All the flights and flight-inclusive holidays on this website are financially protected by the ATOL scheme. When you pay you will be supplied with an ATOL Certificate. Please ask for it and check to ensure that everything you booked (flights, hotels and other services) is listed on it. Please see our booking conditions for further information or for more information about financial protection and the ATOL Certificate go to: www.caa.co.uk
Privacy policy
How we use your information, who we share it with and how to exercise your rights.
Last updated:
Who is responsible for your information
BookHotelRates is a trading brand of The Tim Potter Travel Co. Ltd, a limited company registered in England & Wales, registered no 13260550, VAT No GB 415957277. Registered Address: 41 Sandy Park Road, Bristol BS4 3PH.
BookHotelRates is one of the brands operated by The Tim Potter Travel Co. Ltd. The company is the controller of personal information we collect for our own enquiries, accounts and booking services. This policy applies to https://bookhotelrates.com. Contact support@bookhotelrates.com or write to our registered address for privacy questions and requests.
Information we collect and where it comes from
We collect information you provide when you search, create an account, submit a booking or enquiry, contact us or ask for assistance. This can include:
- Your name, email address, telephone number, account details and correspondence.
- Traveller names, ages or dates of birth, party details, itinerary, destination, dates, room and transport choices, booking references and supplier information.
- Billing details and the payment information you submit through our forms, together with payment attempt and transaction records.
- Special requirements you choose to provide, which may reveal health or accessibility information.
- Browser, device, network and usage information, together with cookies and saved preferences where those features operate.
We may receive information from the lead booker, travel suppliers and service providers dealing with your enquiry or booking. If you provide another traveller’s details, make sure you are authorised to do so and give them this policy. Do not include full card details or sensitive documents in ordinary correspondence.
Why we use information and our lawful bases
- Enquiries and bookings: to answer requests, arrange travel, communicate confirmations and changes, and provide support. Our basis is taking steps at your request before a contract or performing a contract.
- Accounts and site operation: to maintain accounts, remember choices, diagnose faults, prevent fraud and protect the service. We rely on contractual necessity or legitimate interests, as appropriate, balancing those interests against your rights.
- Legal and financial records: to meet accounting, regulatory and other legal obligations, and establish or defend claims. We rely on legal obligations or legitimate interests as applicable.
- Marketing and optional technologies: where consent is required, we rely on consent. Any other permitted marketing or measurement must have an appropriate lawful basis and respect your choices.
Where travel assistance requires special category information, such as health details, an additional legal condition is needed, such as your explicit consent where appropriate. Share only what is necessary; contact us if you prefer to discuss how a requirement can be handled.
Partner hotel results and external websites
Where Stay22 hotel results are enabled, an embedded Stay22 service receives the search information used to display results: destination, stay dates, guest and room counts and selected currency. Loading the embed also connects your browser to Stay22, which can receive your IP address, browser information and other technical data and may use its own cookies or similar technologies.
If you follow a result to book with an external provider, it collects and handles the booking and payment information you provide there under its own policy. Read Stay22’s privacy policy and the chosen provider’s policy. Our own booking forms and external provider checkouts are separate services. External links may include affiliate tracking so a referral can be attributed.
Storage, access and retention
Information submitted through the site is processed using our application, databases and supporting service providers. Booking, enquiry and payment information may be retained in our systems; this policy does not represent that all payment information is handled only by an external payment provider. Please do not send card details in email or a complaint.
Personal information requires appropriate technical and organisational protection and access limited to legitimate purposes. No internet service can guarantee absolute security. Contact us promptly if you suspect misuse of your account or information.
Retention depends on the purpose, the booking and support relationship, applicable accounting and legal obligations, and any outstanding dispute or claim. Information should be deleted or anonymised when no longer needed, subject to those requirements. Ask us about the retention of a particular record; there is no single period that applies to every category.
International processing
Travel suppliers and technology providers may process information outside the UK. Destination suppliers may need information to perform travel services abroad. Where UK data protection law requires safeguards for a transfer, the transfer must have an appropriate basis, such as an adequacy decision, approved contractual safeguards or a permitted exception. Contact us for information about the providers and safeguards relevant to your booking.
Marketing choices
Where you have asked for updates, or another lawful basis permits the communication, we may contact you about relevant travel offers. You can object to direct marketing or withdraw consent at any time by contacting support@bookhotelrates.com. Necessary booking and service messages are separate from marketing and may still be sent while your booking or enquiry is being handled.
Your data protection rights
Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction or portability, and object to processing based on legitimate interests. You have a right to object to direct marketing. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.
Contact support@bookhotelrates.com with your request. We may need proportionate information to verify your identity and locate the records. Some rights have legal exceptions, for example where records must be kept by law. We will explain any applicable restriction and respond within the legal timescale, including explaining any lawful extension.
You can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. We would welcome the opportunity to address your concern first, but you do not have to contact us before approaching the ICO.
Children and policy updates
Bookings must be made by an adult. We may process children’s details supplied by a parent, guardian or authorised lead booker where needed for travel. The site is not intended for children to create accounts or make purchases independently.
We may update this policy to reflect changes to services or legal requirements and will identify the revision date. Material changes that require further notice or consent must be handled accordingly. For this policy, contact support@bookhotelrates.com or The Tim Potter Travel Co. Ltd, 41 Sandy Park Road, Bristol BS4 3PH.

