Privacy Policy

This Privacy Policy describes how Whathotel.io collects, uses, and discloses information about visitors to our website and users of our services.

Information We Collect

• Usage data: pages viewed, search interactions, referring URLs, approximate location (derived from IP), timestamps.
• Device and technical data: browser type/version, operating system, device type, performance metrics, crash logs.
• Contact information: if you submit a message via the contact page, we collect the details you provide.
• Community reservations email contributions (signed-in users only): if you submit or vote on hotel reservations email intel, we store the email submitted, the normalized email form used for deduplication, hotel code, vote value, timestamps, and account linkage needed for abuse prevention and product integrity.
• Cookies and similar technologies: see our Cookie Policy.

How We Use Information

• Provide, operate, and maintain the website and map functionality.
• Monitor performance, troubleshoot issues, and enhance user experience.
• Analyze aggregate usage to inform product decisions.
• Respond to enquiries submitted via the contact page.
• Display community-contributed reservations email intel to signed-in users and maintain trust signals (up/down votes).

Legal Bases (EEA/UK)

Where required, we process personal data under the following legal bases: legitimate interests (site operation, security, product improvement), consent (non-essential cookies/analytics), and performance of a contract (responding to your requests).

Sharing and Disclosure

We do not sell personal data. We may share information with trusted service providers that assist with hosting, analytics, or support, under agreements that protect your data, or where required by law.

International Transfers

Your data may be processed outside your country. Where applicable, we use appropriate safeguards consistent with data protection laws.

Data Retention

We retain information only as long as necessary for the purposes described above, or as required by law. Retention periods vary by data type and use case.

For reservations email intel:

• We retain canonical reservation-email entries and aggregate vote counts as operational community data.
• Vote records are linked to user accounts and are removed when required by account deletion flows.
• Submission records may keep the submitted email history while nulling direct user linkage where policy requires de-identification.
• Application logs redact raw email values and use shortened hashes when correlation is required.

Your Rights

• Access, correction, deletion, and portability (where applicable).
• Objection or restriction to certain processing.
• Withdrawal of consent where processing is based on consent.
• To exercise rights, contact us via the contact page.

Children’s Privacy

Our services are not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the date above. Continued use of the site after changes indicates acceptance.