Old version
August 8, 2026 01:10 UTC
8a866aa524729c57937d17080b0ffc8d8f355fe75d70122474fc3bf5d2d7b9d4
CA-V-005632
New version
September 1, 2026 01:13 UTC
1de4b21af244a5f4f6a2358d9600046841dbf132f5ae04811f46ac49202c2d92
CA-V-006276
Share 𝕏 Share in Share
Change Summary
Hilton updated its privacy statement in an update detected on August 31, 2026, with changes spanning SMS and WhatsApp messaging services, CCTV retention periods, and expanded state-level privacy compliance coverage. The revised policy adds detailed disclosure about how properties may contact guests via SMS or WhatsApp during their stay, specifies short codes for transactional and promotional messages (97176 and 75712 respectively), and clarifies opt-out procedures by replying 'STOP' to messages. The CCTV retention period increased from 30 days to 31 days, and the policy now applies to additional U.S. states including Alabama, Louisiana, Oklahoma, and Vermont.
low severity
18 Sentences added
0 Sentences removed
41 Sentences modified
540 Sentences before
558 Sentences after
Added
Removed
Modified
BeforeAfter
0HILTON GLOBAL PRIVACY STATEMENT Last updated: August 7, 2026 1.0HILTON GLOBAL PRIVACY STATEMENT Last updated: August 31, 2026 1.
17Our Portfolio of Brands includes Waldorf Astoria Hotels & Resorts, LXR Hotels & Resorts, Conrad Hotels & Resorts, Canopy by Hilton, Signia by Hilton, Hilton Hotels & Resorts, Curio Collection by Hilton, DoubleTree by Hilton, Tapestry Collection by Hilton, Embassy Suites by Hilton, Tempo by Hilton, Motto by Hilton, Hilton Garden Inn, Hampton by Hilton, Tru by Hilton, Spark by Hilton, Homewood Suites by Hilton, Home2 Suites by Hilton, LivSmart Studios by Hilton, Graduate by Hilton, NoMad, Outset Collection by Hilton, Apartment Collection by Hilton, Select by Hilton and Undergraduate by Hilton.17Our Portfolio of Brands includes Waldorf Astoria Hotels & Resorts, LXR Hotels & Resorts, Conrad Hotels & Resorts, Canopy by Hilton, Signia by Hilton, Hilton Hotels & Resorts, Curio Collection by Hilton, DoubleTree by Hilton, Tapestry Collection by Hilton, Embassy Suites by Hilton, Tempo by Hilton, Motto by Hilton, Hilton Garden Inn, Hampton by Hilton, Tru by Hilton, Spark by Hilton, Homewood Suites by Hilton, Home2 Suites by Hilton, LivSmart Studios by Hilton, Graduate by Hilton, NoMad, Outset Collection by Hilton, Apartment Collection by Hilton, Select by Hilton, and Undergraduate by Hilton.
35Closed Circuit Television (CCTV) We use closed circuit television (CCTV) and other security measures at our properties that may capture or record images of guests and visitors in clearly signposted public areas, such as hallways and lobbies.35Closed-Circuit Television (CCTV) We use closed-circuit television (CCTV) and other security measures at our properties that may capture or record images of guests and visitors in clearly signposted public areas, such as hallways and lobbies.
37We retain CCTV footage on property and in the cloud for 30 days unless we are required to maintain footage for a longer period, such as if the footage is subject to a legal proceeding or investigation.37We retain CCTV footage on property and in the cloud for 31 days unless we are required to maintain footage for a longer period, such as if the footage is subject to a legal proceeding or investigation.
149In addition to traditional text messages, we offer the opportunity to receive transactional and promotional messages via text message by using a short code.149To enable us to send you such communications, your information may be disclosed to service providers who use such information solely to send out marketing communications on our behalf.
150If, depending on the circumstances, consent is required in your jurisdiction, we will obtain your consent before sending you such communications.
151Included in the services that Hilton provides during your stay is an SMS messaging service.
152If you provided Hilton with your mobile telephone number, the property where you are staying may contact you by SMS or WhatsApp to welcome you upon your arrival and permit you to submit questions or request additional services via SMS or WhatsApp.
153This may include notification of any problems with the room as well as your requests for further assistance in connection with your visit.
154The property may contact you mid-stay to remind you that you may use the SMS or WhatsApp messaging service.
