Historic Hotels Privacy Policy

This Policy was last updated July 17th, 2026

This Privacy Policy (“Policy” or “Privacy Policy”) describes how Preferred Travel Group as licensee of the National Trust for Historic Preservation and doing business as Historic Hotels of America® and Historic Hotels Worldwide® (collectively, “Historic Hotels,” “we,” “us,” or “our”) collect, use, share, and protect the personal information of our customers, hotel guests (collectively, “Customers”), job applicants, and business-to-business (“B2B”) whether collected when you use our online websites, electronic forms or mobile applications and offline which we own and operate as the data controller (collectively, the “Site(s)” or “Services”), and describes your rights, however accessed and/or used, whether via personal computers, mobile devices, tablets or other means.

This Privacy Policy does not govern information we process in our role as a data processor and service provider on behalf of our Member Hotels or that is otherwise collected by our Member Hotels. We partner with hotels to provide you with products and services (“Member Hotels”). Our Member Hotels are independently owned and operated and Historic Hotels does not manage or control them or their data practices. For details about our processing of data from Member Hotels (“Member Hotels Data”), please see the “From Our Member Hotels” section below.

Additionally, please note that Section I of this Policy below, which describes our collection and use of information practices through our Services, also serves as our Notice at Collection for California residents for purposes of the California Consumer Privacy Act (“CCPA”).

By using our Services, you acknowledge that your Personal Information will be processed as described in this Privacy Policy. Where required by applicable law (including the GDPR), we will obtain your consent or rely on another lawful basis before processing your Personal Information. Any changes to this Privacy Policy will become effective upon posting of the revised Policy on the Internet, accessible through our sites and app.

This Privacy Policy has been designed to be reasonably accessible to people with disabilities. If you experience any difficulties accessing the information in the Policy, please email us at Privacy@HistoricHotels.org.

Click on any section for more information, or scroll down to read the whole Privacy Policy:

I. Notice at Collection; Collection and Use of Information

II. Sources of Your Personal Information

III. Our Legal Basis for Processing Information

IV. Disclosures of Personal Information To Other Entities

V. Our Use of Artificial Intelligence

VI. Your Rights and Choices in the EEA under the General Data Protection Regulation (GDPR), the United Kingdom (UK) and Switzerland

VII. Your Rights and Choices in the United States

VIII. Cookie Notice

IX. Your Communication Preferences

X. Security of Your Information

XI. Other Important Information

XII. Contact Us

  1. Notice at Collection; Collection and Use of Information

The table below, and additional paragraphs immediately following the table, are a summary of the categories of Personal Information we have collected over at least the last 12 months, the purposes for collection and use of that Personal Information, and how long we keep each category of Personal Information.

Historic Hotels processes certain categories of Personal Information sold or shared for targeted advertising and may sell or share those categories as described in Section I. Our vendors and service providers that process Personal Information on our behalf are contractually prohibited from selling or sharing your Personal Information for their own commercial benefit, and may only do so at our direction and in accordance with this Privacy Policy. Such vendors and service providers are further prohibited from using your Personal Information for targeted advertising on their own behalf. Member hotels that receive reservation data through Historic Hotels are independent controllers of that data, and their use of such data, including for targeted advertising, is governed by their own privacy policies.

To opt-out of the “sale” or “sharing” of your “personal information” for advertising purposes, as these terms are defined in applicable law, visit our Cookie Preference Center and either make a request to opt out through the data request form, or use your browser opt-out preference signal, if available. If located in the EEA, UK or Switzerland, click here to view your rights and choices.

Customer Notice

Categories of Personal Information We Collect

Our Business or Commercial Purposes for Collection and Use of Your Personal Information

Personal Identifiers such as your name, postal/mailing address, telephone number, mobile phone number, title, email address

We sell or share your Personal Identifiers (primarily email address) with third parties for targeted advertising. We use this information to:

  • Manage your purchases, reservations, events, services and refunds;

  • Personalize your experience with us, including promotional communications sent through email or text;

  • Manage your stays and events you registered for and/or participated in;

  • Provide you with customer service, including responding to your inquiries, service questions and feedback, and fulfilling and verifying requests made pursuant to this Policy;

  • Notify you if you are given a promotion;

  • Facilitate the complimentary membership to the National Trust for Historic Preservation (in the United States) should you book a qualifying rate through HistoricHotels.org or HistoricHotelsWorldwide.com.

  • Inform you about new products, features, updates, and special promotions, including third-party offers or products we think you might find interesting; and

  • Serve you ads about products and offers.

