HILTON GLOBAL PRIVACY POLICY

Audit Notice. The main text is the original Hilton text. The yellow sections contain specific references to Hilton and require verification and legal/factual adaptation before publication on happyssimosorrento.it. Even the unhighlighted descriptions of the treatments must be compared with Happyssimo’s actual activities. No automatic replacements were made.

Last updated: May 4, 2026

1. Introduction

2. Personal Information We Collect

3. Online and Mobile Information We Collect

4. User Rights and Choices

5. Choices Regarding Marketing Communications

6. How We Protect Personal Information

7. How We Disclose Personal Information

8. International Transfers

9. Data Retention Periods

10. Contact Information for Questions or Concerns

11. Changes to the Privacy Policy

Appendix A – Additional Provisions Applicable to Residents of Certain Countries and U.S. States

Appendix A-1 – California Residents

Appendix A-2 – Nevada Residents

Appendix A-3 – Residents of France

Appendix A-4 – Hong Kong Residents

Appendix A-5 – Residents of Turkey

Appendix A-6 – Residents of China

Appendix A-7 – Residents of Brazil

Appendix A-8 – Residents of Monaco

Appendix A-9 – Residents of Nigeria

Appendix A-10 – Korean Privacy Regulations

Appendix A-11 – Residents of Mexico

Appendix A-12 – Residents of Albania

Appendix B – Hilton Premium Club Program in Japan

1. Introduction

Hilton’s mission is to be the most hospitable company in the world. Providing guests with exceptional experiences is our passion, and we look forward to welcoming you to our hotels to share with you the warmth and joy of hospitality.

We are committed to providing the highest level of customer service, which includes respecting your privacy and protecting your personal information. In this Privacy Policy (“Policy”), we provide you with information about how we collect, use, and disclose your personal information.

This Privacy Policy applies to Hilton Worldwide Holdings Inc., its affiliates, and all hotels within the Hilton brand portfolio (collectively, “Hilton” or “we”). The Hilton brand portfolio includes Waldorf Astoria Hotels & Resorts, LXR Hotels & Resorts, Conrad Hotels & Resorts, Canopy by Hilton, Signia by Hilton, Hilton Hotels & Resorts, Curio Collection by Hilton, DoubleTree by Hilton, Tapestry Collection by Hilton, Embassy Suites by Hilton, Tempo by Hilton, Motto by Hilton, Hilton Garden Inn, Hampton by Hilton, Tru by Hilton, Spark by Hilton, Homewood Suites by Hilton, Home2 Suites by Hilton, LivSmart Studios by Hilton, Graduate by Hilton, NoMad, Outset Collection by Hilton, Apartment Collection by Hilton, and Select by Hilton.

By using any of our products or services and/or accepting this Privacy Policy—for example, when registering for one of our products or services—you acknowledge and agree that we will collect and use your personal information as described in this Privacy Policy.

Please note that this Privacy Policy does not apply to the processing of personal information on behalf of and in accordance with the instructions of third parties, such as airlines, car rental companies, and other service providers; companies that organize or offer travel packages; business partners; or certain corporate customers.

Hilton Domestic Operating Company Inc. is a U.S. company legally incorporated and existing under the laws of the State of Delaware; it is the Hilton entity responsible for processing all guest data and manages, among other things, Hilton’s marketing activities. Hilton Domestic Operating Company Inc. is a subsidiary of Hilton Worldwide Holdings Inc.

Hilton’s brand portfolio includes hotels operated by Hilton, franchised hotels, and joint venture hotels. Franchised hotels are managed by entities separate from Hilton. Joint venture hotels are managed by companies that are partially owned and/or controlled by Hilton. In addition to Hilton Domestic Operating Company Inc., these entities are also independently responsible for processing guest data.

2. Personal Information We Collect

Collection of Personal Information – General Information

The following summarizes the categories of personal information we have collected over the past 12 months, the sources of those categories of personal information, the business or commercial purposes for which the information was collected, the categories of third parties with whom the information may have been shared, as permitted by law, and whether the information was sold to third parties for a business or commercial purpose in the past 12 months. Certain categories of personal information collected are necessary for the provision of the products or services you request, and if you choose not to provide such information, we may not be able to provide you with those products or services. When consent is required, we obtain your explicit and informed consent before collecting, processing, selling, or sharing personal information. For more information on how we share personal information, please refer to the section titled “How We Disclose Personal Information.”.

Name

We obtained this personal information from the following sources:

Directly from the consumers themselves

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

We have collected this personal information for the following business or commercial purposes:

Process guest reservations

Send guests notifications regarding their reservations

Manage Your Membership and Activity in the Hilton Honors Loyalty Program

Provide assistance and support to customers

Verify identity

Send marketing communications via email, direct mail, and social media

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Determine whether guests are eligible for special or promotional rates

Process payments, including implementing strong customer authentication (SCA) where required by law

Process transactions with partners

Administering Contests and Lotteries

Optimizing Our Websites and Mobile Apps

Detect and Prevent Fraud

We have shared this personal information with the following categories of third parties:

Service providers that perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

Hilton Third-Party Partner

Payment Card Issuers and Payment Processors

Employers, in accordance with company agreements, employee consent, and as permitted by law

Organizations that have arranged a special rate plan with Hilton and/or organized an event and/or reserved a block of rooms with Hilton

The third-party travel booking platform or travel agent through which a guest made a reservation

Government agencies, in accordance with the legal requirements of certain countries

Third-party advertisers, for optimization and personalization on their platforms

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the last 12 months. Yes

Phone and Fax Numbers

We obtained this personal information from the following sources:

Directly from the consumers themselves

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

We have collected this personal information for the following business or commercial purposes:

Process guest reservations

Send guests notifications regarding their reservations

Provide assistance and support to customers

Verify identity

Send marketing messages via SMS

Process transactions with partners

Verify Your Mobile Account

Send service-related notifications via SMS

Detect and Prevent Fraud

Conduct sales activities for reservations, meetings, and group events

Sending surveys via text message after the stay

We have shared this personal information with the following categories of third parties:

Service providers that perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

Hilton's Third-Party Partners

Employers, in accordance with company agreements, employee consent, and as permitted by law

The third-party travel booking platform or travel agent through which a guest made a reservation

Third-party advertisers, for optimization and personalization on their platforms

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Yes

Email address

We obtained this personal information from the following sources:

Directly from the consumers themselves

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

We have collected this personal information for the following business or commercial purposes:

Process guest reservations

Send guests notifications regarding their reservations

Manage Your Membership and Activity in the Hilton Honors Loyalty Program

Provide assistance and support to customers

Verify identity

Send marketing communications via email

Process transactions with partners

Administering Contests and Lotteries

Verify Your Mobile Account

Detect and Prevent Fraud

Conduct sales activities for reservations, meetings, and group events

We have shared this personal information with the following categories of third parties:

Service providers that perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

Hilton's Third-Party Partners

Employers, in accordance with company agreements, employee consent, and as permitted by law

The third-party travel booking platform or travel agent through which a guest made a reservation

Third-party advertisers, for optimization and personalization on their platforms

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Yes

Home Address

We obtained this personal information from the following sources:

Directly from the consumers themselves

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

We have collected this personal information for the following business or commercial purposes:

Process guest reservations

Manage Your Membership and Activity in the Hilton Honors Loyalty Program

Provide assistance and support to customers

Verify identity

Send marketing communications via direct mail

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Process payments, including implementing strong customer authentication (SCA) where required by law

Process transactions with partners

Administering Contests and Lotteries

Detect and Prevent Fraud

Conduct sales activities for reservations, meetings, and group events

We have shared this personal information with the following categories of third parties:

Service providers that perform activities on behalf of Hilton

Hilton's Third-Party Partners

Payment Card Issuers and Payment Processors

Employers, in accordance with company agreements, employee consent, and as permitted by law

The third-party travel booking platform or travel agent through which a guest made a reservation

Third-party advertisers, for optimization and personalization on their platforms

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Yes

Nationality

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Comply with applicable laws that require us to collect this information in certain jurisdictions

We have shared this personal information with the following categories of third parties:

Government agencies, in accordance with the legal requirements of certain countries

This information has been sold to third parties in the past 12 months

Date of Birth

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Comply with applicable laws that require us to collect this information in certain jurisdictions

We have shared this personal information with the following categories of third parties:

Government agencies, in accordance with the legal requirements of certain countries

This information has been sold to third parties in the past 12 months

Sex

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Comply with applicable laws that require us to collect this information in certain jurisdictions

We have shared this personal information with the following categories of third parties:

Government agencies, in accordance with the legal requirements of certain countries

This information has been sold to third parties in the past 12 months

Payment Card Information

We obtained this personal information from the following sources:

Directly from the consumers themselves

The third-party travel booking platform or travel agent through which a guest made a reservation

We have collected this personal information for the following business or commercial purposes:

Process payments, including conducting SCA where required by law

Detect and Prevent Fraud

Retain corporate books and accounting records to comply with legal requirements for corporate reporting, auditing, taxes, and income reconciliation

We have shared this personal information with the following categories of third parties:

Payment Card Issuers and Payment Processors

Hilton Partner Accommodations

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Hilton Honors Number

We obtained this personal information from the following sources:

Straight from Hilton Honors members themselves

We have collected this personal information for the following business or commercial purposes:

Process guest reservations

Send guests notifications regarding their reservations

Manage Your Membership and Activity in the Hilton Honors Loyalty Program

Provide assistance and support to customers

Verify your account

Send marketing communications via email, direct mail, and social media

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Determine whether guests are eligible for special or promotional rates

Process Payments

Process transactions with partners

Administering Contests and Lotteries

Detect and Prevent Fraud

We have shared this personal information with the following categories of third parties:

Service providers that perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

Hilton's Third-Party Partners

Employers, in accordance with company agreements, employee consent, and as permitted by law

Third-party advertisers, for optimization and personalization on their platforms

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Yes

WeChat ID

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Allow guests to access their Hilton Honors account

We have shared this personal information with the following categories of third parties:

We do not share our customers' WeChat IDs with third parties

This information has been sold to third parties in the past 12 months

WeChat Profile Name and Photo

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Provide assistance and support to customers

We have shared this personal information with the following categories of third parties:

We do not share our customers' WeChat profile names or photos with third parties

This information has been sold to third parties in the past 12 months

Passport or ID Card Information

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

In accordance with laws requiring the collection of such data

We have shared this personal information with the following categories of third parties:

Government agencies, in accordance with the legal requirements of certain countries

This information has been sold to third parties in the past 12 months

Preferred language

We obtained this personal information from the following sources:

Directly from the consumers themselves, as well as from browser and computer settings

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

To provide you with a superior stay

To send you communications related to Hilton Honors

To send you marketing communications

Perform analyses to provide you with personalized offers and content

We have shared this personal information with the following categories of third parties:

Hilton's Third-Party Partners

Hilton Partner Accommodations

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Room Preferences

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

Process Your Reservations

Customize Your Experience

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

We have shared this personal information with the following categories of third parties:

Hilton Partner Accommodations

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Room Selection and Assignment

We obtained this personal information from the following sources:

Guests can select their rooms through the Hilton Honors app, and Hilton assigns the rooms

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

Process Reservations

We have shared this personal information with the following categories of third parties:

Hilton Partner Accommodations

Hilton Owner

This information has been sold to third parties in the past 12 months

Arrival Time

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

Process Reservations

Personalize the guest experience

Provide assistance and support to customers

We have shared this personal information with the following categories of third parties:

Hilton Partner Accommodations

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Departure Date

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

Process Reservations

Personalize the guest experience

We have shared this personal information with the following categories of third parties:

Hilton Partner Accommodations

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Names of Additional Guests

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Process Reservations

We have shared this personal information with the following categories of third parties:

Hilton's Third-Party Partners

Hilton Partner Accommodations

Hilton Third-Party Operator

This information has been sold to third parties in the past 12 months

Yes

Information About the Corporate Travel Organizer

We obtained this personal information from the following sources:

Directly from the companies themselves

We have collected this personal information for the following business or commercial purposes:

Process and manage business travel reservations

Provide assistance and support to customers

Send marketing communications via email, direct mail, and social media

We have shared this personal information with the following categories of third parties:

Employers, in accordance with company agreements, employee consent, and as permitted by law

This information has been sold to third parties in the past 12 months

Media Contact Information

We obtained this personal information from the following sources:

From a third-party communications service provider

We have collected this personal information for the following business or commercial purposes:

Contact members of the media and social media influencers in their professional capacity

We have shared this personal information with the following categories of third parties:

We do not share the business contact information of media representatives and social media influencers with third parties

This information has been sold to third parties in the past 12 months

Company Name and Number

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Process Reservations

Determine whether guests are eligible for special or promotional rates

We have shared this personal information with the following categories of third parties:

Employers, in accordance with company agreements, employee consent, and as permitted by law

Hilton's Third-Party Partners

Hilton Third-Party Operator

This information has been sold to third parties in the past 12 months

Yes

Name and number of the travel agent

We obtained this personal information from the following sources:

Directly from the consumers themselves

From travel agents

We have collected this personal information for the following business or commercial purposes:

Correctly Assign Bookings to Travel Agents

Confirm Your Reservation

We have shared this personal information with the following categories of third parties:

Hilton Grand Vacations

This information has been sold to third parties in the past 12 months

Yes

Name and number of the partner airline

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Correctly awarding points to consumers who participate in airline loyalty programs

We have shared this personal information with the following categories of third parties:

The respective airlines

Hilton's Third-Party Partners

Hilton Third-Party Operator

This information has been sold to third parties in the past 12 months

Yes

Vehicle Information

We obtained this personal information from the following sources:

Directly from the consumers themselves

From license plate recognition technology

From the video features

We have collected this personal information for the following business or commercial purposes:

Allow guests to park at our properties

Ensuring safety and security

We have shared this personal information with the following categories of third parties:

We do not share vehicle information with third parties

This information has been sold to third parties in the past 12 months

CCTV Footage

We obtained this personal information from the following sources:

Directly from the cameras located inside and around the property

We have collected this personal information for the following business or commercial purposes:

Protecting guests, employees, and visitors at the properties

Comply with applicable laws that require us to collect this information in certain jurisdictions

We have shared this personal information with the following categories of third parties:

Government agencies, in accordance with the legal requirements of certain countries

Employers, in accordance with company agreements, employee consent, and as permitted by law

Entities that have established a special rate plan with Hilton and/or organized an event and/or reserved a block of rooms with Hilton, within the limits of the law

This information has been sold to third parties in the past 12 months

Promotional images

We obtained this personal information from the following sources:

Directly from the security cameras on the property

We have collected this personal information for the following business or commercial purposes:

Internal and External Promotions and Communications

We have shared this personal information with the following categories of third parties:

We share promotional images with third parties that handle promotions

This information has been sold to third parties in the past 12 months

Customer Interactions with Hilton

We obtained this personal information from the following sources:

Directly from consumers themselves through cookies, server logs, web beacons, tags, pixels, and other similar technologies

We have collected this personal information for the following business or commercial purposes:

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

Marketing

Sharing this data with advertising networks that provide personalized ads

Detect and Prevent Fraud

Optimizing Our Websites and Mobile Apps

We have shared this personal information with the following categories of third parties:

Advertising Networks

Analytics providers for our websites and mobile apps

This information has been sold to third parties in the past 12 months

Yes

Note: If you ask the Hilton Honors app for iOS not to track you across other companies’ websites and apps, Hilton will honor that request. Please note that you may still receive emails related to properties you searched for directly in the Hilton Honors app or on Hilton.com/it. You may also receive emails related to Hilton and American Express co-branded credit cards; these emails are not sent based on iOS tracking.