155You can respond to these SMS or WhatsApp messages with any questions, needs, or requests you may have.
156You can opt out of receiving these SMS or WhatsApp messages by replying “STOP” to any message.
157WhatsApp and SMS Short code : In addition to traditional text messages, we offer the opportunity to receive transactional and promotional messages via WhatsApp or text message by using a short code.
151We may also send you marketing communications via WhatsApp.159The code for transactional messages is 97176.
152To enable us to send you such communications, your information may be disclosed to service providers who use such information solely to send out marketing communications on our behalf.160The code for promotional messages is 75712.
153Furthermore, short code opt-in data and consent will not be shared with any other third parties for their own marketing or advertising purposes.161Message frequency varies.
154If, depending on the circumstances, consent is required in your jurisdiction, we will obtain your consent before sending you such communications.162Message and data rates may apply.
163For help, reply “HELP” to the message you received.
164Short code opt-in data and consent will not be shared with any other third parties for their own marketing or advertising purposes.
156Marketing Opt-Out Requests If you prefer not to receive email marketing materials from us, you may opt-out at any time by using the following methods: Unsubscribe : Use the unsubscribe function in any email you receive from us or by clicking this link: https://www.hilton.com/en/hilton-honors/optout/unsubscribe Email : DataProtectionOffice@hilton.com Mail : Write to Hilton’s Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, USA Text or WhatsApp messages : Reply “STOP” to the message you received Hotel-specific texts : Contact the hotel front desk to inform them that you do not want to receive text messages Please note that opt-out requests can take up to ten business days to be effective.166Marketing Opt-Out Requests If you prefer not to receive email marketing materials from us, you may opt-out at any time by using the following methods: Unsubscribe : Use the unsubscribe function in any email you receive from us or by clicking this link: https://www.hilton.com/en/hilton-honors/optout/unsubscribe Email : DataProtectionOffice@hilton.com Mail : Write to Hilton’s Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, USA SMS Short Code, Text, or WhatsApp messages : Reply “STOP” to the message you received Hotel-specific texts : Contact the hotel front desk to inform them that you do not want to receive text messages Please note that opt-out requests can take up to ten business days to be effective.
175Reservations with Hilton Partner Accommodations When making a reservation with AutoCamp, Small Luxury Hotels of the World (SLH), or Evermore Resort – Orlando through a Hilton channel, Hilton will provide certain guest information for the exclusive purpose of fulfilling the reservation and providing customer support, as identified in the Personal Information We Collect section of is Statement.185Reservations with Hilton Partner Accommodations When making a reservation with AutoCamp, Small Luxury Hotels of the World (SLH), or Evermore Resort – Orlando through a Hilton channel, Hilton will provide certain guest information for the exclusive purpose of fulfilling the reservation and providing customer support, as identified in the Personal Information We Collect section of this Statement.
220Summary of Material Changes to this Statement Last update: May 4, 2026 May 2026 Updates Added the Appendix A-11: Mexico Residents and A-12: Albania Residents sections.230Summary of Material Changes to this Statement Last update: August 2026 August 2026 Updates Updated the Marketing Communications Choices section to include additional details on SMS messaging and short code.
231Updated Appendix A-6: China Residents to include updated information on collection and entrusted processing of personal information.
232May 2026 Updates Added the Appendix A-11: Mexico Residents and A-12: Albania Residents sections.
227Once effective, the U.S. states include, but are not limited to, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.239Once effective, the U.S. states include, but are not limited to, Alabama, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, and Virginia.
265You may also update your personal information as provided in section titled Your Right and Choices of the main body of this Global Privacy Statement.277You may also update your personal information as provided in section titled Your Rights and Choices of the main body of this Global Privacy Statement.
367No. 2 Legal bases for the processing your personal data .379No. 2 Legal bases for the processing of your personal data .
394We only process your sensitive personal information where such processing is strictly necessary for the relevant purposes identified in the sections titled Collection of Personal Information – Generally and Collection of Personal Information – Notice at Point of Collection in the main body of this Statement.406We only process your sensitive personal information where such processing is strictly necessary for the relevant purposes identified in the Personal Information We Collect section in the main body of this Statement.
