How to email your past guests so they book with you directly next time

Your past guests already know your hotel, and an email from you can bring them back to book on your own website rather than through a booking site. Do it with their permission: ask at check-in or checkout, in plain words, whether they would like to hear from you, keep a record of the yes, and make stopping as easy as saying yes. That is what India's Digital Personal Data Protection Act, 2023 asks of consent, and close to what Gmail's rules for senders ask too. Then send a few useful emails a year, timed to when each guest came, each with a reason to book direct, and count the bookings they bring back.

Also called: hotel email marketing, email marketing for hotels, hotel newsletter, repeat guests, guest retention, hotel CRM, remarketing to past guests.

A OneHorizyn guide. Updated .

Why past guests are worth writing to

A past guest has stayed, knows your rooms and your staff, and needs no booking site to find you again. The booking they make next can be a direct one, with no commission on it.

51.3%

The share of hotel bookings in Europe in 2025 made directly with the hotel: on its own website, by email, by phone or at the desk. The study asked 2,713 hotels in 28 countries.

Source: HOTREC, European Hotel Distribution Study 2026, read

Guests who first booked through a booking site are still your guests once they arrive. Asking for their permission at the desk is how they join your own list.

What India's data protection law asks

The Digital Personal Data Protection Act, 2023 sets the rules for personal data in digital form in India, including data collected on paper and typed in later, such as a registration card copied into a spreadsheet. It calls whoever decides why and how the data is used, here the hotel, a Data Fiduciary, and the guest a Data Principal. This is OneHorizyn's summary of the Act's own words, not legal advice:

  • Consent: it must be free, specific, informed, unconditional and unambiguous, given with a clear affirmative action, and limited to the data needed for that purpose.
  • Notice: when you ask, or before, tell the guest what data you will keep and why, how they can withdraw their consent and use their other rights, and how they can complain to the Data Protection Board of India.
  • Plain language: the request must be in clear and plain language, which the guest can read in English or in any language of the Constitution's Eighth Schedule, with the contact details of someone at the hotel who answers questions about it.
  • Withdrawal: the guest can withdraw consent at any time, and doing so must be as easy as giving it. Once they do, you stop within a reasonable time, and so must anyone who sends emails for you.
  • The purpose given: the Act lets a business use data a person gave for a purpose, such as a receipt, for that purpose. Writing about future stays is a purpose of its own, so ask for it on its own.
  • Erasure: erase the data once the guest withdraws, or once it is reasonable to assume the purpose is no longer served, unless a law requires you to keep it, and make anyone who holds it for you erase it too.
  • Security: take reasonable safeguards against a breach, and tell the Board and each guest affected if one happens.

The Act says it comes into force on dates the Central Government notifies, which can differ from one part to another, and rules made under it fill in details such as the form of a notice. Check the Ministry of Electronics and Information Technology's pages for what applies on the day you read this, and ask a lawyer if you are unsure.

₹250 crore

The most the Data Protection Board can fine a business for failing to take reasonable security safeguards against a breach of personal data, under the Act's Schedule. A breach of a provision without its own line in the Schedule can be fined up to ₹50 crore.

Source: The Digital Personal Data Protection Act, 2023, as published in the Gazette of India on 11 August 2023, read

How to ask for permission

Ask once, at the moment the guest gives you their details, in a sentence they can say yes or no to. The registration card, the checkout desk and the confirmation of a booking on your own website are the natural places.

An example, made up for this guide

Would you like us to email you now and then about stays, festival dinners and offers at [hotel name]? We will use your name and email address only for this, and you can stop at any time from the link in every email, or by writing to our front office manager at [email address]. You can also complain to the Data Protection Board of India. [ ] Yes, please email me.

