Last updated: 12/08/2026
About This Privacy Policy
This Privacy Policy explains how Lexyl Travel Technologies, LLC ("Lexyl", "hetl2023.hotelplanner.com", "we", "our" or "us") collects, uses, discloses and protects your personal information when you use our website, services and artificial intelligence-powered features.
This Privacy Policy should be read in conjunction with our Terms of Use, which govern your use of our services and contain additional important provisions regarding:
As set out in Section 28 of our Terms of Use, this site and our services use artificial intelligence (AI) technology to improve your travel experience. This section should be read together with Section 28 of the Terms of Use, which sets out additional important provisions relating to AI Systems, including prohibited uses, limitations, and regulatory compliance.
Scope of AI Services
We use AI systems for the following purposes (as detailed in Section 28(a) of the Terms of Use):
AI Data Processing and Collection
As set out in Section 28(g) of our Terms of Use, when you interact with our AI Systems, we may collect and process the following categories of data:
This data is processed to provide and improve our services, personalise your experience, ensure security, and comply with legal obligations.
Legal Bases for AI Data Processing
For users in the United States:
For users in the European Union (GDPR):
GDPR rights for AI processing
You may exercise your rights under the GDPR regarding AI interaction data, including:
Right Not to Be Subject to Automated Decision-Making (Article 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, where it produces legal effects concerning you or significantly affects you in a similar way. Where such automated decision-making takes place, you have the right to request human intervention, express your point of view, and challenge the decision.
AI-Generated Content
As set out in Section 28(f) of our Terms of Use:
Ownership: All AI-generated content, including but not limited to itineraries, recommendations, travel descriptions, photographs, videos and communications, is owned by the Company.
Your Licence: You are granted a limited, non-exclusive and non-transferable licence to use AI-generated content for personal, non-commercial purposes only.
No Warranties: While we strive to provide accurate information, AI-generated content is based on algorithms and machine learning models and may not always reflect the most up-to-date, accurate or complete information. AI systems may produce errors, omissions or outdated content (hallucinations). All AI-generated content is provided on an as-is and as-available basis.
Your Responsibility: You should independently verify all material information, including pricing, availability, travel requirements, visa and passport requirements, health advice, and safety conditions before making any travel decisions. AI-generated recommendations do not constitute professional travel advice, legal advice, medical advice, or financial advice.
AI Regulatory Compliance
As set out in Section 28(j) of our Terms of Use, we are committed to complying with all applicable AI regulations, including but not limited to:
By using our services, you agree to both this Privacy Policy and the Terms of Use.
Mandatory Consumer Protections
To the extent that you are a consumer in a jurisdiction that provides mandatory consumer protections which cannot be waived by contract, including but not limited to the European Union, European Economic Area, United Kingdom and certain U.S. states, nothing in this Privacy Policy limits your statutory rights.
As set out in Section 29(b) of our Terms of Use, you retain all statutory consumer protection rights under applicable law, and this Privacy Policy will be interpreted in a manner consistent with those rights.
Information Collection and Use
By using this Site, you acknowledge that you have reviewed the terms of our Privacy Statement and Consent to Use of Data (the “Privacy Statement and Consent”) and agree that Lexyl Travel Technologies, LLC (“We”) may collect, use and transfer your Personal Data and User Data in accordance with it. If you do not agree to these terms, you may choose not to use our Site, and please do not provide any Personal Data through this Site. This Privacy Statement and Consent forms part of our Site Terms of Use and shall be governed by and construed in accordance with the laws of the State of Florida, United States of America. You agree to submit any dispute arising out of your use of this website to the exclusive jurisdiction of the State of Florida. We are solely responsible for handling personal information. Lexyl collects information from its users at several different points on its website.
Changes to Privacy Policy and Consent
This Site and our business are constantly evolving. As a result, it may sometimes be necessary for Lexyl to make changes to this Privacy Statement and Consent. Lexyl reserves the right to update or amend this Privacy Statement and Consent at any time, and from time to time, without prior notice. Please review this Statement regularly, and especially before you provide any Personal Data. This Privacy Statement and Consent was last updated on 12/08/2026. Your continued use of the Site after any changes or revisions to this Privacy Statement and Consent will indicate your acceptance of the terms of the revised Privacy Statement and Consent.
Definitions
“Aggregated Data” includes customer demographics, interests and behaviour based on Personal Data and other information provided to us, which is compiled and analysed on an aggregated and anonymous basis.