IP Addresses

We obtained this personal information from the following sources:

Directly from customers based on their Internet browsing activity

We have collected this personal information for the following business or commercial purposes:

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Sharing this data with advertising networks that provide personalized ads

Conduct an SCA as part of the payment process, where required by law

Optimizing Our Websites and Mobile Apps

Troubleshooting Website Issues

Detect and Prevent Fraud

We have shared this personal information with the following categories of third parties:

Advertising Networks

Analytics providers for our websites and mobile apps

Service providers that perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

Payment card issuers and payment processors (only when conducting SCA)

This information has been sold to third parties in the past 12 months

Session ID

We obtained this personal information from the following sources:

Directly from customers based on their Internet browsing activity

We have collected this personal information for the following business or commercial purposes:

Conduct analyses to provide guests with personalized offers and content

Marketing

Conduct analyses to improve business operations

Sharing this data with advertising networks that provide personalized ads

Detect and Prevent Fraud

We have shared this personal information with the following categories of third parties:

Advertising Networks

Analytics providers for our websites and mobile apps

This information has been sold to third parties in the past 12 months

Yes

Booking Engine

We obtained this personal information from the following sources:

Directly from consumers based on their Internet browsing activity

We have collected this personal information for the following business or commercial purposes:

Display targeted ads in the media

Support marketing activities

Provide customer support

Conduct analyses to improve business operations

We have shared this personal information with the following categories of third parties:

Advertising Networks

Analytics providers for our websites and mobile apps

Hilton Owner

This information has been sold to third parties in the past 12 months

Yes

Using the Streaming Service

We obtained this personal information from the following sources:

Directly from customers, thanks to access to a streaming service via the Connected Room feature

We have collected this personal information for the following business or commercial purposes:

Evaluate the use of various streaming services

We have shared this personal information with the following categories of third parties:

We do not allow the use of the streaming service by third parties

This information has been sold to third parties in the past 12 months

Hilton and Amex Credit Cards

We obtained this personal information from the following sources:

From American Express

We have collected this personal information for the following business or commercial purposes:

To provide you with the benefits associated with your co-branded card

Display targeted ads in the media

Support marketing activities

Provide customer support

Conduct analyses to improve business operations

We have shared this personal information with the following categories of third parties:

Marketing

Detect and Prevent Fraud

We have shared this personal information with the following categories of third parties:

We do not share geolocation information with third parties.

This information has been sold to third parties in the past 12 months

Device Information

We obtained this personal information from the following sources:

Directly from consumers based on their online browsing activity, scanning QR codes at the property, and using the Hilton Honors app

We have collected this personal information for the following business or commercial purposes:

Perform analyses to provide you with personalized offers and content

Marketing

Sharing this data with advertising networks that provide personalized ads

Detect and Prevent Fraud

We have shared this personal information with the following categories of third parties:

Advertising Networks

Analytics providers for our websites and mobile apps

This information has been sold to third parties in the past 12 months

Yes

Social Media Information

We obtained this personal information from the following sources:

Directly from the consumers themselves

Indirectly from consumers, by reviewing publicly available information on their social media channels

From publicly available online sources

We have collected this personal information for the following business or commercial purposes:

Conduct analyses to provide guests with personalized offers and content

Addressing service-related concerns to better serve our guests

Provide a more personalized welcome and stay experience

We have shared this personal information with the following categories of third parties:

We do not share information on social media or make it available to third parties

This information has been sold to third parties in the past 12 months

Demographic Data

We obtained this personal information from the following sources:

From third-party companies that provide demographic data

We have collected this personal information for the following business or commercial purposes:

Conduct analyses to provide guests with personalized offers and content

Link this information to the customer records already in Hilton's database

We have shared this personal information with the following categories of third parties:

We do not share demographic data with third parties

This information has been sold to third parties in the past 12 months

Your MyWay Preferences

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

Send you the communications you wish to receive

We have shared this personal information with the following categories of third parties:

Hilton Partner Accommodations

Hilton Third-Party Operator

Hilton Owner

This information has been sold to third parties in the past 12 months

Email Preferences and Consent

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

Send you the communications you wish to receive

We have shared this personal information with the following categories of third parties:

Advertising Networks

This information has been sold to third parties in the past 12 months

Personal Preferences

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

Provide assistance and support to customers

We have shared this personal information with the following categories of third parties:

Hilton Partner Accommodations

Has this information been sold to third parties in the last 12 months? No

On-site Accidents

We obtained this personal information from the following sources:

Directly from the consumers themselves

Straight from Hilton employees

Directly from law enforcement

We have collected this personal information for the following business or commercial purposes:

Addressing Safety and Security Issues

To better serve our guests

Comply with legal or contractual obligations

We have shared this personal information with the following categories of third parties:

Law enforcement agencies

Employers, in accordance with company agreements, employee consent, and as permitted by law

Organizations that have arranged a special rate plan with Hilton and/or organized an event and/or reserved a block of rooms with Hilton

The management and/or owners of a franchised property, if the incident involves that property

Other sections, as required by law

This information has been sold to third parties in the past 12 months

Descriptions of Complaints

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Addressing Safety and Security Issues

To better serve our guests

Comply with legal or contractual obligations

We have shared this personal information with the following categories of third parties:

The management and/or owners of a franchised property, if the complaint concerns that property

This information has been sold to third parties in the past 12 months

Customer Reviews and Survey Responses

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Troubleshooting Website Issues

Improving the Customer Experience

We have shared this personal information with the following categories of third parties:

We do not share customer reviews or survey responses with third parties.

This information has been sold to third parties in the past 12 months

Free-form textual feedback

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Troubleshooting Website Issues

Improving the Customer Experience

We have shared this personal information with the following categories of third parties:

We do not share your feedback with third parties

This information has been sold to third parties in the past 12 months

Information About the Spa and Wellness Services

We obtained this personal information (such as date, time, and type of service) from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

Addressing Safety and Security Issues

To better serve our guests

Comply with legal or contractual obligations

We have shared this personal information with the following categories of third parties:

We do not share the details of your spa and wellness services or treatments with third parties.

This information has been sold to third parties in the past 12 months

Amount of the expense

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

Conduct analyses to improve business operations

Support marketing activities

Comply with corporate reporting, auditing, tax, and income reconciliation requirements

We have shared this personal information with the following categories of third parties:

Payment Card Issuers and Payment Processors

This information has been sold to third parties in the past 12 months

Additional services for your stay (such as parking, pets, extended hours, and other extras)

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following business or commercial purposes:

To better serve our guests

Improving the Customer Experience

We have shared this personal information with the following categories of third parties:

Hilton Owner

This information has been sold to third parties in the past 12 months

Collection of Personal Information – Notice at the Time of Collection

Hilton Website Navigation

When you browse a Hilton website, we collect the following categories of personal information about you, which are used for the following purposes:

Information about your interactions with Hilton's websites, apps, emails, or ads (such as time of access, links clicked, and version)

We collect this information in order to:

To show you targeted ads based on our marketing activities, including media, email, and chat (for example, if you’ve searched for Hilton properties in New York, when you visit a non-Hilton website, we may show you an ad for a Hilton property in New York)

Optimizing Our Websites and Mobile Apps

Conduct analyses to improve business operations

Conduct analyses to provide guests with personalized offers and content

Marketing

Sharing this data with advertising networks that provide personalized ads

Detect and Prevent Fraud

IP Address

We collect this information in order to:

Conduct analyses to provide guests with personalized offers and content

Display targeted ads in the media

Optimizing Our Websites and Mobile Apps

Conduct analyses to improve business operations

Sharing this data with advertising networks that provide personalized ads

Conduct an SCA as part of the payment process, where required by law

Troubleshooting Website Issues

Detect and Prevent Fraud

Session ID

We collect this information in order to:

Conduct analyses to provide guests with personalized offers and content

Marketing

Display targeted ads in the media

Optimizing Our Websites and Mobile Apps

Conduct analyses to improve business operations

Sharing this data with advertising networks that provide personalized ads

Detect and Prevent Fraud

Booking Engine

We collect this information in order to:

Display targeted ads in the media

Support marketing activities

Provide customer support

Conduct analyses to improve business operations

Hilton and Lyft Accounts

We collect this information in order to:

Display targeted ads in the media

Support marketing activities

Provide customer support

Conduct analyses to improve business operations

If you are a Hilton Honors member and log in to your account while browsing, we collect the following information about you, which is used for the following purposes:

Information About Network or Internet Activity

IP Address

Session ID

Customer Reviews and Survey Responses

Free-form textual feedback

Hilton Honors Number

Hilton Honors Tier

Make a reservation

When you make a reservation at a Hilton property, we collect the following categories of personal information about you, which are used for the following purposes:

Name

We collect this information in order to:

Search for and check your reservation

Confirm Your Reservation

To send you communications regarding your reservation

Manage Your Membership and Activity in the Hilton Honors Loyalty Program

Provide assistance and support to customers

To send you marketing communications via email and direct mail

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Determine Your Eligibility for Special or Promotional Rates

Process Payments

Process transactions with partners

Sharing this information with Hilton, Hilton’s third-party partners, Hilton’s partner accommodations, and Hilton’s third-party operators

Administering Contests and Lotteries

Optimizing Our Websites and Mobile Apps

Detect and Prevent Fraud

Additional Names

We collect this information in order to:

Confirm Your Reservation

Share this information with Hilton's partner accommodations and Hilton's third-party service provider

Hilton Honors Number

We collect this personal information for the following purposes:

Search for and verify your Hilton Honors account and your reservation

Manage Your Hilton Honors Membership

Process guest reservations

Send guests notifications regarding their reservations

Provide assistance and support to customers

Send marketing communications via email, direct mail, and social media

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Determine whether guests are eligible for special or promotional rates

Process Payments

Process transactions with partners

Sharing this information with Hilton, Hilton partner properties, and Hilton's third-party service provider

Administering Contests and Lotteries

Detect and Prevent Fraud

Phone number

We collect this information in order to:

Verify identity

Confirm Your Reservation

Send you text messages regarding check-in and any services you may need during your stay

Send marketing messages via SMS

Provide assistance and support to customers

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

Process transactions with partners

Sharing this information with Hilton, Hilton’s third-party partners, Hilton’s partner accommodations, and Hilton’s third-party operators

Detect and Prevent Fraud

Conduct sales activities for reservations, meetings, and group events

Address

We collect this information in order to:

Manage Your Hilton Honors Loyalty Program Membership

Verify Your Hilton Honors Account

To send you communications related to Hilton Honors

To send you marketing communications

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

Determine Your Eligibility for Special or Promotional Rates

Process Payments

Process transactions with partners

Sharing this information with Hilton, Hilton’s third-party partners, Hilton’s partner accommodations, and Hilton’s third-party operators

Detect and Prevent Fraud

Address type (home/work)

We collect this information in order to:

Perform analyses to provide you with personalized offers and content

Sharing this information with Hilton, Hilton partner properties, and Hilton's third-party service provider

Email address

We collect this information in order to:

Manage Your Hilton Honors Loyalty Program Membership

Verify Your Hilton Honors Account

Link your reservation to your Hilton Honors account

To send you communications related to Hilton Honors

To send you marketing communications

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

Determine Your Eligibility for Special or Promotional Rates

Process transactions with partners

Sharing this information with Hilton, Hilton’s third-party partners, Hilton’s partner accommodations, and Hilton’s third-party operators

Detect and Prevent Fraud

Verify Your Mobile Account

Conduct sales activities for group reservations, meetings, and events

Preferred language

We collect this information in order to:

To provide you with a superior stay

To send you communications related to Hilton Honors

To send you marketing communications

Perform analyses to provide you with personalized offers and content

Sharing this information with Hilton, Hilton’s third-party partners, Hilton’s partner accommodations, and Hilton’s third-party operators

Payment Card Information

We collect this information in order to:

Process Payments

Sharing this information with Hilton, Hilton partner properties, and Hilton's third-party service provider

Detect and Prevent Fraud

Room Preferences

We collect this information in order to:

Process Your Reservations

Customize Your Experience

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

Sharing this information with Hilton, Hilton partner properties, and Hilton's third-party service provider

Company Name and Number

We collect this information in order to:

Confirm Your Reservation

Determine Your Eligibility for Special or Promotional Rates

Sharing this information with Hilton's third-party partner

Name and number of the travel agent

We collect this information in order to:

Confirm Your Reservation

Determine Your Eligibility for Special or Promotional Rates

Correctly Assign Bookings to Travel Agents

Sharing this information with Hilton's third-party partner

Name and number of the partner airline

We collect this information in order to:

Earn points if you participate in an airline's loyalty program

Sharing this information with Hilton's third-party partner

Join Hilton Honors

When you enroll in Hilton Honors, we collect the following categories of personal information about you, which are used for the following purposes:

Name

We collect this information in order to:

Manage Your Hilton Honors Loyalty Program Membership

Verify Your Hilton Honors Account

To send you communications related to Hilton Honors

To send you marketing communications

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Determine Your Eligibility for Special or Promotional Rates

Process Payments

Process transactions with Hilton Honors affiliate partners (such as Points.com and Lyft)

Sharing this information with Hilton's third-party partner

Administering Contests and Lotteries

Optimizing Our Websites and Mobile Apps

Detect and Prevent Fraud

Phone and Fax Numbers

We collect this information in order to:

Manage Your Hilton Honors Loyalty Program Membership

Verify Your Hilton Honors Account

Send you text messages regarding check-in and any services you may need during your stay

Verify Your Mobile Account

Send service-related notifications via SMS

Provide assistance and support to customers

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

Process transactions with partners

Sharing this information with Hilton's third-party partner

Detect and Prevent Fraud

Conduct sales activities for reservations, meetings, and group events

Address

We collect this information in order to:

Manage Your Hilton Honors Loyalty Program Membership

Verify Your Hilton Honors Account

To send you communications related to Hilton Honors

To send you marketing communications

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Determine Your Eligibility for Special or Promotional Rates

Process Payments

Process transactions with partners

Sharing this information with Hilton's third-party partner

Detect and Prevent Fraud

Conduct sales activities for group reservations, meetings, and events

Email address

We collect this information in order to:

Manage Your Hilton Honors Loyalty Program Membership

Check your Hilton Honors account and your reservation

Link your reservation to your Hilton Honors account

To send you communications related to Hilton Honors

To send you marketing communications

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

Determine Your Eligibility for Special or Promotional Rates

Process transactions with partners

Sharing this information with Hilton's third-party partner

Detect and Prevent Fraud

Verify Your Mobile Account

Conduct sales activities for reservations, meetings, and group events

Preferred language

We collect this information in order to:

