page-spinner

Privacy Notice

Last Updated: December 30, 2024
Effective Date: December 30, 2024

IINTRODUCTION

This Privacy Notice describes the Personal Information ESA Management, LLC and ESH Hospitality Strategies, LLC and its subsidiaries (collectively, “ESH,” “we,” “us,” or “our”) collect about you, how it is used and shared, and your rights and choices with regard to your Personal Information. This Privacy Notice applies to Personal Information collected by or on behalf of ESH, including information collected at our hotels, our websites at www.extendedstayamerica.com and other websites offered by us (collectively, the “Site”), our social media pages, our mobile application (“App”) and other software applications that we offer (each an “App”), by email, by phone or other offline method, or from publicly available sources (collectively, the “Services”).

Certain hotels are franchised under the Extended Stay America® family of brands (“Franchised Hotels”). Franchised hotel operators are independent businesses. Franchised Hotel operators may collect additional Personal Information not shared to ESA and not subject to this Privacy Notice.

For purposes of this Privacy Notice, “Personal Information” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include information that has been aggregated, de-identified, anonymized, or, in some cases, made publicly available in accordance with applicable law.

II. HOW WE COLLECT, USE AND SHARE PERSONAL INFORMATION

A. Information Collection

When accessing our Services, we may collect information about you, including your name, contact information, access credentials, stay preferences, Driver’s license, government ID, room preference information, and any other information you choose to provide. For example, we may collect this information from you when you make a reservation in our network of hotels, participate in our Extended Perks Loyalty Program or other hotel rewards program, create an account with us, leave a review, contact us, or interact with us for any other purpose. We may also collect your payment information, such as billing address or credit card information, when you make a reservation or otherwise place an order with us. We may also buy or obtain personal data from other third parties, such as social media platforms, analytics providers, and consumer data resellers.

We (or our third-party partners) may automatically collect Personal Information from you through your interactions with the Services, including IP address, browser type, language preferences, device operating system, pages viewed on the Site or App, Site and App usage statistics, and other information we collect through the use of cookies and similar technology. We may use location data to analyze certain information, and to improve our Services and relevance of the information we provide to you via the Services. We may also use your general location information to enable us to better focus our advertising and marketing efforts and to better tailor your use of the Services to your unique interests and needs. See the “Digital Analytics & Advertising” section of this Privacy Notice to learn more about the use of this information and the choices available to you.

We limit the use of Sensitive Personal Information to only what is necessary to provide services or as required by law.

B. Source of Information

We collect personal information from a number of sources, including the following:

  • Customers, guests, visitors or other consumers;
  • Franchised Hotels;
  • Your activities we observe or observed by our marketing partners as you use our Sites,
  • Third parties, including marketing and analytics providers;
  • Third parties with whom you engage to access our Services, such as online travel agencies or similar booking sites, and
  • Publicly available sources such as social media.

C. Information Use

We may use information collected about you for our business and commercial purposes, including to:

  • Provide you with services and products you request, including fulfilling reservations, conducting check-in/check-out, and providing Wi-Fi and other incidentals;
  • Respond to your questions or feedback or otherwise respond to your requests;
  • Operate, personalize, and improve the Services, including for analytics;
  • Administer loyalty, travel, or discount programs, including the Extended Perks Loyalty Program;
  • Send updates, marketing, and sales promotions you might be interested in;
    Market our Services;
  • Maintain the security and integrity of our Services and assets and to debug, identify, and repair errors that impair existing intended functionality in the Services;
  • Comply with applicable laws and regulatory requirements, or as requested by government or regulatory authorities or law enforcement, including in response to a court order, subpoena, or other lawful request; and
  • With your consent or as otherwise disclosed at the time information is collected.

