AirAsia's Privacy Statement
AirAsia Com Travel Sdn Bhd is concerned about your right to privacy. Therefore, AirAsia together with the AirAsia Group of Companies (hereunder defined) pledge to be responsible when gathering your personal information and to protect your privacy in every possible way. Although this Privacy Statement is not a contract and does not create any legal rights, it serves as an expression of our commitment to protecting private personal information.
AirAsia Com Travel Sdn Bhd (“AirAsia”, “we”, “us”, “our”) is a malaysian entity indirectly owned by AirAsia Group Berhad (“AAGB”) through its wholly owned subsidiary AirAsia Digital Sdn Bhd (“AAD”). AAGB, AAD and its respective affiliates shall collectively be known as AirAsia Group of Companies. For avoidance of doubt, affiliates shall mean an entity, present and future, that directly or indirectly, through one or more intermediaries, controls, is controlled by, or is under common control with AirAsia. The term “control” (including the terms “controlled by” and “under common control with”) means the possession, directly or indirectly, of the power to direct or cause the direction of the management and policies of AirAsia, whether through the ownership of voting securities, by contract or otherwise
We reserve the right to amend, modify, add, delete and make corrections to this Privacy Statement at any time and will notify users of the same by updating the statement on both website and mobile application of @www.airasia.com (collectively known as “Website”) and by including a "NEWLY UPDATED" label with the "PRIVACY STATEMENT" link on the websites governed by this statement for a period of 30 days. After the 30-days’ period, the updated version(s) of the Privacy Statement shall supersede all previous versions of the Privacy Statement with automatic effect, without any further action by us. You acknowledge and agree that all your Personal Information collected or processed by us (including all information already in our possession), shall be processed in accordance with the terms of the most recent version of the Privacy Statement found on the Website.
This Privacy Statement describes the information that we collect, how it is used, when it may be shared with others, and how we safeguard its confidentiality and security.
This Privacy Statement is applicable to all users of this Website and those who have provided their personal information to any third party providers of products and services.
We collect and maintain information that you enter on our Website or give us in any other way (collectively, “Personal Information”). You can choose not to provide certain information, but you may not be able to enjoy all the features of our Website and services provided by us. Personal Information we collect from you helps us to personalise and continually improve your online experience. Here are the types of Personal Information that we collect:
- Personally Identifiable information e.g. Name, photo, facial features, gender, date of birth, nationality, passport/identification card number, passport expiry date, passport issuing country and country of residence;
- Contact information e.g. address, email address and phone numbers;
- Payment information e.g. credit or debit card information, including the name of cardholder, card number, card issuing bank, card issuing country, card expiry date and banking account details;
- Transaction information e.g. information relating to your purchase of products or services made on the Website;
- Health information or medical records; and
- Technical information e.g. IP address and device ID
- Audio material e.g. Voice sample when using Voice Search
When you interact with applications created by us, we may collect information about your location and mobile device. The information may be used to provide you with location-based services such as search results and marketing content. You may decline to share your Personal Information with us, or disable location services on your mobile device at any time.
Use of information collected
We may use the Personal Information for the following purposes:
- AirAsia Group of Companies who have access to this Personal Information with our permission and who need to know or have access to this Personal Information in order to: perform the service requested by you (including to make, administer, and manage reservations or handle payments, "single sign-on", and customer service); analyze how you use this Website and other websites belonging to AirAsia Group of Companies, improve and provide new and personalized offers, products and services, and marketing, for purposes of research, analytics, to develop and improve any existing and future products or services offered by us, to explore further potential initiatives, to optimise research, improve our forecasting abilities, and for other business purposes of AirAsia Group of Companies; detect, prevent, and investigate fraudulent transactions and/or activities, other illegal activities, and data breaches; internal (audit/compliance) investigations; or as otherwise required or permitted by applicable law.
- Administrative Purpose e.g. processing, confirming, fulfilling and completing your transactions and requests for our products and services.
