This analysis describes what Hilton's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated privacy statement now explicitly discloses that Hilton collects and may share Gender, Telephone, Arrival Time, Departure Date, and Spending Amount with third parties. These data categories were not previously listed in the disclosed collection practices. The statement continues to state that Hilton will not knowingly collect or disclose personal information from minors under the age of 14.
View change record →The updated policy expands disclosure of how Hilton properties use SMS and WhatsApp to contact guests during their stay. Properties may send welcome messages upon arrival, mid-stay reminders about the messaging service, and respond to guest requests via SMS or WhatsApp. The policy specifies that short code opt-in data will not be shared with third parties for their marketing purposes, and guests can opt out by replying STOP to any message. The policy also now explicitly discloses collection of WeChat account identifiers for linking Hilton Honors accounts to partner accounts. CCTV retention has been extended from 30 to 31 days. You can opt out of SMS or WhatsApp messages by replying STOP, or contact the hotel front desk to decline text messages.
View change record →How other platforms handle this
We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond...
We may take reasonable steps to verify your identity before responding to your request, which may include verifying your name, email address, and other information regarding your use of our services...
If you use an authorized agent to submit a request, we will not act on that request unless we are able to authenticate, with commercially reasonable efforts, both your identity and the authorized agent's authority to act on your behalf.
"We will not respond to any request unless we are able to appropriately verify the requester's identity.Excerpt from Hilton's Privacy Statement
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “We will not respond to any request unless we are able to appropriately verify the requester's identity.”
ConductAtlas has identified this type of provision across 276 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hilton.