“Personal Data” means any information that can be used to identify an individual, including, by way of example, an individual’s name and email address. “Personal Data” for all California residents pursuant to AB-375 includes a real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, Social Security number, driving licence number, passport number, or other similar identifiers; characteristics of protected classifications under California or federal law; commercial information, including records of personal property, products or services purchased, obtained or considered, or other purchasing or consumption histories or tendencies; biometric information; internet or other electronic network activity information, including but not limited to browsing history, search history and information regarding a consumer’s interaction with a website, application or advertisement; geolocation data; audio, electronic, visual, thermal, olfactory or similar information; professional or employment-related information; education information; defined as information that is not publicly available personally identifiable information (PII) as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99); and inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behaviour, attitudes, intelligence, abilities and aptitudes.
"Public Information" includes information posted in any public areas of the Site, such as bulletin boards, chat rooms and comment sections. Please refer to our discussion of "Public and Unsolicited Information" in our Terms and Conditions.
“Unsolicited Information” includes any ideas for new products, improvements to existing products, or other unsolicited communications. Any Personal Data included in Unsolicited Information will be handled in accordance with this Privacy Statement and Consent.
"User Data" includes all information passively collected from users of the Site that does not identify any particular individual, including, by way of example, statistical information about Site usage. The terms "you", "your" and "yours" when used in this Privacy Statement and Consent mean any user of this Site.
What Information Do We Collect?
Information You Provide to Us: We collect Personal Data such as your name, telephone number, date of birth, email or postal address, and billing details (such as credit or debit card number, cardholder name, expiry date and billing address) when you voluntarily choose to register for or use this Site. We use the Personal Data we collect to provide you with an excellent customer experience on the Site and to improve and market Lexyl Services. We receive and store any information you enter on our website or give us in any other way, such as signing up for one of our email newsletters or other services. We may also ask you to provide information about your hotel room preferences, requests for special services, or any other travellers on your booking, your marketing preferences, and additional information if you take part in a survey or competition. When you make a reservation for someone else through this website, you should obtain that person’s consent before providing us with their personal information and travel preferences. Lexyl may store such Personal Data itself, or it may be stored in databases owned and maintained by Lexyl’s affiliates, agents or service providers. Lexyl retains all rights to these databases and the information contained within them.
When you visit us on our online services, we may automatically collect certain information from your device. In some countries, including countries in the European Economic Area, this information may be considered personal data under applicable data protection laws.In particular, the information we automatically collect may include, but is not limited to, details such as your IP address, device type, unique device identification numbers, browser type (such as Firefox, Safari or Internet Explorer), your Internet Service Provider (ISP), your operating system and carrier.For website users, we may also collect details of any referring website or exit pages, as well as general geographic location information (for example, country- or city-level location). We may also collect other technical information, such as how your device has interacted with our online services, including the pages accessed and links clicked.Collecting this information helps us better understand the visitors to our online services, where they come from and which content is of interest to them. We use this information for our internal analytics and to improve the quality and relevance of our online services for our visitors, for example to personalise your experience, tailor your searches and show you adverts that may be of interest to you.We may also use this automatic information to help prevent and detect fraud. This information, together with your personal data, may also be linked to Cookies to enable the proper operation of our online services, store your travel searches on our online services and collect information on how you used our online services. For more information, please see the Cookies section below.
If you’re an employee of a corporate account, a supplier or another type of business partner, such as a property owner, property manager or travel agent, other information collected may include your employer, employee identification number or other relevant details.
We may also use your personal information for other purposes described in the “How we use your information” section below.
When you use one of our smartphone apps, tablet apps or applications for other platforms (collectively, the “App” or “Apps”, as applicable), we may also collect, for example:
Information about how the Apps you use workThis helps us identify the parts of the Apps that are most relevant to our customers, so we can refine and continually improve them.Your device’s unique device identifier (UID)Each App sends us your device’s UID, a string of numbers or characters that is unique to your device. We use this when the App is opened for the first time so we can confirm to our advertising networks the number of downloads generated from clicks on their ad banners and other marketing tools. Where an email address is provided, we link it to your current UID/cookie ID to provide a seamless experience across your devices.Information about your current locationWhen you use an App feature such as “find hotels near my current location”, or similar features that suggest relevant content based on location, or otherwise provide location-based services, we use information about your current location, provided by your device using GPS or similar technologies, to show relevant content or other local information. We do not collect location data unless you actively use a location-based feature, and you can turn off location data collection at any time in your phone settings.Error reporting informationThis enables us to investigate errors and improve the stability of the App for future releases. As part of these error reports, the App sends us information about the type and version of mobile device, the UID, the time the error occurred, the feature being used and the state of the application when the error occurred. We may use this information to investigate and resolve the error, and to help you complete any affected booking.You can control what information an App sends to us. You can do this either by changing the App settings in its settings menu, or by changing your mobile device settings. Alternatively, you can remove the App from your device altogether and access our services through our website.
