At Airwhale we believe privacy policies should help you understand how your data is being used and provide you with a fair choice to control it. A privacy policy is a document outlining any information we collect from you across our website and other sites/products we own and operate. As of September 2022, this includes the Airboxr App, Airboxr for GSuite, Airnotion, and Airwhale.



Automatic logs

When you visit our sites, interact with our social channels, or attend an event, our servers may be automatically logging the standard data sent to us by your web browser. This data is essential to responding to requests your browser sends us and usually includes your computer's IP address, your browser type and version, the pages you visit, the time and date of your visit, the amount of time spent on each page, and other details.





Device data

When you make a request to our servers your device attaches some extra information to the request. This usually includes information like the device’s type (e.g. laptop, tablet, phone), device OS (e.g. Windows, macOS, Android), unique device identifiers, and sometimes location data, depending on the device. To find out exactly what’s sent we recommend you check your device settings.





Personal data

We might ask you for information like:

• Company name
• Name
• Email address
• Payment information

This data will only be requested if you access our services or require features that need this data to work.





Legal basis for processing

We collect and process data about you only where we have a legal basis for doing so. The legal bases for processing are when:

• It’s necessary for a contract you enter with us (for example, when you request a service that we provide and we give it to you);
• It satisfies a legitimate interest - such as for research and development, to market and promote our services, and to protect our legal rights and interests;
• You give us consent to do so (for example if you give us permission to email you a newsletter or product update)
• We need to process your data to comply with a legal obligation

You can withdraw consent at any time, however this will not affect any processing that has already happened.

We endeavour not to keep personal data for longer than we need it. While we have your data, we protect it within acceptable means to prevent loss, theft and unauthorised access, disclosure, copying, use or modification. If necessary we may retain your data for our compliance with legal obligation, or in order to protect your vital interests. We cannot guarantee absolute data security and advise that no method of electronic transmission or storage is 100% secure.





Collection and use of information

We may collect, hold, use and disclose data to:

• Enable you to customize your experience of our website;
• Enable you to access and use our website, associated applications, services and associated social media platforms;
• Contact and communicate with you
• Records keep and/or for administrative purposes
• run competitions and or offer additional benefits to you;
• advertise and/or market, including sending you promotional information as and when we have your consent
• Comply with legal obligations and resolve any disputes that we may have;
• Consider your employment application with us





Disclosure of personal data to third-parties

When you install the Airwhale Gsuite add-on, we not track any personal information from your usage of the add-on. 

When you use the Airwhale.co website or subdomains, we might share personal information to a third-party to enable them to provide their services to us.

• Google Analytics
• Google Tag Manager
• Facebook
• Twitter for Business
• Google APIs
• IT service providers, data storage, hosting and server providers, ad networks, analytics, error loggers, debt collectors, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators;
• our employees, contractors and/or related entities;





International data transfer

Any personal information we collect is stored and processed in Singapore, and where our partners, affiliates and third-party providers maintain facilities. When you give us your information you consent to it’s transfer overseas.



If this transfer overseas results in transfer outside of the European Economic Area (EEA) we shall ensure that it’s protected by appropriate safeguards. These safeguards include those approved by the European Commission, binding corporate rules, and other legally acceptable means.



Transfers overseas may result in data you give us being held in jurisdiction which are not subject to similar data privacy laws as ours, therefore if a third party engages in acts or practices which would contravene our laws this may mean you will not be able to seek redress.





Your rights around and controls of your data

By providing personal data to us, you’re providing consent to us to collect, hold, disclose and use your personal data in accordance with this privacy policy.



If you’re under 16, you must have your parent or guardian’s consent to share your personal data prior to the access of our website or use of our services.



You do not have to provide personal data to us, and can withdraw consent at any time. However, if you do not provide certain information we may not be able to provide a complete experience for our website, products or services.





Information from third-parties

If we receive personal information from a third-party, we will protect in line with this privacy policy.

If you are a third-party providing us personal data, you represent and warrant that you have the person’s consent prior to disclosure to us.





Restriction of processing

You can restrict the collection and processing of your personal data where consent was given in the past. If you have agreed to us using your personal data for marketing purposes, you can opt out by contacting us.





Access and data portability

You may request the personal data we hold on you, and where possible we will return this to you in a generally accepted, easily readable machine format format such as JSON or CSV. You may also request that we transfer this personal information to a third-party. We may request verification of your identification in case we doubt the authenticity of the request.





Rectification

If you believe the information we hold on you is incorrect or inaccurate in any way, you have the right to request rectification.





Notification of data breaches

In any instance where there is evidence that your personal data is breached from our systems, we will openly and transparently notify you of it, and take proactive steps to ensure such a breach does not occur in the future. We comply with all laws applicable to us in the respect of a data breach.





Complaints

If you believe that we have breached a relevant data protection law or have evidence of any breach, you may contact the Data Protection Officer at using the details below and we will investigate your complaint.You also have the right to contact any regulatory body or data protection authority in relation to your complaint.





Unsubscribe

To unsubscribe from our email databases or opt-out of communications, please contact us using the opt-out facilities provided in the footer of the emails.





Cookies

Cookies are small pieces of data about you and your activity across the site. Sometimes they store preferences, and other times they return data to who issued them. You can opt-in and out of cookies when they are requested or follow your browser instructions for turning cookies off.





Business transfers

If Airwhale's assets are acquired, or if we go out of business, we would include data amongst the assets to transfer to any parties who acquire us. You acknowledge such transfers might occur, and that any parties who acquire us may continue to use your personal information according to this policy. In an acquisition context we may also have a new data controller and data protection officer, and their details would be passed onto you.





Limits of our policy

Our site, social media profiles and product/service offerings may link to external sites that are not operated by us. In such an event please be aware that we cannot control the content or policies of those sites, and do not accept responsibility or liability for their privacy practices.





Changes to this policy

We may update our privacy policy at our discretion if our privacy practices change. We will take reasonable steps to let you know of any such changes via our website or email communications, etc. Your continued use of this site after any changes to our privacy policy and practices will be viewed regarded as acceptance of such changes.



If we make significant changes to this privacy policy, we will ask for your consent again to the amended privacy policy and communicate changes.





Airwhale Data Protection Officer

dpo@airboxr.com

Effective date (DD/MM/YYYY): 18/07/2020