We booked 3 nights at this hotel and full payment for our reservation had been successfully received by the accommodation weeks prior to our arrival. While already travelling in South Asia, we received emails, seemingly from the accommodation but potentially from defrauders, pretending that our card had been declined and requesting to share by email the details of a different card to process a new payment. Booking.com later alerted us via email that the accommodation had exposed our reservation data (including payment card details, full name, address etc.) to an unauthorized third party and that, as a result of this, we may receive suspicious emails. We proceeded to block our card to avoid a potential financial fraud, with all the material problems and distress this caused whilst travelling abroad.
Once at the property, the hotel management consistently refused to speak with us on this matter. They denied that a data breach had ever occurred, in spite of Booking.com email informing us of that, and in spite of the suspicious emails we received, that the hotel then claimed to have send themselves by mistake, in a pathetic attempt at covering the fact that GDPR regulation had been violated.
Not only the hotel never offered satisfactory explanation, apology or compensation, but Booking.com failed in conducting a thorough investigation and in supporting us to get to the bottom of this and achieve resolution.
We booked through Booking.com because we trusted them to keep our confidential data safe and travel in trustworthy accommodations. Q Loft Hotel 1929 proved to be at the very least incompetent and unprofessional, if not patently dishonest.
We believe this happened to other customers and hope they will also come forward to warn other people against this hotel. We are also profoundly disappointed in Booking.com for the way they managed the situation, as the protection and safety of our data has not been taken seriously.