398Collection and Use of Personal Information Regarding the following issues, please refer to the section titled Collection of Personal Information – Generally and Collection of Personal Information – Notice at Point of Collection in the main body of this Statement.410Collection and Use of Personal Information Regarding the following issues, please refer to the Personal Information We Collect section in the main body of this Statement.
400Hilton will not knowingly collect or disclose personal information from minors under the age of 14.412In addition to the information provided in the Personal Information We Collect section of this Statement, we may collect, process, or share the following personal information with third parties for the purposes set out below: Expand All WeChat Union ID WeChat Open ID Binding relationship between Hilton Honors accounts and partners' accounts, including Hilton Honors account number and partners’ account number Hilton will not knowingly collect or disclose personal information from minors under the age of 14.
401When we collect personal information from an individual under the age of 14, we need to obtain consent from his / her parent or guardian, and we will process such information in accordance with the safeguards set out in applicable laws and regulations.413When we collect personal information from an individual under the age of 14, we need to obtain consent from their parent or guardian, and we will process such information in accordance with the safeguards set out in applicable laws and regulations.
405Disclosure and Sharing of Personal Information With your express consent, where required, we may share your personal information for the purposes described in this Statement with members of the Hilton worldwide brand portfolio, our service providers, and other third parties as follows: Hilton Worldwide Holdings Inc. and its subsidiaries, and members of the Hilton brand portfolio, including franchised and managed hotels, Service providers providing services on Hilton’s behalf, Payment card providers and processors Employers specified in the company agreements, Advertising networks and analytics providers for Hilton’s website and mobile applications.417Entrusted Processing, Sharing, Transfer, and Disclosure of Personal Information With your express consent, where required, we may share your personal information for the purposes described in this Statement with members of the Hilton worldwide brand portfolio, our service providers, and other third parties as follows: Hilton Worldwide Holdings Inc. and its subsidiaries, and members of the Hilton brand portfolio, including franchised and managed hotels, Service providers providing services on Hilton’s behalf, Payment card providers and processors Employers specified in the company agreements, Advertising networks and analytics providers for Hilton’s website and mobile applications.
408Some of the third parties listed above may also process your personal information for their own purposes as data controllers, in which case their own privacy policies will apply, including as to the purposes and means of processing and categories of personal information processed.420Some of the third parties listed above may also process your personal information for their own purposes as data controllers, in which case their own privacy policies will apply, including as to the purposes and means of processing and categories of personal information processed. 3.1 Entrusted Processing of Your Personal Information To achieve the purposes described in this Statement, we may entrust third-party service providers to assist us in providing relevant operational and service support.
409To provide and optimize our services, third-party SDKs are embedded in our applications (including WeChat Mini Programs).421During such entrusted processing, your personal information may be processed to enable the functions of our products and/or services, including but not limited to the following: SMS and MMS service providers Marketing, research, advertisement, and data analytics service providers Website and system server hosting service providers Software and system technical service providers Invoice service providers 3.2 Sharing Your Personal Information with Third-Parties To optimize media campaigns, we may share your personal information with partners and other third parties.
422Below we provide information on the third parties with whom we currently cooperate, including their names, the types of personal information collected, and the purposes of collection and use.
423For details regarding the collection and processing of your personal information by the following third parties, please refer to the privacy policies of such third parties.
424Expand All Shenzhen Tencent Computer Systems Company Limited We may also collaborate with certain third-party partners to offer co-branded membership programs.
425Where you choose to participate in such programs, we and the relevant partner may independently process your personal information.
426We may share your Hilton Honors number with the relevant partner to link your membership accounts and to provide, operate, and administer the applicable co-branded membership program and related benefits. 3.3 Third-Party SDKs: To provide and optimize our services, third-party SDKs are embedded in our applications (including WeChat Mini Programs).
412Expand All Alipay "App Payment" SDK WeChat Pay Adobe Analytics SDK for WeChat Mini-Program Adobe Analytics SDK Baidu Maps SDK Google Maps SDK Workspace one Braze SDK Branch SDK Despite the above situations, we may disclose personal information to third parties to: comply with applicable laws or effective legal procedures; respond to enquiries of the governments or requests of the public and/or the government authorities; protect rights, privacy, security or property of Hilton, site visitors, guests, employees or the public; pursue or exercise our rights; or respond to emergencies. 4.429Expand All Alipay "App Payment" SDK WeChat Pay Adobe Analytics SDK for WeChat Mini-Program Adobe Analytics SDK Baidu Maps SDK Google Maps SDK Workspace one Xiaomi Push SDK OPPO Push SDK Geetest Captcha SDK DeepZero DeepTrack SDK 3.4 Transfer of Personal Information With your consent, we may transfer your personal information to third parties for the purposes as described in this Statement.
