Last Updated: January 6, 2025
Wyndham Hotels & Resorts, Inc. and its corporate affiliates or subsidiaries (collectively, “WHR”, “we”, “us” or “our”) cares about privacy and wants you to be familiar with how we collect, disclose, and use (“Process”) information about you. This privacy notice (“Privacy Notice”) describes our practices concerning information we collect through our websites (the “Websites” or “sites”), social media pages we control (“Social Media Pages”), and software applications we make available (“Apps”) and through offline activities, such as when you provide your data by phone via our call centers or in person (collectively, for all items above, the “Services”).
This Privacy Notice does not apply to hotels operated by WHR franchisees (independently owned and operated) or that WHR manages but does not own (“Hotels”). For example, Hotels may conduct and are solely responsible for their own marketing campaigns. Please read each Hotel’s privacy notice to understand how it will treat your Personal Information.
Please read the following to learn more about our privacy practices, and note that our practices are subject to applicable law. This means that they may be more limited in certain jurisdictions to reflect local legal requirements.
We collect “Personal Information” (information that identifies you, relates to you, describes you or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly with you as a particular individual or as defined under applicable law, your household) about you from a variety of sources and use and disclose it for multiple purposes.
Sample data elements include without limitation, real name, alias, postal address, phone number or email address
We may use this information for our business transactions with you, including without limitation, to:
We will retain your Contact Information for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
Sample data elements include without limitation, age, gender, family status, income or other information
We may use this information to:
We may share this information with Affiliates, Service Providers, Business Partners and Other Third Parties or as permitted by law as described below under “Information Disclosure”
We will retain your Contact Information for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
Sample data elements include without limitation, driver’s license number, social security number, passport number or other similar government-issued identification number and associated documents
We may use this data to more precisely identify you where needed, such as for fraud prevention or compliance verification; or as required by law, such as for tax or financial processing or other purposes
We may share this information with Affiliates, Service Providers or as permitted by law as described below under “Information Disclosure”
We will retain your Government-issued Identification Numbers or Documents for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
Sample data elements include without limitation, credit or debit card number, bank account number or other financial information
We may use this data to:
We may share this information with Affiliates, Service Providers or as permitted by law as described below under “Information Disclosure”
We will retain your Government-issued Identification Numbers or Documents for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
Sample data elements include without limitation, online identifiers, Device ID, Internet Protocol (IP) address, account or membership name or identification number or other similar identifiers
We may use this information to:
We may share this information with Affiliates, Service Providers, Business Partners or Other Third Parties or as permitted by law as described below under “Information Disclosure”
We will retain your Unique Personal Identifiers for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
Sample data elements include without limitation, purchase or usage history (for example, stay or trip information and preferences, such as your preferred location/facilities, dates and number of children included), member or other program status, communications preferences, product or service preferences (such as any special needs or conditions that may impact your stay), Services usage history, location information
We may use this information to:
We may share this information with Affiliates, Service Providers, Business Partners or Other Third Parties or as permitted by law as described below under “Information Disclosure”
We will retain your Transaction, Relationship, Personal Preferences, Usage and Location Information for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
Sample data elements include without limitation, reviews, testimonials, posts or social media account information such as profile data, posts or other information
We may use this information to:
We may share this information with Affiliates, Service Providers, Business Partners or Other Third Parties or as permitted by law as described below under “Information Disclosure”
We will retain your User Generated Content or Social Media Account Information for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
We may use “cookies” (small text files this site sends to your computer and stores on your hard drive) to save your preferences. For example, a cookie may save a user’s login details, so that they do not need to login every time. Cookies may be persistent or temporary. Persistent cookies retain preferences for future sessions and stay valid until a set expiry date (unless deleted earlier by the user). Temporary cookies expire at the end of the session, when the browser is closed.
If you enroll in marketing text messages, cookies may be used to personalize your experience (e.g., send you personalized text messages such as shopping cart reminders).
Google Analytics: We use Google Analytics to better understand how visitors use our site and for interest based advertising associated with your Google Account and devices you use. This cookie’s site usage information is transmitted to and stored by Google. You may opt out of Google Analytics here: http://tools.google.com/dlpage/gaoptout?hl=en.
Adobe Marketing Cloud Device Co-op: WHR participates in the Adobe Marketing Cloud Device Co-op to better understand how you use our sites across devices, and to deliver tailored promotions. To learn more about this and to manage your preferences, visit: https://cross-device-privacy.adobe.com.
Pixels, Beacons: We or third party ad servers may use invisible pixels or beacons to count users visiting certain pages. This is collected, reported in the aggregate and may be used to improve our marketing programs, and target advertisements at this Website and/or on others.