If you use any of our social media features on our online services, or otherwise through a social media provider, we may access information about you via that provider, in accordance with its privacy policy.
When using a social media feature, if you have chosen to include personal information in your social media account, we may access information such as your name, profile picture, gender, date of birth, email address, town or district, and any other information you have chosen to make available. Subject to your privacy settings, we may access information you provide to a social media provider about your respective locations (Location Data) to provide you with relevant content. We do not store or use any data related to the friends you are connected with on a social media site.
We may also access information from social media providers about your use of an App that we run on their website. Therefore, we encourage you to review the privacy policy of any social media provider you use.
Call Recording and Monitoring
Calls to and from our Customer Service teams, including calls handled by our contracted call centre service providers, whether managed by human agents or AI-powered voice representatives, may be recorded or monitored for quality control, analytics, staff training and dispute resolution purposes. Before any such call is recorded, you will be informed by a spoken disclosure or recorded announcement at the start of the call that the call may be recorded. In jurisdictions that require the consent of all parties for call recording (including, but not limited to, California, Florida, Illinois, Pennsylvania, Washington and other two-party consent states), a disclosure and consent prompt will be provided before recording begins, in compliance with the Florida Security of Communications Act (Fla. Stat. 934.03), the federal Electronic Communications Privacy Act (18 U.S.C. 2510 et seq.) and the California Invasion of Privacy Act (Cal. Penal Code 631(a), 632). Your continued participation in the call after that disclosure constitutes your consent to recording to the extent permitted by applicable law.
You have the right to decline to be recorded. If you do, we will make commercially reasonable efforts to transfer you to a non-recorded channel or accommodate your request through an alternative method of communication, such as email or our online services.
Call recordings, including both AI voice and human-assisted calls, will be kept for no longer than ninety (90) days from the date of the interaction, unless a longer retention period is required by applicable law, regulation, or an ongoing legal proceeding. Once the retention period has expired, recordings will be securely deleted or irreversibly anonymised.
Voice recordings shall not be used to create voiceprints or biometric identifiers without your separate, explicit consent, as required by applicable biometric privacy laws, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act, and similar state laws. We do not collect, store or use voiceprints or biometric voice identifiers for any purpose without your separate, explicit written consent.
Where our customer service calls are handled by a third-party call centre service provider, that provider records and processes call content solely as our service provider, under contractual terms that restrict the use of call recordings to the services it performs on our behalf, and it is prohibited from independently recording, analysing or retaining call content for its own purposes. Any personal information obtained from you during a call will be handled in accordance with the provisions of this Privacy Policy.
Monitoring of Chats and Online Interactions
Interactions you have with us through our online services, including chat (whether AI-powered or human-staffed), may be recorded and monitored for quality assurance, training, compliance, analytics and dispute resolution purposes.
Before you begin a chat session or other live online interaction with us, we will let you know that the session may be recorded and monitored for quality control, staff training, service improvement, and to protect us in the event of a legal dispute. By continuing with the chat session after receiving that notice, you consent to such recording and monitoring to the extent required by applicable law. If you do not wish for your chat session to be recorded, you may choose not to proceed and instead contact us by telephone or email using the contact details set out in this Privacy Policy.
Chat and online interaction content may be accessed by our third-party chat platform, analytics, or customer service providers solely for the purpose of delivering services to us, under contractual terms that restrict their use of that content to the services they perform on our behalf. These providers are not permitted to independently read, analyse, retain, or use chat content for their own purposes.
Chat records are kept for no longer than ninety (90) days from the date of the interaction, unless a longer retention period is required by applicable law, regulation, or an ongoing legal proceeding. This information will be processed and maintained in accordance with this Privacy Policy.
How we use your information
We use your personal information for the following purposes (“Purposes”):
If you give your consent to any further use of personal information, you can withdraw that consent at any time by contacting us using the details set out below.
Please note that our accountants, internal and external auditors, legal advisers and other professional consultants may access your personal information in order to provide us with relevant professional services in connection with our legal compliance requirements, including, without limitation, applicable securities laws or stock exchange listing rules, or otherwise in connection with our business.