Commercial Information, including properties viewed; reservation details; dining, recreation, and leisure activities you purchased or viewed while on our Services; travel-related details such as arrival or departure transportation and times; and other purchasing or consuming histories or tendencies

We sell or share Commercial Information (primarily reservation details) with third parties for targeted advertising. We may use this information to:

  • Manage your purchases, reservations, events, services and refunds;

  • Personalize your experience with us, including promotional communications sent through email messages;

  • Manage your stays and events you registered for and/or participated in;

  • Provide you with customer service, including responding to your inquiries, service questions and feedback, and fulfilling and verifying requests made pursuant to this Policy;

  • Inform you about new products, features, updates, and special promotions, including third-party offers or products we think you might find interesting; and

  • Serve you ads about products and offers.

Financial Information, including billing address, payment type or method, and charge or credit card number

We do not sell or share your Financial Information. We use it only to complete a purchase or special offer, service or refund.

Device, Internet and Network Activity Information, Online Identifiers such as your IP address, device type and settings, device identifiers, browser type and settings, operating system, ISP and mobile network provider, web beacons, pixels, and usage information, such as the time and date of your visits and the content.

We sell or share your Device, Internet and Network Activity Information, and Online Identifiers with third parties for targeted advertising. We also use this information to:

  • Personalize your experience with us;

  • Provide access to our Services in a form that can be viewed most easily from your device;

  • Determine the general geographic region from which you are accessing the Services, using your IP address, which allows us to present appropriate content and inform you of special rules or rights that may apply to people in your jurisdiction;

  • Review statistical information about the use of the systems in order to improve their design and functionality, to understand how they are used, and to assist us with resolving questions;

  • Recognize you, your device or your browser when you use our Services so that we can facilitate navigation and display information more effectively;

  • Track responses to our e-mails and advertisements;

  • Inform you about new products, features, updates, and special promotions, including third-party offers or products we think you might find interesting; and

  • Serve you ads about products and offers.

Demographic Information including gender and age

We sell or share your demographic information with third parties for targeted advertising. We also use this information to:

  • Help us personalize your experience with us.

General location information (e.g., zip code and IP address)

We sell or share your general location information with third parties for targeted advertising. We also use the information to:

  • Assist you in your search for nearby services and properties;

  • Personalize your experience with us;

  • Provide you with information about new products, features, updates, and special offers, including third-party offers or products we think you might find interesting if you have consented to this; and

  • Serve you ads about products and offers.

We do not collect, sell or share precise geolocation, as that term is defined by any state privacy law.

Medical and Health Information you may provide relating to accessibility, allergies you make us aware of, or medical incidents that happen at one of our properties

This information is considered “sensitive” under certain U.S. state privacy laws.

We do not sell or share this Medical and Health Information. We use this information to:

  • Provide you with customer service.

Audio Visual Information, when we collect voice recordings if you call our reservations line or contact us for customer service.

We do not sell or share Audio Visual Information. We use voice recordings for quality assurance purposes. We do not collect visual information.

Inferences drawn from Personal Identifiers, Demographic Information, Device, Internet, and Network Activity, Online Identifiers, General Location, and Commercial Information to create a profile about a consumer reflecting the consumer’s hotel preference, which may include characteristics, predispositions, behavior, and attitudes, abilities, and aptitudes, hobbies, interests, and travel behavior. Inferences do not contain sensitive personal information.

We sell or share Inferences with third parties for targeted advertising. We also use this information to:

  • Inform you about new products, features, updates, and special promotions, including third-party offers or products we think you might find interesting; and

  • serve you ads about products and offers.

Job Applicant Notice

Categories of Personal Information We Collect

Our Business or Commercial Purposes for Collection and Use of Your Personal Information

Personal Identifiers such as your name, postal/mailing address, telephone number, mobile phone number, title, and email address

We do not sell or share Personal Identifiers for Job Applicants. We use this information to:

  • Process your application for a job with Historic Hotels;

  • Conduct a background check (prior to confirming your employment with Historic Hotels); and

  • Conduct internal research and analytics.

Professional or Employment-Related Information, including your employment history, resume, cover letter, and references as necessary to consider you for job openings

We do not sell or share Employment Information. We use this information to:

  • Process your application for a job with Historic Hotels;

  • Conduct a background check (prior to confirming your employment with Historic Hotels); and

  • Conduct internal research and analytics.

Non-public Educational Information, including your education history, transcript, writing samples, and references as necessary to consider you for job openings

We do not sell or share Non-public Educational Information. We use this information to:

  • Process your application for a job with Historic Hotels;

  • Conduct a background check (prior to confirming your employment with Historic Hotels); and

  • Conduct internal research and analytics.