To provide you with a superior stay

To send you communications related to Hilton Honors

To send you marketing communications

Perform analyses to provide you with personalized offers and content

Sharing this information with Hilton, Hilton’s third-party partners, Hilton’s partner accommodations, and Hilton’s third-party operators

Payment Card Information

We collect this information in order to:

Process Payments

Sharing this information with Hilton, Hilton partner properties, and Hilton's third-party service provider

Detect and Prevent Fraud

Room Preferences

We collect this information in order to:

Process Your Reservations

Customize Your Experience

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

Sharing this information with Hilton, Hilton partner properties, and Hilton's third-party service provider

Company Name and Number

We collect this information in order to:

Confirm Your Reservation

Determine Your Eligibility for Special or Promotional Rates

Sharing this information with Hilton's third-party partner

Name and number of the travel agent

We collect this information in order to:

Confirm Your Reservation

Determine Your Eligibility for Special or Promotional Rates

Correctly Assign Bookings to Travel Agents

Sharing this information with Hilton's third-party partner

Name and number of the partner airline

We collect this information in order to:

Earn points if you participate in an airline's loyalty program

Sharing this information with Hilton's third-party partner

MyWay Preferences

We collect this information in order to:

To provide you with a superior stay

Sharing this information with Hilton's third-party partner

Email Subscription Preferences

We collect this information in order to:

Send you the communications you wish to receive

Opt-out Preferences

We collect this information in order to:

Send you the communications you wish to receive

To better serve our guests

Check in at a Hilton property

When you check in at a Hilton property, we may collect the following categories of personal information about you, which are used for the following purposes:

Name

We collect this information in order to:

Search for and check your reservation

Confirm Your Reservation

Provide assistance and support to customers

Detect and Prevent Fraud

Payment Card Information

We collect this information in order to:

Process Payments

Sharing this information with Hilton, Hilton partner properties, and Hilton's third-party service provider

Detect and Prevent Fraud

Names of Additional Guests

We collect this information in order to:

Confirm Your Reservation

Passport or ID Card Information

We collect this information in order to:

Comply with applicable laws that require us to collect this information in certain jurisdictions

Address

We collect this information in order to:

Comply with applicable laws that require us to collect this information in certain jurisdictions

Verify Your Hilton Honors Account

Confirm Your Reservation

To send you communications regarding your reservation

To send you marketing communications

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Process Payments

Process transactions with partners

Sharing this information with Hilton, Hilton’s third-party partners, and Hilton’s third-party operators

Detect and Prevent Fraud

Nationality

We collect this information in order to:

Comply with applicable laws that require us to collect this information in certain jurisdictions

Date of Birth

We collect this information in order to:

Comply with applicable laws that require us to collect this information in certain jurisdictions

Sex

We collect this information in order to:

Comply with applicable laws that require us to collect this information in certain jurisdictions

Hilton Honors Number

We collect this personal information for the following purposes:

Search for and verify your Hilton Honors account and your reservation

Manage Your Hilton Honors Membership

Support marketing activities

Provide assistance and support to customers

Process guest reservations

Send guests notifications regarding their reservations

Send marketing communications via email, direct mail, and social media

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Determine whether guests are eligible for special or promotional rates

Process Payments

Process transactions with partners

Administering Contests and Lotteries

Sharing this information with Hilton, Hilton’s third-party partners, and Hilton’s third-party operators

Detect and Prevent Fraud

Frequent Flyer Number

We collect this information in order to:

Enable the assignment of loyalty points

Email address

We collect this information in order to:

Submit receipts after a stay is complete

Link your reservation to your Hilton Honors account

To send you marketing communications

Perform analyses to provide you with personalized offers and content

Conduct analyses to improve business operations

Determine Your Eligibility for Special or Promotional Rates

Process transactions with partners

Sharing this information with Hilton, Hilton’s third-party partners, and Hilton’s third-party operators

Detect and Prevent Fraud

Verify Your Mobile Account

Conduct sales activities for reservations, meetings, and group events

Electronic Check-in

When you check in using online check-in, we collect the following categories of personal information about you, which are used for the following purposes:

Payment Card Information

We collect this information in order to:

Receive payment for your reservation

Detect and Prevent Fraud

Maintain books and records and comply with legal requirements for corporate reporting, auditing, taxes, and income reconciliation

Room Selection and Assignment

We collect this information in order to:

Confirm Your Reservation

To better serve our guests

Arrival Time

We collect this information in order to:

To better serve our guests

Confirm Your Reservation

Customize Your Experience

Provide assistance and support to customers

Departure Date

We collect this information in order to:

To better serve our guests

Process Your Reservations

Customize Your Experience

Provide assistance and support to customers

Digital Key

When you use the digital key, we collect the following categories of personal information about you, which are used for the following purposes:

Payment Card Information

We collect this information in order to:

Receive payment for your reservation

Detect and Prevent Fraud

Maintain books and records and comply with legal requirements for corporate reporting, auditing, taxes, and income reconciliation

To allow you to access the room and hotel facilities

Process requests to share the digital key

Detect and Prevent Fraud

Guest Services

When you use our guest support services, we collect the following categories of personal information about you, which are used for the following purposes:

Descriptions of Complaints

We collect this information in order to:

Respond to the complaint or request

Conduct analyses to improve business operations

Provide assistance and support to customers

Name

We collect this information in order to:

Search for and verify the identity

Search our records for information about your past stays and your membership in the Hilton Honors loyalty program

Provide support and troubleshooting for customer service

Detect and Prevent Fraud

Address

We collect this information in order to:

Verify your identity

Essential cookies – These are necessary for the website to function and allow you to navigate the site and use its services and features. If you disable these cookies, some services and features may not be available.

Functional cookies – These are used to store settings on the site, such as your preferred language or booking information previously used to book a hotel with Hilton. We also use functional cookies to save information such as the last hotel you searched for, so you can easily find it again on your next visit. Some functional cookies are essential for displaying maps or videos on our website.

Session Cookies – These types of cookies are stored only temporarily during your browsing session and are deleted from your device when you close your browser. We use session cookies to support the website’s functionality and to understand how you use the site—specifically, which pages you visit, which links you click, and how long you stay on each page.

Persistent Cookies – These types of cookies are not deleted when you close your browser, but are stored on your device for a specified period or until they are deleted. Each time you visit the site, the server that set the cookie recognizes the persistent cookie stored on your device. We and others use persistent cookies to store your preferences so they are available for your next visit, to track more accurately how often you visit the site, how often you return, how your use of the site changes over time, and the effectiveness of advertising.

Advertising Cookies – These allow Hilton and other advertisers to display the most relevant products, offers, and advertisements on the website and on third-party websites, or via email or other messaging platforms. For example, some advertising cookies help our service providers and other advertisers select ads based on your interests, including those expressed or inferred from your visits to our websites or apps, or to other websites, online services, and applications over time. Others are used to prevent you from seeing the same ad repeatedly. These types of cookies also help us provide you with content on the site that aligns with your interests and needs. As explained below, some cookies and other analytics technologies are used in part to facilitate advertising purposes.

Social plug-in cookies – Advertising cookies also include social plug-in cookies, which are used to share the website’s content with members and non-members of social media networks such as Facebook, X, YouTube, and Pinterest. These cookies are typically set by the social network provider to enable seamless sharing.

Analytics cookies – These collect information about how the site is used and help us improve its performance. These cookies provide us with aggregated information that we use to monitor the site’s performance, count page views, identify technical errors, track how users reach the site, and measure the effectiveness of advertising (including the emails we send you).

Other technologies may be used for the same purposes as our cookies to allow us and third parties to know when you visit the site and to understand how you interact with emails or advertisements. Through these other technologies, we may collect and use non-personal information (e.g., your operating system, browser version, and referring URL) or aggregated information to improve your experience and understand traffic patterns.

Management of Cookies and Other Technologies

If you want to remove or block cookies on your device at any time, you can update your browser settings (check your browser’s “Help” menu to learn how to remove or block cookies). Hilton is not responsible for your browser settings. Below are instructions on how to manage cookies in different types of web browsers.

Apple Safari

In the Safari app, select Preferences

Click "Privacy" and select your cookie preferences from the options provided.

Google Chrome

In the upper-right corner of the Chrome browser, click the three vertical dots to open a drop-down menu.

Select Settings

Under "Privacy and Security," click "Tracking Protection" and select your cookie preferences from the options provided.

Microsoft Edge

In the upper-right corner of the Microsoft Edge browser, select the three-dot icon to open a menu.

Select Settings and click Site Permissions.

Click "Manage and Delete Cookies and Site Data" and select your cookie preferences from the available options.

Mozilla Firefox

In the upper-right corner of the Firefox browser, click the three horizontal lines to open a menu.

Select Settings and click the Privacy and Security panel.

Under "Advanced Tracking Protection," select "Custom.".

Click "Cookies" and select your cookie preferences from the options provided.

Please note that rejecting cookies may affect your ability to complete certain transactions on the Site and our ability to recognize your browser from one visit to the next.

Interest-Based Analytics and Advertising

We work with certain third-party service providers to collect information for the purpose of performing analyses and audits, conducting research, and creating reports. These third parties may use server logs, web beacons, tags, pixels, and similar technologies, and may set and access cookies on your computer or other device.

Specifically, we use Adobe Analytics to better understand how our customers use our websites. We also use Adobe Audience Manager to create audiences so we can personalize content and advertising experiences.

Learn more about how Adobe uses your personal information in the Adobe Analytics web browsers.

We partner with Amazon Chat, which powers our chat platform. We can use Amazon Chat to share dynamic content with authenticated users.

We use WhatsApp and LINE to send you personalized content and advertising experiences across multiple platforms. We may use WhatsApp and LINE for analytics, research, and reporting purposes. We will use your WhatsApp and LINE phone number to link you to your existing Hilton account (if available) and leverage your data to improve our analytics and provide you with an even more comprehensive customer experience across all channels. More information on how WhatsApp protects personal information is available here. More information on how LINE processes personal information is available here.

If you are a Hilton Honors member, follow Hilton on LINE and log in using Universal Login, and we will link your LINE ID to your Hilton Honors account. If you have consented to receive marketing messages from us, we may send you personalized marketing messages on LINE. We may also use LINE for analytics, research, and reporting purposes.

We work with third parties to provide targeted advertising based on your online activities across websites, devices, and mobile applications (commonly referred to as “interest-based advertising”) over time. Our advertising partners may collect information about your activities on our Services on your current device and combine it with information about your activities on other websites, devices, and mobile applications. These partners may collect such information using server logs, cookies, web beacons, tags, pixels, mobile advertising IDs (such as Facebook cookies or Google advertising IDs), cross-device links, and similar technologies. For example, our advertising partners may use the fact that you have visited our website to serve you targeted ads on other websites and mobile applications on your current device or on other devices you use. Partners may link your devices if you access the same online service on different devices or if your devices share similar attributes that suggest they are used by the same person or household. This means that information about your activity on websites or apps on your current device or browser may be combined with information collected from other browsers or devices. You can opt out of interest-based advertising in web browsers and mobile apps on your current browser or device by following the instructions below.

For more information about interest-based advertising and cross-device tracking, please visit the Network Advertising Initiative (“NAI”) website and the Digital Advertising Alliance (“DAA”) website. We adhere to the DAA’s Interest-Based Advertising Principles by providing a higher level of notice, transparency, and control regarding our digital marketing practices, as outlined at: http://www.aboutads.info/principles/. You have the option to opt out of interest-based advertising and cross-device tracking on web browsers and mobile apps on your current browser or device by following the instructions below.

Opt-out on web browsers. To opt out on web browsers, visit http://optout.aboutads.info/ and http://optout.networkadvertising.org. To help preserve the choices you’ve made on the DAA’s WebChoices page, you can install the DAA’s “Protect My Choices” extension, available at http://youradchoices.com/PMC.

Opt-out on mobile apps. To opt out of seeing ads on mobile apps, you can change your ad preferences on your mobile device (for example, on iOS, go to Settings > Privacy & Security > Tracking, and on Android, go to Settings > Google > Ads > Turn off ad personalization). You can also opt out of companies participating in the Digital Advertising Alliance using the AppChoices tool by downloading the app and following the instructions. Learn how to opt out on mobile devices.

Please note that the opt-outs described above apply only to the specific browser or device from which you exercise the opt-out; therefore, you will need to repeat the opt-out process separately on all of your browsers and devices. If you delete or reset cookies or mobile advertising identifiers, change browsers (including updating certain browsers), or use a different device, any cookies or opt-out tools may no longer work, and you will need to opt out again. We do not currently accept “Do Not Track” signals.

Global Opt-Out Signal. We comply with the global opt-out signals recognized by law and provide a single portal for all opt-out requests, regardless of the device or browser used.

4. Your Rights and Choices

If you are a Hilton Honors member, you can review and update the information you provided when you registered at any time by logging into your Hilton Honors account. You can also update your information by contacting the Hilton Reservations Center and Hilton Customer Service at +1 888 4HONORS (+1 888 446 6677) (United States and Canada). Customers outside the United States and Canada can find our global phone numbers. You can also fill out a support form.

Depending on your country of residence, you may be able to ask Hilton to:

provide details about the personal information we retain,

withdraw consent for certain data processing activities and/or

update, correct, delete, and/or stop the processing of personal information.

To view your rights based on your place of residence or to submit a request:

Visit the portal for requests to exercise data subject rights at datarights.hilton.com

Send an email to DataProtectionOffice@hilton.com

Send a letter to the Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America

We will process your request within the timeframes specified by applicable law and in the cases provided for by current regulations. If permitted by law, we may charge a fee to cover the costs of responding to your request.

In addition, under certain circumstances, you may request that we stop sharing your personal information with our business partners or that Hilton stop using your personal information by contacting us at the email or mailing address listed above.

If you reside in an eligible jurisdiction and wish to opt out of the sale of your personal information or its processing or sharing for targeted advertising, you can submit a request by clicking the link “Your Privacy Choices | Cookie Information” at the bottom of the Hilton.com website when you access the site from an IP address indicating that you are located in a state that has enacted a privacy law. Please note that when you opt out of cookies, tags, and pixels, the opt-out applies only to the device and browser you are currently using. If you wish to opt out on other devices or browsers, you must repeat the opt-out process when using those devices or browsers. We respect globally recognized opt-out signals required by law and provide a single portal for all opt-out requests, regardless of the device or browser used. In addition, residents of eligible states may request that we no longer sell non-cookie-based personal information or process it for targeted advertising by submitting an opt-out request to Hilton.

In certain circumstances, you may be able to submit a request on behalf of someone else as their legal representative. If you submit a request on behalf of someone else, you may be asked to provide proof of authorization.

