This analysis describes what Hilton's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated privacy statement now explicitly discloses that Hilton collects and may share Gender, Telephone, Arrival Time, Departure Date, and Spending Amount with third parties. These data categories were not previously listed in the disclosed collection practices. The statement continues to state that Hilton will not knowingly collect or disclose personal information from minors under the age of 14.
View change record →The updated policy expands disclosure of how Hilton properties use SMS and WhatsApp to contact guests during their stay. Properties may send welcome messages upon arrival, mid-stay reminders about the messaging service, and respond to guest requests via SMS or WhatsApp. The policy specifies that short code opt-in data will not be shared with third parties for their marketing purposes, and guests can opt out by replying STOP to any message. The policy also now explicitly discloses collection of WeChat account identifiers for linking Hilton Honors accounts to partner accounts. CCTV retention has been extended from 30 to 31 days. You can opt out of SMS or WhatsApp messages by replying STOP, or contact the hotel front desk to decline text messages.
View change record →How other platforms handle this
The personal information we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, or vendors maintain facilities.
We may continue to retain some information even after you delete your account if we are required to do so in order to comply with applicable laws.
We will store your personal data only for as long as it is necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
"The data controller may also maintain a local copy of your personal information, and in some cases this is required by applicable laws or regulations.Excerpt from Hilton's Privacy Statement
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “The data controller may also maintain a local copy of your personal information, and in some cases this is required by applicable laws or regulations.”
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hilton.