Privacy Policy

We inform you that the personal data voluntarily provided by users through the priceroom.com website (the "Website"), via email, or telephone, will be subject to automated processing and incorporated into files for which Priceroom Ltd (hereinafter referred to as "priceroom.com" or "we") is responsible, in accordance with the terms of this Privacy Policy and the purposes stated herein.

All personal information provided or collected through the Website will be processed by priceroom.com as the data controller.

Data Controller: Priceroom Ltd
Registered Office: 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE
Company Registration Number: 16564172 (registered in England and Wales)
VAT Number: GB505818980
ICO registration number: 00015639647
Contact Email: privacy@priceroom.com

By providing personal data to priceroom.com, users explicitly acknowledge that they have read and accepted this Privacy Policy and give their express, informed, and unambiguous consent to the processing of their personal data as described in this Privacy Policy.

Users are responsible for ensuring the authenticity and accuracy of all data provided through the Website and must keep their information updated to reflect their current circumstances. Users are solely responsible for any false or inaccurate statements made, as well as any damages caused to priceroom.com or third parties.

Legal Basis for Data Processing

The legal basis for processing user data is the performance of the contract between users and priceroom.com for the provision of services through the Website, as well as the user's consent for certain specified purposes outlined in this Privacy Policy.

Collected Data

2.1 Information Provided Directly by Users to priceroom.com

• User Registration Data: To register on the Website, users must provide their email address and create a password. Alternatively, users may choose to register or sign in using their Google or Apple account. User registration data is mandatory, and failure to provide this information will result in the inability to register on the Website.
• "My Profile" Information: Users may add or modify data in their profile to use priceroom.com services, such as their first and last name, contact telephone number, or email address. Users can update this information by contacting priceroom.com at privacy@priceroom.com.
• Reservation Data: Information related to reservations made by users through the Website, including the names of the guests staying, reservation details, any special requests, and any evaluations or comments provided by the user (excluding anonymous feedback).
• Credit/Debit Card Details: priceroom.com may store certain credit/debit card details provided by the user, such as the cardholder's name, expiration date, last four digits of the card, and card type. However, complete credit/debit card data will be securely stored by the chosen payment service provider to facilitate payment processing, as described in Clause 5.1 of this Privacy Policy. Users can request the deletion of their credit/debit card data by emailing privacy@priceroom.com.
• Incident or Issue Management Data: If a user contacts priceroom.com via email, phone, chat, or messaging platforms, priceroom.com may collect and store the messages to manage current or future incidents effectively.
• Additional Information: Any information provided by the user through email, phone, chat, or messaging platforms.

2.2 Information Indirectly Provided by Users

• Website Usage Data: priceroom.com collects data derived from users' interactions with the Website, such as internet IP address, device and application information, browsing history, and user preferences.
• If the user arrives at the Website through an external source (e.g., a link from another website or a social network), priceroom.com collects data from the referring source.
• Cookies: priceroom.com uses both first-party and third-party cookies to enhance user navigation and for statistical purposes. Please refer to our Cookie Policy for more information.
• Data from External Third Parties: priceroom.com may collect information or personal data from external third parties if users authorize the sharing of such information with priceroom.com. For example, if users register on the Website through their Google or Apple accounts, priceroom.com may access certain information from those accounts, such as basic profile details and email addresses. priceroom.com does not post content to users' accounts with those providers.

Purposes of Data Collection and Processing

3.1 Purposes Related to the Provision of Services

priceroom.com processes users' personal data for the following purposes:

• Providing the requested or contracted services through the Website, in accordance with the Terms and Conditions.
• Managing and controlling reservations made by users through the Website.
• Responding to user inquiries and providing requested information.
• Managing and controlling user accounts on the Website.
• Managing user participation in sweepstakes, contests, or promotions organized by priceroom.com.
• Administering specific services on the Website, such as sweepstakes or contests, which may have additional privacy provisions. Users should review and accept these provisions before participating.
• Ensuring compliance with the Terms and Conditions, Privacy Policy, and Cookie Policy of the Website.
• Detecting and investigating fraud, as well as other illegal activities or violations of the Terms and Conditions.
• Conducting statistical studies to improve the services offered on the Website based on user preferences.
• Sending communications related to reservation status or transaction updates.

3.2 Purposes with User's Express Consent

With the user's explicit consent, granted by checking the corresponding checkbox, priceroom.com may use user data for the following purposes:

• Periodically sending commercial communications via electronic means about services offered on the Website, related to the hospitality and tourism sector, raffles and contests organized by priceroom.com, and offers and promotions related to the Website's services. priceroom.com does not currently send commercial communications of this kind; where it begins to do so, each message will carry an unsubscribe link.
• Sending price-drop alerts for a hotel or a search the user has chosen to watch. These are sent only while the user's “Price-drop alerts” account setting is switched on, and switching it off stops them.
• In the PriceRoom mobile app, measuring how the app is used — which screens are opened, that a search was run and its shape (nights, guests, rooms), that a hotel or room was viewed, that a checkout was started and that a booking was confirmed, with the amount and currency. This happens only while the “Share usage data” switch under Privacy and data in the app is on; it is off until the user turns it on, and turning it off stops the measurement and discards the app's analytics identifier. Names, email addresses, phone numbers, payment details and booking references are never included.
• Users may withdraw their consent for receiving commercial communications at any time by emailing privacy@priceroom.com, by switching the relevant setting off under Settings → Email Notifications in their account, or — for commercial communications — by using the unsubscribe link provided in each such message.