5. Choices Regarding Marketing Communications

We want to introduce you to the fantastic products we offer! To that end, we may send you communications via email, text message, push notifications, in-app alerts, direct mail, and social media. In addition to traditional text messages, we offer the option to receive promotional and transactional messages via text message using a function code. A function code is a five-digit number that you can text to agree to receive these SMS messages. We may also send you marketing communications via WhatsApp. To enable the delivery of these communications, your information may be shared with service providers who use this information solely to send marketing communications on our behalf. Furthermore, data and consent related to function codes will not be shared with other third parties for their own marketing or advertising purposes. If, depending on the circumstances, consent is required in your jurisdiction, we will request your consent before sending you such communications.

Hilton Honors Members: Hilton Honors members can change the communications they receive by logging in to their account online and managing their subscriptions.

Requests to Opt Out of Marketing

If you prefer not to receive email marketing materials from us, you can unsubscribe at any time using the following methods:

Unsubscribe: Use the unsubscribe feature in any email you receive from us, or click this link: https://www.hilton.com/en/hilton-honors/optout/unsubscribe

Email: DataProtectionOffice@hilton.com

Mail: Write to the Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America

Text messages or WhatsApp: Reply “STOP” to the message you received

Hotel-specific text messages: Contact the hotel front desk to let them know you do not wish to receive text messages

Cancellation requests may take up to 10 business days to take effect.

Push notifications and in-app messages: You can choose whether or not our mobile apps send push notifications by changing the notification settings on your mobile device. If we send you in-app messages, we’ll let you manage them within our apps.

6. How We Protect Personal Information

Global Information Security Team: Hilton employs a large team of information security professionals responsible for managing Hilton’s security program. The team’s responsibilities include monitoring our systems to prevent potential intrusions, responding to potential incidents, providing cybersecurity support at the property level, regularly reviewing and updating the security controls Hilton uses to protect data, and delivering training on Hilton’s information security program.

Security Controls: Hilton implements risk-based security controls, including encryption and ongoing staff training, in accordance with industry standards. Hilton participates in a Payment Card Industry (“PCI”) compliance program and an information security compliance program. This compliance program generates audit reports regarding the adequacy and effectiveness of Hilton’s internal IT controls, including a PCI Compliance Statement, signed by a PCI-certified external security assessor, and a SSAE16/SOC1 report, which evaluates the general IT controls of the systems used for accounting and financial reporting.

We require affiliates and service providers with whom we share personal information to take reasonable steps to keep that information confidential.

We will never ask you to send us confidential personal information or payment card information via email or text message.

In the event of a security incident, Hilton will promptly notify the regulatory authorities and/or affected individuals, as required by applicable laws and regulations.

7. How We Disclose Personal Information

In addition to the information provided in the “Personal Information We Collect” section, the following summarizes how we may disclose personal information.

Safety Protection

Hilton may disclose personal information in the cases and in the manner provided by law. Such disclosures may be necessary, for example, when countries require Hilton to collect personal data on visitors to properties in that country, when a law enforcement agency serves Hilton with a valid subpoena, and when, in the context of a civil lawsuit, Hilton receives a legitimate request for the disclosure of personal information. Hilton may choose to share personal information with law enforcement agencies, employers, organizers of events held at Hilton properties, or other parties, if necessary, to protect the safety and security of people and property, to pursue available remedies or limit the damages we may incur, as well as to respond to an emergency.

Electronic Receipt Program

If an employee of a company participating in the Hilton electronic receipt program books a room using a corporate code or pays for expenses with a corporate credit card, Hilton may send the employer and the card issuer a statement detailing the goods and services provided.

Reservations with Hilton Partner Properties

When you make a reservation with AutoCamp, Small Luxury Hotels of the World (SLH), or Evermore Resort (Orlando) through a Hilton channel, Hilton will provide certain guest information for the sole purpose of completing the reservation and providing customer service, as described in the “Personal Information We Collect” section of this Privacy Policy. Hilton channels include the Hilton website, the Hilton Honors app, or mini-programs. Guest information will be processed and stored in accordance with the relevant privacy policies and as permitted by applicable law.

AutoCamp: You can access AutoCamp's privacy policy here.

SLH: You can access SLH's privacy policy here.

Evermore Resort (Orlando): You can access Evermore Resort's privacy policy here.

Reservations through Hilton's third-party partners

Hilton Grand Vacations: When you make a reservation with Hilton Grand Vacations (HGV) through a Hilton channel, Hilton will share the information you provide with HGV to complete the reservation. Hilton channels include the Hilton website, the Hilton Honors app, and Hilton mini-programs. HGV may also process your personal information in accordance with HGV’s privacy policy and as permitted by applicable law. You can access HGV’s privacy policy here. Hilton may also share your personal data with HGV if you are a Hilton Honors member. Depending on the jurisdiction, your prior consent may be required to share your personal data with HGV. In that case, we will obtain your consent during the Hilton Honors enrollment process.

Placemakr: When you make a reservation with Placemakr through a Hilton channel, Hilton will provide Placemakr with the information you submit to complete the reservation. Placemakr may also process your personal information in accordance with Placemakr’s privacy policy and as permitted by applicable law. You can access Placemakr’s privacy policy here. Depending on the applicable jurisdiction, prior consent may be required to share personal data with Placemakr. If this is necessary, Hilton will obtain such consent.

Reservations through Hilton's third-party provider

For guests residing in the United States who make a reservation at Resorts World Las Vegas, Conrad Las Vegas, or Crockfords Las Vegas through a Hilton channel, Hilton will share the information provided to complete the reservation with its third-party operator, Genting. Hilton channels include the Hilton website, the Hilton Honors app, and Hilton mini-programs. Genting may also process your personal information in accordance with Genting’s privacy policy and as permitted by applicable law. You can access Genting’s privacy policy here.

Reservations with Hilton's owner

If you are a guest residing in the United States, when you make a reservation at the Waldorf Astoria Grand Wailea, Hilton will provide your reservation information to BRE Hotels & Resorts (or “Hilton Owner”), the hotel owner. BRE may process your personal information in accordance with its privacy policy and as permitted by applicable law. You can access BRE’s privacy policy here.

Reservations with Select by Hilton

YOTEL: When you make a reservation with YOTEL through a Hilton channel, Hilton will provide YOTEL with your reservation information. YOTEL may process your personal information in accordance with its privacy policy and as permitted by applicable law. You can access YOTEL’s privacy policy here.

8. International Transfers

As a global company, we strive to always provide you with the level of service you expect from a Hilton hotel, whether it’s in San Francisco, London, or Tokyo. To provide this service, please be aware that we may share your personal information with members of the Hilton brand portfolio, our service providers, and other third parties, who may be located in a country other than your own.

When you stay at a Hilton property outside the United States, the property’s data controller transfers your personal information related to your reservation to Hilton in the United States in accordance with data transfer agreements, where required by applicable laws or regulations. The data controller may also retain a local copy of your personal information, and in some cases, this is required by applicable laws or regulations. Although data protection laws in various countries may differ from those in your country, we will do everything possible to ensure that your personal information is handled as described in this Privacy Policy and in accordance with the law.

9. Data Retention Periods

We retain your personal information for as long as necessary to fulfill the purpose for which it was collected, typically for the duration of any contractual relationship and for the period following the expiration of the contract as required or permitted by applicable law. Our retention policies reflect applicable statutes of limitations and legal requirements. When we destroy your personal information, we do so in a manner that prevents the information from being restored or reconstructed.

10. Contact Information for Questions or Concerns

If you have any questions or concerns, please contact Hilton’s Data Protection Office.

Email: DataProtectionOffice@hilton.com

Address: Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America

Phone number: +1 800 413 7470

Portal for requests to exercise data subject rights: datarights.hilton.com

11. Changes to the Privacy Policy

This Privacy Policy may be updated from time to time. You can check when this Privacy Policy was last updated by referring to the date at the top of the Privacy Policy. Any changes to our Privacy Policy will take effect upon publication of the revised and updated Privacy Policy on the website. Your use of the website, our products, and services, as well as your consent and the opportunity to review the updated Privacy Policy following such changes, constitutes your acceptance of the revised and updated Privacy Policy then in effect.

Summary of Material Changes to This Privacy Policy

Last updated: May 4, 2026

Updates for May 2026

Addition of Appendix A-11 – Residents of Mexico and A-12 – Residents of Albania.

Updates as of April 2026

The "Introduction" section has been updated to reflect Hilton's expanded portfolio of brands: Apartment Collection by Hilton and Select by Hilton.

Update to the "Bookings with Third-Party Partners" section on the Hilton website to include Placemakr.

Updated the "How We Share Personal Information" section to include information about the electronic receipt program and reservations made through Select by Hilton.

Update to Appendix A-10 to bring it into compliance with the Personal Information Protection Act.

Updated the "Changes to This Privacy Policy" section to include a summary of the material changes.

Appendix A – Additional Provisions Applicable to Residents of Certain Countries and U.S. States

This Appendix provides additional information for individuals residing in countries and U.S. states that have enacted privacy laws granting certain additional rights to residents of those jurisdictions. Once effective, the U.S. states include, without limitation, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. These countries include, but are not limited to, those in the European Economic Area (“EEA”), the United Kingdom, and Switzerland, as well as: Australia, Bermuda, Brazil, Canada, China, Korea, Japan, Hong Kong, Israel, Monaco, Nigeria, and Turkey. This Appendix provides additional information that Hilton is required to disclose to you, as well as certain rights you have regarding the processing of your personal information under applicable local laws. Where there is a conflict with any provision in the main body of the Privacy Policy, the provisions of this Appendix shall prevail.

Data Controller: Please contact the Data Protection Office at dataprotectionoffice@hilton.com for contact information regarding other entities that may receive your personal data.

Office of Data Protection: Hilton’s Office of Data Protection can be contacted by email at DataProtectionOffice@Hilton.com or at the following address:

Data Protection Office, 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America

Purposes and Legal Bases for Processing

Hilton processes your personal information for the purposes set forth in the “Personal Information We Collect” section of the main body of this Privacy Policy.

The legal bases for Hilton’s data processing activities include processing information as required to fulfill our contractual obligations, to comply with our legal obligations, to protect the safety of our employees, guests, and others, for our legitimate business interests, and in accordance with your consent.

Specifically, the legal basis for the processing of personal information is based on the purpose for which such information was provided or collected.

Hilton Honors Membership: Personal information collected in connection with your participation in the Hilton Honors program is processed based on the contractual relationship established, consent where legally required, and the pursuit of our legitimate business interests, including personalizing your use of our services and applications, the communication of news and promotional materials, and the delivery of personalized advertising and content.

Surveys: We may send surveys after your stay via text message or email. Participation in surveys is voluntary; we process the information obtained from surveys based on your consent and to pursue our business interests, including marketing purposes, service improvements, and conducting analyses.

Data Collection at the Property: When you make a reservation and stay at one of our hotels, we process your name, address, and contact information, along with details of your stay (date and time of arrival and departure, vehicle information, and information about other travelers or guests), based on the contractual relationship established.

In addition, we process this data for our legitimate business interests, subject to consent where required by law, including for marketing purposes, service improvements, managing our electronic receipt program, conducting analyses, and personalizing services, as described in the aforementioned sections of our Global Privacy Policy.

We collect certain additional personal information during registration/check-in at our properties (such as national ID or passport information), as required to comply with our legal obligations.

At our properties, we use closed-circuit television (CCTV) cameras and other security measures that may capture or record images of guests and visitors in common areas, as well as information regarding your location within our properties (via keycards and other technologies), in order to protect our staff, guests, and visitors at our properties.

We process personal information in connection with services at our properties (such as concierge services, wellness centers, spas, activities, babysitting services, equipment rentals, and our digital key feature) in order to provide you with these services and for our business interests, including marketing purposes, service improvements, managing our electronic receipt program, conducting analyses, and personalizing services, as described in the aforementioned sections of our Global Privacy Policy.

Event Profiles: We process personal information obtained through the event based on the contractual relationship established and the pursuit of our legitimate business interests, subject to consent where required by law, including for marketing purposes, service improvement, conducting analyses, and personalizing services, as described in the aforementioned sections of our Global Privacy Policy.

Social Media: Participation in activities and offers sponsored by Hilton on social media is voluntary; We process information obtained through participation on social media based on consent where required by law and on the pursuit of our legitimate business interests, including marketing purposes, service improvement, conducting analytics, and personalizing services, as described in the aforementioned sections of our Global Privacy Policy.

Promotions and Contests: Participation in sweepstakes, contests, and other promotional offers is voluntary; we process the information obtained through such participation based on consent where required by law and to the extent necessary to administer the offer. In addition, we use certain data for our business purposes, including marketing, service improvements, managing our electronic receipt program, conducting analyses, and personalizing services, as described in the aforementioned sections of our Global Privacy Policy.

Direct Marketing: We use personal information to send marketing communications based on the consent you have provided. You may withdraw your consent to receive direct marketing communications at any time by contacting us at DataProtectionOffice@hilton.com, by following the unsubscribe instructions in the marketing message you received, or by logging into your Hilton Honors account and updating your communication preferences.

Franchising and ownership opportunities: We process this information based on the contractual relationship established and the pursuit of our legitimate business interests, including the purposes of maintaining and promoting the Hilton brand and enabling direct communication among properties within the Hilton brand portfolio.

Suppliers from women-owned businesses and underrepresented groups: Participation in Hilton’s Women- and Minority-Owned Business (WMBE) diversity program is voluntary; we process this information based on consent and the pursuit of our legitimate business interests, including the maintenance and improvement of our diversity program.

Retention: We retain personal information for as long as necessary to fulfill the purpose for which it was collected, typically for the duration of any contractual relationship and for a period following the expiration of the contract as required or permitted by applicable law. Our retention policies reflect applicable statutes of limitations and legal requirements.

Rights of Data Subjects

Certain regional, national, and state laws grant rights regarding personal data, as outlined on the portal for personal data requests. Residents of certain jurisdictions may have the following rights.

Requests for access, correction, and deletion. The user has the right to:

ask us to confirm whether we are processing your personal information and receive information about the processing of your data

obtain a copy of your personal information

Request that we update or correct your personal information

request that we delete your personal information, under certain circumstances

Right to Object to Processing. You have the right to request that Hilton stop processing your personal information:

for marketing purposes, including profiling activities

for statistical purposes

where such processing is based on our legitimate business interests, unless we can demonstrate a legitimate reason for such processing or where the processing of your personal information is necessary to establish, exercise, or defend a legal claim

Right to Restrict Processing. You have the right to request that Hilton restrict the processing of your personal information:

if Hilton is considering or taking steps to respond to your request to update or correct your personal information, where such processing is unlawful, and you do not want Hilton to delete your data

if Hilton no longer requires such data but wishes for us to retain it to establish, exercise, or defend a legal claim

if you have objected to the processing based on our legitimate business interests and are awaiting our response to that request

If we restrict the processing of your personal information in accordance with your request, we will notify you before resuming such processing.

Right to Opt Out of Sale and Sharing. You have the right to request that Hilton not sell or share your personal information. If you wish to opt out of the sale or sharing of your personal information, you can submit a request through our website on the Hilton Opt-Out Request page by clicking the link “Your Privacy Choices | Cookie Information” that appears at the bottom of the Hilton.com website when you access that site from an IP address indicating that you are located in a region that has enacted a privacy law, or by visiting datarights.hilton.com. You can also call the toll-free number +1 800 413 7470, send an email to the Data Protection Officer (“DPO”) at: DataProtectionOffice@hilton.com, or send a letter to the Data Protection Officer at: Data Protection Office, 7930 Jones Branch Drive, McLean, Virginia, 22102, United States of America.

