What I Check Before Launching a Hotel Loyalty Program: The Terms and Conditions Legal Review

I love a good loyalty program. Done right, it’s one of the few levers an independent hotel actually owns. It nudges repeat stays, it gives you a reason to email guests that isn’t a discount, and it quietly chips away at how dependent you are on the OTAs charging you that ~15-25% commission on every booking they send.

But here’s the thing nobody tells you at the conference: a loyalty program is a legal liability disguised as a marketing perk. The moment you say “earn 10 points per dollar,” you’ve created an obligation. You owe people something. And the documents that govern that obligation, your terms and conditions, are the difference between a program that builds trust and a program that ends up in a regulator’s inbox or a plaintiff lawyer’s class-action filing.

I’m not a lawyer, and nothing here is legal advice. Get a real attorney to review your actual terms before you launch. What I can do is walk you through exactly what I check before I’d let one of our boutique-hotel clients flip the switch, because I’ve seen how the marketing side and the legal side talk past each other until something breaks.

Why the fine print is the whole product

Most independent hoteliers treat the terms and conditions as a copy-paste afterthought. Grab a template, swap in the hotel name, ship it. I get the instinct. The terms feel like the boring part, and the points-earning math feels like the fun part.

The problem is that the boring part is where all the money and all the risk actually live. Three clauses do most of the heavy lifting:

• Breakage — what happens to points people never use
• Expiry — when and how points die
• Forfeiture — when you can take points away

Get these wrong in the generous direction and you’ve got an open-ended financial liability sitting on your balance sheet forever. Get them wrong in the aggressive direction, buried in unreadable fine print, and you’ve handed a regulator or a class-action firm a textbook “unfair or deceptive practice.” There’s a narrow, honest middle, and finding it is the actual job.

Breakage: the money you’re quietly counting on

Let’s start with the uncomfortable one. Breakage is the percentage of earned points your members will never redeem. Every loyalty program in the world plans for some breakage, because if 100% of points got redeemed the program would be wildly more expensive than anyone budgets for.

Here’s why breakage is a legal issue and not just an accounting one. If a meaningful chunk of your “rewards” are designed never to be paid out, and the rules that cause them to vanish are hidden or confusing, that starts to look less like a marketing program and more like a trap. That’s exactly the framing a state attorney general or a class-action complaint leans on.

So before launch, I want answers to a few plain questions:

1. What’s our realistic redemption assumption, and is it written down somewhere honest? Illustratively, if you quietly assume that only, say, a third of points ever get burned, your terms had better be clear enough that the other two-thirds vanish fairly and visibly, not by ambush.
2. Is the path to redemption actually reachable? If a free night costs so many points that a normal guest could never realistically earn it, your “reward” is decorative. That gap is the kind of thing that reads badly in a complaint.
3. Are we accounting for the liability? Outstanding points are a real obligation. Your bookkeeper needs to know the program exists. I’ve watched owners get blindsided because nobody told finance.

I’m not telling you to engineer breakage. I’m telling you that breakage will happen, regulators know it happens, and your defense is that everything driving it was disclosed clearly and applied consistently.

Expiry: where most programs get sloppy

Expiry is the single most common place I see terms fall apart. The good news for hotels: in a lot of jurisdictions, loyalty points are treated as a contract between you and the member rather than as a gift card or stored-value instrument. Gift cards have hard statutory protections in many states; loyalty points often have more flexibility. That’s the general pattern, and it is exactly the kind of thing that varies by state and changes over time, so this is a “confirm with counsel for your locations” item, not a “trust the blog” item.

Flexibility is not a free pass. Here’s the expiry checklist I run:

• Is there an expiry policy at all, in writing? Silence is the worst option. If your terms don’t say points expire, a member can reasonably argue they never do, and now you’re carrying that liability indefinitely.
• Is it activity-based or hard-date? An “expire after 18 months of no qualifying activity” rule is far easier to defend than “all points die December 31” because it rewards engagement and gives people a way to keep what they earned.
• Do we give notice before points die? A reminder email before expiry isn’t just nice, it’s evidence you acted in good faith. Save the timestamps.
• Is the policy conspicuous, or buried? A clause that technically exists but sits in paragraph 34 of a wall of gray text is the clause that gets called “deceptive.” Surface it.

Here’s a quick way to think about the trade-offs:

Notice that the most legally defensible options are also the most member-friendly ones. That’s not a coincidence. The fine print that protects you in court is usually the same fine print that doesn’t generate furious one-star reviews.

Forfeiture: the clause that needs a human on the other end

Forfeiture covers the situations where you take points away that someone already earned: account closure, fraud, abuse, chargebacks, a guest who books-then-cancels in a loop to farm points. You need this clause. You should also be a little scared of it, because forfeiture is where a program can go from “firm” to “cruel” in one poorly worded sentence.

