Privacy Policy

This Privacy Policy explains what data HotelPair collects, how we use it, and your rights. We have written this in plain language so you can understand exactly what happens when you use our site.

The short version: we do not require user accounts, we do not collect personally identifiable information through normal use of the site, and we do not sell data to third parties.

No User Accounts

HotelPair does not require you to create an account, log in, or provide any personal information to use our hotel comparison service. You can browse, compare, and click through to booking partners without identifying yourself.

Data We Collect

Click Tracking

When you click on a hotel link or booking button, we record the following information to understand how our site is used:

• The page URL where you clicked
• The hotel name and identifier (if applicable)
• The position of the link on the page
• A timestamp of when the click occurred

This data does not include your name, email address, IP address, or any other personally identifiable information. It is used in aggregate to understand which hotels and pages are most useful to visitors.

Contact Form and Newsletter

If you voluntarily submit our contact form or subscribe to our newsletter, we collect the information you provide (typically your name and email address). This information is only used to respond to your inquiry or send you the newsletter you requested.

Cookies

CSRF Protection Cookies

We set a small cookie for cross-site request forgery (CSRF) protection on our contact and newsletter forms. This is a security measure that prevents malicious sites from submitting forms on your behalf. This cookie does not track you or contain personal information.

Analytics Cookies

We may use analytics services in the future to understand how visitors use our site. If and when we implement analytics, this section will be updated with specific details about what is collected. Currently, we do not set analytics cookies.

Third-Party Cookies

When you click through to a booking partner (such as Booking.com), that partner may set their own cookies on your device. These cookies are governed by the partner's privacy policy, not ours. We do not control or have access to cookies set by third parties.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking our CSRF cookie may prevent the contact and newsletter forms from working correctly.

Third-Party Services

Booking Partners

When you click on a hotel link, you are redirected to a booking partner (primarily Booking.com). Once you leave our site, that partner's privacy policy applies. We encourage you to review their privacy policy before completing a booking. We earn a commission on completed bookings. See our Affiliate Disclosure for details.

Hosting

Our website is hosted on Vercel. Vercel may collect server logs including IP addresses and request metadata as part of standard web hosting. Their privacy policy is available at vercel.com/legal/privacy-policy.

Data Retention

• Click tracking data: Specific retention periods will be defined before launch. This data is non-personally identifiable and is used for aggregate analysis.
• Contact form submissions: Retained for up to 2 years, then deleted.
• Newsletter subscriptions: Retained until you unsubscribe.

Data Security

We implement appropriate technical measures to protect data, including HTTPS encryption for all connections, security headers (HSTS, Content Security Policy), and input validation on all forms. However, no method of transmission over the internet is 100% secure.

Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access any personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when changes are made. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or want to exercise any of your rights, please contact us.