Emails needed to perform a booking or to operate an account — booking confirmations and cancellations, payment receipts and refunds, password resets, email verification, and replies to support requests — are not commercial communications and are not subject to consent. They are sent for as long as the account or booking exists.

3.3 Automated Processing and Artificial Intelligence

priceroom.com uses automated language-processing services (the Microsoft Azure OpenAI Service) to help run the Website — for example to understand hotel-search requests, triage and draft replies to customer support enquiries, and translate and generate descriptive content. Where a user's message is handled this way, the content of that message is processed by that service on our behalf. These services are used to assist our team; they are not used to make decisions that produce legal effects concerning users or similarly significantly affect them, and a member of our team remains responsible for the outcome of any support case.

Data Retention Period

The personal data provided will be retained as long as the user remains registered on the Website and does not exercise their right to withdraw consent. In the event of consent withdrawal or objection to processing, the data will be blocked and retained for the applicable legal retention period to handle any potential claims.

Data Sharing and Transfers

5.1 Sharing for Service Provision

To provide the requested services, priceroom.com shares certain user data with the service providers below. Each acts as a processor on our behalf under a written contract, except where stated otherwise. We do not sell personal data.

• Accommodation suppliers and hotels: To hold and confirm a reservation we pass the booking details and the names of the guests staying (including the ages of any children) to the wholesale supplier that holds the room and, through them, to the hotel. Depending on which supplier holds the rate, this may also include the lead guest's email address and telephone number, the guests' declared nationality, any special requests entered at checkout, and — where the supplier requires it for fraud prevention — the IP address from which the booking was made. Our current accommodation suppliers are RateHawk (Emerging Travel Group), GoGlobal, Dida Travel and Tourmind. The hotel needs this information to provide your stay, and receives it as a separate controller.
• Payment processing: Revolut, our payment service provider, processes card payments and refunds and receives the payment amount, the cardholder's details and the card data entered at checkout. Complete card numbers are captured and stored by Revolut, not by priceroom.com.
• Hosting, databases and storage: Microsoft, whose Azure cloud platform hosts the Website and stores all customer records, bookings, support cases and logs. See "International Transfers" below for where this takes place.
• Email: MailerSend, which delivers booking confirmations, account emails and support replies and receives the recipient's email address, name and the content of those messages; and Google, whose Workspace service hosts our support@priceroom.com mailbox and therefore receives emails users send to us.
• Sign-in providers: Where a user chooses to sign in with Google or Apple, that provider confirms the user's identity to us and we receive basic profile information and an email address. Google and Apple act as separate controllers for the sign-in itself. We also use Google's "One Tap" sign-in prompt, which loads a Google script on most pages of the Website. This means Google receives the user's IP address and browser information on those page views, whether or not the user is signed in or chooses to sign in. It is not loaded on our sign-in, booking, payment, checkout or account pages.
• Automated language processing: The Microsoft Azure OpenAI Service, as described in Clause 3.3, which receives the content of the material being processed — including hotel-search sentences and, for support cases, the text of a user's message.
• Maps and search: Microsoft, whose Azure Maps and Azure AI Search services power the map and the hotel search and receive search terms and approximate location data.
• Error monitoring: Sentry, which records technical diagnostic data when something goes wrong — including the user's IP address, browser, the page being viewed and the technical details of the error. We do not use Sentry's session-recording feature, so it does not capture what a user types or sees. The PriceRoom mobile app reports crashes to Sentry in the same way, with the app version, device model and operating-system version; email addresses, phone numbers and similar details are removed on the device before a report is sent, and no screenshots are taken.
• App usage analytics (mobile app only): PostHog, which receives the usage measurements described in Clause 3.2 — but only while the user has switched on “Share usage data” in the app. Until then nothing is sent to PostHog. PostHog receives no name, email address, phone number, payment details or booking reference, and we have switched off its location lookup from IP addresses. Technical session and device identifiers can link usage events or diagnostic reports to the same device; this information is pseudonymous, rather than anonymous.
• Website analytics: Google (Google Analytics 4), but only if the user accepts analytics cookies in our cookie banner — until then the Google Analytics script is not loaded and nothing is sent. When accepted, Google receives the pages viewed, the search and landing-page actions taken, the campaign a visitor arrived from, and technical browser data. IP addresses are anonymised, and we do not send names, email addresses, payment details or booking references. Consent can be withdrawn at any time by selecting Cookie preferences in the footer or on our Cookie Policy page.
• Map tiles and other content loaded directly by the browser: Some elements of the Website are fetched by the user's browser from third parties, which therefore receive the user's IP address and browser information. These are: OpenFreeMap, which supplies our map tiles and consequently sees which geographic area a user is looking at; unpkg, which supplies a map stylesheet; and Google, which supplies the small site icons shown next to other travel sites in our price comparison. These providers receive no name, email address or booking details.

priceroom.com does not use any third-party fraud-scoring or fraud-profiling service. Fraud checks on payments are performed by our payment service provider as part of processing the payment.