Please note that when you opt out of cookies, tags, and pixels, the opt-out applies only to the device and browser you are currently using. If you wish to opt out on other devices or browsers, you must repeat the opt-out process when using those devices or browsers. If you set a legally valid opt-out preference signal in your device’s browser, we will honor it in accordance with applicable laws.

Data Portability Requests. You may request that certain personal information be provided to you or to a designated third party in a commonly used, machine-readable format. However, please note that data portability rights apply only to personal information that we have obtained directly from you and only where our processing is based on consent or the performance of a contract.

Submitting Requests. Requests may be submitted by accessing the data subject rights portal at datarights.hilton.com, in writing to DataProtectionOffice@hilton.com, or by mail to: Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, United States of America. You may also update your personal information as described in the section titled “Your Rights and Choices” in the main body of this Global Privacy Policy.

We will take reasonable steps to verify your identity and your requests, including by verifying your account information, residence, or the email address you provided. If you are an authorized agent submitting a request on behalf of another person, we may require proof of your written authorization before processing the request. We will not respond to any request unless we are able to adequately verify the identity of the requester.

We will respond to all such requests within the timeframe required by law. Applicable law may also grant you the right not to be discriminated against for exercising your rights. However, certain personal information may be excluded from these rights under applicable data protection laws, such as information we retain for regulatory compliance and to protect our services. We may need certain information to provide you with our services; if you ask us to delete it, you may no longer be able to use those services. Additionally, we may charge you a reasonable fee for any subsequent copies of your data that you request.

If you wish to file a complaint or have any questions about our data practices or the exercise of your rights, you can contact Hilton at DataProtectionOffice@Hilton.com or the supervisory authority in your Member State of residence. For the EEA, the supervisory authorities are listed here. For the United Kingdom, the supervisory authority can be found here.

In addition, residents of Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, and Virginia may appeal the denial of a request by sending an email to DataProtectionOffice@hilton.com or a letter to the following address: Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, United States of America.

Right to Withdraw Consent. You have the right to withdraw your consent to any processing carried out solely on the basis of consent (such as, for example, the sending of direct marketing materials to your personal email address). Consent to marketing activities may be withdrawn by following the instructions provided in the marketing emails received or by contacting DataProtectionOffice@hilton.com.

Right to Object to Profiling and Automated Decision-Making. You have the right to object to profiling and automated decision-making. We use personal information to divide a large group of consumers into subgroups (called segments) based on certain shared characteristics, such as geographic area, behavior, or demographic information.

With your consent, we make automated decisions—that is, without human intervention—to offer you certain benefits based on your characteristics (for example, discounted room rates or other special offers based on your geographic location, behavior, or demographic information). For example, if you frequently take midweek trips to France, we may send you special offers for Hilton hotels in France.

International Data Transfers. We may transfer the personal information we collect, in accordance with the purposes described in this Privacy Policy, to countries for which an adequate level of data protection has not been established under country-specific laws. In particular, we transfer your personal information to the United States of America.

We use appropriate security measures for the transfer of personal information between our affiliated companies in different jurisdictions, and, where required, we have implemented data transfer agreements, such as the European Union’s Standard Contractual Clauses or other similar security measures that serve the same purpose. To obtain a copy of these clauses or additional information about these transfers, please send your request to privacy@hilton.com.

Appendix A-1 – California Residents

This Appendix provides additional information for California residents. California law requires us to provide certain additional information about how we collect, use, and disclose “personal information,” as defined in the California Consumer Privacy Act (“CCPA”). The categories of information collected, the business purposes for which it is collected, its sources and uses, and the parties to whom it is disclosed are described in the sections “Collection of Personal Information – General Provisions,” “Collection of Personal Information – Notice at the Time of Collection,” “Cookies and Other Technologies,” and “How We Disclose Personal Information” of this Policy.

Sale or Sharing of Personal Information

We serve targeted (or contextual behavioral) ads on our channels, on other websites, and in our external promotions. In connection with such advertising, we may share the following categories of information with advertising networks and vendors, advertisers, and social media networks, which may be considered a “sale” under California law and constitutes the processing of personal information for targeted advertising: device information and identifiers (such as IP address, unique advertising identifiers, and cookies), encrypted identifiers (such as contact information), usage information (such as browsing history or app usage), location information (such as city), and inferential data.

We do not “sell” or “share” personal information (as defined in the CCPA) if we are actually aware that the consumer is under 16 years of age.

Right to Know, Right to Erasure, and Right to Object to the Sale or Sharing of Personal Information

In addition to certain rights described in Appendix A (“for residents of certain countries and U.S. states”), the California Consumer Privacy Act (“CCPA”) grants California consumers (1) the right to be informed about the personal information collected, used, disclosed, and/or sold; (2) the right to request deletion of such information; and (3) the right to opt out of the sale or sharing of their personal information.

To obtain details about the personal information collected or to submit a request for correction or deletion, visit the Data Subject Rights Portal at: datarights.hilton.com. You may also call the toll-free number +1 800 413 7470, send an email to the Data Protection Officer (“DPO”) at: DataProtectionOffice@hilton.com, or send a letter to the Data Protection Officer at: 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America.

When the DPO receives your request, they will first verify your identity. If you are a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, Hilton Honors account number, and the email address and phone number associated with your Hilton Honors account. If you are not a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, the email address and/or phone number associated with a past stay, and potentially a confirmation number for one of your stays at a Hilton property. After verifying your identity, the DPO will promptly fulfill your request.

If you wish, you may designate an authorized agent to file a request on your behalf. To designate an authorized agent, you must submit a court order, a document prepared by a licensed attorney, or a formal certificate issued by an official government agency.

To opt out of the sale or sharing of your personal information, submit a request by clicking “Privacy Preferences | Cookie Information” at the bottom of the Hilton.com/it website when you access that site from an IP address indicating that you are located in a state that has enacted a privacy law. Please note that when you opt out of cookies, tags, and pixels, the opt-out applies only to the device and browser you are currently using. If you wish to exercise your opt-out rights on other devices or browsers, you must repeat the opt-out process when using those devices or browsers. In addition, California residents may also enable Global Privacy Control (GPC) to opt out of the “sale” or “sharing” of browser-based personal information for each participating browser system that is used. More information is available on the Global Privacy Control website. Using cookie-blocking tools, such as Ghostery, may hide the “Your Privacy Choices” tool or link, including the one in the footer. To opt out of the sale or sharing of cookie-based personal information, California customers may also submit an opt-out request to Hilton.

Sensitive Personal Information

We limit the use of your sensitive personal information to what is strictly necessary to perform services that are reasonably expected or as required by law, to which the California right to limit the use and disclosure of sensitive personal information does not apply.

Direct Marketing/Shine the Light Disclosure Act

California consumers may also request information regarding our disclosure of certain categories of personal information to third parties for their direct marketing purposes. Such requests must be sent to one of the following addresses: CA_Privacy@Hilton.com or DataProtectionOffice@Hilton.com, or by mail to the Office of Data Protection at 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America. Within thirty days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for direct marketing purposes during the preceding calendar year, along with the names and addresses of those third parties. This request may be made no more than once per calendar year. We reserve the right not to respond to requests sent to addresses other than the one specified in this paragraph.

Right to Non-Discrimination

The CCPA prohibits a company from treating a consumer differently because the consumer has exercised a right granted by the CCPA. We encourage you to exercise your rights under the CCPA, and we will not discriminate against you for doing so.

Notice Regarding Financial Incentives

Hilton does not offer financial incentives for the collection, sale, or deletion of personal information. As described in detail in this Privacy Policy, Hilton collects personal data from guests primarily to fulfill their reservations and from Hilton Honors members to administer the Hilton Honors loyalty program. In addition, Hilton collects personal data for marketing and other purposes, as permitted by applicable law.

As set forth in the Hilton Honors Terms and Conditions, Hilton Honors members can earn points and access discounted rates. The ability to earn points and access discounted rates is not directly related to the value that members’ data provides to the business.

Removing Content

If you are a California resident under the age of 18 and a registered user of a website on which this policy is posted, Section 22581 of the California Business and Professions Code allows you to request and obtain the removal of content or information that you have posted. To make such a request, please send an email with a detailed description of the specific content or information to CA_Privacy@Hilton.com. Please note that such a request does not guarantee the complete removal of the content or information you have posted, and that, in certain circumstances, the law does not require or permit removal even if requested.

Retention of Your Personal Information

Please refer to the section titled “Data Retention Periods” in the main body of this Privacy Policy.

Do Not Track (“DNT”)

California law requires us to inform you about how we respond to browser “Do Not Track” (“DNT”) signals. In the absence of a recognized industry or legal standard for DNT signals, we do not currently take them into account.

Transparency Regarding the Source of Data Used to Train Generative Artificial Intelligence

The California law on transparency regarding the source of data used to train generative artificial intelligence (GenAI) systems requires developers of generative AI systems available to California residents to publish on their websites details about the data used to train their systems.

The Hilton Digital Assistant is a generative AI chatbot available on our website (Hilton.com/it), through the Hilton Honors app, and via guest messaging channels at select hotels. The Hilton Digital Assistant can assist with customer service tasks and generate context-aware chatbot responses related to account support, reservation details, hotel information, and general inquiries about Hilton.

Hilton developed this Digital Assistant using Hilton’s proprietary datasets. The data used to train the Hilton Digital Assistant is provided and collected within the hotel on an ongoing basis. We do not use synthetically generated data. The datasets do not include personal information or aggregated consumer data, as defined by the CCPA.

The following are the datasets used to develop the Hilton Digital Assistant. We began using this data to develop the Hilton Digital Assistant on August 1, 2021.

Regulations and General Knowledge Base

Hotel Information System

Appendix A-2 – Nevada Residents

This Appendix provides additional information for Nevada residents. If you are a Nevada resident, you may ask us to stop selling certain categories of personal information that we collect. To submit a request, visit our website at: https://www.hilton.com/en/hilton-honors/opt-out-request. You may also call the toll-free number +1 800 413 7470, send an email to the Data Protection Officer (“DPO”) at DataProtectionOffice@Hilton.com, or send a letter to the Data Protection Officer at: Data Protection Office, 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America. Once the request is received, the DPO will verify the identity of the data subject.

If you are a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, Hilton Honors account number, and the email address and phone number associated with your Hilton Honors account. If you are not a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, email address, and/or phone number associated with a past stay, and possibly a confirmation number for one of your stays at a Hilton property. After verifying your identity, the DPO will promptly fulfill your request.

Appendix A-3 – Residents of France

This Appendix provides additional information for people residing in France.

As specifically indicated in this Privacy Notice for residents of France, Hilton may collect the phone numbers of data subjects to process guest reservations, send communications related to reservations, provide customer assistance and support, verify identity, send marketing communications via SMS, process transactions with partners, share data with Hilton’s third-party partners, authenticate mobile accounts, send service-related communications via SMS, detect and prevent fraud, and conduct sales activities for group reservations. We will not use your phone number for telemarketing. However, to opt out of receiving sales calls, please visit: www.bloctel.gouv.fr.

Appendix A-4 – Hong Kong Residents

This Appendix provides additional information for residents of Hong Kong, a Special Administrative Region of China. If you reside in Hong Kong, a Special Administrative Region of China, we will obtain your consent at the time of, or prior to, sending you any marketing messages. You can opt out of receiving marketing messages from us at any time by using the unsubscribe link included in our marketing messages.

To access your personal information or request its correction, please contact the Data Protection Officer (“DPO”) at DataProtectionOffice@hilton.com or visit the Data Subject Rights Portal at datarights.hilton.com. Before processing your request, we may ask for additional information to verify your identity. In certain circumstances, where permitted by applicable law, we may refuse to comply with your request.

Appendix A-5 – Residents of Turkey

For data subjects in Turkey, this Appendix provides additional information that Hilton is required to disclose to you, as well as certain rights you have regarding the processing of your personal information under applicable local laws. In the event of any conflict with any provision in the main text of the Privacy Policy or in Appendix A, as applicable, the provisions of this Appendix shall prevail.

Data Controller. Hilton Domestic Operating Company Inc. is the Hilton entity responsible for all guest data and Hilton’s marketing activities.

Your personal data may be processed by other Hilton entities in Turkey acting as data controllers, depending on the Hilton property where you are staying. In such cases, the relevant Hilton entity will act as the data controller for your personal data and will provide you with a separate privacy notice, if necessary.

Data Controller's Representative. If you are located in Turkey, you may contact our data controller's representative in Turkey via email or mail to address requests and complaints regarding the processing of your personal data.

Esin Attorney Partnership

info@esin.av.tr

Akatlar Neighborhood, Ebulula Mardin Street, Gül Lane, No. 2

Legal Bases for the Processing of Personal Data. Hilton relies on the following legal bases when processing your personal data for the purposes set forth in the Global Privacy Policy, in accordance with Article 5 of Law No. 6698 on the Protection of Personal Data (“Data Protection Law”):

The processing of your personal data is necessary, provided that it is directly related to the conclusion or performance of the contract between you and Hilton;

The processing is necessary for Hilton to comply with its legal obligations;

the processing is necessary for Hilton’s legitimate interests, provided that it does not infringe upon your fundamental rights and freedoms; or

your explicit consent. Please note that we rely on your explicit consent only when your consent is necessary for the processing, and we do not rely on this legal basis if and when we rely on one of the other legal bases mentioned above.