B2B Partners

Categories of Personal Information We Collect

Our Business or Commercial Purposes for Collection and Use of Your Personal Information

Personal Identifiers such as your name and email address

We do sell or share your Personal Identifiers (primarily email address) with third parties for targeted advertising. We use this information to:

  • Process your business, including providing, researching, developing and improving products or services;

  • Execute and process agreements;

  • Manage relationships, including development, execution and analysis of market surveys and marketing strategies;

  • Advertise and market products and services; and

  • Communicate with you.

Professional or Employment-Related Information, including name of organization and dealings with Historic Hotels on behalf of yourself or the relevant B2B partner

We do sell or share your Employment Information with third parties for targeted advertising. We use this information to:

  • Process your business, including providing, researching, developing and improving products or services;

  • Execute and process agreements;

  • Manage relationships, including development, execution and analysis of market surveys and marketing strategies;

  • Advertise and market products and services; and

  • Communicate with you.

For all Users of our Services

Categories of Personal Information We Collect

Our Business or Commercial Purposes for Collection and Use of Your Personal Information

Additional Uses For All Categories Listed Above

  • If we determine a policy violation has occurred, to enforce our rights, or to enforce agreements;

  • If we believe such processing is necessary to identify, contact, or bring legal action regarding the rights and property of ourselves or our affiliates;

  • To enforce our rights or protect against unauthorized access to our systems or other inappropriate use of our services, products, or other services;

  • To comply with laws, regulations, court orders and subpoenas or similar requests for information by authorities;

  • To protect your safety and the safety of others;

  • To perform audits;

  • To contact you about Site or policy updates;

  • For research and analytics, including to identify usage trends, and to improve and update our products and services, and

  • To assist us in fraud prevention or investigation, all on the basis of our legitimate interest in the continuation of our commercial activities and the protection of our rights.

Data Minimization. We limit the Personal Information we collect to what is reasonably necessary and proportionate to provide or maintain the specific products, services, or experiences you request from us or that we describe in this Policy. Where we collect Sensitive Personal Information (as defined under applicable state privacy laws), we do so only when strictly necessary to provide a specific product or service you have requested, and we do not use or disclose such information for purposes beyond those described in this Policy. We periodically review our data collection practices to identify and eliminate unnecessary collection.

Sensitive Personal Information. Certain categories of Personal Information we collect — including Medical and Health Information and, where applicable, account login credentials (username and password combined with access to your account) — may be considered "Sensitive Personal Information" under the CCPA and similar state privacy laws. We do not use or disclose Sensitive Personal Information for purposes other than those permitted by law, including providing the services or goods you request, ensuring security and integrity, and performing services on behalf of Historic Hotels. Because we do not use Sensitive Personal Information for purposes that would trigger the right to limit, we do not display a separate "Limit the Use of My Sensitive Personal Information" link. If our practices change, we will update this Policy and provide the required link.

Retention. We retain your Personal Information for as long as reasonably necessary to fulfill the purposes described in this Policy and in accordance with applicable law. Unless otherwise specified below, we retain all categories of Personal Information for the duration of our relationship with you and for up to ten (10) years following the end of that relationship (or from the date of collection where no ongoing relationship exists), and then securely destroyed or anonymized, unless required by law to retain longer. We retain Personal Information for this period to comply with applicable tax, accounting, and recordkeeping requirements, to preserve records within applicable statutes of limitations for potential legal claims, and to fulfill other legal obligations. For individuals in the EEA, UK, or Switzerland, we retain Personal Information only so long as necessary for the purposes for which it was collected, relying on our legitimate interest in defending legal claims and complying with legal obligations as the lawful basis for retention beyond the active relationship. Information collected through cookies and similar technologies is retained for up to twelve (12) months from the moment such technologies are installed on your device.

Non-personal information. We may collect, use and share publicly available, aggregate or de-identified information that does not identify you (including information that has been aggregated or de-identified) except as prohibited by applicable law. We do not re-identify de-identified information.

II. Sources of Your Personal Information

We collect and obtain Personal Information from:

Directly From You (either offline or through the Sites or App). For example, when you:

  • Make reservations through our Services

  • Sign up to receive promotional communications

  • Submit a request to or contact our customer service team

  • Apply for a job through our Sites

Automatically through Cookies and Similar Technologies. For example, when you:

  • Visit and navigate our Services on any device

  • Enable location-based features on our Services

  • Click on sponsored links or third-party advertisements

For more information about our use of cookies and other tracking technologies to collect Personal Information about you automatically, please refer to the section called “Cookie Notice” below.