You have choices about your personal information, and in some circumstances, you may have the right to opt out of, or object to, our use of your personal information for these Purposes.For all residents of California, pursuant to AB-375:(a) A consumer shall have the right, at any time, to direct a business that sells personal information about the consumer to third parties not to sell the consumer’s personal information. This right may be referred to as the right to opt out.(b) A business that sells consumers’ personal information to third parties shall provide notice to consumers, pursuant to subdivision (a) of Section 1798.135, that this information may be sold and that consumers have the right to opt out of the sale of their personal information.(c) A business that has received direction from a consumer not to sell the consumer’s personal information, or, in the case of a minor consumer’s personal information, has not received consent to sell the minor consumer’s personal information, shall be prohibited, pursuant to paragraph (4) of subdivision (a) of Section 1798.135, from selling the consumer’s personal information after receipt of the consumer’s direction, unless the consumer subsequently provides express authorisation for the sale of the consumer’s personal information.(d) Notwithstanding subdivision (a), a business shall not sell the personal information of consumers if the business has actual knowledge that the consumer is under 16 years of age, unless the consumer, in the case of consumers between 13 and 16 years of age, or the consumer’s parent or guardian, in the case of consumers who are under 13 years of age, has affirmatively authorised the sale of the consumer’s personal information. A business that wilfully disregards the consumer’s age shall be deemed to have had actual knowledge of the consumer’s age.This right may be referred to as the right to opt in.
Transactional SMS communications
Overview Lexyl Travel Technologies, LLC (Lexyl, we, our or us) uses transactional text message (SMS) communications to help complete travel bookings and provide customer service. This section explains how we use text messaging, your rights, and how these practices comply with applicable laws in the United States and the European Union.
What Are Transactional Text Messages? Transactional text messages are SMS communications sent to help you complete, confirm or manage a booking you have initiated with us. These messages are directly related to the specific reservation you are making and are not promotional or marketing communications.
Examples of transactional messages include:
These messages are different from marketing SMS, which promote special offers, deals or services you have not specifically requested.
Legal Basis for ProcessingUnited StatesWhen you provide your mobile phone number during the booking process, you give us your prior express consent under the Telephone Consumer Protection Act (TCPA) to send you transactional text messages relating to your booking. This consent is implied by your voluntary provision of your phone number when starting a booking transaction.
European Union For customers in the European Economic Area (EEA) and the United Kingdom, we process your mobile phone number as necessary to perform our contract with you under Article 6(1)(b) of the General Data Protection Regulation (GDPR). Sending transactional SMS messages about your booking is objectively necessary to provide the travel booking services you have requested. For customers in Switzerland, we process your personal data in accordance with the Swiss Federal Act on Data Protection (FADP).
When We Send Transactional Text MessagesWe will send you transactional text messages when:
We send these messages only while your booking is in progress or during your active travel period. We do not use transactional SMS to promote other services or unrelated offers.
Message frequency and timingMessage frequency varies depending on your booking activity and requirements. You may receive 1–5 text messages per booking, depending on the complexity of your reservation and any customer service interactions.
Quiet Hours: We respect your time and privacy by sending text messages only during reasonable hours:
How to Opt OutYou may opt out of receiving transactional text messages at any time, though opting out may limit our ability to assist with your booking and provide important reservation updates.To opt out, you may:
We will honour your opt-out request: United States customers within 10 business days; European Union customers immediately.
SMS Privacy and Data ProtectionInformation We Collect: When you provide your mobile phone number during booking, we collect and process your mobile number, the date and time it was provided, the booking or enquiry linked to that number, message delivery status and timestamps, and any opt-out requests and preferences.
How We Use This Information: We use your mobile phone number only for the transactional purposes described in this section. We do not use your phone number for marketing or promotional purposes (unless you separately opt in), sell or rent it to third parties, or share it with partners for their own marketing purposes.
Data Security: We put in place appropriate technical and organisational security measures to protect your mobile phone number, including encryption in transit and at rest, access controls, audit logs, and secure supplier agreements with SMS service providers.
Data Retention: We keep your mobile phone number for 12 months after your travel date for customer service purposes, then securely delete it unless we have another legal basis to retain it.
United States - Additional TCPA Disclosures for SMSClassification: The text messages described in this section are transactional communications under the Telephone Consumer Protection Act (TCPA), not telemarketing or advertising messages.