We may use this information to:
We may share this information with Affiliates if linked to our sites, Service Providers or Other Third Parties or as permitted by law as described below under “Information Disclosure”.
We do not control or have access to third party advertising partners’ cookies, but allow them to be used to identify purchasing or interest patterns and run ads tailored to the user’s online habits.
Please visit our Cookie Consent tool available in the footer of this website for more information about cookies used on this site and for preferences information.
Privacy Preference Opt-Out Signals: We respond to opt-out preference signals that are supported by some internet browsers. When visiting our site, opt-out preference signals will apply to the device and browser. Visit https://globalprivacycontrol.org to learn more about the opt-out preference signal specification. If you wish to request your personal information associated with your member account not be sold or shared, please complete the form at Do Not Sell or Share My Personal Information.
Do Not Track Signals: We do not currently respond to browser ‘do not track’ signals. Third parties, including our service providers, may collect information about your online activities over time and across websites, including when you visit our site. To learn more about your choices regarding data collected about your online activities, visit www.aboutads.info and networkadvertising.org.
Internet Based Advertising: We may use third-party advertising companies to serve ads for goods and services that may interest you when you access and use our Services or others’ services, based on information about online activities across sites. These companies may use a unique cookie on your browser (including using pixel tags) to collect data about your online use and to recognize you across devices. If you would like more information about this practice, and learn how to opt out of it on your device browsers, visit www.aboutads.info and www.networkadvertising.org. You may also opt out in certain social media platforms by reviewing your account settings and restricting sharing your information with ad partners or tailoring ads based on information shared by ads partners.
We will retain information collected about you from Cookies, Pixels, or Beacons for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
Sample data elements include without limitation, personal information that reveals your Social Security or other state identification number, your account log-in, financial account, debit card, or credit card in combination with any required security or access code, password, or credentials allowing access to an account, your geolocation, your racial or ethnic origin, and the contents of your mail, email, or text messages when you communicate with us.
We do not use your Sensitive Personal Information to infer characteristics about you, or for other purposes beyond what is allowable under applicable law.
We may share this information with Affiliates, Service Providers or as permitted by law as described below under “Information Disclosure.”
We will retain your Sensitive Personal Information for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
Data from all categories above, subject to the limitations outlined for Sensitive Personal Information, may also be used for our legitimate business interests / purposes concerning data analysis, audits, fraud monitoring and prevention, internal quality assurance, developing new products, enhancing our Services, helping us comply with legal requirements or process, enforcing compliance with our Terms of Use or any product, service or program terms and conditions, helping protect our Services, determining the effectiveness of our promotional campaigns and operating and expanding our business activities. We may share or disclose it to respond to requests from public and government authorities globally; to protect our operations or those of any of our Affiliates or other third parties; to protect our rights, privacy, safety or property, or that of our Affiliates, you or other third parties or to allow us to pursue available remedies or limit damages we, our Affiliates or other third parties may sustain.
We do not perform automated decision making or profiling with your Personal Information in furtherance of decisions that produce legal or significant effects concerning you under applicable law.
We and our third-party service providers may collect usage information when you visit and use the Services. This may include browser type and/or settings, operating system, page(s) served, the time, request source, preceding page view, and similar data. We may analyze this information and use it to help us determine how our Services are used, such as how visitors arrive at the Services, what content is popular or most relevant and what type of visitors are interested in certain content or ads. We use non-personal information in a variety of ways, including to help analyze site traffic, understand customer needs and trends, carry out targeted promotional activities and improve our services. We may use such data by itself in anonymized form or aggregate it with information obtained from others. We may share such data with our affiliated companies and third parties to achieve these objectives and others, but the aggregate or anonymized data does not personally identify you. We may provide our analysis and certain non-personal information to third parties (who may use it in turn to serve ads tailored to your interests), but this will not personally identify you.
If we subsequently associate your usage data or re-identify anonymized data with Personal Information you provide in a way that allows us to identify you as an individual or as part of a household under applicable law, we will treat the combined data as Personal Information.
We may disclose your Personal Information as described below, where allowable under applicable law.
To any other entity that is, at the time you disclose your Personal Information, directly or indirectly controlled by, or under common control with us (“Affiliates”) for the purposes described herein, unless otherwise prohibited by law. Please see our current Annual Report for details about our Affiliates as of its publication date.
We may disclose your information to our service providers, who perform services for us such as, without limitation: travel services, financial and/or tax services, vacation insurance, website hosting, data analysis, payment or credit card processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, legal advisers, accountants, auditing or other services.