From Service Providers and Contractors. For example, we work with service providers and contractors who collect Personal Information on our behalf in order to provide services to us, such as:

  • Offer and improve products and services

  • Provide IT development and support

  • Host and carry out marketing and business studies and marketing campaigns

  • Verify your information

  • Authenticate payments and process orders and payments

  • Provide fulfilment services

  • Provide delivery services

From Our Member Hotels. We may receive Personal Information about you from Member Hotels. For example, when you:

  • Make reservations through our Services

  • Sign up to receive promotional communications

Data we receive from Member Hotels may include all categories of Personal Information listed above in the chart. When we receive and process data from Member Hotels solely on their behalf (for example, to facilitate reservations), we act as a service provider to those Member Hotels, and our processing is governed by our service agreements with them. In certain circumstances, Historic Hotels and a Member Hotel may jointly determine the purposes and means of processing your Personal Information (for example, when we jointly develop marketing campaigns using shared guest data), in which case we act as joint controllers. In either case, Member Hotels are independently responsible for their own privacy practices, and we recommend you review their privacy policies.

From Other Entities. We may receive Personal Information about you from other sources. For example, this may include receiving Personal Information from:

  • Social media sites, including Facebook, YouTube, and Instagram. The information we receive from these social media sites is dependent upon the social media site’s policies and your settings on that site, which you can control. For more information about how you can customize your privacy settings and how such social media sites treat Personal Information, please refer to their privacy policies and terms of use.

  • Strategic partners, when you specifically request that our partner share your Personal Information with us.

  • Other websites, including those of non-Member hotels, marketing affiliate sites, online advertising networks, and analytics vendors.

  • Companies that provide Personal Information to supplement what we already know about you, including data aggregators and trade publications. Certain parties might link your name or email address to other information they have collected. That might include past purchases or reservations made offline or online. It might also include Device, Internet and Network Activity Information, Online Identifiers (IP Address, cookie IDs and Device IDs).

From Government Sources. We may collect Personal Information from government sources to help us with engaging in fraud monitoring and prevention, compliance with applicable laws and regulations.

From Other Users. We may collect Personal Information from other users, such as:

  • A spouse who contacts us on your behalf or from your friends who provide us with your information in order to invite you to events you may be interested in.

From Publicly Available Sources. For example, we collect:

  • Information in the public domain

  • Data available in open government databases to help us with fraud monitoring and prevention, compliance with applicable law and regulations, reviewing and processing your employment application and other information

  • As otherwise permitted by law

By Combining Personal Information. For example, we may:

  • Combine Personal Information that we collect offline with Personal Information we collect through our Services

  • Combine Personal Information we collect about you from the different devices you use to access our Services

  • Combine Personal Information we get from third parties with Personal Information we already have about you

III. Our Legal Basis for Processing Information

If you are accessing the Services in the European Economic Area (“EEA”), then applicable law requires us to ensure that we only process your Personal Information when we have a valid legal basis to do so. We will only process your Personal Information:

If it is in our legitimate interests or the legitimate interests of others (such as our Member Hotels) to use your Personal Information. For example, it is in our legitimate interests to use your Personal Information to maintain and improve the Services. If you would like further information about how we decide when a particular use is in our legitimate interests, you may contact us using the contact details at the end of this policy.

If we need to use your Personal Information to perform our obligations under a contract we have with you (including, for example, processing your reservations and fulfilling your travel-related orders).

If we have your consent. Sometimes we may ask for your consent to use certain types of Personal Information (e.g., by asking you to tick an online box). In these circumstances, your consent will be our legal basis for processing your Personal Information. If you have provided consent, you may withdraw it at any time. You may do this by “opting out” where we give you the opportunity to do so, or by contacting us using the contact details at the end of this policy.

IV. Disclosures of Personal Information to Other Entities

During at least the past 12 months, we have disclosed the Personal Information outlined in the table above with the following categories of entities:

Internally: We disclose all categories of Personal Information listed above with other Historic Hotels businesses who jointly use Personal Information for the purposes described in this Privacy Policy, where this is acceptable under applicable law.

Member Hotels: We disclose all categories of Personal Information listed above in Section IA with Member Hotels, including your contact information as necessary to fulfill your reservation, to respond to your questions, comply with your requests, and otherwise comply with the law. We also disclose Device, Internet and Network Activity Information, Online Identifiers to Member Hotels for their advertising and marketing purposes. This disclosure to Member Hotels for their own marketing purposes constitutes a "sharing" of Personal Information for cross-context behavioral advertising under the CCPA. You have the right to opt out of this sharing as described in Section VII(c) below. Member Hotels are independent entities, and their processing of information is subject to our agreements with them and their own privacy policies. If you wish to opt out of our sharing your Personal Information with Member Hotels, click here, and opt-out of Cookies here.