Automated Technology: We may use automated telephone dialling systems or prerecorded/artificial voice messages to send text messages. Your consent applies to such automated communications.
Your consent to receive transactional text messages is not a condition of purchasing our services. You can complete bookings without providing a mobile phone number, although this may limit our ability to send you important booking information promptly.
April 2025 Opt-Out Rule Compliance: From 11 April 2025, we comply with the FCC Opt-Out Rule by accepting opt-out requests in any reasonable way, including but not limited to the keywords STOP, END, QUIT, CANCEL, UNSUBSCRIBE, REVOKE and OPT-OUT, as well as requests sent by email, telephone or via our website.
European Union – Additional GDPR Disclosures for SMSLegal basis: We process your mobile phone number under Article 6(1)(b) of the GDPR, as this processing is necessary to perform our contract with you. Sending transactional text messages is objectively required to provide the travel booking services you requested.
Your Rights Under GDPRAs a data subject in the European Economic Area and the United Kingdom, you have the following rights in relation to your mobile phone number:
To exercise these rights, please contact: gdpr[at]reservationsgroup.com. We will respond within 30 days. For customers in Switzerland, we process your personal data in accordance with the Swiss Federal Act on Data Protection (FADP).
Contact details for SMS communications General SMS enquiries: Email sms-support[at]reservationsgroup.com Phone +1-866-684-9824 SMS opt-out requests: Email sms-support[at]reservationsgroup.com Text: Reply STOP to any message TCPA compliance (US): tcpa-compliance[at]reservationsgroup.com GDPR compliance (EU/UK): gdpr[at]reservationsgroup.com
AI-powered voice communications
As described in Section 28 of our Terms of Use, we use artificial intelligence (AI) technology to power voice representatives for customer service and booking assistance. This section explains how we use AI voice technology, your consent rights, and the legal protections that apply.
AI Voice Technology and DisclosureOur AI-powered voice representatives use artificial intelligence to generate or help generate voice content for telephone communications.When you speak with an AI voice representative, you will be informed at the start of the call that you are communicating with an AI system, including:
Legal Basis and Consent for AI Voice CommunicationsUnited States - TCPA ComplianceBy providing your telephone number and using our services, you consent to receive AI-generated voice communications from hetl2023.hotelplanner.com or Lexyl Travel Technologies, LLC for transactional and informational purposes relating to your bookings, reservations and account. This includes booking confirmations, schedule changes and updates, check-in reminders and customer service follow-ups.
Marketing and promotional AI voice calls: We will obtain your prior express written consent before making any marketing or promotional AI voice calls, as required by the Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, and Federal Communications Commission (FCC) regulations.
FCC Regulatory Classification: AI-generated voice calls are treated as artificial or prerecorded voice calls under TCPA, pursuant to the FCC Declaratory Ruling of 8 February 2024.
You acknowledge that AI voice calls made on behalf of hetl2023.hotelplanner.com use artificial intelligence technology. You may withdraw your consent at any time by any reasonable means, and consent is not a condition of purchasing any goods or services.
European Union - GDPR BasisFor EU/EEA/UK customers, we process your telephone number and voice interaction data under GDPR Article 6(1)(b) (contractual necessity) for transactional AI voice communications relating to your booking.For customers in Switzerland, we process your personal data in accordance with the Swiss Federal Act on Data Protection (FADP).
How to withdraw consent for AI voice communicationsYou can withdraw your consent at any time by saying “stop” during any AI voice call, texting “STOP” to our SMS number, calling Customer Service on +1-866-684-9824, or emailing ai-support[at]reservationsgroup.com
How to Opt Out of AI Chat Interactions
In addition to requesting to be transferred to a human agent during any AI chat interaction (by typing “human” or “agent”), you can also permanently opt out of AI-powered chat interactions using any of the following methods:
If you choose to opt out, any future chat interactions started through your account will be directed to a human agent by default. You can change this preference at any time in your account settings or by contacting us using any of the methods above.
This opt-out applies only to text-based AI interactions and is separate from the AI voice communication opt-out described in the How to Revoke Consent for AI Voice Communications section above.
Right to Human Assistance
As set out in Section 28(d) of our Terms of Use, at any point during an interaction with an AI System you may request to be transferred to a human representative. We will use commercially reasonable efforts to connect you with an available human agent as promptly as possible.
To request a transfer during an AI voice interaction, say: “transfer me”, “human agent”, “operator” or similar wording.