D. Information Sharing

We may share information we collect with third parties, including the following:

  • Other entities within our corporate family of companies and joint partners;
  • Franchised Hotels as necessary to provide Services and operate our brand;
  • Online travel agencies or similar third-party services you use to book your stay at our hotels or otherwise engage our Services;
  • Corporate/national account administrators;
  • Group booking point of contact;
  • Our service providers, such as payment processors, marketing services, analytics services, and customer experience vendors, who help us operate and market our business,
  • With third parties, including advertising partners as described in the “Digital Advertising & Analytics” section of this privacy policy;
  • Law enforcement or other authorities pursuant to a subpoena, warrant, or other legal process as necessary to comply with law or to protect our rights and interests or the safety of you or others;
  • Prospective or new successor entities in connection with a potential or actual merger, divestiture, acquisition, restructuring, reorganization, dissolution, change of control, or other sale or transfer of some or all of our assets, including as part of bankruptcy proceeding; and
  • With your consent or as otherwise disclosed at the time of data collection or sharing.

We may share aggregated or deidentified information without limitation. We never sell or share Sensitive Personal Information or knowingly sell or share Personal Information of children.

We do not share phone numbers, text messaging originator opt-in data, and consents with third parties. For more information about our use of this information and the choices available to you, see the “Mobile Messaging Program” section of this Privacy Notice.

E. Information Retention

We retain personal information that we collect for as long as we need to use it in connection with our business and in accordance with our standard practices or in compliance with applicable laws. When we no longer need the personal information, we will deidentify, aggregate, or delete this information where required by law.

III. DIGITAL ANALYTICS & ADVERTISING

We partner with certain third-party service providers to collect information about your use of the Site and App and other sites and apps over time for non-advertising purposes, such as analytics, auditing, research, and reporting. We use Adobe Analytics to help us understand how our customers use the Site and App across devices (e.g., mobile phone, computer). You can read more about how Adobe Analytics collects and uses data when you visit our Site and App, and opt out of the use of cookies in web browsers by Adobe Analytics by clicking here. We also use Google Analytics to help us to improve and personalize the overall the experience of our Site and App, identify and address search results for your local area, and understand usage of our Services. For more information about how Google Analytics collects and uses data when you use our Site, visit www.google.com/policies/privacy/partners, and to opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.

We also partner with third parties who provide advertising services that are based on your online activities across websites, mobile apps, and devices over time (commonly referred to as “interest-based advertising”). Our advertising partners may collect information about your activities on our Services on your current device and combine it with information about your activities on other websites, mobile apps, and devices.

For more information about interest-based advertising and how to opt out of interest-based advertising on websites by third parties that participate in self-regulatory programs, visit the Network Advertising Initiative at https://www.networkadvertising.org/understanding-online-advertising/what-are-my-options and/or the Digital Advertising Alliance at youradchoices.com. If you delete your cookies or use a different browser or mobile device, you may need to renew your opt-out choices exercised through the DAA Webchoices tool. You may opt out of interest-based advertising through Adobe Target by visiting https://hvmllc.tt.omtrdc.net/optout.

Please note that electing to opt out will not stop advertising from appearing in your browsers or applications. It may make the ads you see less relevant to your interests. Additionally, your browser may offer tools to limit the use of cookies or to delete cookies; however, disabling some or all cookies could mean you will be unable to access certain content on the Site or use all features.

IV. LINKS TO OTHER SITES

The Site and App may contain links to websites or platforms owned or controlled by other companies, such as Facebook, Instagram, LinkedIn, X (Twitter), and YouTube. We have no control over and are not responsible for the data collection and use practices and privacy policies on third-party websites that you may access from our Site or App. We encourage our users to be aware when they leave our Services and to read the privacy statements of any other sites that collect Personal Information.

V. MOBILE MESSAGING PROGRAM

You may elect to join our Mobile Messaging Program to receive notifications of deals and discounts you may be eligible to receive. We use SMS text messages to contact individuals who have signed up for the Program. The Program is governed by this Privacy Policy and our Mobile Messaging Program Terms of Service. You can read the Program Terms of Service or sign up for the Program at https://www.extendedstayamerica.com/extended-perks/index. The Mobile Messaging Program is available only to users in the United States. Participants in the Program may receive promotional texts. Promotional texts notify you of deals or promotions we think may be of interest to you. You may reply “STOP” to any Program text message to stop messages. We do not charge for this program, but your mobile phone carrier may impose a per-message fee, depending on your plan. We do not sell or share mobile information of Program participants with third parties for marketing or promotional purposes. We retain and protect mobile information from the Program consistent with this Privacy Policy. Your rights to request access, deletion, corrections, or opt-outs described in this Privacy Policy applies to the Program as well.

