Expedia Group’s Data Collected, Purpose of Use, and Retention Period

 

Purpose of processing

Categories of Personal Data

Use/Retention    
Method and Period

Account Creation

Name(as opposed to booking as a guest), Email address

Uses and retains the personal information until the purpose of use is achieved or the user cancels/withdraws from the service, and then destroys it when it is no longer required.

 

The retention period is the same as the period stipulated in the personal information privacy statement.

Account information

Social media network username / handle

Profile

City, Country, HomeTown, Languages(When traveler may indicate it)

Gender(May be collected as part of package booking for airline requirements)

Customer Authentication

Credit Card details / PCI data (expiry / CVV) / Bank account

Booking    
Path

transactional

Name, Email address, Address, Credit Card details / PCI data (expiry / CVV) / Bank account

Marketing

Name, Email address

Booking confirmations and travel alerts

Phone number

Refunds

Credit Card details / PCI data (expiry / CVV) / Bank account

Telesales

Telemarketing 

(the brand carries out limited tele-sales, often only B2B)

Phone number

Group bookings

Co-traveller/family details

Previous booking information

Transaction history

Filtering Hotel Choice

LGBT filter (A customer can select to filter hotels as to whether they are LGBT friendly. Other than the display of hotels for that customer, no other use is made of this data.)

Goodwill/compensation payments

Financial Account Numbers

Loyalty / Rewards

Name, Email address

Call backs

Phone number

Customer Service or Complaint Handling

Name, Email address, Phone number

Surveys/Reviews

Name, Email address(Note: Reviews often only used in de-identified state), Rating

Prize draw/competition entry

Name, Email address, Address, Social media network username / handle (Social media competitions / prize draws)

Points allocation

Customer loyalty information (e.g. Avios, Nectar, PayBack)

Standalone Newsletter sign up

Name, Email address

information passed to hotel as necessary and dealt with by GSO offline team internally(On request only).

Special Service Requests (SSR) : Accessibility information

Contacting in case of emergency

Emergency Contact (Name and number)

Security – Identity Verification

Email address

Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address

- GUID – global user ID

- TUID – traveller user ID

- AMUC – Adobe user ID

Training & Quality

Call Recordings

Protecting the Company

Call Recordings

Fraud prevention or detection

Credit Card details / PCI data (expiry / CVV) / Bank account

Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address

- GUID – global user ID

- TUID – traveller user ID

- AMUC – Adobe user ID

Security question / Two-Factor Authentication

Statistics, Analysis; Data Science

Mosaic Segment (e.g. income bracket, age demographic (via Experian))

Site optimisation

Mosaic Segment (e.g. income bracket, age demographic (via Experian))

Targeting and Tracking

Geolocation data (approx. longitude and latitude) – (not accurate), Cookies(IMIDs)

Marketing, Analytics / Statistics

Email address

Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address

- GUID – global user ID

- TUID – traveller user ID

- AMUC – Adobe user ID

Clickstream data (including searches made, time, date, referring and exit pages)

Cross device tracking and browser stitching device finger-printing

Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address

- GUID – global user ID

- TUID – traveller user ID

- AMUC – Adobe user ID

Secure Communication Services 

(for HomeAway to communicate with travellers in a secure way)

Indirect identifiers (customer IDs, partner IDs, device IDs) via clickstream tools and associated with IP address

- GUID – global user ID

- TUID – traveller user ID

- AMUC – Adobe user ID

For Mobile App

Last Access Location