A Business That Acquires Us or Our Assets, in a Business Transfer: If another party acquires all or substantially all of our assets, all categories of Personal Information listed above, and any other information that we have collected in connection with the Services, will be transferred to that party as part of our business assets. Also, if any bankruptcy or reorganization proceeding is brought by or against us, all such information will be considered part of our assets that can be sold or transferred to third parties.

Government Authorities, Legal Rights and Actions. We will disclose all categories of Personal Information listed above with various government agencies if required or requested to do so by law, or if we believe such action is necessary or advisable in order to: (1) conform to the requirements of the law or comply with valid legal process served upon us; (2) protect or defend our legal rights or property, the Services, or our customers or users; (3) investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Use. We may also use IP address or other Device, Internet and Network Activity Information, Online Identifiers to identify users, and may do so in cooperation with copyright owners, Internet Service Providers, wireless service providers or law enforcement agencies in our discretion. Such disclosures may be carried out without notice to you.

Third Parties. With your consent (or where you do not decline where permitted by law), we disclose General Location Information, Device, Internet and Network Activity Information, and Online Identifiers to third parties, including: (i) digital advertising networks — companies that aggregate consumer data across multiple websites and apps to build audience segment and deliver interest-based advertisements on third-party platforms based on browsing activity; (ii) media buying platforms — technology providers that facilitate the purchase of advertising inventory across digital channels and enable the placement of targeted advertisements; (iii) data analytics providers — companies that collect, aggregate, and analyze consumer behavior data to generate insights about audiences; (iv) social networking platforms — online services that enable user interaction and content sharing, and deliver in-platform personalized content and advertisements; and (v) Member Hotels — independently owned and operated hotel properties within the Historic Hotels of America and Historic Hotels Worldwide network that may use your information for direct marketing and guest service purposes. Historic Hotels may work with advertising partners to serve your interest-based advertisements. If you do consent (or do not decline where permitted by law) to have your Personal Information shared, your Personal Information will be disclosed for targeted advertising to such third parties.

Service Providers and Contractors: We disclose all categories of Personal Information listed above with Service Providers and Contractors — entities that process Personal Information on our behalf pursuant to written contracts that restrict their use of such information to the services they perform for us. These Service Providers and Contractors include: (i) payment processors — financial services companies that securely transmit payment credentials to card networks and issuing banks, verify transaction authenticity, and facilitate the transfer of funds to complete purchases; (ii) email marketing platforms — software providers that operate systems for sending promotional communications, segmenting audiences, and measuring campaign engagement; (iii) web analytics providers — companies that collect and analyze website traffic data to measure site performance and user behavior; (iv) marketing and promotions agencies — firms that design and execute promotional campaigns on our behalf; (v) advertising technology providers — companies that operate platforms for serving, tracking, and optimizing digital advertisements; (vi) cloud hosting providers — companies that operate data centers and provide computing, storage, and networking infrastructure on which our systems run; (vii) technology support vendors — firms that provide maintenance, troubleshooting, and technical assistance for our systems; and (viii) customer service providers — companies that operate contact centers and support systems to respond to guest inquiries. These Service Providers and Contractors will access all categories of Personal Information as necessary for them to perform their duties. When we share Personal Information with Service Providers and Contractors our contracts prohibit them from using or sharing your Personal Information for any reason except to assist us in operating our business and providing services to you.

Facilitating Requests: We disclose all of the categories of Personal Information listed above at your request or direction.

Consent: We disclose all of the categories of Personal Information listed above if we have let you know what information will be shared, with whom, and obtained your consent.

V. Our Use of Artificial Intelligence

We may use your Personal Information in connection with artificial intelligence on our site or other sites for the following purposes:

  • To enhance your experience, including to display personalized content and ads based on your interests;

  • To provide you with special offers and summaries of property reviews and articles;

  • To display your language and dialects within our virtual agents’ experience;

  • To enhance site security; and

  • For automated decisions about delivery of advertising, offers and other information.

Profiling. Historic Hotels uses automated processing to draw inferences from your Personal Information (such as hotel preferences, travel behavior, demographic data, browsing activity and reservation history) to personalize content, property recommendations, promotional offers, and interest-based advertisements. Our vendors and service providers that process Personal Information on our behalf are contractually prohibited from using your Personal Information. We do not use profiling to make decisions that produce legal or similarly significant effects, such as denial of services or changes to contractual terms. See Section VII(f) for any rights that may apply to profiling.

