Privacy policy

Orders: your name as on your loyalty account, email address, loyalty member number, any stays you tell us you've booked, notes you add, and your order details. Payment card details are handled by Stripe and never reach us.

Welcome offer and emails: your email address, whether you asked for deals by email, and your time zone so reminders arrive at a sensible hour.

Messages: what you send us by email, WhatsApp or Messenger, so we can reply.

Site use: anonymous page analytics (no advertising profile), and if you arrive through a partner link, a cookie recording which partner referred you.

To deliver your order: we share your name, member number and the package (and for night credits, the dates to avoid) with our fulfilment partner, only for that purpose.

To contact you about your order, answer your questions, send the welcome code you asked for and its reminders, and, only if you opted in, occasional deals.

To prevent fraud and misuse of discount codes, and to keep accounting records the law requires.

Service providers acting for us: Stripe (payments), Vercel and Neon (hosting and database), Resend (email), Meta (WhatsApp and Messenger, if you contact us there), Telegram (internal order alerts), and an AI provider via OpenRouter that drafts replies to support messages, with member numbers masked first. Some of them are outside Singapore; we use providers that protect data to a comparable standard.

We don't sell your personal data.

Member numbers, notes and stay dates are encrypted in our database. Access is limited to what's needed to run the service.

We keep order records for as long as needed for delivery, support and the law (typically up to 5 years for accounting), and email signups until you unsubscribe or ask us to delete them.

Every marketing or reminder email has a one-click unsubscribe link.

You can ask to see, correct or delete the personal data we hold about you, or withdraw consent, by emailing support@hotelstatus.app. We'll respond within 30 days.