Critical functions, including cancellations, refund requests, complaints and dispute resolution, will have access to a human agent during normal business hours (8:00 AM to 10:00 PM Eastern Time, Monday to Sunday).
Outside normal business hours, you may request human assistance by emailing contactus[at]reservationsgroup.com, and a human agent will respond within one (1) business day. Our AI Systems will not make decisions that produce legal effects concerning you, or otherwise significantly affect you, including booking cancellations, refund denials, account suspensions, or fraud determinations, during periods when human agents are not available for real-time escalation. For users subject to the GDPR, your right to human review of automated decisions under Article 22 is not limited by agent availability, and you may request human review of any automated decision at any time by contacting us at gdpr[at]reservationsgroup.com.
Call Recording and Voice DataAs stated in Section 28(e) of our Terms of Use, AI voice interactions may be recorded for quality assurance, training, compliance, and dispute resolution purposes.
Recording Consent By engaging in an AI voice interaction, you consent to the recording of that interaction to the extent permitted by applicable law.
Two-party consent states: In jurisdictions that require the consent of all parties for call recording (including but not limited to California, Florida, Illinois, Pennsylvania, Washington, and other two-party consent states), a disclosure and consent prompt will be provided at the start of each call.
Right to Decline RecordingYou have the right to refuse recording.If you choose not to consent, you may be transferred to a non-recorded channel or connected with a human representative.
Data Retention for Recorded Communications
We keep Recorded Communications for the following periods, after which they are securely deleted or irreversibly anonymised:
These retention periods may be extended where required by applicable law, regulation, or an ongoing legal proceeding or investigation. Once the applicable retention period has ended, the data will be securely deleted or irreversibly anonymised. For information on how long we retain other categories of personal data, please contact us at privacy[at]reservationsgroup.com.
Biometric Privacy Protections CRITICAL PROTECTION: Voice recordings must NOT be used to create voiceprints or biometric identifiers without your separate, explicit consent, as required by applicable biometric privacy laws, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act, and similar state biometric privacy laws. We do not collect, store or use voiceprints or biometric voice identifiers for any purpose without your separate, explicit written consent that complies with applicable biometric privacy laws.
Message and Data Rates Standard message and data rates from your mobile carrier may apply to text messages you receive from us We do not charge you for text messages but your mobile carrier may charge you according to your service plan The number of messages you receive depends on your booking activity
Important: If you change your mobile number or cancel your mobile service, please let us know straight away. Your consent is linked to the specific phone number you provided. If that number is reassigned to someone else, we cannot send messages to the new number holder without their consent.
Sharing of Personal Information
We share personal information with third parties in connection with providing services to you and running our business (for example, to process card payments, provide customer support, deliver business analytics, and help with fraud prevention and compliance services, as well as to show you advertising tailored to your interests). These third-party service providers are required to protect the personal information we share with them and may only use directly identifying personal information to provide the services we have engaged them to deliver. They are not permitted to use the personal information we share for their own direct marketing purposes (unless you have separately consented to this with the third party under that third party’s terms).
When you use certain features, such as single sign-on that lets you log in using your social media credentials for our online services, you will share information with the third party, such as a social media company, including the fact that you have visited or interacted with us. In the European Economic Area (EEA), Switzerland and the United Kingdom (UK), we will not display social media sharing or sign-on buttons on our website unless and until you accept our use of cookies and similar technologies. For more information, see our Cookie Statement, which is included in this Privacy Statement. The third-party provider may combine this information with other information they hold about you. Any personal information shared will be governed by the third party’s privacy policy, including any personal information we may access via the third-party provider. The third-party providers should explain how you can change your privacy settings on their site.
Transfer of Your Data Abroad
By voluntarily providing us with your Personal Data, you consent to our use of it in accordance with this Privacy Statement and Consent. Due to the nature of the internet, if you are visiting this Site from a country other than the United States, your communications will inevitably involve the transfer of information across international borders. By visiting this website, you consent to these transfers. If you provide Personal Data to this Site, you acknowledge and agree that such Personal Data may be transferred from your current location to the offices and servers of Lexyl, and to the affiliates, agents and service providers referred to herein, located in the United States and in other countries.
Registration
In order to use this website, users must first complete the registration form. During registration, users are required to provide their contact details (name and email address) and create a username and password. This information is used to contact users about the services on our site in which they have expressed an interest. Lexyl does not require users to provide demographic information, such as income level or gender, or unique identifiers such as a social security number.