VI. EEA AND UK RESIDENTS

This section applies to residents of the European Economic Area (“EEA”), Switzerland, or the United Kingdom (“UK”).

A. Lawful Basis for Processing

We may collect and process personal data about you where the laws of your jurisdiction permit it. We may rely on the following legal bases to process personal data about you:

  • Contract: It is necessary to process your personal data to perform a contract with you or because you have requested we do something before creating a contract with you that requires we process your personal data. For example, we process your name and payment data to fulfill your reservation.
  • Legitimate Interest: There is a commercial or business interest that is important to us or others which we’ve balanced against your privacy rights. For example, we may use your email address to provide you with marketing information, if permitted by your preferences..
  • Consent: We have asked for your permission to use your personal data. For example, we may ask for your permission to use your phone’s geolocation data to provide you better rates on our services.
  • Legal Obligation: It is necessary to use your personal data so that we can fulfil our legal and regulatory obligations. For example, some recordkeeping laws require we collect and retain certain information about our guests.

B. Transfers outside of the EEA or UK

Personal Information may be transferred to the United States and to service providers in countries outside the EEA, Switzerland, or UK and may be stored and processed manually and electronically through global systems and tools for the purposes outlined above.

When transferring personal information to countries outside the EEA, Switzerland, and the UK, we are required to ensure personal information about you is adequately protected in the country where it is transferred. We transfer personal information to these countries only when it is subject to safeguards that assure the protection of personal information, such as entering contracts with transferee companies called the “standard contractual clauses,” Swiss “standard contractual clauses,” and the “UK addendum,” which require companies outside the EEA, Switzerland, or UK to protect your personal information to the same extent as if it had remained in the EEA, Switzerland, or UK.

C. Your Rights

See Section VIII (“Your Rights and Choices”) of this Privacy Notice below for more information regarding rights that may be available to you.

VII. STATE PRIVACY NOTICE

Residents of certain states have certain rights with regard to their Personal Information. See Section VIII (“Your Rights and Choices”) below for more information about the rights that may be available to you.

A. Collection, Use, and Disclosure of Personal Information

In the preceding 12 months, we collected and disclosed the following categories of Personal Information for the purposes and with the parties described below.

Categories of personal information Do we collect? What purposes do we collect for?: Do we disclose for a business purpose, and if so, to what third parties: Do we sell or share for advertising and, if so, to what types of third parties?
Personal and online identifiers (like first and last name, email address, or unique online identifiers) Yes Hotel Services, Payments, Communications, Marketing, Guest Safety, Improving Our Services, Operations, Franchise Sales Yes – Reservations, Payment, Marketing, Technology, Operations; and Franchise Sales Service Providers; Franchised Hotels Shared with technology and advertising providers
Customer record information (like bank account number, credit card number, debit card number, or driver’s license number) Yes Hotel Services, Payments, Communications, Marketing, Guest Safety, Improving Our Services, Operations Yes – Reservations, Payment, Technology, and Operations Service Providers; Franchised Hotels Not sold or shared
Characteristics of legally protected classifications (like disability status) Yes Hotel Services, Marketing, Guest Safety, Operations Yes – Technology, and Operations Service Providers Not sold or shared
Commercial or transactions information (like records of personal property or products or services purchased, obtained, or considered) Yes Hotel Services, Communications, Marketing, Improving Our Services, Operations Yes – Marketing, Technology, and Operations Service Providers Shared to technology and advertising providers
Internet or other electronic network activity information (like browsing history, search history, interactions with a website, email, application, or advertisement) Yes Marketing, Improving Our Services, Operations Yes – Technology, Operations Shared to technology and advertising providers
Geolocation information (including precise geolocation) Yes Marketing, Improving Our Services, Finding rooms near you Yes – Technology, and Operations Service Providers Not sold or shared
Sensory information (like videos and photos) Yes Guest Safety, Improving Our Services, Operations Yes – Technology, and Operations Service Providers Not sold or shared
Inferences drawn from the above information about your predicted characteristics and preferences Yes Marketing, Improving Our Services Yes – Marketing, and Technology Service Providers Shared to technology and advertising providers