In accordance with your preferences, we may disclose your Personal Information to business partners to provide you or market to you services of interest to you. For example, we may share it with owners or operators of hotels and resorts, airlines, car rental services, retail stores, credit agencies and other third parties to facilitate reservations, assist you in making arrangements or requested purchases of products or services, or in connection with our loyalty program or one of our partners’ programs (for example, to earn or redeem points). We may co-sponsor promotions, sweepstakes, or events with a third party and share your data when you provide it to facilitate these events. Further, we may share your data with third party providers of ancillary services on-site at hotels or resorts to fulfill your service requests, such as spa, golf, concierge, and dining providers. If you provide additional data to such third parties, it will be subject to their privacy practices.
Subject to your marketing or other preferences (which may include consent), we may license, sell, or otherwise share your Personal Information with selected third parties for compensation for their own business purposes or our own business purposes. Such third parties may include timeshare organizations formerly affiliated with us or third parties for the purposes of advertising network services. Once shared with such entities, this Personal Information may become subject to the third party’s privacy practices.
We may offer facilities for users to submit content such as reviews, message boards or other content. Any information disclosed in these areas becomes public information and you should always be careful when deciding to disclose your Personal Information. We are not responsible for privacy practices of other users including website operators to whom you provide information.
We may disclose your Personal Information to a third party who acquires any part of our business or the business of any of our Affiliates, whether such acquisition is by way of merger, consolidation, divestiture, spin-off, or purchase of all or a substantial portion of our assets.
We may disclose your Personal Information to law enforcement authorities, government or public agencies or officials, regulators, and/or any other person or entity with appropriate legal authority or justification for receipt of your data, if required or permitted to do so by law or legal process, to respond to claims, or to protect our rights, interests, privacy, property or safety, and/or that of our Affiliates, you or other third parties.
We have implemented reasonable and appropriate physical, technical and administrative steps to help protect your personal information from loss, misuse, unauthorized access or disclosure, alteration or destruction. Unfortunately, no security system is 100% secure, thus we cannot ensure the security of all information you provide to us via the Services.
If you provide us with information about someone else, you must have their permission to do so for the purposes detailed in this Privacy Notice.
The Services may link to sites we do not operate. We have no control over how they collect your data or liability for their practices, policies and security measures. You should read privacy notices on other sites before providing any data to them.
We are not responsible for the privacy policies and/or practices of third parties such social media platform or site providers, RIM or any other app developer or provider, operating system provider, wireless service provider or device manufacturer, and/or any data you disclose to them.
We do not knowingly collect or Process Personal Information from individuals under 18 years of age, and no part of our Services is directed to individuals under 18. If we incidentally collect or Process such data, you may contact us to request that we delete it.
We are a global company and may transfer your data to selected third parties outside your country where information protection standards may differ (e.g., your information may be stored on servers in other jurisdictions). We will use appropriate safeguards governing the transfer and usage of your Personal Information, such as an adequacy decision by the European Commission, Model Clauses or other applicable mechanism. If you would like further detail on the safeguards we have in place please contact us.
We will retain your Personal Information for the period necessary to fulfill the purposes outlined herein unless a longer period is required or permitted by law, or required by legal process, such as a pending claim or litigation requiring preservation of relevant records.
You can opt-out from our marketing communications by using the unsubscribe function in our emails; or contacting us as set forth under “Contact Us” below.
You may withdraw any consent you provided to us to Process your Personal Information at any time.
You may access Personal Information we Process about you. Any request to access or obtain copies of your Personal Information must be made in writing by contacting us as set forth below. We may, in certain jurisdictions, be entitled to charge a nominal fee to cover related administration costs. We may also ask you to verify your identity and to provide further details relating to your request.
As allowable under applicable law, you have the right to request a copy of specific pieces of personal information or categories of personal information we collected about you in the prior 12 months and to receive it free of charge by email or other electronic portable and usable format. You may also request information about how we have handled your personal information in the prior 12 months, including the following, by category: personal information collected; sources of personal information; purposes for collecting and selling or sharing your personal information; third parties with whom we shared your personal information for a business purpose and corresponding personal information categories shared; categories of third parties with whom we sold or shared your personal information and corresponding personal information categories sold. As allowable under applicable law, you may make Right to Know requests up to twice every 12 months as set forth under “Submitting Requests” below.
In the past 12 months, unless you otherwise opted out, WHR may have sold or shared your Contact Information to a formerly Wyndham-affiliated timeshare company, and may have sold or shared certain online or internet tracking data to advertising network companies to display targeted advertisements to you on other websites. As allowable under applicable law, individuals may opt-out of our sale or share of their Personal Information, and exercise this right as described at the following link: Do Not Sell or Share My Personal Information.
We will take reasonable steps to ensure the accuracy of Personal Information we maintain about you. You are responsible for submitting accurate and complete information to us, and timely updating us if it changes. You may contact us to request that we correct any inaccurate or incomplete data.