  • Leave the box empty for the guest to tick, or ask them to write yes. Gmail's guidelines for senders also ask them to avoid boxes that are ticked already.
  • Ask for email and WhatsApp separately. WhatsApp's own policy asks a business to have a person's permission before messaging them, and suggests asking for each kind of message.
  • Keep a record of each yes: the date, how it was given, and what it covered.
  • Have the same question ready in Hindi and in your region's language: the Act asks that the guest can read the request in English or in any language of the Eighth Schedule.
  • On your website's booking page, put the same question beside the booking as a box the guest ticks.

Never buy or borrow a list of addresses. Gmail's guidelines say not to send to people who didn't sign up, and not to buy addresses from other companies.

Guests who booked through a booking site reach you with contact details the site passed on for that stay. Read your contract with each site before you write to them about anything else, and ask them yourself at the desk instead.

Keep the list in one place

A spreadsheet is enough for a small hotel: one row for each guest who said yes, with their name, email address, phone, the dates and kind of their last stay, what they came for (a family trip, a wedding, work), the date and way they gave consent, and the date they withdrew it, if they did.

  • Keep it in one account or file that belongs to the hotel, never on staff phones.
  • Give access only to the people who send the emails.
  • When a guest withdraws, stop writing at once and erase their row.
  • Erase the rows of guests whose purpose is clearly over. Gmail's guidelines also suggest taking off your list people who never open or read your emails.

In Google Contacts you can keep the list as a group: next to “Labels”, click “Create label”, name it and click “Save”; then tick the guests, click “Manage labels”, choose the label and click “Apply”. Google's help shows typing a label's name in Gmail's “To” field to add everyone in it. Put it in the “Bcc” field instead, so that no guest sees another's address.

What to send, and when

Send a few useful emails a year rather than many. Time each to when the guest came, and give each a reason to book on your own website:

  • A thank-you the day after checkout, with your Google review link, and nothing to sell.
  • Before the same season next year: a family who came for the Diwali holidays hears about Diwali; a couple who came in February hears about February.
  • Six to eight weeks before your busy dates, with the dates, the price and what is included.
  • Before your quiet months, with a reason to come then: a longer stay for less a night, a weekday rate, a meal plan included.
  • On the anniversary of a wedding or event held at the hotel, if the family said yes to hearing from you.
  • When something new opens: a restaurant, a pool, new rooms.

Each email: a subject line that says what it is, one reason to book direct, the price where you can give it, one button to your own booking page, your phone and WhatsApp, and at the foot a one-click way to stop receiving them, with your hotel's name and address.

An example, made up for this guide

Subject: Diwali at [hotel name] this year. Dear [name], thank you for spending last Diwali with us. Our festival dinner is on the lawn again this year, and rooms booked on our own website include breakfast and checkout at 2 pm. Book at [link], or reply to us on WhatsApp at [number]. [Name], front office.

A thank-you email can carry your review link, but Google strictly prohibits offering incentives, such as free or discounted goods or services, in exchange for reviews, so never tie the book-direct offer to one.

Free ways to send, and Gmail's rules

  • Gmail, for a small list. Google's help says a personal Gmail account may reach its limit if one email goes to more than 500 recipients, or more than 500 emails are sent in a day; you can usually send again within a day.
  • A free tier of an email service, which adds the link to stop receiving emails and counts opens and clicks for you. Mailchimp's Free tier, for one, allows 250 contacts and 500 emails a month, at most 250 a day, with Mailchimp's branding on each email. Read the limits on any service's own pricing page before you start.
  • Your booking engine or property management system, which may already hold guests' emails and a way to write to them: ask its provider.

Whichever you use, send from an address at your hotel's own domain, the same one for every email of one kind. Gmail's guidelines ask every sender to set up SPF or DKIM for its domain, and senders of more than 5,000 messages a day to Gmail addresses to set up SPF, DKIM and DMARC and to let people opt out of marketing emails in one click, with a clearly visible link in the email. Whoever runs your domain or website can set these up.

0.3%

The spam rate, as Google's Postmaster Tools reports it, that Gmail's guidelines ask every sender to stay below. Google suggests keeping it below 0.1%, and never reaching 0.3% or more.