We have collected personal data for the following purposes:

Process guest reservations

For this purpose, we have collected the following categories of personal data:

Name

Phone and Fax Numbers

Email address

Home Address

Hilton Honors Number

We rely on the following legal bases for the processing of personal data:

Arrival Time

Contact information for the corporate travel organizer (name, title, company, work phone number, email, and address)

Booking Engine

If you have a Hilton and American Express co-branded credit card

If your Hilton and Amazon accounts are linked

If your Hilton and Lyft accounts are linked

We rely on the following legal bases for the processing of personal data:

Contract

Legitimate Interests

Verify identity

For this purpose, we have collected the following categories of personal data:

Name

Phone and Fax Numbers

Email address

Home Address

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Send marketing communications via email, direct mail, and social media

For this purpose, we have collected the following categories of personal data:

Name

Hilton Honors Number

Contact information for the corporate travel organizer (name, title, company, work phone number, email, and address)

We rely on the following legal bases for the processing of personal data:

Consent

Perform analyses to provide you with personalized offers and content

For this purpose, we have collected the following categories of personal data:

Name

Hilton Honors Number

Home Address

Preferred language

Room Preferences

Information about Internet or other online activities, including information regarding a customer’s interaction with Hilton’s websites, apps, or advertisements

IP Addresses

Session ID

Information on Geolocation

Device Information (including the MAC address)

Social media information; publicly available online information (including via social media platforms)

Demographic Data

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Consent

Conduct analyses to improve business operations

For this purpose, we have collected the following categories of personal data:

Name

Home Address

Hilton Honors Number

Room Preferences

Information about Internet or other online activities, including information regarding a customer’s interaction with Hilton’s websites, apps, or advertisements

IP Addresses

Session ID

Booking Engine

If you have a Hilton and American Express co-branded credit card

If your Hilton and Amazon accounts are linked

If your Hilton and Lyft accounts are linked

Amount of the expense

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Determine whether guests are eligible for special or promotional rates

For this purpose, we have collected the following categories of personal data:

Name

Hilton Honors Number

Company Name and Number

Name and number of the travel agent

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Process payments, including robust customer authentication where required by law

For this purpose, we have collected the following categories of personal data:

Name

Home Address

Payment Card Information

IP Addresses

We rely on the following legal bases for the processing of personal data:

Contract

Legal Requirements

Process transactions with partners

For this purpose, we have collected the following categories of personal data:

Name

Phone and Fax Numbers

Email address

Home Address

Hilton Honors Number

We rely on the following legal bases for the processing of personal data:

Contract

Administering Contests and Lotteries

For this purpose, we have collected the following categories of personal data:

Name

Email address

Home Address

Hilton Honors Number

We rely on the following legal bases for the processing of personal data:

Consent

Legitimate Interests

Optimizing Our Websites and Mobile Apps

For this purpose, we have collected the following categories of personal data:

Name

Information about Internet or other online activities, including information regarding a customer’s interaction with Hilton’s websites, apps, or advertisements

IP Addresses

We rely on the following legal bases for the processing of personal data:

Consent

Legitimate Interests

Detect and Prevent Fraud

For this purpose, we have collected the following categories of personal data:

Name

Phone and Fax Numbers

Email address

Home Address

Payment Card Information

Hilton Honors Number

Information about Internet or other online activities, including information regarding a customer’s interaction with Hilton’s websites, apps, or advertisements

Phone and Fax Numbers

Email address

Home Address

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Consent

Send marketing communications via email

For this purpose, we have collected the following categories of personal data:

Email address

We rely on the following legal bases for the processing of personal data:

Consent

Send marketing communications via direct mail

For this purpose, we have collected the following categories of personal data:

Home Address

We rely on the following legal bases for the processing of personal data:

Consent

Comply with applicable laws that require this information in certain jurisdictions

For this purpose, we have collected the following categories of personal data:

Nationality

Date of Birth

Sex

Images from video footage captured by closed-circuit television (CCTV)

We rely on the following legal bases for the processing of personal data:

Legal Requirements

Maintain corporate books and accounting records for corporate reporting, auditing, taxes, and income reconciliation

For this purpose, we have collected the following categories of personal data:

Payment Card Information

Amount of the expense

We rely on the following legal bases for the processing of personal data:

Legal Requirements

Allow guests to access their Hilton Honors account

For this purpose, we have collected the following categories of personal data:

WeChat ID

We rely on the following legal bases for the processing of personal data:

Consent

To provide you with a superior stay

For this purpose, we have collected the following categories of personal data:

Preferred language

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Send Hilton Honors Communications

For this purpose, we have collected the following categories of personal data:

Preferred language

We rely on the following legal bases for the processing of personal data:

Consent

To send you marketing communications

For this purpose, we have collected the following categories of personal data:

Preferred language

We rely on the following legal bases for the processing of personal data:

Consent

To better serve our guests

For this purpose, we have collected the following categories of personal data:

Preferred language

Room Preferences

Room Selection and Assignment

Arrival Time

Departure Date

MyWay Preferences

Your email preferences and consent settings (such as explicit acceptance or rejection, if applicable)

Description of an incident that occurs at a Hilton property or involves a Hilton employee, including incidents related to security, violations of the law, violations of applicable regulations, or breaches of contractual obligations

Description of a complaint you submit to us, including your free-form written feedback if you are a Hilton Honors member

Details of the spa and wellness service or treatment (such as date, time, and type of service)

Amount of the expense

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Personalize the guest experience

For this purpose, we have collected the following categories of personal data:

For this purpose, we have collected the following categories of personal data:

Promotional images or photos taken by photographers at the hotel

We rely on the following legal bases for the processing of personal data:

Consent

Support marketing activities

For this purpose, we have collected the following categories of personal data:

Booking Engine

If you have a Hilton and American Express co-branded credit card

If your Hilton and Amazon accounts are linked

If your Hilton and Lyft accounts are linked

Amount of the expense

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Consent

Sharing Data with Personalized Advertising Networks

For this purpose, we have collected the following categories of personal data:

Information about Internet or other online activities, including information regarding a customer’s interaction with Hilton’s websites, apps, or advertisements

IP Addresses

Session ID

Device Information (including the MAC address)

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Consent

Troubleshooting Website Issues

For this purpose, we have collected the following categories of personal data:

IP Addresses

Customer Reviews and Survey Responses

Free-form textual feedback

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Display targeted ads in the media

For this purpose, we have collected the following categories of personal data:

Booking Engine

If you have a Hilton and American Express co-branded credit card

If your Hilton and Amazon accounts are linked

If your Hilton and Lyft accounts are linked

We rely on the following legal bases for the processing of personal data:

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Consent

Provide a Tailored Experience

For this purpose, we have collected the following categories of personal data:

Social media information; publicly available online information (including via social media platforms)

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Link to the customer information in the database

For this purpose, we have collected the following categories of personal data:

Demographic Data

We rely on the following legal bases for the processing of personal data:

Consent

Submit the required notifications

For this purpose, we have collected the following categories of personal data:

MyWay Preferences

We rely on the following legal bases for the processing of personal data:

Consent

Addressing Safety and Security Issues

For this purpose, we have collected the following categories of personal data:

Description of a complaint you submit to us, including your free-form written feedback if you are a Hilton Honors member

Details of the spa and wellness service or treatment (such as date, time, and type of service)

We rely on the following legal bases for the processing of personal data:

Legitimate Interests

Comply with legal or contractual obligations

For this purpose, we have collected the following categories of personal data:

Description of a complaint you submit to us, including your free-form written feedback if you are a Hilton Honors member

Details of the spa and wellness service or treatment (such as date, time, and type of service)

We rely on the following legal bases for the processing of personal data:

Legal Requirements

The Data Subject’s Rights. The data subject has the rights set forth in Article 11 of the Data Protection Act and may exercise those rights by contacting us at: DataProtectionOffice@hilton.com or Data Protection Office, Hilton, 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America.

We will address the requests you submit to us as soon as possible—and no later than 30 days—depending on the nature of your request, free of charge. However, if your request involves an additional cost to our company, you may be charged the fee set by the Turkish Personal Data Protection Board.

Changes. The following sections of the Global Privacy Policy do not apply to individuals in Turkey.

The following sentence in the second paragraph: By using any of our products or services and/or accepting this Privacy Policy—for example, when registering for one of our products or services—you acknowledge and agree that we will collect and use your personal information as described in this Privacy Policy.

The following sentence in the “International Transfers of Personal Data” section: To provide you with this service, please be aware that we may share your personal information with members of the Hilton brand portfolio, our service providers, and other third parties, who may be located in a country other than your own.

Language. This Privacy Policy is available in English and Turkish. In the event of any inconsistencies or differing interpretations between the English and Turkish versions, the Turkish text shall prevail.

International Data Transfers. Hilton is required to transfer your personal data to its affiliates outside of Turkey, which include Hilton Domestic Operating Company Inc., all of which are based in the United States, as well as their local service providers, in order to complete reservations, process Hilton Honors enrollment, and conduct promotional activities through its website, whose servers are located abroad. Without your consent, Hilton is unable to provide you with its services through this website. Therefore, we request your consent when you access this website for the international transfer of your data.

This consent-based practice is only temporary: Hilton is working on implementing a letter of commitment, which is one of the alternative legal mechanisms for cross-border data transfers. Consequently, the consent-based practice will be discontinued once the letter of commitment has been drafted and approved by the Data Protection Authority.

Appendix A-6 – Residents of China

1. Introduction

For individuals residing in the People’s Republic of China (for the purposes of this Privacy Policy, excluding the Hong Kong Special Administrative Region, the Macao Special Administrative Region, and Taiwan) (“China”) or citizens of the People’s Republic of China, we understand that privacy is important to you. Therefore, in this Appendix, we provide you with an overview of how Hilton collects, uses, discloses, and otherwise processes your personal information (including sensitive personal information, where applicable) that we receive or collect from you. Please read this Privacy Policy carefully before using any Hilton service or product.

This Appendix does not replace the main text of the Privacy Policy, but rather supplements it and must be read in conjunction with the Privacy Policy itself and Appendix A, as applicable. In the event of any conflict or inconsistency between this Appendix and the main text of the Privacy Policy, this Appendix shall prevail.

The term “Personal Information” has the same meaning as defined in the Personal Information Protection Law of the People’s Republic of China (as amended from time to time). Such information may be recorded electronically or by other means and may identify the identity of, or reflect the activities of, a specific natural person, either on its own or in combination with other information, including sensitive personal information. The terms “Personal Information” or “Information” used in the main text of this Privacy Policy and in this Appendix also include sensitive personal information (where applicable). The term “Sensitive Personal Information” has the same meaning as defined in the Personal Information Protection Law of the People’s Republic of China (and any amendments thereto). The sensitive personal information covered by this Policy includes passport or ID card information, payment card information, transaction amounts, accommodation information (such as check-in and check-out times), interactions with Hilton websites, and precise location information. Sensitive personal information is processed only where such processing is strictly necessary for the relevant purposes described in the sections “Collection of Personal Information – General Provisions” and “Collection of Personal Information – Notice at the Time of Collection” in the main text of this Policy. Our processing of your sensitive personal information will comply with the safeguards required by applicable laws and regulations. However, depending on the specific type of sensitive personal information involved, such processing may have various impacts, including potential harm to your reputation, property, or personal safety in the event of a data breach. You agree that sensitive personal information will be processed in accordance with the purposes and methods set forth in this Policy.

2. Collection and Use of Personal Information

With regard to the following issues, we recommend referring to the sections titled “Collection of Personal Information – General Provisions” and “Collection of Personal Information – Notice at the Time of Collection” in the main body of this Privacy Policy.

The types of personal information we collect from you (including sensitive personal information)

How we collect and use your personal information, the purposes for which we use it, and how we share or disclose your personal information.

Hilton will not knowingly collect or disclose personal information from children under the age of 14. When we collect personal information from a person under the age of 14, we must obtain consent from their parent or guardian, and we will handle such information in accordance with the safeguards established by applicable laws and regulations.

We will use your personal information with your consent or as otherwise required or permitted by applicable law (for example, if the processing is necessary to enter into or fulfill a contract with you, if the processing is necessary to comply with legal obligations, etc.). If we wish to use your personal information for other purposes, we will obtain your additional consent, unless such further use without new consent is required or permitted by applicable law. If your consent is essential for the processing of your personal information and you refuse to provide it, we may not be able to provide all of our services.

3. Disclosure and Sharing of Personal Information

With your explicit consent, where required, we may share your personal information for the purposes described in this Privacy Policy with members of the Hilton brand portfolio worldwide, our service providers, and other third parties as follows:

Hilton Worldwide Holdings Inc. and its subsidiaries, as well as the members of the Hilton brand portfolio, including franchised and managed hotels,

service providers that provide services on behalf of Hilton;

Payment Card Issuers and Processors

employers specified in company agreements;

advertising networks and analytics providers for Hilton's website and mobile apps.

The processing of your personal information by members of the Hilton brand portfolio—including the purposes and means of processing and the categories of personal information processed—is governed by this Privacy Policy. Please contact the Data Protection Office at dataprotectionoffice@hilton.com for contact information for other entities that may receive your personal data.

Some of the third parties listed above may also process your personal information for their own purposes as data processors, in which case their own privacy policies will apply, including the purposes and means of processing and the categories of personal information processed.

To provide and optimize our services, our applications incorporate third-party SDKs (including WeChat Mini Programs). Listed below are the names of the third-party SDKs we currently incorporate, the types of personal information collected, and the purposes of collection and use. If you have any questions about the collection of personal information by third parties through these SDKs, please refer to the relevant privacy policy.

Alipay App Payment SDK

SDK Provider

Alipay (China) Network Technology Co., Ltd.

Purpose of the SDK

Payment

An app that incorporates the SDK

iOS, Android

Types of Personal Information Collected by the SDK

General device information (IMEI/IMSI, SIM card serial number/MAC address, Android ID: for Android devices only), network information

Link to the SDK's Privacy Policy

https://opendocs.alipay.com/open/01g6qm

WeChat Pay

SDK Provider

Tencent

Purpose of the SDK

Payment

An app that incorporates the SDK

iOS, Android, WeChat Mini Programs

Types of Personal Information Collected by the SDK

WeChat User OpenID

Link to the SDK's Privacy Policy

https://weixin.qq.com/cgi-bin/readtemplate?t=weixin_business_pay

Adobe Analytics SDK for WeChat Mini Programs

SDK Provider

Adobe

Purpose of the SDK

User Clicks and Usage Records

An app that incorporates the SDK

WeChat Mini Programs

Types of Personal Information Collected by the SDK

Location information, device information, operating system version

Link to the SDK's Privacy Policy

https://github.com/NJRojas/aep-sdks-documentation/tree/master/resources/adobe-experience-platform-mini-programs-sdk

Adobe Analytics SDK

SDK Provider

Adobe

Purpose of the SDK

User Clicks and Usage Records

An app that incorporates the SDK

iOS, Android

Types of Personal Information Collected by the SDK

Location information, device information, operating system version

Link to the SDK's Privacy Policy

https://www.adobe.com/cn/privacy/policy.html

Baidu Maps SDK

SDK Provider

Baidu

Purpose of the SDK

View nearby hotels on the map

An app that incorporates the SDK

Android

Types of Personal Information Collected by the SDK

Location Information (Domestic Users)

Link to the SDK's Privacy Policy

https://lbsyun.baidu.com/index.php?title=open/law

Google Maps SDK

SDK Provider

Google

Purpose of the SDK

View nearby hotels on the map

An app that incorporates the SDK

Android

Types of Personal Information Collected by the SDK

Location Information (Domestic Users)

Link to the SDK's Privacy Policy

https://developers.google.cn/maps/faq?hl=zh-cn#tos_logging

Workspace ONE

SDK Provider

VMware

Purpose of the SDK

Logging app crashes and error messages

An app that incorporates the SDK

iOS, Android

Types of Personal Information Collected by the SDK

Device Information, Operating System Version

Link to the SDK's Privacy Policy

https://www.vmware.com/cn/help/privacy/products-and-services-notice.html

Braze SDK

SDK Provider

Braze

Purpose of the SDK

Collect and synchronize user data; track engagement with marketing, push notifications, and in-app messages

An app that incorporates the SDK

Android, iOS, web

Types of Personal Information Collected by the SDK

Session data, purchase data, user data

Link to the SDK's Privacy Policy

https://www.braze.com/company/legal/privacy

Branch SDK

SDK Provider

Branch

Purpose of the SDK

Content views, user clicks

An app that incorporates the SDK

Android, iOS

Types of Personal Information Collected by the SDK

IP address, device information, operating system version

Link to the SDK's Privacy Policy

https://legal.branch.io/#branchio-privacypolicy

Notwithstanding the situations described above, we may disclose personal information to third parties in order to: comply with applicable laws or valid legal processes; respond to requests from governments or public and governmental authorities; protect the rights, privacy, safety, or property of Hilton, website visitors, guests, employees, or the public; pursue or exercise our rights; or respond to emergencies.