You may contact us to request we delete your Personal Information. We will assess your request and determine whether we may delete the information if no exemption under law applies, or it is not otherwise subject to a longer legal requirement or as part of information required to be preserved due to a pending claim or litigation.
You may contact us to object to any Processing of your Personal Information. We will assess your request and determine whether we have any legal or other justification for continued Processing.
You may request to receive your Personal Information in a format that allows you to send it to another company or to direct us to transfer it directly to another company.
Applicable law prohibits discrimination against individuals for exercising their rights, such as by denying or providing a different level or quality of goods or services, or charging different prices or imposing penalties on residents who exercise their privacy rights, unless doing so is reasonably related to the value provided to the business by the residents’ data.
Upon receipt of a denial of your individual privacy rights request, you may appeal our decision by contacting us as set forth in “Contact Us” below.
We, along with our subsidiaries WHR Operations, LLC, Wyndham Rewards, Inc., and Wyndham Hotel Group, LLC, comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce.
We have certified to the U.S. Department of Commerce that we, along with the aforementioned subsidiaries, adhere to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and adhere to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.
If there is any conflict between the terms in our Privacy Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles (collectively, “Principles”), the Principles shall govern. To learn more about the Data Privacy Framework Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
In accordance with the Principles, we may be liable for failures to comply with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF when we share your Personal Information with third parties working on our behalf, unless we demonstrate we are not responsible for the event giving rise to the damage.
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, we commit to cooperate and comply with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
Our commitments under EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF are subject to the investigatory and enforcement powers of the United States Federal Trade Commission. In certain circumstances, you have the right to invoke binding arbitration to resolve complaints that are not resolved by other means, as described in Annex I of the EU-U.S. DPF.
If you have complaints or questions about how we are complying with the Principles when handling your personal information, please contact us as explained below.
If you have a complaint or concern about how we Process your Personal Information, we will work to address it. You may also direct your complaint/concern to your applicable data protection authority. If you have any privacy-related questions or concerns, or would like to make any requests in relation to your Personal Information, your Choices, Rights, or its Processing, please email privacy@wyndham.com, or by calling 1-866-554-1236 (toll free), or send a letter to:
Wyndham Hotels & Resorts, Inc.
22 Sylvan Way
Parsippany, New Jersey 07054, USA
Attn: Legal Privacy
For request in relation to your Personal Information, please provide your email address, first and last name, valid residential address, phone number and Wyndham Rewards number (if applicable) that matches information we currently have on file. Where we are unable to verify your identity based upon this information alone, we may require additional details. We will respond to verifiable requests received from individuals as required by law.
To the extent you wish to designate an authorized agent to make any rights requests on your behalf, we require a written and signed authorization letter from you that includes your first and last name, residential address, email and phone number, as well as the full name, address information and relationship to you of the agent you wish to authorize (for example, an attorney, family member or other party). Please send the agent authorization letter to: Wyndham Hotels & Resorts, Inc., 22 Sylvan Way, Parsippany, New Jersey 07054, Attn: Legal Privacy. We will review all requests and may require additional details for verification purposes. Please note that we may honor requests made by authorized agents on your behalf, but for fraud prevention purposes, we will only provide responses directly to you, firstly to the email address you currently have on file or to your mailing address currently on file should you not have an email address.
We offer Wyndham Rewards® program members discounted rates on stays, as well as the opportunity to earn Wyndham Rewards points that can be redeemed for discounted or free stays or other items. The material terms and conditions of the program are available at https://www.wyndhamhotels.com/wyndham-rewards/terms. Contact Information, Unique Identifiers (primarily your Rewards Membership ID) and your Transaction, Relationship, Website Usage and Location Information are used to administer your Rewards membership and provide the discounted rates, points and any other membership benefits. You can enroll as a Rewards Member by visiting https://www.wyndhamhotels.com/wyndham-rewards/join or withdraw from the financial incentive by terminating your membership by contacting Member Services as described at https://help.wyndhamrewards.com. The financial incentives associated with the Wyndham Rewards program and the corresponding value of Rewards member data were calculated by analyzing the revenue generated by Wyndham Rewards members in comparison to typical non-Rewards member guests.
Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the Personal Information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third party sharing in the prior calendar year. To make such a request, please call 1-866-554-1236 (toll free), send an email to privacy@wyndham.com or send a letter to: 22 Sylvan Way, Parsippany, New Jersey 07054, Attn: Legal Privacy. The request should attest to the fact that the requester is a California resident, and provide a current California address.
We may change this Privacy Notice from time to time and the date of last revision is included at the beginning of this notice.
Should we need to change the purpose or the type or the way we Process information we previously collected about you, we will only do so after we notify you and obtain your express consent to the extent required under applicable law.
