Loyalty is a promise.Profiling is a different one.
The guest joined for points. The programme collected a life.
In one line: Yes, for purposes beyond the programme's core function. Profiling for marketing and sharing with partners are separate purposes requiring specific consent.
Know your guest. Ask before you know more.
The scene
The loyalty profile knew the guest's pillow preference, her dietary needs, her travel companions, her anniversary and the bar tab from every stay. It shared segments with a partner bank. She had joined for free breakfast.
Where the thinking breaks
Partner sharing
Co-branded cards and partner offers usually mean sharing member data. Each partner is a new recipient and often a new purpose.
Monday morning
- 01List every data field in a loyalty profile.
- 02Mark which serve the stay and which serve marketing.
- 03Add a consent step for the second group.
Questions, answered plainly
Do loyalty programmes need consent under DPDPA?
Yes, for purposes beyond the programme's core function. Profiling for marketing and sharing with partners are separate purposes requiring specific consent.
Can hotels share guest data with partner brands?
Sharing with partners for their own purposes typically needs clear notice and specific consent. Sharing with processors needs a contract.
Tell us where your data sits.We'll show you where the exposure is.
A partner replies within one working day, with a first view on your penalty exposure.
Speak to a partner