Introduction
Welcome to M Accor Club. This Privacy Policy describes how Accor S.A. and its subsidiaries collect, use, and share your personal information. We operate under a "Privacy by Design" philosophy, ensuring that your data protection is integrated into our services from the very first click.
This policy applies to all members of our loyalty program, guests at our managed properties, and users of our digital applications globally.
Data Collection
To provide a tailored luxury experience, we collect specific categories of information when you interact with us:
| Category | Data Points Collected |
|---|---|
| Identity | Full name, passport number, date of birth, and nationality. |
| Contact | Email address, billing address, and verified phone numbers. |
| Financial | Payment card tokenization and transaction history. |
| Biometric | Voluntary facial recognition for "Express Check-in" (where local laws allow). |
The Gold Standard Promise
We strictly adhere to GDPR, CCPA, and LGPD frameworks. M Accor Club will never sell your personal profile to data brokers or third-party marketing agencies without explicit, granular consent.
How We Use Data
Your data is utilized to power the "Limitless" experience across our ecosystem:
- Personalizing room settings (temperature, pillow types) based on previous stays.
- Calculating and applying Status and Reward points in real-time.
- Sending "Before You Arrive" concierge suggestions for dining and spa services.
- Ensuring guest safety through secure access control at our properties.
Data Security
M Accor Club employs a multi-layered security infrastructure. All sensitive data is encrypted using AES-256 standards. Our global security operations center (SOC) operates 24/7/365 to detect and neutralize potential threats before they impact our members.
Your Legal Rights
Depending on your location, you have the following rights regarding your personal data:
- Right to Access: Request a digital copy of all data we hold about you.
- Right to Rectification: Correct any inaccuracies in your profile.
- Right to Erasure: Request the "Right to be Forgotten" and close your account.
- Data Portability: Move your data to another service provider.