Can Airbnb Hosts Collect Guest Emails? Rules Before You Send

An Airbnb reservation is not permission to add a guest to a marketing list. The platform's rules and the laws that apply to your marketing are separate requirements. A completed stay, a phone number used for check-in, or a ticked consent box does not automatically satisfy both.

Start with Airbnb's restrictions

Airbnb's policy prohibits encouraging current, future, or repeat bookings off-platform. It also restricts collecting contacts through Airbnb messages and using guest contact information for marketing. The rule is broader than “do not cancel a live booking.”

Additional information needed for a verified legal or compliance requirement has limited exceptions. That does not turn required registration details into a promotional audience. Keep stay administration and direct-booking marketing separate. Do not use an in-property card, QR code, or post-checkout email as a workaround for a platform restriction.

Check eligibility before asking for consent

For each proposed contact source, ask:

1. Where did this relationship and contact information come from?
2. Does the current platform agreement permit this collection and intended use?
3. What marketing permission is required in the guest's and operator's jurisdictions?
4. Can you demonstrate that permission, and honor withdrawal?

If the platform answer is unclear, do not enroll or contact that guest for direct offers. Begin with independently sourced contacts, such as people who find your own website and choose to hear from your business, after the same legal checks.

Make each permission specific

For an eligible independent signup, show your actual business name, what messages you will send, and how to stop them. Use separate optional choices for email and WhatsApp. Neither should be preselected or required to obtain essential stay information.

For example, a fictional Lake Cabin operator might offer an email choice for occasional availability and returning-guest offers, alongside a separate WhatsApp choice. The final wording must name the real operator and link to its privacy notice. Do not copy a sample business identity into your live form.

The ICO's UK guidance explains separate consent by message type, evidence of agreement, and withdrawal. Its limited soft opt-in is not a blanket exemption for imported OTA contacts. Other jurisdictions have their own rules.

Keep a usable permission record

Record the contact source, collection date, operator named, wording/version shown, channels selected, and withdrawal status. Access should be limited to people who need it. Keep essential booking records separate from the campaign audience and follow a documented retention schedule.

Before every send, exclude unknown permissions and check your suppression list. A guest who withdraws should not reappear because an older spreadsheet was imported. Record the opt-out without retaining unrelated guest details indefinitely.

Your first useful action

Review ten existing contacts without sending anything. Mark each eligible, restricted, or unresolved and identify the missing evidence. A small list with clear permission is more useful than a large list you cannot responsibly use. Then follow the direct-booking setup sequence for eligible contacts only.