Does Booking.com train on your data?
Booking.com uses your personal data to develop its machine-learning models and AI systems. The way out is the objection right, "subject to applicable law".
"We may use your personal data to develop and enhance our machine learning models and artificial intelligence systems."
- 7 Sept 2026
- 5 Oct 2026
- All accounts
- global
- Fetched from the company
- ABB83EBD…7571
How we read it: The clause is unqualified: "your personal data", no category excluded, no product named. For a travel platform that means where you went, with whom, and what you paid. The rewrite of 24 Aug 2026 improved the disclosure: training is now a named purpose, "H. Training & optimizing AI models", the purpose table puts it under legitimate interests, and the objection right was reworded from the lettered range "C to K" to "the processing where we rely on legitimate interest and the use of AI systems" — naming AI instead of asking a reader to decode which letters applied. Still D: the objection reaches it, but it is a letter, not a switch.
opt out, object to, right to object, legitimate interest, withdraw, settings
What the document does offer
- A second, plainer statement of the use, in the AI section: "We may use your personal data to develop, train, and fine-tune AI systems which are used in the following ways:" — followed by generative tools that answer questions, integrity systems, and data-protection systems. The sentence introduces a list, and the text layer this entry was written on had dropped it; recovered 1 September 2026
- "Where we process your personal data based on legitimate interest or the public interest, you have the right to object to that use of your personal data anytime, subject to applicable law"
- "Through your privacy settings, you can view, manage, and delete your AI Memories, and you can also withdraw your consent for this feature at any time"
- opt out of the selling of data, of targeted advertising, and of profiling
Why none of it applies: The objection right is the one that reaches model development, and it carries a qualifier the reader cannot resolve: "subject to applicable law", with no law named. The AI Memories control is real, AI-specific and much narrower — one feature, not the models. The three opt-outs are advertising, profiling and data sale, none of which touch the clause quoted here.
What each plan can refuse
The same questions, asked of every plan we could identify. Every cell comes from a quoted clause or a documented search - see the evidence above.
- Contact support
- Not stated
- 55 / 100
- Not stated
- Unknown
How to opt out of Booking.com AI training
Plan by plan, from what Booking.com's own policy says about refusing. Where it publishes the steps, they're listed here with the limits they carry. Where there's nothing to switch off, or nothing graded, this says so instead of inventing a menu path.
All accounts
Yes, but not self-serve: Booking.com makes you contact support.
- Open Booking.com's Data Subject Request form at booking.com/content/dsar.en-us.html.
- Say you object to the use of your personal data to develop, train and fine-tune AI systems, under the right to object.
Booking's Your rights section gives the request form, or email if you can't use the form. It reserves the right to refuse where it has an overriding reason.
What this policy has done since we started watching
2 changes detected since 19 Aug 2026. Each one is a diff between two archived copies, and each links to the passage that moved.
Everything we read
Vendor response
We wrote to Booking.com on 24 Aug 2026, quoting the clauses above and inviting a correction. Nothing has come back. That's published because a company declining to comment on its own policy is something a reader should know, and because the invitation should be on the record whether or not it's taken up. Any reply goes here, word for word.
Report a wrong clause