430Prior to the transfer of your personal information, we will ensure that appropriate notice and safeguards are in place. 3.5 Disclosure of Personal Information Despite the above situations, we may disclose personal information to third parties to: comply with applicable laws or effective legal procedures; respond to enquiries of the governments or requests of the public and/or the government authorities; protect rights, privacy, security or property of Hilton, site visitors, guests, employees or the public; pursue or exercise our rights; or respond to emergencies. 4.
416We also collect information device information, such as your phone brand, model, operating system, operating system version, to direct you to the appropriate APP store to download our mobile apps.434We also collect device information, such as your phone brand, model, operating system, operating system version, to direct you to the appropriate APP store to download our mobile apps.
422You can opt out interest-based advertising and cross-device linking in the current browser or the web browsers and mobile apps on your device.440You can opt out of interest-based advertising and cross-device linking in the current browser or the web browsers and mobile apps on your device.
424For more information, please see the section titled Analytics and Interest-Based Advertising as well as the section titled Cookies and Other Technologies in the main body of this Statement. 6.442For more information, please see the Online and Mobile Information We Collect section in the main body of this Statement. 6.
436This applies to: (1) in-hotel internet services we may offer; (2) third-party websites and applications to which the links in our websites and mobile applications may direct; and (3) third-party digital messaging applications or platforms which we use to communication with you. 8.454This applies to: (1) in-hotel internet services we may offer; (2) third-party websites and applications to which the links in our websites and mobile applications may direct; and (3) third-party digital messaging applications or platforms which we use to communicate with you. 8.
438In particular, your personal data may be transferred to Hilton Domestic Operating Company Inc. for storage and processing in accordance with this Statement via Hilton's global centralized reservation system, which is deployed in the United States.456In particular, your personal information may be transferred to Hilton Domestic Operating Company Inc. for storage and processing in accordance with this Statement via Hilton's global centralized reservation system, which is deployed in the United States.
439The personal data stored in Hilton's global centralized reservation system may be further transferred to properties in different countries based on your reservations in accordance with this Statement.457The personal information stored in Hilton's global centralized reservation system may be further transferred to properties in different countries based on your reservations in accordance with this Statement.
440Please refer to the Data Protection Office at dataprotectionoffice@hilton.com for the contact information of other entities that may receive your personal data.458Please refer to the Data Protection Office at dataprotectionoffice@hilton.com for the contact information of other entities that may receive your personal information.
442Data Retention Period We will retain personal information about you for as long as necessary to complete the purpose for which it was collected, or as required or permitted by the laws.460Data Retention Period We will retain personal information about you for as long as necessary to complete the purpose for which it was collected, or as required or permitted by the applicable laws.
449You can contact our Data Protection Office at DataProtectionOffice@hilton.com , or, If you would like to get in touch with the contact in China, please contact: China_Privacy@hilton.com .467You can contact our Data Protection Office at DataProtectionOffice@hilton.com , or, if you would like to get in touch with the contact in China, please contact: China_Privacy@hilton.com .
450Back to Top Appendix A-7: Brazil Residents To the extent you are located within Brazil or are in any form subject to the Brazilian General Data Protection Law – Federal Law nº 13709/18 (“LGPD”), the provisions indicated below should be read and applied to the processing or your personal data accordingly.468Back to Top Appendix A-7: Brazil Residents To the extent you are located within Brazil or are in any form subject to the Brazilian General Data Protection Law – Federal Law nº 13709/18 (“LGPD”), the provisions indicated below should be read and applied to the processing of your personal data accordingly.
467Language Statement is available in English and French.485Language This statement is available in English and French.
469Back to Top Appendix A-9: Nigeria Residents To the extent you are located within Nigeria or are in any form subject to the Nigeria Data Protection Act 2023 (NDPA), the provisions indicated below should be read and applied to the processing or your personal data accordingly.487Back to Top Appendix A-9: Nigeria Residents To the extent you are located within Nigeria or are in any form subject to the Nigeria Data Protection Act 2023 (NDPA), the provisions indicated below should be read and applied to the processing or your personal information accordingly.