4. Mobile and Geolocation Services

We may collect your personal information if you download and use our mobile apps or other digital platforms, such as WeChat Mini Programs. We will obtain your consent and collect, use, disclose, and otherwise process this information in accordance with this Privacy Policy. If you allow us to access location information on your device to use the features and services of our app, such information may include geolocation data. We also collect information about your device, such as the brand, model, operating system, and operating system version of your phone, to direct you to the appropriate app store to download our mobile apps.

You can prevent or limit the collection of this information by changing the settings in the Hilton Honors app or on your device.

5. Interest-Based Analytics and Advertising

We also work with third parties to deliver targeted advertising based on your online activities across various websites, mobile apps, and devices over time. Our advertising partners may collect information about your activities related to our services on your current device and combine it with information about your activities on other websites, mobile apps, and devices. They may collect this information using server logs, cookies, web beacons, tags, pixels, mobile advertising IDs, cross-device links, and similar technologies. This information may include your personal information.

You can opt out of interest-based advertising and cross-device linking in your current browser or in the web browsers and mobile apps on your device. We do not currently accept “do not track” signals. For more information, please see the section titled “Analytics and Interest-Based Advertising” in the main body of this Policy, as well as the section on “Cookies and Other Technologies.”.

6. Editing and Accessing Your Personal Information and Deleting Your Account

You have the right to access, correct, and/or (under certain circumstances) delete your personal information; to withdraw your consent to our processing of your personal information; to cancel your subscription account (if any); object to the use of your personal information in automated decision-making, and file complaints regarding how we process your personal information. You may have additional rights under other applicable laws. To find out how to contact us, please refer to the contact information in Section 11 below or in the section titled “Your Rights and Choices” in the main body of this Policy. We strive to process these requests within the timeframe required by law in accordance with applicable laws. Specifically, Hilton will respond to a request to cancel your registration within 15 days of receiving it, except in exceptional circumstances, in which case the data subject will be informed of the expected timeframe if the response requires more than 15 days. Please note that if you request to cancel your account registration, you will no longer be able to enjoy any benefits as of the cancellation date. After you cancel your account registration, your personal information will be deleted or anonymized, unless applicable laws require us to retain such information.

7. How We Protect Personal Information

We take reasonable measures to: (i) protect personal information from unauthorized access, disclosure, alteration, or destruction; and (ii) ensure that personal information is accurate and up-to-date by implementing appropriate technical and organizational measures. For more information, please see the section titled “How We Protect Personal Information” in the main body of this Privacy Policy.

We are not responsible for the collection, use, disclosure, or other processing of personal information by third-party websites or applications. We encourage you to read the privacy policies and terms of use of those websites and applications. This applies to: (1) in-hotel Internet services that we may offer; (2) third-party websites and applications to which links on our websites and mobile applications may direct you; and (3) third-party digital messaging applications or platforms that we use to communicate with you.

8. International Transfer of Personal Information

Because Hilton operates worldwide, subject to your explicit consent where required, Hilton may transfer the personal information of data subjects (including sensitive personal information, where applicable) to jurisdictions outside of China, including the United States, Europe, and other jurisdictions where Hilton, its service providers, and other relevant third parties conduct business. In particular, your personal data may be transferred to Hilton Domestic Operating Company Inc. for storage and processing in accordance with this Privacy Policy through Hilton’s global centralized reservation system, which is hosted in the United States. Personal data stored in Hilton’s global centralized reservation system may be further transferred to properties in different countries based on your reservations, in accordance with this Policy. Please contact the Data Protection Office at dataprotectionoffice@hilton.com for contact information regarding other entities that may receive your personal data.

We will take appropriate measures to protect the integrity and confidentiality of your information and to ensure that your personal information is processed in accordance with the main text of this Policy and in compliance with applicable laws.

9. Data Retention Period

We will retain your personal information for as long as necessary to fulfill the purpose for which it was collected, or as required or permitted by law. We will destroy your personal information in accordance with our data retention and management procedures. For more information, please see the section titled “Data Retention Periods” in the main body of this Policy.

10. Changes to the Privacy Policy

If we make substantial changes to this Privacy Policy, we will post those changes. For more information, please see the section titled “Changes to the Privacy Policy” in the main text of this Privacy Policy. If required by local laws, we will notify you and/or seek your consent.

11. Contact Information for Questions or Concerns

If you have any questions, requests, or complaints regarding the protection of personal information, please contact us. You can contact the Data Protection Office at: DataProtectionOffice@hilton.com, or, if you wish to contact the representative in China, please email: China_Privacy@hilton.com.

Appendix A-7 – Residents of Brazil

To the extent that you are located in Brazil or are subject to Brazil’s General Data Protection Law—Federal Law No. 13709/18 on the Protection of Personal Data (“LGPD”)—the provisions set forth below must be read and applied to the processing of your personal data accordingly. Unless otherwise specified in this Appendix, the remainder of the terms, including Appendix A, where applicable, will remain unchanged and fully valid and effective.

1. Rights of Data Subjects

Under certain circumstances, you have the following rights under the LGPD with respect to your personal data:

Right to Information: the right to receive clear, transparent, and understandable information about the use of one’s personal data;

Right to Confirmation and Access: the right to receive confirmation of and access to your personal data in our possession;

Right to rectification: the right to request that your personal data be corrected if it is outdated, inaccurate, or incorrect, and/or to have it completed;

Right to anonymization, blocking, or deletion: to anonymize, block, or delete any unnecessary or excessive data processed in accordance with applicable law;

Right to withdraw consent at any time for data processing based on consent: the right to withdraw consent to the processing of one’s personal data when such processing is based on consent;

Right to data portability: the right to request a copy of one’s personal data and to have it transferred to another database in accordance with additional regulations issued by the local authority;

Right to receive information about public and private entities: the right to receive information about public and private entities with which your personal data is shared;

Right to object: the right to object to any processing activity based on a legal basis other than consent in the event of a violation of the LGPD;

Right to review automated decisions: the right to review decisions made by a natural person that are based solely on the automated processing of personal data, whenever such decisions affect one’s interests;

The right to file a complaint with the local data protection authority or consumer protection agencies.

2. Legal Basis

Hilton relies on the following legal bases when processing your personal data for the purposes set forth in the Global Privacy Policy, in accordance with Article of Law No. 7 on the Protection of Personal Data:

consent of the data subject (Art. 7, I);

to comply with a legal or regulatory obligation (Art. 7, II);

where necessary for the performance of a contract or for steps taken prior to entering into a contract to which the data subject is a party (Art. 7, V);

where necessary for the legitimate interests of the data controller or a third party, unless the fundamental rights of the data subject take precedence (Art. 7, IX).

However, depending on the specific circumstances, there may be other legal bases set forth in the LGPD.

3. International Transfers

When we transfer information originating in Brazil to a country outside Brazil, we will take steps to ensure that such transfers are handled with care to protect your privacy rights:

Transfers within the Hilton Group of companies may be covered by an agreement entered into by Hilton’s affiliates (an intra-group agreement) that contractually obligates each affiliate to ensure that your information receives an adequate and consistent level of protection wherever it is transferred within Hilton, in accordance with the LGPD;

If we transfer your data outside the Hilton Group of companies—including to other companies that provide services to us—we will obtain contractual commitments and guarantees from them to protect your information, such as standard contractual clauses or binding corporate rules. In the absence of guidance from the local supervisory authority, we may, until such time as guidance is provided, follow the standard models adopted by the European Union or other competent authorities;

We are also able to transfer personal information to countries that are recognized as having an adequate level of legal protection or where we can be certain that alternative arrangements are in place to protect your privacy rights.

Please contact us if you would like more information about the specific mechanism we use to transfer your personal data outside of Brazil.

Appendix A-8 – Residents of Monaco

For data subjects in the Principality of Monaco, this Appendix provides additional information that Hilton is required to disclose to you, as well as certain rights you have regarding the processing of your personal data under applicable local laws. In the event of any conflict with any provision contained in the main text of this Privacy Policy or Appendix A, the provisions of this Appendix shall prevail, as applicable.

1. Legal Basis for the Processing of Your Personal Data

Hilton relies on legal bases when processing personal data for the purposes set forth in the main text of the Global Privacy Policy, in accordance with Law No. 1,054 on the Protection of Personal Data (“Law No. 1,054”).

2. Access to Personal Data and Customer Rights

In accordance with Law No. 1,054, you have the right to access, correct, delete, and transfer your personal data, as well as the right to object to and restrict the processing of such personal data. Upon verification of your identity, you may exercise the rights listed above by contacting the Data Protection Officer (“DPO”) at the email address DataProtectionOffice@hilton.com. If, after contacting the DPO, you believe that your rights have not been respected, you may file a complaint with the Personal Data Protection Authority (“APDP”).

3. Personal Data Security

If a breach of your personal data occurs that poses a high risk to your rights and freedoms, Hilton will notify you as soon as possible and take all necessary measures to mitigate the risks associated with such a breach. Regardless of whether your data is processed by Hilton or by its subcontractors and partners, the same security and privacy requirements apply to your personal data.

4. International Transfers of Personal Data

Hilton is required to transfer your personal data to its affiliates outside the Principality of Monaco, which include Hilton Domestic Operating Company Inc., all of which are based in the United States, as well as their local service providers, in order to complete reservations, process Hilton Honors enrollment, and conduct promotional activities through its website, whose servers are located abroad.

When a subcontractor or partner is located in a country that has not been recognized as providing a level of protection adequate to that offered by Law No. 1,054 (as in the case of the United States), Hilton must provide a transfer authorization form in order to comply with the requirements of Law No. 1,054 regarding the security and privacy of personal data, and subcontractors must ensure adequate protection of personal data.

5. Language

This Privacy Policy is available in English and French. In the event of any inconsistencies or differing interpretations between the English and French versions, the English text shall prevail.

Appendix A-9 – Residents of Nigeria

To the extent that the data subject is located in Nigeria or is subject to the Nigerian Data Protection Act (NDPA) of 2023, the provisions set forth below must be read and applied accordingly to the processing of the data subject’s personal data. Where there is a conflict with any provision contained in the main text of this Privacy Policy or Appendix A, the provisions of this Appendix shall prevail, as applicable.

1. Legal Basis for Processing

In accordance with Nigeria’s Data Protection Act (“NDPA”), Hilton processes the personal information of data subjects for the purposes set forth in the Global Privacy Policy based on the following legal grounds:

Consent: where explicit consent has been provided for specific processing activities.

Contractual necessity: to fulfill our obligations under a contract with you, such as processing reservations and providing the requested services.

Legal obligation: to comply with applicable Nigerian laws and regulatory requirements.

Legitimate Interests: To pursue our legitimate business interests, provided that such processing does not override your fundamental rights and freedoms.

2. Rights of Nigerian Data Subjects

As a resident of Nigeria, the data subject is entitled to the following protections under the NDPA:

Right of access: You may request confirmation as to whether your personal information is being processed and, if so, access to that information.

Right to Correction: The user has the right to request the correction of inaccurate or incomplete personal information.

Right to Erasure: You may request the erasure of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to restrict processing: You may request that the processing of your personal information be restricted in specific situations.

Right to data portability: The data subject has the right to receive their personal information in a structured, commonly used, and machine-readable format and to transmit it to another data controller.

Right to Object: You may object to the processing of your personal information based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent: If the processing is based on consent, the data subject has the right to withdraw that consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.

Right to File a Complaint: The data subject has the right to file complaints with the Nigerian Data Protection Commission (NDPC).

3. Data Transfer and Sharing

We may transfer your personal information to third parties, including entities within the Hilton group and third-party service providers, for the purposes described in this Privacy Policy. When we transfer personal information outside of Nigeria, we ensure that appropriate safeguards are in place to protect the data in accordance with the NDPA.

4. How We Protect Your Personal Information

5. Data Retention

Your personal information will be retained only for as long as necessary to fulfill the purposes for which it was collected or as required by Nigerian law. When we destroy your personal information, we do so in a manner that prevents the information from being restored or reconstructed.

6. Cookies and Other Technologies

Our website may use “cookies” or “other technologies” (such as “pixel tags,” “web beacons,” “clear GIFs,” links in emails, JavaScript, and device IDs assigned by Google or Apple, or similar technologies). For more information, please see the section titled “Cookies and Other Technologies” in the main body of this Policy.

7. Contact Information

If you have any questions, concerns, or requests regarding the processing of personal information under Nigerian law, please contact the Data Protection Office at:

Email: DataProtectionOffice@hilton.com

We are committed to responding to requests in a timely manner and in accordance with the NDPA.

8. Changes to the Privacy Policy

This Privacy Policy may be updated from time to time. When we make substantial changes to this Privacy Policy, we will post a link to the revised Privacy Policy on our website’s home page. You can check when this Privacy Policy was last updated by referring to the date at the top of the Privacy Policy. Any changes to our Privacy Policy will take effect after the revised and updated Privacy Policy is posted on the website.

Appendix A-10 – Korean Privacy Regulations

Hilton complies with the Personal Information Protection Act (PIPA) and other applicable laws to protect the freedoms and rights of data subjects, and handles personal information in a lawful and secure manner. In accordance with Article 30 of the PIPA, we establish and disclose the following rules regarding the processing of personal information to guide data subjects on the procedures and standards for the processing and protection of personal information, and to ensure that complaints are resolved in a timely and accurate manner. Where there is a conflict with any provision contained in the main text of this Policy or Appendix A, the provisions of this Appendix shall prevail, as applicable.

To the extent that the data subject is located in South Korea or is otherwise subject to the PIPA law, the provisions set forth below must be read and applied to the processing of personal information accordingly.

Contact Information: In accordance with Article 32-5 of the Information and Communications Network Act, a national representative (local resident) responsible for information and communications services is designated as follows:

Local Representative: Residents of Korea may contact the local representative by phone, email, or mail with any questions or complaints regarding the processing of their personal data.

Area Manager: Jung Byung-hyuk (Brad Jeong), CEO, Conrad Seoul

Phone: +82 02 6137 7600

Email address: Brad.jeong@conradhotels.com

Address: 10 Gukjegeumyuong-ro, Yeouido, Seoul, 07326, South Korea

Data Protection Office: You can also contact Hilton’s Data Protection Office.

Phone: +82 070 4732 6767

Email address: DataProtectionOffice@hilton.com

Address: 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America

Data Subject Rights Portal at datarights.hilton.com

1. Processing and Retention Period of Personal Information

We will use your personal information with your consent or as permitted by applicable law. If we wish to use your personal information for other purposes, we will obtain your additional consent, unless such additional use is permitted by applicable law.

