing and targeted advertising
BusinessHotels.com does not sell personal information for money. Depending on the technology and governing law, optional disclosures of identifiers or internet activity to advertising, analytics or affiliate providers may be treated as sale, sharing or targeted advertising. Use the privacy-request contact or separate Cookie Policy controls described above, or enable a qualifying GPC signal where applicable. We do not knowingly sell or share the personal information of consumers under 16 for cross-context behavioral advertising.
California-specific notice
California residents may request the categories or specific pieces of personal information collected, correction, deletion and information about sources, purposes and recipient categories, and may opt out of sale or sharing. We do not use or disclose sensitive personal information for purposes that require a separate right-to-limit link unless our practices change.
California’s “Shine the Light” law may permit certain residents to request information about disclosures for third parties’ direct-marketing purposes. Contact us using the privacy-request email above; verification applies only where required for the request. California residents may also contact the California Privacy Protection Agency or Attorney General regarding applicable rights.
Appeals
Where state law provides an appeal right, email info@businesshotels.com with the subject “Privacy appeal” and identify the earlier request and decision. We will respond within the period required by applicable law and provide information about regulator contact options when required.
EEA, United Kingdom and other international rights
Where the GDPR, UK GDPR or comparable law applies, rights may include being informed, access, correction, deletion, restriction, portability, objection, withdrawal of consent and safeguards relating to certain automated decisions. You may also complain to the data-protection authority where you live, work or believe a violation occurred.
When we rely on legitimate interests, you may object based on your particular situation. You may object to direct marketing at any time. When consent is withdrawn, earlier lawful processing remains unaffected.
Canada, Brazil, Australia, New Zealand, Switzerland and other jurisdictions may provide additional rights. We will evaluate verified requests under the law that applies to the request and our processing.
Children and family travel
BusinessHotels.com is intended for adults and is not directed to children. You must be at least 18 to create an account or make a reservation through services intended for adults.
An adult arranging family travel may provide limited information such as a child traveler’s age when needed to return correct occupancy, room and rate options or to complete a reservation with a provider. The adult must be authorized to provide that information. We do not knowingly collect a child’s information directly for behavioral advertising.
If you believe a child submitted personal information without appropriate authorization, contact us so we can review and take appropriate action.
Third-party websites and integrated services
BusinessHotels.com may link to or embed hotel, booking, map, social, video, payment, advertising, AI, support and other third-party services. A new window, provider-branded page, login prompt or booking flow may indicate that you are interacting with another party.
We do not control an independent third party’s privacy, security or data-retention practices. Review its privacy notice before providing information. Your browser, operating system, app store or email provider may also process information independently.
Changes to this Policy
We may update this Policy when laws, technologies, providers, products or practices change. We will post the revised version here and update the effective date. If a change is material, we will provide additional notice or request consent where required.
We encourage periodic review, especially before using a new feature or making a reservation.
Contact and privacy requests
For privacy questions or a request, email info@businesshotels.com or contact Support. Tell us the account email, relevant page or booking provider, request type and country or U.S. state. Do not initially send passwords, full payment-card details or identity documents.
San Francisco, California, United States · info@businesshotels.com
A reservation-specific request may need to be sent to the hotel or booking provider identified in your confirmation because that party independently controls the relevant reservation or payment information.