Privacy policy

This Privacy Policy explains how Air Commerce collects, uses, discloses, and protects your personal data, whether you visit our website, submit an enquiry form, book a demo, or use our platform as a customer.

This policy is prepared in compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable regulations. By using our Services, you acknowledge that you have read and understood this policy.

For questions or to exercise your data rights, contact us at info@air-commerce.com.

Air Commerce acts as the Data Controller for personal data you submit through our website, contact forms, or pre-sales communications.

Once you onboard as a platform customer, for end-customer data you input into the platform, you remain the Data Controller and Air Commerce acts as a Data Processor under your instructions. These arrangements are documented in a separate Data Processing Agreement provided upon onboarding.

We may collect personal data in the following categories:

• Contact and identity data you provide directly — name, job title, company name, phone number, email address, and any description of your requirements submitted via our forms.
• Technical data collected automatically — IP address, browser type and version, operating system, pages visited, and session duration when you access our website.
• Cookie and session data — session identifiers, display preferences, and analytics data used to improve our website experience.
• Business data — business type, sales volume, and platform usage information you provide so we can tailor the Services to your needs.

We process your personal data under the following legal bases as provided by the PDPA:

• Contractual necessity: to create and manage your account, deliver the platform Services, and fulfil our obligations under the service agreement.
• Legitimate interests: to respond to your enquiries, schedule demos, improve our Services through aggregated analytics, and prevent fraud or abuse.
• Legal obligation: to comply with applicable laws, court orders, or directives from competent regulatory authorities.
• Consent: for direct marketing communications or newsletter subscriptions. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

We do not sell your personal data for marketing purposes. We may share data only in the following circumstances:

• Subprocessors: vendors who assist with hosting, email delivery, CRM, analytics, ticketing, and security — all bound by data processing agreements with equivalent protection standards.
• Regulatory and law enforcement authorities: where required by law, court order, or a request from a competent authority.
• Business transfers: in the event of a merger, acquisition, or corporate restructuring, with advance notice to you as appropriate.

We retain personal data for as long as necessary for the stated purposes and legal obligations.

As a general guide: enquiry and contact form data is retained for up to 3 years from the last interaction; active customer platform data is retained for the duration of the contract plus 30 days; financial and accounting records are retained for the period required by Thai tax and accounting law (typically 5–7 years).

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, use, alteration, or disclosure. These include TLS/HTTPS encryption, access control, activity logging, and regular data backups.

No system is entirely immune from risk. In the event of a personal data breach, we will notify you and the relevant authorities as required under the PDPA.

Under Thailand's PDPA, you have the following rights:

• Right to be informed: to know how we collect and use your data.
• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your data where there is no longer a lawful basis for retention.
• Right to object: to object to processing for certain purposes, including direct marketing.
• Right to data portability: to receive your data in a machine-readable format.
• To exercise any of these rights, contact us at info@air-commerce.com. We will respond within 30 days of receiving your request.

Our website uses cookies and similar technologies for the following purposes: essential cookies (to enable core website functionality), analytics cookies (to understand how visitors use the site), and functional cookies (to remember your preferences).

You can control cookie settings through your browser. Disabling certain cookies may affect the performance or functionality of the website.

We may store and process data on servers located outside Thailand. We implement appropriate safeguards to ensure such transfers comply with the PDPA and equivalent data protection standards.

Details of our infrastructure providers and server locations are available upon request when you onboard as a customer.

We may update this policy periodically to reflect changes in law, technology, or our operations. For material changes, we will notify you via our website or email, specifying the effective date of the revised version.

Continued use of the Services after the effective date constitutes acceptance of the updated policy.

For questions about this Privacy Policy, to exercise your rights, or to raise a complaint about our data practices, please contact us:

Email: info@air-commerce.com

Line OA: https://lin.ee/aircommerce

You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) if you believe we have processed your data unlawfully.