Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
The company engages in broad data sharing practices across its Expedia Group companies and with various third-party travel suppliers for booking fulfillment, marketing, and operational purposes (data_use-1, data_use-3). Your personal data may also be collected from third-party data providers who source information from public records and other businesses (data_use-2). The company uses AI and machine learning extensively for pricing, fraud detection (data_use-7), content moderation, and personalized recommendations. Automated decisions, which could have legal or similarly significant effects, may be made using your personal data without explicit consent under certain circumstances. Targeted advertising involves sharing your personal data with third-party marketing partners, and opting out may limit personalization.
88% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
Not clearly stated
Critical issues and red flags in the policy that could lead to significant harm for the user. These include hard-to-reverse financial losses, major privacy breaches, or limitations on legal recourse.
?
Not clearly stated
No cited risk flags — wording is unclear
The policy does not explicitly define what constitutes "legal or similarly significant effects" in the context of automated decision-making, which could leave room for interpretation regarding the scope of this provision.
Data Use
3 findings
How the company collects, uses, and shares your personal data. This includes the types of data collected, purposes for collection, and third parties with whom data is shared.
Not clearly stated: The policy mentions using AI/ML for various purposes but does not provide specific details on the types of personal data used for each purpose beyond the general categories listed in the table. More granular examples or definitions of 'other' uses would enhance clarity.
medium90% confidence
Broad Sharing of Personal Data within Expedia Group
Personal data is shared within Expedia Group companies, which act as joint data controllers or processors. They jointly process all categories of personal data for the uses identified in the policy's table, including simplifying account login across brands and centralizing user data.
Why it matters: Your personal data, across all categories, can be shared and jointly processed among all Expedia Group companies, potentially centralizing your information for various uses, including marketing and analytics, across their brands.
Expedia Group companies jointly use and are joint controllers of your personal data in the following manner:
Joint Use of your Personal Data within the Expedia Group, paragraph 1 · Citation strength: strong
medium85% confidence
Third-Party Data Providers Collect and Share Your Data
The company may collect personal data from third-party data providers who compile personal data from multiple sources, including directly from consumers, public records, and other businesses, and have a lawful basis to share it.
Why it matters: Your personal data may be collected from third-party data providers who gather information from various sources, including public records and other businesses, and then share it with this company.
We may also collect personal data from third parties who collect and compile personal data and have a lawful basis under data protection law to share it with us. These third parties’ source personal data from multiple sources, including directly from consumers, from public records, and from other businesses.
- Respond to data requests from:, paragraph 5 · Citation strength: strong
medium85% confidence
Use of AI/ML for Fraud Detection
The company uses Artificial Intelligence (AI) and Machine Learning (ML) to detect fraud on its website and applications, including at transaction, listing, and user levels, and to identify breaches of terms and conditions or other fraudulent activities.
Why it matters: Your activities on the website and applications are subject to AI and machine learning analysis for fraud detection, including monitoring for breaches of terms, which could affect your transactions and account.
To help detect fraud on our website and/or applications. | - To keep our site safe by preventing and detecting fraud e.g. at a transaction level, listing level or user level, and including any breach of our terms and conditions or other fraudulent activities
Our Use of Artificial Intelligence, paragraph 2 · Citation strength: strong
Cancellation and Renewal
Not clearly stated
Terms related to subscription cancellations, auto-renewals, and any associated fees or processes.
?
Not clearly stated
No cited billing terms — wording is unclear
There are no clauses in the provided text that explicitly detail the terms and conditions related to subscription cancellations or auto-renewals. The policy focuses on data privacy and usage rather than service termination or payment models.
Gotchas
Not clearly stated
Potentially overlooked clauses that could disadvantage users, including one-sided terms, automatic enrollments, or terms that are difficult to find or understand.
?
Not clearly stated
No cited gotchas — wording is unclear
The provided text does not contain any 'gotchas' as per the definition. It largely focuses on data privacy practices and user rights, with clear statements regarding data usage and sharing.
Protections
2 findings
Provisions that protect user rights, enhance privacy, or offer user-friendly options and controls.
Not clearly stated: The policy outlines several rights and choices related to personal data, but it does not detail specific mechanisms or timelines for exercising these rights, which could impact the ease of use for consumers.
Protection90% confidence
Clear Opt-Out for Marketing Emails
Users can unsubscribe from marketing and promotional emails by clicking the ‘unsubscribe’ link in the email, logging into their account to change communication settings, or contacting customer service. However, transactional and account-related messages will still be sent.
Why it helps: This allows users to easily stop receiving unwanted marketing communications, providing control over their inbox and marketing exposure, while still receiving essential service-related updates.
If you no longer wish to receive marketing and promotional emails, you may unsubscribe by clicking the ‘unsubscribe’ link in the marketing email. You can also log into your account to change communication settings (not available for all Expedia Group companies) or contacting us via the [Contact Us](https://www.hotels.com/legal/privacy#_Contact_Us) section below. Please note that if you choose to unsubscribe from or opt out of marketing emails, we may still send you important transactional and account-related messages from which you will not be able to unsubscribe.
Your Rights and Choices, paragraph 2 · Citation strength: strong
Protection90% confidence
Ability to Withdraw Consent for Data Processing
If personal data is processed based on user consent, that consent can be withdrawn at any time by contacting the company. This withdrawal will not affect the lawfulness of processing that occurred before withdrawal or processing based on other lawful bases.
Why it helps: Users maintain control over their data by being able to withdraw consent for processing, ensuring that their choices are respected for future data use, particularly for non-essential purposes.
If we are processing your personal data on the basis of consent, you may withdraw that consent at any time by contacting us via the [Contact Us](https://www.hotels.com/legal/privacy#_Contact_Us) section below. Withdrawing your consent will not affect the lawfulness of any processing that occurred before you withdrew consent, and it will not affect our processing of your personal data that is conducted in reliance on a lawful basis other than consent.
Your Rights and Choices, paragraph 2 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.