Last updated: 18 August 2026

1. About this Privacy Policy
This Privacy Policy describes how personal data is collected, used, processed, protected and managed in connection with marketing-marriott.com and the marketing communications and subscription platform associated with the website (collectively, the "Services").

marketing-marriott.com supports participating Marriott hotels in managing permission-based marketing communications and related customer engagement activities.

Participating hotels and relevant Marriott entities may have their own privacy notices governing their collection and use of personal data. This Privacy Policy does not replace those notices. Where personal data is processed through marketing-marriott.com in connection with a participating hotel or Marriott entity, the applicable privacy notice of that organisation may also apply.

If you have questions or concerns regarding this Privacy Policy or the Services, you may contact us at [email protected].

2. How personal data is managed through the platform
Personal data made available through the platform remains under the control of the participating hotel and/or the relevant Marriott entity, as applicable. The relevant hotel or Marriott entity determines the purposes for which such personal data is used and is responsible for ensuring that its collection and use are supported by an appropriate lawful basis, including consent where required.

The platform is supported by authorised technology and service providers that may process, store or otherwise handle personal data as necessary to provide the Services. Such providers process personal data only for authorised purposes and in accordance with applicable contractual, confidentiality, security and data protection requirements. They do not acquire ownership of customer data or use it for their own independent marketing purposes.

Personal data may be processed using secure technology infrastructure in different locations, subject to appropriate safeguards and applicable data protection requirements.

Where personal data relates to a particular participating hotel, access to and use of that information is limited to authorised purposes associated with that hotel, the relevant Marriott entity and the provision of the Services, except where another use or disclosure is permitted or required by applicable law.

3. Personal data we collect and process
The types of personal data processed through the Services depend on how you interact with the platform and the participating hotel or Marriott entity concerned.
This information may include:
•  name;
•  email address;
•  telephone number;
•  company or organisation information, where applicable;
•  information provided when subscribing to marketing communications;
•  communication and marketing preferences;
•  information voluntarily provided through forms, enquiries or feedback;
•  account and login information where access to restricted areas of the platform is provided;
•  IP address, browser and device information;
•  information about interactions with the website or marketing communications, such as pages accessed, emails delivered, opened or clicked, where permitted by applicable law; and other information provided or made available for authorised marketing and customer communication purposes.

We seek to limit the personal data processed to information reasonably necessary for the purposes for which it was collected or provided.

4. Sources of personal data
Personal data processed through the Services may be obtained:

- directly from you when you subscribe, register, submit a form, provide feedback, make an enquiry or otherwise interact with the Services;
- from participating hotels or relevant Marriott entities with which you have interacted or to which you have provided your information;
- automatically through your interaction with the website, emails or Services, subject to applicable privacy requirements and your cookie or tracking preferences where relevant; and
- from other authorised sources where the collection and use of the information are permitted by applicable law.

We do not purchase or rent personal data from data brokers or other third-party sources for unsolicited marketing purposes.

Personal data used for marketing communications through the platform must originate from participating hotels or other authorised sources and must have been collected and made available for such use in accordance with applicable privacy and marketing requirements, including any consent or other lawful basis required for the relevant communication.

The Services are based on a permission-based marketing model and must not be used to distribute unsolicited commercial communications in violation of applicable law.

5. How we use personal data
Depending on the circumstances, personal data may be processed to:
•  provide, operate and maintain the Services;
•  manage subscriptions and marketing preferences;
•  deliver marketing communications requested or authorised by you;
•  enable participating hotels and relevant Marriott entities to communicate with their customers and subscribers;
•  respond to enquiries, requests, feedback or customer support matters;
•  administer user accounts and access to the Services;
•  understand engagement with communications and improve their relevance and effectiveness;
•  understand how the website and Services are used and improve their functionality and user experience;
•  maintain the security, integrity and reliability of the Services;
•  prevent misuse, fraud or unauthorised access;
•  maintain records of consent, preferences, unsubscribes and other privacy choices;
•  comply with applicable legal, regulatory and contractual requirements; and
•  establish, exercise or defend legal rights where necessary.

Personal data processed on behalf of participating hotels or relevant Marriott entities is not used by authorised service providers supporting the platform for their own independent marketing purposes.

6. Legal basis for processing
Where applicable data protection law requires a legal basis for processing personal data, processing may be based on one or more of the following:
•  Consent - where you have provided consent to receive marketing communications or to the use of certain cookies or similar technologies.
•  Provision of requested services or performance of a contract - where processing is necessary to provide a service you have requested or to administer an account or service relationship.
•  Legitimate interests - where processing is necessary for legitimate operational, administrative, security or service-improvement purposes and those interests are not overridden by your applicable privacy rights.
•  Legal obligations - where processing is necessary to comply with applicable laws, regulations or lawful requests.

