The short version. No account, no cookies, no ads, no tracking or analytics. We never sell data. A screenshot you give us is used only to read the hotel, dates and price for your check, and is not kept. The prices we collect are stored anonymously, without anything that identifies you.
Who we are
BookHotels.direct (website and app) is responsible for the processing described here. Contact: [email protected].
What we process and why
Using the website or the app. Our hosting provider, Cloudflare, receives technical data with every request (IP address, browser or device type, the page requested and the time). It is used to deliver the service and protect it against abuse, and kept only in short-lived security logs. Legal basis: our legitimate interest in running a secure service (Art. 6(1)(f) GDPR). Our fonts are served from our own domain, not from a third party.
Price checks. When you ask for a check, we use the stay details (hotel, dates, number of guests) to ask the hotel’s own booking website for its price, and show you the result. We store the prices we see as anonymous records (hotel, dates, guests, room, price, time) to keep our price information up to date. These records contain no personal data. Legal basis: providing the service you ask for (Art. 6(1)(b) GDPR).
Screenshots and photos. If you share a screenshot with the app, choose one, or take a photo, we use it only to read the hotel, dates, guests and price for your check. Where this reading happens on our servers, the image is processed by Cloudflare (including Cloudflare Workers AI) and deleted once the check is done. We do not store it and do not use it to train models. The camera is used only when you tap “Take a photo”. Legal basis: Art. 6(1)(b) GDPR.
Email. If you write to [email protected], the message is forwarded to us by Cloudflare Email Routing. We use your address and message only to reply, and keep the correspondence as long as needed to deal with your request. Legal basis: Art. 6(1)(b) and (f) GDPR.
Who else is involved
- Cloudflare, Inc. provides hosting, our database, email forwarding and AI processing, and acts as our processor. Our database is located in the EU. Cloudflare may process technical data outside the EU; such transfers are covered by the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
- Google distributes the Android app through Google Play and processes data for that under its own privacy policy.
- When you open a hotel’s own website from our site or app, that hotel’s privacy policy applies to what you do there.
How long we keep data
Security logs: a short time (days to weeks) at Cloudflare. Anonymous price records: kept, as they are not personal data. Emails: as long as needed for your request.
Your rights
You can ask for access to, correction or deletion of your personal data, restriction of or objection to its processing, and data portability, by writing to [email protected]. You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).
Children
The service is meant for adults booking travel and is not directed at children.
Changes
If we change how we process data (for example when we add sign-in), we will update this page and the date above.