Last updated: October 2026 · HotelMonitor (hotelmonitor.co.uk)
HotelMonitor is a free hotel price monitoring service operated at hotelmonitor.co.uk. We watch the price of your existing hotel booking and alert you by email when a cheaper rate appears — so you can rebook and save money. When you contact us about privacy matters, please email [email protected].
We collect only the minimum data needed to operate the service:
We do not collect: payment information, passport details, phone numbers, or any sensitive personal data.
AI assistants and our API. When an assistant or app uses our MCP server or agent API, we log the request: the time, which tool or endpoint was called, the first 80 characters of the app’s user agent, the destination asked about, how many results we returned, and a one-way hash of the IP address made with a secret key. That hash is pseudonymised, not anonymous: we could match it against an address we already had, but it cannot be turned back into the address. Rate limiting uses a similar keyed hash of the address, held only in memory; the address itself is not stored in these logs or by the rate limiter. We use this to run rate limits, prevent abuse and understand which tools are used. These requests do not give us your name or email address.
We do not use your data for profiling, targeted advertising, or any automated decision-making that affects you.
When you click a "Book at lower price" link in our emails or on our site, you are taken to a third-party booking or travel site (such as Booking.com, Expedia, Hotels.com, TripAdvisor or Agoda) via an affiliate link. These links run through Stay22 (for Booking.com, Expedia, Hotels.com, TripAdvisor and GetYourGuide), Agoda’s own partner programme, Travelpayouts (for Aviasales flight searches) and CJ (Commission Junction, for TravelUp offers). If you complete a booking, we earn a small commission at no extra cost to you.
These platforms have their own privacy policies and cookie practices which we encourage you to review. We do not share your personal data with these platforms beyond what is embedded in the affiliate link (typically a session identifier).
We do not sell, rent, or trade your personal data. We share data only:
We retain your booking data for as long as your monitoring is active. Once monitoring stops (either because you cancel it, the check-out date passes, or you request deletion), your data is marked inactive. You can request permanent deletion at any time — see Section 8.
Enquiries sent through our contact form, and our replies, are kept in our mailbox for 12 months after the last message in the conversation. Privacy and data-rights requests are kept for 24 months, so we can show how they were handled. We remove expired enquiries in a review each quarter, so an enquiry may be kept for up to 3 months longer than these periods, and deleted messages may also remain in our email provider's recovery storage for a limited period.
You can ask us to delete an enquiry sooner (see Section 8). Before we delete or share the contents of an enquiry, we confirm the request by writing to the email address it came from. The “Delete My Data” tool removes your bookings, watches and alert history; it does not remove emails you have sent us, so please ask us directly.
We use the following cookies and analytics:
hm_vid (30 days) is a random ID that lets us count how many different people visit; hm_sid and hm_att (30 minutes after your last page view) group one visit and remember the campaign link, such as a social post, that brought you, so we can see which links lead to a booking-site click. They hold no name, email or IP address, are not shared with anyone and are not used for advertising. We set them only after you choose “Accept” on the cookie notice (which also stores a small hm_ok cookie recording that choice); until then we count visits without any identifier. If you choose “Decline”, or your browser sends the Global Privacy Control signal, we do not set them and remove any we hold on your next page view.We do not use advertising cookies, Facebook Pixel, or other third-party tracking pixels.
Fonts are loaded from Google Fonts. Google may set a cookie or log your IP address when serving font files — see Google's Privacy Policy.
Under the UK General Data Protection Regulation you have the right to:
To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
All data is transmitted over HTTPS. We store data in a secured database on private infrastructure. Passwords are not used or stored — you access your bookings via your email address. We do not store payment information of any kind.
We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent revision. Continued use of the service after an update constitutes acceptance of the revised policy.
For privacy questions or data requests: [email protected]