486For more information, please refer to the section titled How We Protect Personal Information in the main body of this Statement. 5.504For more information, please refer to the How We Protect Personal Information section in the main body of this Statement. 5.
490For more information, please refer to the section titled Cookies and Other Technologies in the main body of this Statement. 7.508For more information, please refer to the Online and Mobile Information We Collect section in the main body of this Statement. 7.
499To the extent you are located within South Korea or is any form subject to the PIPA, the provisions below should be read and applied to the processing of personal information accordingly.517To the extent you are located in South Korea or is any form subject to the PIPA, the provisions below should be read and applied to the processing of personal information accordingly.
510Personal data processed with the data subject’s consent : Hilton processes the following items of personal information with the data subject’s consent.528Personal information processed with the data subject’s consent .
511Expand All Perform analytics in order to provide guests with personalized offers and content Administer contests and sweepstakes Perform analytics to improve business operations Determine guests' eligibility for special or promotional rates Authenticate mobile account Process payments, including conducting strong customer authentication (SCA) when required by law Process transactions with partners Optimize our websites and mobile apps Detect and prevent fraud Send marketing communications via SMS, service-related SMS communications, and communications relating to Hilton Honors Engage in sales activity for group bookings, meetings and events Send marketing communications via email Send marketing communications via direct mail Maintain books and records to comply with legal obligations for business reporting, auditing, tax, and income reconciliation Enable guests to log into Hilton Honors Account Fulfill and manage corporate travel reservations Contact members of the media and social media influencers in their business capacity Properly attribute points to consumers who participate in airline loyalty programs Ensure safety and security, and enable guests to park at our properties Protect guests, employees and visitors to properties Internal and external promotions and communications Support marketing efforts Share that data with advertising networks who serve personalized advertisements Troubleshoot and resolve website issues Show you targeted advertisements on media Evaluate the usage of different streaming services Provide you with benefits associated with your co-branded card Facilitate use of Honors points as part of Amazon's Shop with Points program Fulfill Digital Key sharing requests, enable guest access to guest room and hotel facilities Provide a more personalized welcome and stay experience, respond to service concerns in order to better serve our guests Link with customer information that Hilton already has on file Send you the communications you would like to receive Determine guests' eligibility for special or promotional rates Respond to safety and security concerns Comply with legal or contractual obligations Personal data processed without the data subject’s consent .529Hilton processes the following items of personal information with the data subject’s consent Expand All Perform analytics in order to provide guests with personalized offers and content Administer contests and sweepstakes Perform analytics to improve business operations Determine guests' eligibility for special or promotional rates Authenticate mobile account Process payments, including conducting strong customer authentication (SCA) when required by law Process transactions with partners Optimize our websites and mobile apps Detect and prevent fraud Send marketing communications via SMS, service-related SMS communications, and communications relating to Hilton Honors Engage in sales activity for group bookings, meetings and events Send marketing communications via email Send marketing communications via direct mail Maintain books and records to comply with legal obligations for business reporting, auditing, tax, and income reconciliation Enable guests to log into Hilton Honors Account Fulfill and manage corporate travel reservations Contact members of the media and social media influencers in their business capacity Properly attribute points to consumers who participate in airline loyalty programs Ensure safety and security, and enable guests to park at our properties Protect guests, employees and visitors to properties Internal and external promotions and communications Support marketing efforts Share that data with advertising networks who serve personalized advertisements Troubleshoot and resolve website issues Show you targeted advertisements on media Evaluate the usage of different streaming services Provide you with benefits associated with your co-branded card Facilitate use of Honors points as part of Amazon's Shop with Points program Fulfill Digital Key sharing requests, enable guest access to guest room and hotel facilities Provide a more personalized welcome and stay experience, respond to service concerns in order to better serve our guests Link with customer information that Hilton already has on file Send you the communications you would like to receive Determine guests' eligibility for special or promotional rates Respond to safety and security concerns Comply with legal or contractual obligations Personal information processed without the data subject’s consent .
512Hilton process the following personal information without the consent of the data subject.530Hilton processes the following personal information without the consent of the data subject.
Stay ahead of the changes

Watch this before it changes again

Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.