Where personal data is processed for marketing activities on behalf of a participating hotel or relevant Marriott entity, that organisation is responsible for establishing the appropriate lawful basis for the processing where required by applicable law.

7. Marketing communications
The Services are designed to support permission-based marketing communications.

Where required by applicable law, marketing communications will only be sent where the recipient has provided the necessary consent or where another lawful basis permits the communication.

You may withdraw your consent or unsubscribe from promotional email communications at any time by using the Unsubscribe link included in the relevant communication or by following any other opt-out method provided.

You may also contact [email protected] regarding an unsubscribe request.

Once an unsubscribe request has been processed, your contact information may be retained on a suppression list for the purpose of ensuring that your opt-out preference continues to be respected. Information retained for this purpose will not be used to send you the marketing communications from which you have unsubscribed.

8. Cookies and similar technologies
The website and Services may use cookies and similar technologies to operate the platform, maintain security, remember preferences, understand how the Services are used and, where applicable, measure engagement with communications.

These technologies may include:
- strictly necessary technologies, required for the operation, security or functionality of the Services;
- functional technologies, which help remember settings or preferences;
- analytics and performance technologies, which help us understand how users interact with the Services and improve their performance; and
- other technologies used for authorised purposes as disclosed through the website or applicable consent mechanism.

Where required by applicable law, non-essential cookies or similar technologies will be used only after the appropriate consent or choice has been provided.

You may manage applicable preferences through the cookie consent or preference tools made available on the website. You may also manage cookies through your browser settings, although disabling certain cookies may affect the functionality of the Services.

Where required by applicable law and technically supported, applicable browser-based privacy preference signals may also be recognised.

9. Sharing and disclosure of personal data
We do not sell or rent personal data.

Personal data may be disclosed or made accessible only where reasonably necessary for the provision and operation of the Services or where otherwise permitted or required by law.

This may include disclosure to or processing by:
- the participating hotel and/or relevant Marriott entity responsible for or authorised in connection with the relevant customer relationship or communication;
- authorised technology, infrastructure, hosting, communications, security and other service providers supporting the Services;
- professional advisers where reasonably necessary;
- regulatory, governmental, judicial or law-enforcement authorities where disclosure is required or permitted by applicable law; and
- a successor organisation in connection with a merger, acquisition, restructuring or transfer of relevant business or assets, subject to applicable privacy requirements.

Authorised service providers supporting the services process personal data only for authorised purposes and do not acquire ownership of such data or use it for their own independent marketing purposes. Such providers are required to handle personal data subject to appropriate contractual, confidentiality, security and data protection requirements.

10. International processing and transfers
The Services support participating hotels and users in multiple countries. As a result, personal data may be processed or stored in countries other than the country in which it was originally collected.

Privacy and data protection laws may differ between jurisdictions.

Where applicable law requires safeguards for the international transfer of personal data, appropriate measures will be implemented. Depending on the circumstances, these may include contractual safeguards, recognised transfer mechanisms, adequacy arrangements or other measures permitted by applicable data protection law.

Authorised service providers are required to protect personal data in accordance with their contractual obligations and applicable data protection requirements regardless of the location from which the Services are provided.

11. Data retention
Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected or processed, subject to applicable legal, regulatory, contractual and operational requirements.

Retention periods may vary depending on:
•  the nature of the information;
•  the purpose for which it is processed;
•  the duration of the customer, subscription or service relationship;
•  instructions from the relevant participating hotel or Marriott entity;
•  applicable legal or regulatory requirements;
•  security and fraud-prevention requirements; and
•  the need to establish, exercise or defend legal rights.

Personal data processed on behalf of participating hotels or relevant Marriott entities may be retained in accordance with their instructions and applicable contractual requirements.

When information is no longer required, it will be deleted, anonymised or otherwise securely disposed of in accordance with applicable requirements.

Limited information may be retained where necessary to maintain suppression lists, document consent or withdrawal of consent, comply with legal obligations, resolve disputes, prevent misuse or establish or defend legal rights.

12. Your privacy rights
Depending on where you are located and the data protection laws applicable to you, you may have certain rights concerning your personal data.

These may include the right to:
•  request access to personal data held about you;
•  request correction of inaccurate or incomplete personal data;
•  request deletion of personal data, subject to applicable exceptions;
•  request restriction of certain processing;
•  object to certain processing;
•  withdraw consent where processing is based on consent;
•  request portability of personal data where applicable;
•  opt out of certain uses or disclosures where provided by applicable law;
•  request information about how your personal data is collected, used or disclosed;
•  exercise applicable rights concerning automated decision-making or profiling, where relevant; and
•  lodge a complaint with an appropriate data protection or privacy authority.

These rights are subject to the conditions, limitations and exemptions contained in applicable law.

Where your personal data has been provided to the platform by or on behalf of a participating hotel or relevant Marriott entity, the relevant organisation will generally be responsible for responding to requests concerning that data.