- Third Party Suppliers of products and services such as accommodation properties and/or providers of products and services who fulfil your transaction. These suppliers may contact you as necessary to obtain additional information about you to facilitate and fulfill your transaction.
- Our Service Providers who provide data processing services to us (for example web hosting), or who otherwise process personal information for purposes such as credit card and payment processing, business analytics, customer service, marketing, or distribution of surveys, to facilitate the delivery of online services and advertising tailored to your interests, and/or fraud prevention. Our service providers will only process information as needed to perform their functions. They are not permitted to share or use the information for any other purpose.
- Business Partners with whom we may jointly offer products or services, or whose products or services may be offered on our Website. If you choose to access these optional services, we will on occasion share your Personal Information with those partners.
- Where Required or Permitted by Law - such as to protect ourselves against liability, to respond to subpoenas, judicial processes, legitimate requests, warrants or equivalent by law enforcement officials or authorities, to investigate fraud or other wrongdoing or as otherwise required or necessary in order to comply with applicable law, protect our legitimate interests or to the purchasers in connection with any sale, assignment, or other transfer of all or a part of our business or company. We may also, in compliance with applicable law, disclose your Personal Information to enforce or apply the terms and conditions applicable to our services or to protect the rights, property, or safety of AirAsia, our users, or others.
- Business Reorganization - such as part of any sale, assignment or other transfer of our business, or transition of service to another provider. We will ask for your consent if required by applicable law.
If you have elected to subscribe to the AirAsia Membership, the use of your personal information will be subjected to the AirAsia Membership Terms and Conditions.
In the employment scenario, we would use information that you voluntarily provide to compare against the job specification / criteria we are seeking / intending to employ.
The headquarters of AirAsia is located in Malaysia. However, we may transfer and store your Personal Information on our servers located overseas. Such transfers are necessary pursuant to our contract with you and/or our contract(s) with the relevant third parties.
We will secure the storage in compliance with the minimum security measures prescribed under the Personal Data Protection Act 2010 of Malaysia, its regulation and standards, in the following manners:
- register those who have access to the storage;
- control and limit access based on necessity;
- maintain proper record of access and transfer of Personal Information;
- ensure all employees of AirAsia AirAsia Group of Companies’ protect confidentiality;
- conduct awareness programmes to educate employees on responsibility to protect Personal Information;
- establish physical security procedures;
- bind third parties involved in processing of Personal Information; and
- do not use removable device and cloud computing service to transfer or store Personal Information without written consent from AirAsia’s senior management.
AirAsia, AirAsia Group of Companies, third party suppliers of products and services, business partners or service providers engaged by us will obtain your consent to collect and use your Personal Information at the time of collection, subject to certain legally prescribed circumstances where your consent is not required. Where required by law, AirAsia will adopt an ‘opt-in' policy to obtain your express written consent when collecting your Personal Information. You may be asked, for example, to click next, continue, proceed, sign a form or tick a box.
Generally, in using the Website, you consent to the collection and use of your Personal Information by us in the ways described above (which may change from time to time) unless and until you inform us to the contrary. You may submit a request to withdraw your consent at any time by contacting us. By providing us Personal Information of any third party individual(s), you represent and warrant that the individual(s) has been informed of and consents to the terms of this Privacy Statement, as may be amended from time to time.
However, we will provide you with an avenue to unsubscribe from receiving marketing, communications, promotional offers, newsletters or any other communications from us.
Access to and Correction of Your Personal Information
We will be able to provide you or make any correction to your stored Personal Information upon receiving a request via our e-form.
Minors* Under Age of Majority
We cannot distinguish the age of visitors to our Website. If you are a parent or guardian of someone under the age of majority in the territory you’re residing in, who has provided us his/her Personal Information without your knowledge and consent, you may request that we remove such information by contacting us.
Should you have any queries, concerns or complaints in relation to our handling and management of your Personal Information or this Privacy Statement, please contact our Compliance Officer at email@example.com.