Large Language Models. Historic Hotels does not use your Personal Information to train large language models. Our vendors and service providers that process Personal Information on our behalf are contractually required to process your Personal Information solely for the purpose of providing services to Historic Hotels. We may use de-identified or aggregated data to improve the performance of tools we use to provide the Services.

For more information about your right to opt out of certain profiling activities, see Section VII(c)–(d) below.

VI. Your Rights and Choices in the EEA under the General Data Protection Regulation (GDPR), the United Kingdom (UK) and Switzerland

If you are in the EEA, the UK, Switzerland, and certain other countries with similar data protection laws, you have additional rights in relation to your Personal Information. You have the right to request that we:

  • provide access to any Personal Information we hold about you;

  • update any of your Personal Information which is out of date or incorrect;

  • delete any Personal Information which we are holding about you;

  • restrict the way that we process your Personal Information;

  • prevent the processing of your Personal Information for direct marketing purposes;

  • provide your Personal Information to a third-party provider of services;

  • provide you with a copy of any Personal Information which we hold about you;

  • consider any valid objections which you have to our use of your Personal Information;

  • provide you with information about the logic involved in our automated decision-making, or the result of such decisions;

  • stop using fully automated decision making, including for profiling, with significant legal effect, and request a manual decision-making process instead; or

  • contest a decision based solely on automated processing.

To exercise your rights, click here or contact us at any time using the contact details at the end of this privacy policy.

We will consider all such requests and provide our response within a reasonable period (and in any event within any time period required by applicable law). Please note, however, that certain Personal Information may be exempt from such requests. If an exception applies, we will tell you this when responding to your request. We may request you to provide us with the information necessary to confirm your identity before responding to any request you make.

Email Communications: You may ask us to stop using your Personal Information for direct marketing purposes at any time. If you wish to do this, please follow the removal instructions in any email messages you receive, or contact us using the contact information provided at the end of the Privacy Policy below or click here.

If located in the EEA and you have any complaints about how we use your Personal Information, you have the right to lodge a complaint with the data protection authority in your country or seek a remedy through local courts if you believe your rights have been breached. A list of data protection authorities in Europe is available here.

VII. Your Rights and Choices in the United States

If you are a resident of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you have the following rights regarding your Personal Information under applicable state privacy laws (subject to certain exemptions). If you are a resident of another U.S. state, we will still make reasonable efforts to respond to your privacy requests, though we reserve the right to decline requests where we are not legally required to comply. For B2B partners who reside in California only, and job applicants who reside in California only, you are also entitled to these rights:

Right to Know & Access

You have the right, up to two times every 12 months, to ask us to disclose the categories of Personal Information we have collected about you, the categories of sources from which we collected it, our business or commercial purpose for collecting, selling, or sharing Personal Information about you, the categories of Personal Information we sold or disclosed, the categories of third parties to whom we have shared Personal Information about you, and the specific pieces of Personal Information we collected about you. You have the right to request a portable copy of your Personal Information. In some states, you also have the right to receive lists of the specific third parties with whom we might share your Personal Information. Click here to make your request.

Right to Correct and Delete

You have the right to send us a request to correct or delete Personal Information we have about you, subject to certain exceptions allowed under applicable law.

Right to Opt-Out of the Sale and Sharing of Your Personal Information (Opt-out of Targeted Advertising)

You have the right to request that we not sell, or share for targeted behavioral advertising, your Personal Information.

To exercise your right to opt out, you may use any of the following methods. On our website, you may click the link labeled "Do Not Sell or Share My Data" displayed in the footer of each page. You may also submit a request through our data request form by clicking here or send an email to Privacy@HistoricHotels.org with your request. These methods will apply your opt-out to all categories of Personal Information linked to your identity (such as your name, email address, Demographic Information, General Location Information, and Inferences). Because your Device, Internet, and Network Activity Information and Online Identifiers are collected through cookies and similar tracking technologies, opting out of their sale or sharing requires a separate technical mechanism. To opt-out of the “sale” or “sharing” for targeted advertising of your Device, Internet, and Network Activity Information, Online Identifiers, click here.