Cookies
A cookie is a small piece of data stored on the user’s hard drive that contains information about them. The use of a cookie is in no way linked to any personally identifiable information while on our website. For example, by setting a cookie on our website, the user would not need to enter a password each time they visit, saving time on every return. If the user wishes to temporarily disable this function, they can do so by clicking the log-out link. If a user declines cookies, they may still use our site. Cookies can also allow us to track and understand our users’ interests, helping us enhance the experience on our site.
Find out more and manage your cookie preferences
Log files
We use IP addresses to analyse trends, administer the site, track users’ movement, and gather broad demographic information for aggregate use. IP addresses are not linked to personally identifiable information.
Links
This website contains links to other sites. Please be aware that Lexyl is not responsible for the privacy practices of those other sites. We encourage our users, when they leave our site, to read the privacy statements of every website that collects personally identifiable information. This privacy statement applies solely to information collected by this website.
Security
All of our users’ information, not just the sensitive information mentioned above, is restricted in our offices. Only employees who need the information to carry out a specific job, such as a billing clerk or customer service representative, are granted access to personally identifiable information. The servers on which we store personally identifiable information are kept in a secure environment.
Special offers
We send all new members a welcome email to verify their username and password. Established members will receive updates about new reservations or hotel bids relating to their business. In respect of our users’ privacy, we offer the option not to receive these types of communications.
Website activity
Lexyl uses a third-party tracking tool to monitor end-user activity on our site via cookies. We track activity to help make our site easy to navigate and to understand which areas attract the most attention. The information we track includes details such as the most requested page, least requested page, top entry page, most common path through the site, the cities users are visiting from, the average amount of time spent on the site, and more.
Site and Service Updates
We send site and service announcement updates to users. Members are unable to unsubscribe from service announcements, as these contain important information about the service. We contact users by email or telephone regarding updates to our site and services, as well as any issues relating to their account.
Correcting or updating personal information
If a user’s personally identifiable information changes (such as their postcode), or if a user no longer wishes to use our service, we will do our best to provide a way to correct, update or delete that user’s personal data.
Third-party ads
We use third-party advertising companies to display adverts when you visit our Website. These companies may use information (excluding your name, address, email address or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services that may be of interest to you. If you would like more information about this practice and to understand your choices about not having this information used by these companies, you can visit www.networkadvertising.org/managing/opt_out.asp.
Notification of Changes
If we decide to change our privacy policy, we will post those changes on our Homepage so our users are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If at any point we decide to use personally identifiable information in a way that differs from what was stated when it was collected, we will notify users by email. Users will be able to choose whether or not we use their information in this different way. We will use information in accordance with the privacy policy under which the information was collected.
Legal Obligations
Although we do everything we can to protect your privacy, we may need to disclose personal information where required by law, or where we believe in good faith that doing so is necessary to comply with an ongoing legal proceeding, a court order, or legal process served on our website.
EU General Data Protection Regulation (GDPR)
Lexyl shall process Personal Data only on the written instructions of the individual or its group coordinators and in accordance with our Terms of Use and applicable laws (unless Lexyl is otherwise required to do so in order to comply with applicable law, in which case Lexyl shall inform the individual or the group coordinators of such legal requirement, save where prohibited from doing so by applicable law), and the individual or group coordinator confirms that its documented instructions are for Lexyl to process the Personal Data as necessary for the purposes of our Terms of Use. Lexyl shall inform the individual or group coordinators if, in its opinion, an instruction breaches applicable EU data privacy and security laws.
Lexyl shall, upon termination or expiry of the Terms of Use and at the request of the individual or group coordinator, delete or return all Personal Data. However, where Lexyl is unable to delete the Personal Data for backup or legal reasons, Lexyl shall continue to apply these Requirements to such Personal Data indefinitely and shall immediately cease any further Processing of the Personal Data without the express prior written consent of the individual or group coordinator, except where and to the extent required by applicable law. Lexyl’s obligations under these Requirements to protect the security of Personal Data shall survive termination of our Terms of Use.
Lexyl will put in place appropriate operational and technical measures to protect Personal Data against Data Security Breaches.
Lexyl shall notify the individual or group coordinators without undue delay if it becomes aware of any actual data security breach and shall provide reasonable information and cooperation to the individual or group coordinator so that the individual or group coordinator can fulfil any data breach reporting obligations it may have under, and in accordance with the timescales required by, applicable data protection legislation.
Sub-processors
Lexyl shall, upon request, provide the individual or group coordinator with a list of subcontractors who process personal data.