Hilton does not knowingly collect, disclose, or sell personal information from children under the age of 14.

Retention Period: Personal information is retained for as long as necessary to fulfill the purposes for which it was collected, in accordance with internal retention policies, typically for the period consented to by the data subject at the time of collection, or for the duration of the contractual relationship, and for any additional period required by applicable law. This information is stored and managed in the United States.

Destruction and Disposal: We will promptly destroy personal information at the end of the retention period, as described above. When we destroy personal information, we do so in a manner that prevents the information from being recovered or reconstructed.

Personal data processed with the data subject’s consent: Hilton processes the following personal information with the data subject’s consent

Conduct analyses to provide guests with personalized offers and content

Legal Basis

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

Categories of Personal Information Processed

Name

Hilton Honors Number

Home Address

Preferred language

Room Preferences

Information about Internet or other online activities, including information regarding a customer’s interaction with Hilton’s websites, apps, or advertisements

IP Addresses

Session ID

Device Information (including the MAC address)

Social media information; publicly available online information (including via social media platforms)

Demographic Data

Administering Contests and Lotteries

Legal Basis

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from the consumers themselves

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

Categories of Personal Information Processed

Name

Email address

Home Address

Hilton Honors Number

Conduct analyses to improve business operations

Legal Basis

Article 15(1)(6) Legitimate Interest

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

Categories of Personal Information Processed

Name

Home Address

Hilton Honors Number

Room Preferences

Information about Internet or other online activities, including information regarding a customer’s interaction with Hilton’s websites, apps, or advertisements

IP Addresses

Session ID

Booking Engine

If you have a Hilton and American Express co-branded credit card

If your Hilton and Amazon accounts are linked

If your Hilton and Lyft accounts are linked

Amount of the expense

Determine whether guests are eligible for special or promotional rates

Legal Basis

Article 15(1)(6) Legitimate Interest

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

Categories of Personal Information Processed

Name

Hilton Honors Number

Company Name and Number

Name and number of the travel agent

Verify Your Mobile Account

Legal Basis

Article 15(1)(6) Legitimate Interest

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

Categories of Personal Information Processed

Phone and Fax Numbers

Email address

Process payments, including implementing strong customer authentication (SCA) where required by law

Legal Basis

Article 15(1)(4) of the PIPA Act (Performance and Fulfillment of a Contract)

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

Categories of Personal Information Processed

Name

Home Address

Payment Card Information

IP Addresses

Process transactions with partners

Legal Basis

Article 15(1)(4) of the PIPA Act (Performance and Fulfillment of a Contract)

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

Categories of Personal Information Processed

Name

Phone and Fax Numbers

Email address

Home Address

Hilton Honors Number

Optimizing Our Websites and Mobile Apps

Legal Basis

Article 15(1)(6) Legitimate Interest

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

Categories of Personal Information Processed

Name

Information about Internet or other online activities, including information regarding a customer’s interaction with Hilton’s websites, apps, or advertisements

IP Addresses

Detect and Prevent Fraud

Legal Basis

Article 15(1)(6) Legitimate Interest

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

Categories of Personal Information Processed

Name

Phone and Fax Numbers

Email address

Home Address

Payment Card Information

From a demographic data company

Categories of Personal Information Processed

Preferred language

Room Preferences

Room Selection and Assignment

Arrival Time

Departure Date

Your MyWay Preferences

Directly from the cameras located inside and around the property

Categories of Personal Information Processed

Images or video footage captured by closed-circuit television (CCTV)

Internal and External Promotions and Communications

Legal Basis

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from the security cameras on the property

Categories of Personal Information Processed

Promotional images or photos taken by photographers at the hotel

Support marketing activities

Legal Basis

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from consumers

Indirectly from consumers, by reviewing publicly available information on their social media channels

From publicly available online sources

Categories of Personal Information Processed

Booking Engine

If you have a Hilton and American Express co-branded credit card

If your Hilton and Amazon accounts are linked

If your Hilton and Lyft accounts are linked

Amount of the expense

Sharing this data with advertising networks that provide personalized ads

Legal Basis

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from consumers

Indirectly from consumers, by reviewing publicly available information on their social media channels

From publicly available online sources

Categories of Personal Information Processed

Information about Internet or other online activities, including information regarding a customer’s interaction with Hilton’s websites, apps, or advertisements

IP Addresses

Session ID

Device Information (including the MAC address)

Troubleshooting Website Issues

Legal Basis

Article 15(1)(6) Legitimate Interest

Source

Directly from consumers

Categories of Personal Information Processed

IP Addresses

Customer Reviews and Survey Responses

Free-form textual feedback

Display targeted ads in the media

Legal Basis

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from consumers

Indirectly from consumers, by reviewing publicly available information on their social media channels

From publicly available online sources

Categories of Personal Information Processed

Booking Engine

Directly from consumers

Categories of Personal Information Processed

Information on Geolocation

To ensure a more personalized welcome and stay, and to address service-related issues in order to best meet guests’ needs

Legal Basis

Article 15(1)(6) Legitimate Interest

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from consumers

Indirectly from consumers, by reviewing publicly available information on their social media channels

From publicly available online sources

Categories of Personal Information Processed

Social media information; publicly available online information (including via social media platforms)

Link this information to the customer records already in Hilton's database

Legal Basis

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from consumers

Indirectly from consumers, by reviewing publicly available information on their social media channels

From publicly available online sources

Categories of Personal Information Processed

Demographic Data

Send you the communications you wish to receive

Legal Basis

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from consumers

Categories of Personal Information Processed

Your MyWay Preferences

Determine whether guests are eligible for special or promotional rates

Legal Basis

Section 15(1)(1) of the PIPA Act (Consent)

Source

Directly from consumers

Categories of Personal Information Processed

Name

Hilton Honors Number

Company Name and Number

Name and number of the travel agent

Addressing security issues – Complying with legal or contractual obligations

Legal Basis

Article 15(1)(6) Legitimate Interest

Source

Directly from consumers

Categories of Personal Information Processed

Description of a complaint you submit to us, including your free-form written feedback if you are a Hilton Honors member

Details of the spa and wellness service or treatment (such as date, time, and type of service)

Personal data processed without the data subject's consent. Hilton processes the following personal information without the data subject's consent.

Process guest reservations and verify their identities

Legal Basis

Article 15(1)(4) of the PIPA Act (Performance and Fulfillment of a Contract)

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

Categories of Personal Information Processed

Name

Phone and Fax Numbers

Email address

Home Address

Hilton Honors Number

Send guests notifications regarding their reservations

Legal Basis

Article 15(1)(4) of the PIPA Act (Performance and Fulfillment of a Contract)

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

From a demographic data company

Categories of Personal Information Processed

Name

Email address

Home Address

Hilton Honors Number

Provide assistance and support to customers

Legal Basis

Article 15(1)(4) of the PIPA Act (Performance and Fulfillment of a Contract)

Source

Directly from consumers

From third parties, such as travel booking platforms and credit card providers

Categories of Personal Information Processed

Name

Phone and Fax Numbers

Email address

Home Address

Hilton Honors Number

WeChat Profile Name and Photo

Arrival Time

Contact information for the corporate travel organizer (name, title, company, work phone number, email, and address)

Booking Engine

If you have a Hilton and American Express co-branded credit card

If your Hilton and Amazon accounts are linked

If your Hilton and Lyft accounts are linked

2. Rights and Obligations of Data Subjects

As a resident of Korea, you have the following rights under the PIPA Act:

Right to Be Informed

Right of Access

Right to Correction

Right to Erasure

Right to Object, Withdraw Consent, or Suspend Processing

Right to Data Portability

Right to Object to Automated Decision-Making

Exercising Rights: Data subjects may exercise their rights at any time by submitting a request to the following office using the contact information provided below. The Data Protection Office will respond promptly within the timeframe permitted by law.

Department: Office of Data Protection

Phone: +82 070 4732 6767

Email address: DataProtectionOffice@hilton.com

Address: Data Protection Office, 7930 Jones Branch Drive, McLean, Virginia 22102, United States of America

Data Subject Rights Portal at datarights.hilton.com

In some circumstances, you may be able to submit a request on behalf of someone else. If you submit a request on behalf of someone else, you may be asked to provide proof of authorization.

Remedies in the Event of a Violation of Rights and Interests: To seek protection in the event of a personal information breach, you may request dispute resolution or consultation from organizations such as the Personal Information Breach Reporting Center or the Privacy Breach Reporting Center of the Korea Internet & Security Agency (KISA). For other reports and consultations regarding personal information breaches, please contact the following institutions:

Personal Information Dispute Mediation Committee: (no area code) 1833 6972 (www.kopico.go.kr)

KISA Personal Information Violation Reporting Center: (no area code) 118 (privacy.kisa.or.kr)

National Police Agency: (no area code) 182 (ecrm.police.go.kr)

3. Cookies and Other Technologies

The site may use “cookies” or “other technologies” (such as “pixel tags,” “web beacons,” “clear GIFs,” links in emails, JavaScript, device IDs assigned by Google or Apple, or similar technologies) to provide personalized content and offers. Cookies are small text files that are stored on your computer or mobile device when you visit a website. For more information about cookies and other technologies, please refer to the Online and Mobile Information We Collect.

Behavioral Information: Subject to your consent to the use of cookies and other technologies while interacting with the website or mobile app, Hilton will process and collect behavioral information related to such interactions. If you consent and log in to your Hilton Honors account, this behavioral information will be associated with your account. Behavioral information is used to deliver personalized advertising, optimize our website and mobile app, and support internal analytics. Behavioral information is retained only for as long as necessary to fulfill the purposes for which it was collected or as permitted by law.

Enabling/Blocking Cookies and Other Technologies: For instructions on how to remove or block cookies from your device at any time, please refer to the “Managing Cookies and Other Technologies” section in the main body of this Policy.

4. International Transfer of Personal Information

With the consent of the individual concerned, Hilton will collect, process, and transfer the relevant personal information outside of Korea to the United States, as necessary to process reservations and enable participation in the Hilton Honors program.

5. How We Protect Personal Information

For more information, please refer to the section titled “How We Protect Your Information” in the main body of this Privacy Policy.

6. Changes to the Privacy Policy

This Privacy Policy is effective as of the most recent update date indicated at the top of this Policy. For a previous version of this Policy, please send an email to privacy@hilton.com.

For a summary of the material changes, please refer to the “Changes to the Privacy Policy” section.

Appendix A-11 – Residents of Mexico

This Appendix provides additional information for individuals residing in Mexico. If you are based in Mexico, we may share the following personal information with Invex, a third party that provides telemarketing services on behalf of the Hilton/Invex co-branded credit card:

Hilton Honors Number

Hilton Honors Program Tier

Name

Last Name

Email address

Phone number

Participation in the co-branded card program (Y/N)

Date of Last Stay

Date of your next stay

You may opt out of receiving telemarketing calls at any time by following the instructions in Invex’s Privacy Policy, available here.

Appendix A-12 – Residents of Albania

This Appendix provides additional information for residents of Albania. The Albanian translation of the Global Privacy Policy is available here.

Appendix B – Hilton Premium Club Program in Japan

If you are a member of the Hilton Premium Club Japan (HPCJ), including Hilton Dining Plus, the following information applies to the processing of your personal information in addition to the information disclosed elsewhere in this Privacy Policy.

Over the past 12 months, we have collected the following categories of personal information:

HPCJ Member Number

We obtained this personal information from the following sources:

Directly from the members themselves

We have collected this personal information for the following additional business or commercial purposes:

Process guest reservations

Send guests notifications regarding their reservations

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

Provide assistance and support to customers

Verify identity

Send marketing communications via email, direct mail, and social media

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Determine whether guests are eligible for special or promotional rates

Process payments, including implementing strong customer authentication (SCA) where required by law

Process transactions with partners

Administering Contests and Lotteries

Detect and Prevent Fraud

We have shared this personal information with the following additional categories of third parties:

Payment Card Issuers and Payment Processors

Hilton's Third-Party Partners

Service providers that perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

Employers, in accordance with company agreements, employee consent, and as permitted by law

Organizations that have arranged a special rate plan with Hilton and/or organized an event and/or reserved a block of rooms with Hilton

Government agencies, in accordance with the legal requirements of certain countries

Third-party advertisers, for optimization and personalization on their platforms

Hilton Third-Party Operator

Name

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following additional business or commercial purposes:

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

Make phone calls to ask for information about new enrollments

We have shared this personal information with the following additional categories of third parties:

We do not share your name with any third parties.

Phone and Fax Numbers

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following additional business or commercial purposes:

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

Make phone calls to ask for information about new enrollments

Process payments, including implementing strong customer authentication (SCA) where required by law

We have shared this personal information with the following additional categories of third parties:

Payment Card Issuers and Payment Processors

Email address

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following additional business or commercial purposes:

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

Hilton Premium Club Japan Account Authentication

Process payments, including implementing strong customer authentication (SCA) where required by law

We have shared this personal information with the following additional categories of third parties:

Payment Card Issuers and Payment Processors

Home Address

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following additional business or commercial purposes:

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

We have shared this personal information with the following additional categories of third parties:

We do not share your home address with any third parties.

Date of Birth

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following additional business or commercial purposes:

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

Provide assistance and support to customers

Verify identity

Send marketing communications via email, direct mail, and social media

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

Process payments, including implementing strong customer authentication (SCA) where required by law

We have shared this personal information with the following additional categories of third parties:

Payment Card Issuers and Payment Processors

Hilton's Third-Party Partners

Sex

We obtained this personal information from the following sources:

Directly from the members themselves

We have collected this personal information for the following additional business or commercial purposes:

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

Provide assistance and support to customers

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

We have shared this personal information with the following additional categories of third parties:

Hilton's Third-Party Partners

Payment Card Information

We obtained this personal information from the following sources:

Directly from the consumers themselves

We have collected this personal information for the following additional business or commercial purposes:

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

We have shared this personal information with the following additional categories of third parties:

We do not share payment card information with any third parties.

Hilton Honors Number

We obtained this personal information from the following sources:

Straight from Hilton Honors members themselves

We have collected this personal information for the following additional business or commercial purposes:

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

We have shared this personal information with the following additional categories of third parties:

We do not share Hilton Honors numbers with any third parties.

Device Information (including the MAC address)

We obtained this personal information from the following sources:

Directly from consumers based on their online browsing activity or when they scan QR codes at the property

We have collected this personal information for the following additional business or commercial purposes:

Conduct an SCA as part of the payment process, where required by law

We have shared this personal information with the following additional categories of third parties:

Payment card issuers and payment processors when conducting strong customer authentication (SCA)

Company Information (including department and title)

We obtained this personal information from the following sources:

Directly from the members themselves

We have collected this personal information for the following additional business or commercial purposes:

Manage your membership and activity in the Hilton Premium Club Japan loyalty program

Provide assistance and support to customers

Conduct analyses to provide guests with personalized offers and content

Conduct analyses to improve business operations

We have shared this personal information with the following additional categories of third parties:

Hilton's Third-Party Partners