Right to Send Opt-out Preference Signals; Global Privacy Control

We also honor the Global Privacy Control, a browser-based opt-out signal. We do not respond to other browser-based signals that do not meet applicable state law requirements, which may include older Do Not Track signals. When we detect a valid Global Privacy Control signal, we will treat it as a request to opt out of the sale or sharing of Personal Information collected through your browser and device during your browsing session. Because this website does not include login functionality, your browsing activity is not linked to an identified individual. If you choose to make a reservation, you will be redirected to a separate third-party reservation vendor, which independently collects and stores reservation-related Personal Information (such as your name, email address, phone number, and reservation history). Neither we nor our website hosting vendor are able to associate your browsing activity on this website with the Personal Information you provide to the reservation vendor. To opt out of the sale or sharing of reservation-related Personal Information, please submit a separate request by clicking here or emailing Privacy@HistoricHotels.org.

Right To Not Be Discriminated

You have the right not to be discriminated against if you exercise any of these rights, for example by receiving a different quality of services.

Rights related to Profiling and Automated Decision Making (ADM)

If we process your Personal Information for profiling in furtherance of an automated decision that produces legal or similarly significant effects, you may have the right to opt out of that profiling, access meaningful information about the logic used, request human review, question the result, receive the reason for the decision, review the Personal Information used, and correct inaccurate Personal Information used in any housing-related profiling decision, where required by applicable law.

Right To Appeal

In certain U.S. states, you may have a right to appeal decisions concerning your ability to exercise your consumer rights.

Authorized Agent. Applicable law may permit you the right to appoint an authorized agent to exercise these rights for you. Under certain applicable laws, an authorized agent is a natural person or a business entity in the applicable state that a person has authorized to act on their behalf subject to the requirements. If you would like to designate an authorized agent to submit a request to know, a request to delete, or a request to correct Personal Information on your behalf, please e-mail us at Privacy@HistoricHotels.org. When submitting the request, please ensure the authorized agent identifies himself/herself/themselves as an authorized agent. We will require written proof of the agent’s permission to do so and we will need to verify your identity directly. Once verified, your authorized agent may act on your behalf.

How to Submit a Request. To exercise your rights above click here, email us at Privacy@HistoricHotels.org, or call 1 (866) 670-3764. To opt-out of Cookies, click here or use the Opt-Out Preference Signal triggered through your browser if available.

In order to respond to your request, we may validate your email address if you have an account with us. If you use an authorized agent to exercise rights for you, we will confirm that the agent is authorized by you.

When you make a request to access, correct, or delete your information, we will generally confirm receipt of your request within 10 days, and respond within 45 days, though in some cases we have the right to take additional time if needed. We will provide notice of the extension within the first 45-day period.

We acknowledge that you may have rights under U.S. State Privacy Laws in connection with the Personal Information we process on behalf of our Member Hotels. If Personal Information about you has been processed by us as a service provider on behalf of a Member Hotel and you wish to exercise any rights you have with such Personal Information, please inquire with our Member Hotel directly. We will support them to the extent required by applicable law in responding to your request.

How We Verify Your Identity. We will take reasonable steps to verify your identity prior to responding to your requests. For example, we may utilize third party verification steps which may vary depending on the sensitivity of the Personal Information and whether you have an account with us.

Financial Incentives. We do not offer Financial Incentives.

Users Under 18. We employ reasonable measures, including reviewing account registration data and other signals available to us, to identify users who may be under 18. If we determine or have reason to believe that a user is under 18, we will promptly cease any sale or sharing of that user's Personal Information and cease processing their data for targeted advertising. We will delete any Personal Information collected that we later determine to be from a user younger than the age of eighteen (18) in accordance with our legal obligations.

VIII. Cookie Notice

Cookies & Other Similar Technologies

Our Services use cookies and other tracking technologies placed by Historic Hotels and third parties to collect Device, Internet and Network Activity Information, Online Identifiers about you. These technologies enable us and our partners to facilitate site administration and navigation, understand and improve our Sites and Services, deliver targeted advertising, and provide you with a rich user experience.

For detailed information about the specific cookies we use, the categories of cookies (including essential, performance, analytics, advertising, and social networking cookies), how you can control or reject cookies, and information about other tracking technologies such as web beacons and Flash cookies, please refer to our Cookie Policy, which is incorporated into and forms part of this Privacy Policy.

Opting-Out of Cookies

You can manage your cookie preferences at any time through our Cookie Preference Center, accessible via the cookie banner displayed on our Site or by clicking [here]. We also honor the Global Privacy Control (“GPC”); for more information, visit https://globalprivacycontrol.org/. When we detect a valid GPC signal, we will treat it as a request to opt-out of the sale or sharing of Personal Information collected via your browser and device. To ensure your opt-out applies across all data we maintain about you, you may also submit a separate opt-out request here or email Privacy@HistoricHotels.org.