Where appropriate, requests received through marketing-marriott.com may be referred to the relevant organisation, and authorised service providers supporting the platform may assist in fulfilling such requests.

For personal data collected directly through the Services for purposes for which marketing-marriott.com is responsible, you may contact [email protected].

We may need to verify your identity before processing certain privacy requests.

You will not be discriminated against for exercising privacy rights available to you under applicable law.

13. Additional privacy rights in certain jurisdictions
Privacy and data protection laws in certain jurisdictions may provide additional rights or disclosures beyond those described above.

Depending on where you reside and which laws apply to the relevant processing, these may include rights to:
•  know or obtain information about the categories and specific pieces of personal data collected about you;
•  know the categories of sources from which personal data was collected;
•  know the purposes for collecting, using or disclosing personal data;
•  know the categories of organisations to which personal data is disclosed;
•  request correction of inaccurate personal data;
•  request deletion of personal data, subject to applicable exceptions;
•  opt out of certain uses, sales or sharing of personal data where applicable;
•  limit certain uses or disclosures of sensitive personal data where applicable; and
•  exercise applicable privacy rights without unlawful discrimination.
•  Personal data processed through marketing-marriott.com is not sold or rented.

Where additional jurisdiction-specific rights apply, requests relating to personal data controlled by a participating hotel or relevant Marriott entity should generally be directed to that organisation. Requests may also be submitted through the contact information provided in this Privacy Policy and, where appropriate, referred to the relevant organisation for handling.

14. Security and confidentiality
We seek to maintain reasonable and appropriate technical, organisational and administrative safeguards designed to protect personal data against unauthorised access, use, disclosure, alteration, loss or destruction.

Security measures may include access controls, authentication mechanisms, encryption in appropriate circumstances, system monitoring and other safeguards appropriate to the nature of the information and Services.

Access to customer data is limited to authorised persons and service providers who require access for legitimate purposes related to the provision of the Services.

Customer data remains under the control of the relevant participating hotel and/or Marriott entity, as applicable, and is not rented or sold by authorised service providers supporting the platform.

While reasonable measures are taken to protect personal data, no electronic transmission, network, system or method of storage can be guaranteed to be completely secure.

If you have questions regarding the security of the Services, you may contact [email protected].

15. Children's privacy
The Services are not intended to knowingly collect personal data directly from children for marketing purposes where such collection would be prohibited by applicable law.

Participating hotels and relevant Marriott entities using the Services are responsible for ensuring that personal data provided for marketing communications has been collected and may be used in accordance with applicable age, consent and privacy requirements.

If we become aware that personal data relating to a child has been processed through the Services in circumstances that do not comply with applicable requirements, appropriate steps will be taken in coordination with the relevant participating hotel or Marriott entity.

16. Links to other websites
The website or communications delivered through the Services may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites or services. When you access another website or service, the collection and use of your information will be governed by the privacy practices of the organisation operating that website or service.

We encourage you to review the applicable privacy notice before providing personal data to a third-party website or service.

17. Social media and third-party features
The Services may include links to or features provided by social media platforms or other third-party services.

When you interact with these services, the relevant third party may collect information about your interaction in accordance with its own privacy policy and technologies.

Your interaction with third-party social media services is governed by the privacy practices and terms of the respective provider.

18. Anti-spam and responsible marketing
marketing-marriott.com is committed to a permission-based approach to email marketing.

Participating hotels and other authorised users of the Services must not use the platform to send unsolicited commercial communications to individuals where such communications are prohibited by applicable law.

Personal data obtained through purchased, rented or otherwise unauthorised marketing lists must not be used through the Services where the individuals concerned have not provided the required permission or where another appropriate lawful basis for the communication does not exist.

The Services must not be used for unlawful purposes or in a manner that violates applicable privacy, electronic communications, anti-spam or other relevant laws and regulations.

Recipients of marketing communications must be provided with an appropriate mechanism to unsubscribe or otherwise exercise applicable marketing preferences.

Misuse of the Services for unsolicited or unlawful marketing communications may result in restriction or termination of access to the Services.

19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the Services, technology, privacy practices, legal requirements or other relevant circumstances.

The "Last updated" date at the beginning of this Privacy Policy indicates when it was most recently revised. Material changes may be communicated through the website or by other appropriate means where required by applicable law.

The version published on the website will be the current version of this Privacy Policy.

20. Contact us
If you have questions, concerns or requests regarding this Privacy Policy, the privacy practices associated with marketing-marriott.com, or personal data processed through the Services, please contact: Email: [email protected]

If your request concerns personal data collected by or on behalf of a particular participating hotel or relevant Marriott entity, your request may be referred to that organisation, as appropriate, for handling.Please do not send credit card information, passwords or other highly sensitive personal information by email.