Lexyl shall only appoint third-party vendors or service providers as sub-processors of Personal Data where Lexyl:
A) enters into written contracts with such sub-processors that include data protection terms that are at least as protective as those set out in these Requirements
notifies the individual or group coordinator of any intended additions or replacements to existing sub-processors before appointing them
(C) remains fully liable to the group coordinator for any breaches of the Terms of Use caused by the acts, errors or omissions of its sub-processors.
If the individual or group coordinator has reasonable data protection grounds to believe that a sub-processor appointed by Lexyl would prevent Lexyl from meeting its data protection obligations under these Requirements, the individual or group coordinator may, within 7 days of receiving notice of the appointment, object to Lexyl appointing that sub-processor. In that case, Lexyl will not permit the sub-processor to continue accessing the Personal Data until the individual or group coordinator has agreed to the appointment or replacement of the subcontractor, or until the individual or group coordinator withdraws the objection.
Lexyl shall establish policies and procedures to provide all reasonable and prompt assistance to individual or group coordinators in responding to any requests, complaints or other communications received from any individual who is, or may be, the subject of any Personal Data processed by Lexyl.
Please note that our accountants, internal and external auditors, legal advisers and other professional consultants may access your Personal Data in order to provide us with relevant professional services in connection with our legal compliance requirements, including, without limitation, applicable securities laws or stock exchange listing rules, or otherwise in connection with our business.
Cross-border data transfers
Lexyl shall not transfer, and shall not permit any third party to transfer, Personal Data outside the territory of origin unless it has taken all required compliance measures to make such transfer lawful and secure.
With regard to EEA Data, Lexyl shall not transfer, and shall not permit any third party to transfer, such data to any territory outside the European Economic Area (EEA) unless it takes such measures as are necessary to ensure that any such transfer of EEA Data complies with the requirements of Chapter V of the GDPR. For the avoidance of doubt, such measures may include Lexyl (or a third party, as applicable):
(A) ensuring it processes EEA data in a country recognised as adequate by the European Commission under Article 45 of the GDPR
(B) Processing EEA Data in accordance with Standard Contractual Clauses (or “model clauses”) approved by a European Commission decision
(C) Processing the EEA Data in accordance with Binding Corporate Rules duly authorised by the competent EEA data protection authorities for that EEA Data.
with regard to transferring EEA data to the United States; processing such data under the EU-U.S. and/or Swiss-U.S. Privacy Shield Frameworks, as applicable
Lexyl shall ensure that any person (including Lexyl’s staff, agents and subcontractors) authorised to process the Personal Data is subject to a strict duty of confidentiality (whether contractual or statutory), and shall not permit any person to process the Personal Data who is not under such a duty of confidentiality.
(F) in relation to EEA Data, Lexyl shall assist the individual or group coordinators in carrying out data protection impact assessments to the extent that such assessments are required under the GDPR and, where necessary, shall consult the relevant supervisory authorities in accordance with Articles 35-36 of the GDPR.
Please send all requests to remove personal data to GDPR [AT] reservationsgroup com, including your individual itinerary number or group request ID number in the subject line of the email.
Artificial Intelligence
This site and its services may use artificial intelligence (“AI”) technology to enhance your travel experience.
For full details of our AI practices, including the types of AI systems we use, our transparency and disclosure requirements, consent for AI voice communications, your right to speak to a human agent, call recording and voice data protections, our AI data processing practices, your rights relating to automated decision-making, and our regulatory compliance commitments, please review the following sections of this Privacy Policy and our Terms of Use:
Contact details
If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact us using the relevant contact method below:
General privacy enquiries
GDPR/EU/UK Data Protection
For individuals in Switzerland, we process personal data in accordance with the Swiss Federal Act on Data Protection (FADP, AS 2022 491, as revised).
California Privacy Rights (CCPA/CPRA)
SMS/Text Message Communications
AI Voice Communications
Copyright/DMCA Notices
In accordance with Section 27 of our Terms of Use:
Customer Service (General)
Under Section 16 of our Terms of Use for dispute resolution:
By using our AI-powered services, you acknowledge that we may:
Collect and analyse your travel preferences, search history and interactions
Process personal information to provide personalised recommendations
Record and store conversation logs from AI chat interactions for quality assurance, training, compliance, and dispute resolution purposes, subject to the consent, retention, and opt-out provisions set out in this Privacy Policy.
Use anonymised data to train and improve our AI systems