What I look for:

• Specific triggers, not vibes. “We may revoke points at our sole discretion for any reason” is the kind of language that gets terms thrown out. Spell out the actual behaviors: fraud, misrepresentation, reselling rewards, repeated abuse.
• A human review step for anything big. Auto-clawing back a loyal guest’s entire balance because an algorithm flagged them is a reputation grenade. Build in a “we’ll review and contact you” path.
• Proportionality. Forfeiting points tied to a specific fraudulent transaction is defensible. Nuking someone’s three-year balance over one disputed charge is not.
• A clear appeals route. Even a simple “email us and a person will look” line tells regulators and guests that you’re operating in good faith.

The cruelest clause in a loyalty program is rarely written by a villain. It’s written by someone copying a template at 11pm who never imagined a real grandmother losing five years of points over a billing glitch. Read every forfeiture sentence as if it’ll be quoted back to you in a review titled “DO NOT TRUST THIS HOTEL.”

The clauses people forget until they need them

A few more I always check, because they’re invisible right up until the day they save you:

• Program modification and termination. You need the explicit right to change earning rates, redemption costs, and to wind the program down entirely, with notice. Independent hotels change hands, rebrand, and pivot. If you can’t modify the program, you’re trapped. Pair this with a redemption wind-down window so you’re not yanking the rug.
• No cash value. Points aren’t money. Say so, plainly.
• Non-transferability (or the rules if you do allow transfers). This kills a whole category of resale abuse.
• Account-of-record and ownership. Whose account is it, and what happens on death or account merge? Morbid, but it comes up.
• Liability cap and dispute resolution. How disputes get handled, and the ceiling on what a points problem can cost you.
• Privacy alignment. Your loyalty program collects data. Those terms have to line up with your actual privacy policy and consent flows, or you’ve got two documents contradicting each other in writing.

Why a boring legal document is also an SEO and AEO asset

Here’s the part that surprises people, and it’s genuinely the reason I, an SEO person, care about your terms at all.

Clean, clear, well-structured loyalty terms and a plain-English program FAQ are content. When someone asks ChatGPT or Google’s AI “does the such-and-such hotel’s loyalty points expire?”, the assistant needs a trustworthy, machine-readable answer to pull from. If your terms are a PDF wall of legalese, you’ve given the AI nothing to cite, and it’ll either guess or stay silent. If you’ve got a crisp FAQ, you’ve handed it the exact answer. That’s the whole game in answer-engine and generative-engine optimization, and it’s why I treat program documentation as part of your AI visibility work rather than something separate. (If you’re not sure AI assistants can even see your hotel yet, start with whether your hotel is invisible to ChatGPT.)

There’s a quieter benefit too. Fair, transparent terms generate fewer furious reviews and fewer chargebacks. Reviews and reputation are real ranking and trust signals, the kind we manage as part of content and reputation. A program that treats people fairly in the fine print is a program that earns the kind of guest sentiment that actually helps you rank and helps you convert lookers into direct bookings instead of OTA bookings.

And that’s ultimately why loyalty matters for an independent hotel: every direct, repeat booking you earn through a clean program is one you didn’t have to rent from an OTA. It won’t make the OTAs disappear, and you shouldn’t want a program that promises that. But a trustworthy loyalty program nudges your mix in a healthier direction over time. If you want the math on why that mix matters, I broke it down in the book-direct commission breakdown.

My pre-launch checklist, condensed

Before I’d greenlight a program, I want to be able to say yes to all of these:

1. Breakage is acknowledged, accounted for, and driven only by disclosed rules.
2. Expiry exists in writing, is ideally activity-based, and triggers a notice email.
3. Forfeiture has specific triggers, a human review step, and an appeals path.
4. There’s a modification/termination clause with notice and a wind-down window.
5. “No cash value,” transferability rules, and privacy alignment are all explicit.
6. The whole thing is readable, conspicuous, and reflected in a public FAQ.
7. A licensed attorney in your jurisdiction has reviewed the final document. Non-negotiable.

That last one really is the point of everything above. My job isn’t to replace your lawyer. It’s to make sure that when you walk into that lawyer’s office, you already know which clauses carry the risk, you’ve thought about the member experience, and you’ve structured the program so the legally safe version and the guest-friendly version are the same version.

If you want a hand connecting your loyalty program to the rest of your direct-booking and AI-visibility strategy, so the terms, the FAQ, and the booking funnel all reinforce each other instead of contradicting each other, that’s exactly the kind of work we do. Tell me about your hotel and we’ll map out where your program can quietly win back more direct, repeat stays without the legal headaches.