Privacy Policy

1. Who is responsible for your information

Rosehill Technologies, Pte. Ltd (“we”, “us”, or “our”) is the company responsible for personal information collected through the Hotelplex website and our booking and customer-support services (the “Services”). We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA) and other applicable data protection laws.

This Policy covers our handling of your information. Properties, payment providers, and websites you choose to visit may also process data for their own purposes under their privacy policies. Please also read our Terms of Service.

2. Information we collect

Information you provide

• Guest and contact details, including first and last names, email address, and telephone number when you prepare or make a booking.
• Search and reservation details, including your destination, stay dates, room selection, number of guests, children’s ages where needed for a stay, and booking references.
• The contents of your enquiries, booking changes, cancellation requests, verification codes you submit, and support correspondence.
• Payment and transaction details. Our card form uses Stripe, which collects your card and billing information directly. We send Stripe the guest name, email, and telephone number to prepare payment, and receive payment references and transaction status. Your full card number and security code are not submitted to Hotelplex’s servers through this card form.

Information from your browser

Our Services receive your IP address, browser and device information, requested pages, search parameters, request identifiers, and technical information needed to deliver and secure the site. Hosting and service providers may also record request times, referring URLs, and diagnostic or security logs. Browser storage is described in section 5.

Information from others

We receive reservation and payment updates from accommodation and travel suppliers and payment providers. If someone books on your behalf, we receive the guest details they supply. Only provide another person’s information when you are authorised to do so, and share this Policy with them.

3. Why we use information

• Search for accommodation and retrieve current room offers.
• Prepare, process, confirm, and manage your reservation.
• Process payments, cancellations, refunds, and payment disputes.
• Send booking confirmations and stay updates, and answer enquiries.
• Remember language and currency preferences.
• Operate and troubleshoot the site and prevent fraud or misuse.
• Maintain required records, comply with law, and resolve disputes.

Under Singapore’s PDPA, we collect, use, and disclose personal data with consent, including where consent is deemed under the law, or where another legal exception applies. Where a separate legal basis is required, booking and payment processing is necessary to take steps at your request or perform our contract; security and troubleshooting serve our legitimate interests, subject to your rights; required recordkeeping fulfils legal obligations; and processing that requires consent relies on that consent.

Providing information necessary for a booking or payment is required to complete that service. If you do not provide it, we may be unable to make or manage the reservation. Browsing does not require a booking.

4. Who receives information

• Accommodation providers and travel suppliers receive the guest and reservation information needed to arrange and provide your stay.
• Stripe and relevant financial institutions process payment, authentication, fraud prevention, and refund information. See the Stripe Privacy Policy.
• Providers of hosting, booking technology, communications, and customer support process information needed to operate the Services.
• Map and image providers receive network information, such as your IP address, when your browser loads their content. Our maps use OpenFreeMap; see its Privacy Policy.
• Professional advisers, authorities, or other parties may receive information where necessary to meet a legal obligation, protect rights and safety, or establish or defend a legal claim.
• Parties involved in a merger, reorganisation, or transfer of our business may receive relevant information, subject to applicable confidentiality and data protection requirements.

When you choose an offer on another provider’s website, we pass the property and search details needed to display that offer. Information you then provide to that provider is governed by its privacy policy.

5. Cookies, browser storage, and advertising

Hotelplex uses the following browser storage for the Services:

• Language and currency preference cookies, when set, remember your choices for up to one year. They may be renewed when you change your preferences.
• A session identifier in browser session storage connects room availability requests within a browsing session. It normally ends when you close that tab.
• Stripe may use cookies and similar technologies when its payment form loads, including for payment security and fraud prevention. Its privacy policy explains its processing and your choices.

You can delete or block cookies and clear site storage through your browser settings. Doing so may reset preferences or affect booking and payment functionality.

Hotelplex does not currently embed advertising conversion or remarketing tags in the website. If we introduce them, we will update this Policy to identify the information collected, its use, the recipients, and the applicable consent or opt-out controls before enabling that processing. Visiting the site does not by itself give consent to optional advertising tracking.

6. How long we keep information

We keep booking, payment, and support records for as long as needed to provide the service and meet applicable accounting, legal, fraud-prevention, and dispute-resolution requirements. Technical records are retained as needed for operation, troubleshooting, and security. The period depends on the record, the purpose, applicable legal requirements, and any unresolved dispute; we do not apply one fixed period to all personal data.

When information is no longer needed for a business or legal purpose, we delete it or remove its association with identifiable individuals. Browser-storage durations are set out in section 5. Contact us to ask about the retention applicable to your information.

7. Your choices and privacy rights

Under Singapore’s PDPA, you may request access to your personal data and information about how it has been used or disclosed, request correction, and withdraw consent with reasonable notice, subject to applicable exceptions. We will explain any likely consequences of withdrawing consent, including if we can no longer provide a requested service. Withdrawal does not affect processing already lawfully carried out or records we must retain by law.

Depending on the laws that apply to you, you may also have rights to deletion, portability, restriction, objection, or to opt out of certain processing. Contact us to exercise an applicable right or challenge our response. Where required by law, we respect recognised opt-out signals such as Global Privacy Control.

Email hui@hotelplex.com with “Privacy request” in the subject, or write to the address in section 13. Explain your request and provide enough information for us to locate your records. A booking is not required. We may request proportionate information to verify your identity or an agent’s authority, and will respond within applicable legal time limits.

You may raise a concern with Singapore’s Personal Data Protection Commission or another competent privacy regulator.

8. Security

We use reasonable administrative, technical, and organisational measures to protect personal information. No transmission or storage method is completely secure. Keep booking references and verification codes confidential. Please do not email full card details, passwords, or identity documents; contact us first if you believe additional verification is needed.

9. International transfers

We operate from Singapore. Your information may be processed in Singapore and in other countries where your accommodation, travel suppliers, payment providers, or other service providers operate. Their data protection laws may differ from those in your country. For transfers from Singapore, we take the steps required by the PDPA to ensure a comparable standard of protection, including appropriate contractual safeguards where required. Other applicable transfer requirements also apply. Contact us for information about the safeguards relevant to your data.

10. Children’s information

The Services are intended for adults who can make travel bookings. An authorised adult may provide a child’s age and other details needed for an accompanying guest’s stay. Please contact us if you believe a child has provided personal information without appropriate authority.

11. Other websites

Links to accommodation, travel providers, or other websites take you to services that have their own privacy policies. Review those policies before providing information. This Policy covers the information we handle through Hotelplex.

12. Changes to this Policy

We may update this Policy when our Services, data practices, or legal requirements change. We will post the updated version on this page. We will provide additional notice or obtain consent for material changes where required by law.

13. Contact us about privacy

Please mark postal correspondence “Attention: Data Protection” or use “Privacy request” as your email subject. Our contact details are available for enquiries, access and correction requests, consent withdrawals, and complaints. For booking help, visit our Contact us page.