We collect Personal Information from all categories of sources described in Section II.B (“Sources of Information”) of this Privacy Notice.

We do not sell or share the Personal Information of minors we know are under 16 years old.

B. Notice of Financial Incentive

Our Extended Perks Discount Program (“Extended Perks”) collects personal information, including name, email address, and stay preferences, to facilitate its operations and provide you with discounts, offers and deals. Participating in Extended Perks is entirely optional and is subject to its terms and conditions. You can opt in by signing up for an Extended Perks account. The amount and nature of these benefits will be determined by the extend of your participation in Extended Perks. We may adjust the terms of participation from time to time.

You may terminate Extended Perks participation at any time by contacting us at dataprivacy@extendedstay.com to delete your account. Upon a termination request, some Extended Perks data associated with the terminated account may be retained for record keeping and other legally permissible purposes. We may continue to process information about you in connection with your transactions with ESH.

The price and service differences, such as discounts and credits, that are available to you through Extended Perks are based upon our reasonable determination of the value that we receive from collecting, retaining, and selling (as defined by applicable law) personal information about you in connection with operating our business. This estimated value takes into account a variety of factors as permitted by law, including (but not limited to) our expenses incurred in collecting and processing the information, our expenses incurred in providing rewards to you, and the estimated marginal revenue that we may derive from information related to a specific Extended Perks participant.

VIII. YOUR RIGHTS AND CHOICES

A. Your Rights:

Residents of certain jurisdictions, including the EEA, Switzerland, U.K., California, Colorado, Connecticut, Virginia, and Utah, and other states have rights with respect to the Personal Information collected and processed by us under certain jurisdiction specific laws. You may be able exercise the following rights, subject to certain exceptions and limitations.

  • Rights to Confirm and to Know: The right to confirm whether we are processing Personal Information about you and to request that we disclose the categories of Personal Information we collected about you individually, the categories of sources from which the information was collected, the business or commercial purposes for which we collected or sold that information, and the categories of third parties to whom the information was sold or disclosed for a business purpose in the last 12 months..
  • Rights to Access and Portability: The right to request access to the Personal Information we maintain about you and to request a portable copy. You may have the right to request we transmit a copy of Personal Information about you to another business.
  • Right to Obtain a List of Third Parties: If you are an Oregon resident, you may exercise the right to obtain a list of the nonaffiliated third parties (other than our processors) to which we have disclosed personal information.
  • Right to Correct Inaccuracies: You may have the right to correct inaccuracies in the Personal Information we have collected about you.
  • Right to Delete: You may have the right to request we delete Personal Information that we have collected or maintain about you.
  • Right to Opt-Out of Sale or Sharing: You may have the right to opt out or ask us not to sell or share your Personal Information. To exercise this right, click the “Do not sell or share my Personal Information” link located on the home page of the Site or App or use one of the methods listed below under “Your Privacy Rights – Submitting Requests.”
  • Rights to Restrict or Object to Processing: Depending on your jurisdiction, you may have the right to limit or object to our processing of Personal Information in certain circumstances.
  • Right to Limit Processing of Sensitive Personal Information: Depending on your jurisdiction, you may have the right to limit our processing of certain “sensitive” Personal Information (or to withdraw consent for such processing if you previously gave it).
  • Right to Withdraw Consent: The right to withdraw consent you previously provided to processing your Personal Information.
  • Right Not to Receive Discriminatory Treatment: You have the right not to be discriminated against for the exercise of the above privacy rights.