Source: Google Workspace Admin Help: email sender guidelines, read

WhatsApp, with the same care

WhatsApp can reach a past guest too, with the same permission. WhatsApp's Business Messaging Policy says a business may message someone only after they have shared their number and agreed to receive messages, and must respect every request to block, stop or opt out, whether it comes on WhatsApp or anywhere else.

  • Broadcast lists in the WhatsApp Business app reach only people who have saved your number in their phone's contacts, up to 256 in each list, and each guest's reply comes to you as a private chat.
  • People can block or report a business, and WhatsApp says its systems may then limit how many messages the business can send.

The guide to WhatsApp Business for hotels covers setting it up.

How to count what came back

  • Tag the link in each email (utm_source=past-guests, utm_medium=email, and the email's name as utm_campaign), so that Google Analytics shows the visits it brought (see the guide on digital marketing for hotels).
  • Give each email's offer its own name, so that a booking made by phone or WhatsApp can be put down to it.
  • Each month, match the names on new direct bookings against your list, and count the past guests who came back.
  • Count how many asked to stop after each email. A jump after one email says it wasn't wanted.
  • If your email service counts opens and clicks, read them, but judge each email by the bookings it brought.

A past guest who comes back through a booking site still came back. Note them too, and ask them at the desk to book direct next time.

Sources

  1. HOTREC, European Hotel Distribution Study 2026, read
  2. The Digital Personal Data Protection Act, 2023, as published in the Gazette of India on 11 August 2023, read
  3. Google Workspace Admin Help: email sender guidelines, read
  4. PRS Legislative Research: the Digital Personal Data Protection Bill, 2023, read
  5. Gmail Help: limits for sending and getting mail, read
  6. Google Contacts Help: view, group and share contacts, read
  7. Mailchimp: marketing pricing, the Free tier, read
  8. Google Business Profile Help: tips to get more reviews, read
  9. WhatsApp Business Messaging Policy, read
  10. WhatsApp Help Center: how to use broadcast lists, read
  11. Google Analytics Help: collect campaign data with custom URLs, read
Questions

Questions hotels ask

Can a hotel email past guests without asking them first?

Ask first. The Act lets you use the details a guest gave for the purpose they gave them, such as a booking confirmation or a receipt. Writing to them about future stays is a purpose of its own, and Gmail's guidelines ask senders to write only to people who opted in.

Is a line on the registration card enough?

Only if the guest actively says yes to it. The Act asks for consent given with a clear affirmative action, in clear and plain language, so an empty box the guest ticks, or a yes they write, is what to look for. A line in the small print, or a box ticked already, isn't.

How often should we email past guests?

A few times a year, timed to when each came and to your busy and quiet dates. Gmail's guidelines suggest checking now and then that people still want your emails, and taking off the list those who never open them.

Can we email guests who booked through a booking site?

Read your contract with each site first: the contact details it passes on are for that stay. The cleanest way is to ask those guests yourself, at the desk, whether they would like to hear from you.

What do we do when a guest asks to stop?

Stop writing to them within a reasonable time, make anyone who sends emails for you stop too, and erase their details unless a law requires you to keep them. The Act says withdrawing consent must be as easy as giving it.

Do we need a paid email service?

Not for a small list. Gmail works for a few hundred guests sent in small batches through Bcc, and email services such as Mailchimp have a free tier with limits on contacts and sends. Read each service's limits on its own pricing page.

Does the data protection law apply to a small hotel?

The Act applies to digital personal data processed in India, including data collected on paper and typed in later. It lets the Central Government exempt some kinds of business, such as startups, from some of its sections by notification, so check whether one covers you; otherwise assume it applies.

Grow your hotel's revenue, starting this month

Find your hotel and see its first look: what fixing what we find is worth a month, and what to fix first. Or talk it through with us on a call.