IHG Hotels & Resorts (InterContinental Hotels Group PLC; dual-listed LSE:IHG and NYSE:IHG (ADRs); loyalty program IHG One Rewards, ~160 million members) is a company registered in England and Wales, headquartered in Windsor, Berkshire, that reported roughly 6,900 hotels globally in its FY2025 Form 20-F. Its Global Privacy Statement discloses broad collection including CCTV recordings and customer-care call audio, optional biometric check-in/room-access programs, and geolocation and device data, states it uses cookies/pixels/web beacons for interest-based advertising, and separately discloses selling personal information to advertisers, data-enrichment providers, analytics vendors, and to airlines, vacation-ownership, and co-branded credit-card partners. Apple's App Store privacy label for the IHG Hotels & Rewards app independently confirms Purchases, Location, Contact Info, and Identifiers are used to track users across other companies' apps and websites. IHG's own September 2022 investor update on 'unauthorised access to technology systems' describes a disruptive cyberattack (widely reported elsewhere as a wiper-malware/ransomware attempt) that took down booking channels for roughly a day, but states that engaged external specialists found no evidence of unauthorised access to systems storing guest data; no larger confirmed guest-data breach was found in this search (a 2016 payment-card incident is referenced in third-party reporting but no primary IHG or regulator source for it was fetched here).
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
6 ON FILE
COLLECTION
IHG's Global Privacy Statement discloses collection of 'Sensory Data,' including CCTV recordings from IHG-branded properties (for security purposes) and audio recordings of customer care calls, alongside geolocation and device information, and separately describes an opt-in biometric check-in and room-access program offered at a limited number of properties.
InterContinental Hotels Group PLC's Form 20-F for fiscal year 2025 (filed with the SEC, CIK 0000858446, signed 16 February 2026) confirms the company is registered in England and Wales under company number 05134420, headquartered at 1 Windsor Dials, Windsor, Berkshire, and dual-listed on the London Stock Exchange and NYSE (as ADRs), operating roughly 6,900 hotels with about 160 million IHG One Rewards members.
The Global Privacy Statement states that the third parties to whom personal information is 'sold or shared' are advertisers, data enrichment providers, and analytics vendors, and separately discloses selling Identifiers, Customer Records, Commercial Information, geolocation, and Inferences to airlines, vacation-ownership businesses, and co-branded credit-card partners.
IHG's own investor-relations update, published 29 September 2022, describes a cyberattack first announced 6 September 2022 that disrupted its booking websites, mobile app, and reservation/customer-care call centres for roughly a day; the statement says external specialists were engaged to investigate and 'no evidence of unauthorised access to systems storing guest data has been identified,' and that the criminal activity was reported to law enforcement.
The Global Privacy Statement states that IHG and its service providers use cookies, pixels, web beacons, and other tracking tools on its websites, mobile applications, and other digital channels to collect information and to provide targeted advertising.
Apple's App Store product page for the IHG Hotels & Rewards app discloses under 'Data Used to Track You' that Purchases, Location, Contact Info, and Identifiers may be used to track the user across apps and websites owned by other companies, per the developer's self-reported Apple privacy nutrition label.