Your Privacy Rights – Submitting Requests

If applicable in your jurisdiction, you may exercise your privacy rights by:

For requests to correct your Personal Information, please contact us directly via by phone or email.

Additionally, residents of certain states may exercise the right to opt out of sharing for targeted advertising and cross-contextual behavioral advertising purposes by adjusting your cookie preferences here by following the “Do Not Sell or Share My Personal Information” link at the bottom of our website. Note that this applies only to the browser or device from which you make the request. If you visit ESA Sites from more than one browser, you should adjust your cookie preferences on each. If you live in a state where you have such rights, you may opt out of sharing of information linked to you by name by submitting a request on the Privily portal, as described below.

You may exercise these rights yourself or, depending on your jurisdiction, you may have the option to designate an authorized agent to submit a request on your behalf. Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. We will require you to provide, at a minimum, your name and sufficient additional information to verify your identity, such as your email address.

If you would like an authorized agent to submit a request on your behalf, please contact us using the methods above for instructions and details on proof and information required for use of an authorized agent. We may also need to contact you directly to verify the request.

Opt-out preference signals, global privacy controls (“GPCs”), or universal opt-out mechanisms (“UOOMs”)

Certain mechanisms or technologies may be used to indicate your opt-out preferences to entities that process personal information. To the extent that we are able to recognize these signals and are legally required to honor them, we will treat these signals as requests to opt out of processing or sharing for the purposes of targeted advertising or the sale of personal information. Depending on the signal you select, the opt-out may apply only to certain interactions, such as a specific browser or device.

Appeals and Complaints

If you are unhappy with our response to your request, we hope you will reach out to us first at dataprivacy@extendedstay.com. For residents of the EEA and the UK, if you are still unhappy, you have the right to complain to your data protection authority.

Additionally, for Colorado, Connecticut, Oregon, Texas or Virginia residents, if you have submitted a request that you believe we have not reasonably fulfilled, you may contact us to appeal our decision by sending an email with the subject line “Appeal” to dataprivacy@extendedstay.com.

B. Enable / Disable App Location Services:

Our mobile app, available for iPhone and Android devices, uses location services to provide you better results. You can disable this directly within your device settings if you choose:

    • You can choose whether or not to allow the App to collect and use real-time information about your device’s location through your device’s settings
    • You can manage these preferences when the App is first launched or at a later stage by using the setting on your mobile device.
    • If you block the use of location information, the App may not function as intended and certain features may not be available to you.
    • If you choose to turn off the precise geolocation feature on your device, you may not be able to use certain functions available through this functionality such as searching for hotels nearby. This is because the precise geolocation feature is used to provide you with more relevant and localized search results.

C. Promotional Emails:

If you receive any promotional email communication from us, you will be given the option to “unsubscribe” from further promotional email communications from us if you wish to stop receiving these communications.

If you opt out of receiving promotional emails, we will still send you messages related to our transactions and relationship with you, including reservation information.

IX. AUTOMATED LICENSE PLATE RECOGNITION USAGE AND PRIVACY POLICY

In some locations, ESH has permitted local law enforcement to place automated license plate readers (ALPR) on ESH properties. ESH does not have access to any information from these ALPRs and is not an “end user” of such information. ALPRs are installed and maintained by Flock. You can read Flock’s privacy notice at: https://www.flocksafety.com/privacy-policy as well as additional privacy FAQs at: https://www.flocksafety.com/faq/privacy-and-access.

X. UPDATES TO THIS PRIVACY NOTICE

We may modify this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will post a link to the revised Privacy Notice on the homepage of our site. You can tell when this Privacy Notice was last updated by looking at the date at the top of the Privacy Notice. We encourage you to visit this page periodically to learn of any updates.

X. CONTACT US

For questions or comments regarding this Privacy Notice, including to exercise your rights, please contact Guest Services at 877.651.2124 or you may write our Privacy Officer at 13024 Ballantyne Corporate Place, Suite 1000, Charlotte, NC 28277 or