If there is any inconsistency between the below and the above Privacy Statement, the following shall prevail in respect of the PRC.
For the PRC, Intercontinental Hotel Groups (Shanghai) Co., Ltd., Registered office: 22nd Floor, Citigroup Tower, No. 33 Huayuanshiqiao Road, China (Shanghai) Pilot Free Trade Zone, is the data controller. For questions or concerns related to your personal information or related to the Privacy Statement, please contact email@example.com.
We will obtain your consent (where applicable, separate consent) to collect, use, share, transfer (including but not limited to overseas transfer), disclose or otherwise process your personal information if and to the extent required by the applicable laws.
Sensitive personal information
Certain types of personal information described in this Privacy Statement are considered “sensitive” and, depending on your jurisdiction of work or residence and applicable law, additional rules will apply in respect of this personal information. References to personal information in this Privacy Statement shall be deemed to include references to sensitive personal information (if any) where applicable.
“Sensitive personal information” as defined under PRC laws and regulations that we may collect and use for the purposes described in the above Privacy Statement may include information relating to:
- payment card information;
- stay records;
- biometric information;
- pin or password;
- your precise geolocation;
- web browsing history
Share and disclose your personal information with another controller
With your consent, we may share and disclose your personal information with another data controller as explained in the section “Information we collect and how we use and disclose it” in the Privacy Statement.
International data transfers
As IHG is a global hospitality group, for the purposes described in this Privacy Statement and in order to provide you with privileged and quality service worldwide, we may, with your separate consent (if required by applicable laws), transfer your personal information to IHG affiliated entities outside of mainland China, such as Six Continents Ltd (UK) (“IHG Foreign Affiliated Entity”), who will process your personal information for the purposes and in the manner as described in this Privacy Statement. IHG will take appropriate measures to ensure that cross-border data transfer and the processing of your personal information by IHG Foreign Affiliated Entities comply with the requirements of applicable laws and that such mechanisms are aimed at ensuring an adequate level of protection as regards your personal information under the applicable laws. If you wish to exercise your rights with respect to your personal information with any IHG Foreign Affiliated Entity, you can contact such entity through the means described in “How to Contact Us” section.
How we store and protect your personal information
We will store your personal information for as long as necessary to achieve the purposes described in this Privacy Statement and for as long as you use our services, and as otherwise required by applicable law. We take reasonable security measures to protect your personal information in accordance with industry standards and are committed to using various technologies and initiatives to protect your personal information from unauthorized access, use, modification, disclosure and damage, such as the use of encryption technology to protect your personal information. We will deal with personal information security incidents in accordance with applicable laws and regulations, and conduct training and dissemination of personal information protection to relevant personnel to enhance their awareness of the importance of personal information and responsibilities related to personal information protection.
SDKs and other similar software technologies made available by non-affiliated entities
We use software known as software development kits (SDKs) and other similar technologies made available by non-affiliated entities on our mobile applications and mini programmes to ensure their stable operation and to provide the services as described in this Privacy Statement. Please see our SDK list for more information about our integrated SDKs.
If you are using these features or any plug-ins provided by non-affiliated entities, the privacy policies of these entities may also apply to you. Some of these entities may collect data from you for their use and processing and may obtain your consent prior to doing so. In any case, we recommend that you read the privacy policies of these non-affiliated entities to understand how they collect and process your data before using their features and plug-ins.
In order to provide you with personalised advertising, we may collect your personal information.
You can turn off personalised advertising in our App in “Account”-“Personalized recommendations”. Once you turn off it, you will not receive any personalised advertising, including promotional offers and special offers.
Mobile device permissions
If you choose to use certain functions using our mobile app we will ask you for related permissions to use features on your mobile device to enable this.
When you add a payment method to book a hotel, we will ask you for camera permission if you choose to add payment information by scanning your payment card using the camera.
If you choose to add the booking to your calendar after the booking is made, we will ask you for calendar permission to help you add the booking to your calendar.
If you choose to use the voice search function when booking a hotel, we will ask you for microphone permission to allow dictation on your device to enable this.
If you choose to use the function to search for hotels near your location we will ask you for permission to access your location to enable this.
In addition to the rights mentioned in the Privacy Statement, you have the following rights where permitted by the PRC data protection laws:
- To access your personal information and obtain a copy
You have the right to access or obtain a copy of the personal information we hold about you.
- To transfer your personal information
You have the right to request transferring your personal information to another data controller where permitted by the applicable laws.
- To deregister your account
You also have the right to ask us to deregister your loyalty programme account by contacting one of our global customer care offices
- Rights to request deletion and rectification
You can ask us (details found in the How to contact us section) to correct any information about you which is incorrect. We will be happy to rectify such information but would need to verify the accuracy of the information first.
You can ask us to erase your information if you think we no longer need to use it for the purpose we collected it from you. You can also ask us to erase your information if you have either withdrawn your consent to us using your information (if we originally asked for your consent to use your information), or exercised your right to object to further legitimate use of your information, or where we have used it unlawfully or where we are subject to a legal obligation to erase your personal information.
We may not always be able to comply with your request, for example where we need to keep using your information to comply with our legal obligation or where we need to use your information to establish, exercise or defend legal claims.
- Rights to withdraw consent to use mobile device permissions
You can withdraw your authorisation or withdraw your consent for mobile device permissions in your device settings.
To exercise any of your rights above, you may also contact us by emailing firstname.lastname@example.org as well.
We aim to respond to all valid requests to exercise the above rights within 15 working days upon verifying your identity. To help us respond more quickly, we may ask you to provide more detail about your enquiry.
We may not always be able to do what you have asked, for example if it would impact the duty of confidentiality we owe to others, or if we are otherwise legally entitled to deal with the request in a different way.
Purchasing product vouchers through IHG WeChat Mini Programme
When you purchase a product voucher through our IHG WeChat Mini Programme, we will collect your WeChat OpenID, UnionID, membership number and purchase, redemption, and refund records. We process your information primarily to attribute your purchases to you, to show you the status of product redemptions or refunds status, and to notify you of necessary product information changes. You can check purchase, redemption, and refund records at any time. We will share your information with the hotel providing the product voucher to provide you with the services described in the product voucher. If you decline to provide such personal information, we will not be able to provide you with the abovementioned services.