All third parties with whom user data is shared have entered into binding contracts or legal agreements with priceroom.com to ensure compliance with applicable data protection laws.

5.2 International Transfers — Where Your Data Is Processed

priceroom.com stores and processes personal data outside the United Kingdom. Our platform runs on Microsoft Azure, and our databases, file storage, caches and application servers are located in Microsoft's East US region in the United States. This means that user accounts, bookings, support conversations, email records and technical logs are stored in the United States and are accessible to us and to Microsoft from there.

Some services are processed elsewhere. Our error-monitoring provider, Sentry, processes data in the European Union, for the Website and the mobile app alike. PostHog, our mobile-app analytics provider, processes data in the European Union and only where the user has switched usage sharing on. Automated language processing for customer support takes place in Microsoft data centres in the European Union; some other automated language processing takes place in the United States. Natural-language hotel search uses Microsoft Azure OpenAI Global Standard: Microsoft may process the search sentences you enter in any region where that service operates, including outside the United Kingdom and European Union. Google Analytics, where the user has consented to it, processes data in the United States.

Our accommodation suppliers and the hotels users book are located worldwide, so making a reservation necessarily involves transferring the guests' details to the country in which the supplier and the hotel operate. In particular, two of our accommodation suppliers, Dida Travel and Tourmind, operate from China, and a booking made through either of them involves transferring the guests' names, contact details and any special requests there.

The United States has not been granted UK "adequacy" status in general. Where we transfer personal data to a country that is not covered by UK adequacy regulations, we rely on the International Data Transfer Addendum to the EU Standard Contractual Clauses (the "UK Addendum") issued under section 119A of the Data Protection Act 2018, which forms part of our data processing agreements with those providers, together with the technical and organisational measures described under "Security Measures" below. Transfers to a hotel in order to fulfil a reservation the user has asked us to make are additionally necessary for the performance of that contract.

Users may request further information about these transfers, and a copy of the relevant safeguards, by emailing privacy@priceroom.com.

5.3 User's Expressly Consented Sharing

Users will be informed and asked for consent before any information about them is shared with third parties for purposes other than those outlined in this document or the Terms and Conditions.

5.4 Sharing for Legal Compliance

priceroom.com may disclose user information to security companies, law enforcement agencies, or other third parties when required by law, to enforce the Terms and Conditions, or to protect the rights, property, or safety of priceroom.com, its users, or third parties. This may include sharing information to prevent fraud and reduce credit risk.

5.5 Sharing as per Legal Request

Upon a lawful request, priceroom.com may share information with executive authorities and/or third parties regarding criminal investigations and alleged illegal activities.

Security Measures

priceroom.com is committed to adopting technical and organizational measures to ensure the security of user personal data and prevent unauthorized access, alteration, loss, or unauthorized processing. These measures comply with the applicable data protection laws and consider the state of technology, the nature of the stored data, and associated risks. However, users are responsible for safeguarding their passwords and access codes to prevent unauthorized use by third parties. priceroom.com is not liable for any misuse of user passwords or access codes.

Exercise of User Rights

Users have the right to access, rectify, erase, restrict the processing of, object to the processing of, and receive a copy of their personal data held by priceroom.com. Users also have the right to be informed of the safeguards applying to transfers of their data outside the United Kingdom, as described in Clause 5.2. These rights can be exercised by sending a written request, along with a copy of a valid identification document, to the following address:

Priceroom Ltd
3rd Floor, 86-90 Paul Street
London, England, United Kingdom, EC2A 4NE

Or by email to privacy@priceroom.com.

Users understand and accept that withdrawal of consent or the exercise of certain rights may result in priceroom.com being unable to provide certain services.

Users also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or any other relevant supervisory authority if they believe that their data protection rights have been violated.

Changes to the Privacy Policy

priceroom.com may update or modify this Privacy Policy, and an updated version will be available on the Website. Substantial changes will be communicated to users through email or other means to ensure they receive notice of such changes.

Governing Law

This privacy policy is governed by and construed in accordance with the laws of the United Kingdom, including the UK General Data Protection Regulation and the Data Protection Act 2018.

© 2026 Priceroom Ltd.

Our Services are very diverse, so sometimes additional terms or product requirements (including age requirements) may apply. Additional terms will be available with the relevant Services, and those additional terms become part of your agreement with us.