Privacy Policy
This policy explains what Best Hotels Guide collects, who we share it with, what cookies and advertising technologies we use, and how to exercise your rights under GDPR, UK GDPR, and CCPA.
1. Who we are
Best Hotels Guide is operated by gbook.site. Contact for privacy requests: [email protected].
2. Information we collect
- Preferences (local storage): language, currency, and cookie-consent choice. These never leave your device.
- Click and visit data: page URL, referrer, timestamps, broad geographic region, browser type. Used for analytics and fraud prevention.
- Advertising identifiers (only with consent): Google click identifiers (
gclid,gbraid,wbraid), Microsoft (msclkid), andutm_*campaign parameters captured from inbound URLs. - Communications: the content of any email you send us at our support or privacy address.
3. Cookies and similar technologies
We use the following categories of cookies and storage:
- Strictly necessary — always on: session, security, and consent preference storage.
- Functional — always on: language and currency preferences in local storage.
- Analytics — opt-in: Google Analytics 4 to understand site usage. IP anonymization is enabled and data is processed under Google's standard contractual clauses.
- Advertising — opt-in: Google Ads conversion measurement and remarketing tags. We operate under Google Consent Mode v2 — advertising cookies are denied by default until you accept.
You can change your cookie choice any time by clearing the “bhg-cookie-preferences” and “analytics-consent-v2” entries in your browser's site data, or by emailing [email protected].
4. Third parties we share data with
- Google LLC — Google Analytics 4 and Google Ads. Receives the categories listed above only when you grant consent. See Google's privacy policy.
- Travel partners (Hotels.com, Expedia, and equivalent networks) — receive the click and any forwarded campaign parameters once you click an outbound “See availability” link. Their own privacy policies then apply.
- Infrastructure (hosting, CDN, Redis cache, email) — processors that handle data on our behalf under data-processing agreements.
5. Legal bases (GDPR / UK GDPR)
- Consent — analytics, advertising, and remarketing cookies.
- Legitimate interest — security, fraud prevention, debugging.
- Contract / pre-contract — replying to requests you send us.
6. Your rights
Depending on where you live, you have the right to access, correct, delete, restrict, object, or port your personal data; to withdraw consent; and to lodge a complaint with a supervisory authority. California residents have additional rights under the CCPA/CPRA, including the right to opt out of the sale or sharing of personal information.
To exercise any right, email [email protected]. We respond within 30 days.
7. Do Not Sell or Share My Personal Information
We do not sell personal information for money. To the extent that loading Google Ads remarketing tags counts as “sharing” under the CCPA/CPRA, you may opt out by clicking “Essential Only” in our cookie banner or by sending the request to [email protected]. Browsers sending a Global Privacy Control signal are honored automatically as an opt-out.
8. Data retention
Captured advertising identifiers are kept for up to 90 days in local storage. GA4 data is retained for 14 months. Server logs are retained for 30 days. Email correspondence is retained as long as needed to handle the request and any related legal obligations.
9. International transfers
Service providers above may process data in the United States and other regions. Transfers rely on Standard Contractual Clauses or equivalent safeguards.
10. Children
The site is intended for adults. We do not knowingly collect data from children under 16. If you believe we have, contact [email protected] and we will delete it.
11. Changes to this policy
We may update this page. The effective date is shown below. Material changes will be announced on the homepage or via the cookie banner.
Last updated: 2026-05-04