Privacy Policy

Your data. Your rights. Our commitment.

Last Updated: May 26, 2026

Introduction

At Streamline Hospitality Insights, the protection of personal data is paramount. This Privacy Policy outlines how information is collected, processed, stored, and safeguarded when individuals interact with our platform. The policy applies to all users of our website, subscribers to our analytical services, and clients who engage with our partnership program reviews.

Our operations are designed to comply with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws in the United States and the European Union. Transparency is prioritized. Users retain control over their information.

Questions arise. Concerns surface. Contact is encouraged. The long way is often the short way — establishing trust through clarity takes time, but the foundation built is solid.

Data We Collect

Information is gathered through multiple channels. The data collected falls into several categories, each serving distinct operational purposes.

Information Provided Directly

When contact forms are submitted, newsletter subscriptions are initiated, or service inquiries are made, the following data may be collected:

  • Identification Information: Full name, business name, job title, company affiliation.
  • Contact Details: Email address, phone number, mailing address.
  • Professional Context: Hotel property details, number of locations managed, partnership platforms currently in use.
  • Communication Content: Messages sent through contact forms, support requests, feedback submissions.

Information Collected Automatically

When the website is accessed, certain technical information is automatically gathered through standard web technologies:

  • Device Information: IP address, browser type and version, operating system, device identifiers.
  • Usage Data: Pages viewed, time spent on pages, referring URLs, click patterns, navigation paths.
  • Technical Logs: Access times, error messages, download requests, server response times.

Information from Third Parties

In certain scenarios, data may be received from external sources, including analytics providers, marketing partners, and public databases. These sources supplement user profiles, enhance service personalization, and improve targeting accuracy. Integration with Protel and similar platforms may involve data exchange under strict contractual safeguards.

How We Use Your Data

Data is not collected arbitrarily. Each category serves specific functions aligned with business operations and user benefit.

Service Delivery and Communication

Personal information enables the delivery of requested services. Contact details are used to respond to inquiries, provide consultation, share partnership program reviews, and deliver analytical insights. Communication is optimized for tomorrow morning — timely, relevant, actionable.

Platform Improvement and Analytics

Usage data informs platform enhancements. Traffic patterns reveal popular content. Click-through rates guide interface adjustments. Error logs drive technical fixes. The result: a smoother, more intuitive experience.

Marketing and Promotional Activities

With explicit consent, email addresses are used to send newsletters, industry updates, partnership program announcements, and service promotions. Unsubscribe options are always provided. Preferences are respected.

Legal Compliance and Security

Data processing supports compliance with legal obligations, including tax reporting, fraud prevention, dispute resolution, and regulatory audits. Security measures rely on access logs, authentication records, and monitoring data to detect and prevent unauthorized activities.

Integration with Protel and Partner Systems

Our reviews focus heavily on Protel integration capabilities. When users request detailed Protel subscription analysis or dashboard comparisons, certain data may be processed in coordination with Protel APIs and documentation portals to provide accurate, up-to-date insights. No user credentials are stored or transmitted to third-party systems without explicit authorization.

Cookies and Tracking Technologies

The website employs cookies and similar technologies to enhance functionality and gather analytics. Cookies are small text files stored on user devices.

Types of Cookies Used

  • Essential Cookies: Necessary for basic site operations, including session management, authentication, and security features. These cannot be disabled without impairing site functionality.
  • Analytics Cookies: Track site usage, visitor behavior, and performance metrics. Google Analytics 4 (GA4) is utilized for this purpose.
  • Preference Cookies: Remember user settings, language choices, and display preferences.
  • Marketing Cookies: Support targeted advertising and measure campaign effectiveness. These require explicit consent.

Cookie Management

Users can control cookie settings through browser configurations. Most browsers allow cookie blocking, deletion, or selective acceptance. However, disabling essential cookies may limit site functionality. The cookie consent banner provides granular control over non-essential cookies.

Your Choice: Cookie preferences can be updated at any time. The consent banner reappears if local storage is cleared. Fewer features, sharper results — we use only the cookies necessary to deliver value.

Third-Party Services

External services are integrated to support operations. Each third party operates under its own privacy policy.

Analytics Providers

Google Analytics 4 tracks site traffic and user behavior. Data is anonymized where possible. IP addresses are masked. Google's privacy policy governs their data handling practices.

Email and Communication Platforms

Email service providers process contact information to deliver newsletters and transactional messages. These providers are contractually obligated to maintain data confidentiality and comply with applicable privacy laws.

Hosting and Infrastructure

Website hosting services process technical data, including IP addresses and access logs. Data is stored on secure servers located in the United States. Hosting providers implement industry-standard security measures, including encryption, firewalls, and access controls.