IX. Your Communication Preferences

Emails. You can opt-out of receiving promotional emails from us at any time by following the instructions to click on the unsubscribe link at the bottom of our emails, contacting us using the contact information provided at the end of the Privacy Policy below, or clicking here. Please note that you cannot opt-out of non-promotional emails, such as those about your account, transactions, servicing, or our ongoing business relations. Please note that your opt-out is limited to the email address used and will not affect subsequent subscriptions.

Text messages and phone calls. For text message communications and calls to your phone number, you may opt-out at any time by (i) for text messaging, texting “STOP” to the appropriate short code available from our confirmation text message; and (ii) for calls, requesting opt-out during any call you receive from us or contacting us as set out in the “Contact Us” section below and specifying you want to opt-out of calls.

Push notifications. For push notifications or in-app messages, you may adjust the permissions in your mobile device or uninstall our App.

X. Security of Your Personal Information

We maintain a comprehensive information security program that includes administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of your Personal Information. Our safeguards include, but are not limited to: encryption of Personal Information in transit and at rest; access controls that limit access to Personal Information to authorized personnel who require it for their job functions; regular security assessments and penetration testing; employee security awareness training; and contractual security obligations imposed on our service providers.

Despite our efforts, no security measures are completely impenetrable, and we cannot guarantee that unauthorized access, data loss, or a security breach will never occur.

Breach Notification. In the event of a security breach involving your Personal Information that triggers notification obligations under applicable law, we will notify affected individuals and, where required, applicable regulatory authorities, in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement and any measures necessary to determine the scope of the breach and restore system integrity.

XI. Other Important Information

Transfers and Storage of Information

If you reside in a country other than the United States of America, you should be aware that the data that we collect from you will be transferred to, and stored in the United States. The laws of the United States may not protect the privacy of your information at the same level as provided by the laws of your country. In an effort to safeguard individual privacy, we will only transfer Personal Information from the EEA or the United Kingdom (UK) to the United States if one of the following applies: we rely on an adequacy decision (such as our participation in the EU-U.S. Data Privacy Framework, the UK Extension thereto, or the Swiss-U.S. Data Privacy Framework); we have entered into an agreement using standard contractual clauses (approved by the European Commission or a European data protection authority), or using the International Data Transfer Agreement (approved by the UK’s Information Commissioner’s Office) with our service provider, business partner, or Affiliate regarding the transfer; or you give your express consent to the transfer.

If you have any questions about our transfer of Personal Information to the United States Contact Us.

Links to Other Websites, Content, and Resources

When you use the Services, you may sometimes be directed by links or other means to third-party websites and services that are not affiliated with the Websites or with us. When you go to unrelated websites or services, please note that we do not control their privacy and security. They may send their own cookies or other tracking technology to visitors or solicit and use your information in different ways than those described in this Privacy Policy. We cannot provide you with any information about third-party practices or the information collected or used by third-party websites or resources. Please exercise caution when you leave our Services for different websites or content, and review the applicable privacy notices.

Minor Children

The Services are directed to general adult audiences and are intended to be used only by persons who are at least 18 years of age. We do not and will not collect or process Personal Information from anyone whom we know or have reason to know is under 18 years of age. We will delete any Personal Information collected that we later determine to be from a user younger than the age of eighteen (18) in accordance with our legal obligation.

Changes to this Privacy Policy

This Privacy Policy reflects our current practices, and is subject to change and update from time to time. We will notify you about material by prominently posting a notice on our Site and modifying the “Effective Date” at the top of this Privacy Policy to indicate when such changes have come into effect, or otherwise as required by law. If we change this Privacy Policy in a material way, we will inform you through a notice advising of such change at the beginning of this Privacy Policy and on our Site.

XII. Contact Us

In issues relating to your account, to withdraw your consent, to ask general questions or to lodge a complaint, please contact our Customer Service:

Email: Privacy@HistoricHotels.org

Phone: +1 866 670-3764

Mail: Historic Hotels of America and Historic Hotels Worldwide, Consumer Privacy Policy
1420 New York Avenue NW, Suite 200 Washington, DC, 20005

If you have any questions or concerns about our Privacy Policy or data processing, email Privacy@HistoricHotels.org.

If you are in the EEA and you have any complaints about how we use your Personal Information, you have the right to lodge a complaint with the data protection authority in your country or seek a remedy through local courts if you believe your rights have been breached. A list of data protection authorities is available here.

Data Protection Officer. If you are located in the EEA or UK, you may contact our Data Protection Officer at Privacy@HistoricHotels.org.