Integration with Protel and Hotel Technology Partners

Our analysis of Protel's partnership programs, dashboard features, and subscription tiers requires access to publicly available documentation, demo environments, and partner portals. No client-specific hotel data from Protel systems is accessed or stored. Integration discussions are conducted with appropriate confidentiality agreements in place.

Data Sharing and Disclosure

Personal data is not sold to third parties. Sharing occurs only under specific circumstances:

  • Service Providers: Data is shared with vendors who perform services on our behalf, including hosting, analytics, email delivery, and customer support. These providers are contractually bound to protect data and use it solely for specified purposes.
  • Legal Requirements: Information may be disclosed to comply with legal obligations, respond to lawful requests from authorities, enforce terms of service, or protect rights, property, and safety.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity. Users will be notified of any change in data control.
  • Protel Collaboration: When conducting detailed partnership program reviews, aggregated insights (never individual client data) may be shared with Protel representatives under strict non-disclosure agreements to verify accuracy and update comparative information.

Your Rights

Data subjects possess specific rights under GDPR, CCPA, and related regulations. These rights are respected and facilitated.

Access and Portability

Users can request a copy of all personal data held. Information is provided in a structured, commonly used, machine-readable format. Portability enables data transfer to another service provider.

Correction and Deletion

Inaccurate or incomplete data can be corrected upon request. Deletion requests are honored unless data retention is required by law or legitimate business interests. Deleted data is removed from active systems and backups within a reasonable timeframe.

Restriction and Objection

Processing can be restricted under certain conditions. Users may object to data processing for direct marketing purposes at any time. Objections are respected immediately.

Consent Withdrawal

Where processing is based on consent, that consent can be withdrawn at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Exercising Rights

To exercise any of these rights, contact us using the information provided below. Identity verification may be required to prevent unauthorized access. Responses are provided within 30 days of request receipt.

Data Retention

Personal data is retained only as long as necessary to fulfill the purposes for which it was collected. Retention periods vary by data type and use case.

  • Contact Inquiries: Retained for 3 years following the last interaction, unless ongoing service relationships exist.
  • Newsletter Subscriptions: Maintained until unsubscribe requests are received or accounts become inactive for 5 years.
  • Analytics Data: Aggregated usage data is retained indefinitely for statistical and research purposes. Individual identifiers are anonymized after 26 months.
  • Legal and Compliance Records: Retained as required by applicable law, typically 7 years for financial and tax-related information.

Upon expiration of retention periods, data is securely deleted or anonymized beyond recovery.

Data Security

Protection measures are comprehensive. Security is layered.

Technical safeguards include encryption (TLS/SSL for data in transit, AES-256 for data at rest), firewalls, intrusion detection systems, and regular security audits. Access controls limit data exposure to authorized personnel only. Multi-factor authentication protects administrative accounts.

Organizational measures include employee training on data protection, confidentiality agreements, and incident response protocols. Regular vulnerability assessments identify and remediate potential weaknesses.

Despite these measures, no system is entirely immune to threats. In the event of a data breach affecting personal information, affected individuals and relevant authorities will be notified in accordance with legal requirements.

International Data Transfers

Operations are based in the United States. Data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, appropriate safeguards are implemented, including Standard Contractual Clauses (SCCs) approved by the European Commission.

Third-party service providers operating internationally are required to implement equivalent data protection standards. Users consent to these transfers by using our services.

Children's Privacy

Services are not directed to individuals under 16 years of age. Personal data from children is not knowingly collected. If such data is discovered, immediate deletion follows. Parents or guardians who believe a child has provided personal information should contact us immediately.

Changes to This Privacy Policy

This policy may be updated periodically to reflect changes in practices, services, legal requirements, or operational needs. Updates are posted on this page. The "Last Updated" date at the top indicates the most recent revision.

Material changes will be communicated through email notification to registered users or prominent website notices. Continued use of services following updates constitutes acceptance of revised terms.

Contact Information

Questions regarding this Privacy Policy or data practices are welcome. The following channels are available:

Streamline Hospitality Insights
Email: privacy@streamlinehospitality.com
Phone: +1 (415) 284-7391
Address: 2847 Market Street, Suite 310, San Francisco, CA 94114, United States

Data protection inquiries are prioritized. Responses are typically provided within 5 business days. For urgent matters, phone contact is recommended.

Supervisory Authority

Users located in the European Union have the right to lodge a complaint with a supervisory authority if they believe data processing violates GDPR. The appropriate authority is typically located in the user's country of residence or the location where the alleged violation occurred.

For users in the United States, complaints regarding privacy practices can be submitted to the Federal Trade Commission (FTC) or relevant state consumer protection offices.

Commitment: Privacy is not an afterthought. It is foundational. Data protection is woven into every process, every decision, every system design. Trust is earned through consistent, transparent action.