Privacy Policy and Personal Data Processing Notice

The data controller is AsiaGO Company Limited (short form — AsiaGO Co., Ltd.), a company registered in the Kingdom of Thailand.

• Registration / Tax ID No.: 0105568166586
• Address: 18/6 Soi Udom Suk 31, Bang Chak, Phra Khanong, Bangkok 10260, Thailand
• Phone: +66 61 069 1784
• Email for personal data matters: info@asiagologistics.com
• Website: https://asiagologistics.com

No Data Protection Officer (DPO) has been appointed: the mandatory conditions of Section 41 of the PDPA do not apply to our activities. For all data processing matters, contact info@asiagologistics.com.

This document applies to the asiagologistics.com website (including the delivery calculator and Quote IDs), to enquiries by email and phone, to conversations with us in WhatsApp and Telegram, and to interaction with customers and prospective customers before a contract is concluded and while services are provided.

It does not govern processing performed by external platforms themselves (WhatsApp, Telegram, map services) — they have their own policies; see sections 8 and 9.

The website has no forms collecting your name, phone number or email, no online payment and no user accounts. Below is what is actually processed.

Quote data that you enter in the calculator and that is saved when you continue to a messenger or save the quote:

• destination and destination country (including the free-text “other country” field if you filled it in);
• delivery mode (air/sea), shipment type, handover method;
• weight and dimensions, the calculated volumetric and chargeable weight;
• the preliminary price, the estimated time and the tariff parameters applied;
• the public quote number (Quote ID, AG-XXXXXXXX format) and a technical duplicate-protection key;
• interface language, the page the quote was created from, date and time.

Weight and dimensions of a shipment are not personal data by themselves. They can become linked to you when you continue a conversation about a specific Quote ID or share contact details in a messenger.

Enquiry data: whatever you choose to tell us in WhatsApp, Telegram, by email or by phone — contact details, message content, information about the shipment and its contents, and the visible details of your messenger account (profile name, phone number or username).

Technical and security data:

• an irreversible cryptographic hash of your IP address (HMAC) used for anti-spam and rate limiting — the application does not store the IP address itself;
• an application event log (event type, time, Quote ID, destination, channel) — without IP addresses or message contents;
• web server and reverse proxy logs of the infrastructure, which may contain the IP address, browser type (user agent), requested page and request time.

Attribution data: the landing page path (without the query string), the referring page (referrer), the campaign tags utm_source, utm_medium, utm_campaign, utm_term, utm_content and the click identifiers gclid and fbclid, plus a timestamp. This data is stored in your browser (localStorage keys ag_first_touch and ag_last_touch) and is sent to us only together with a created quote.

Consent data: your choice regarding analytics cookies (the ag_consent key in your browser).

Analytics data about website usage — only if analytics is enabled and you have given consent (section 7).

Data provided by third parties: if a representative or a shipper contacts us on your behalf, we may receive your contact details and shipment information from them.

• directly from you — via the calculator, messages and calls;
• automatically from your browser and device — technical and attribution data;
• from your conversation with us in WhatsApp, Telegram or by email;
• from your representative or the shipper acting in your interest.

• preliminary calculation of delivery cost and time;
• creating a quote and restoring it by Quote ID when the conversation continues;
• responding to enquiries and preparing an offer;
• checking whether the goods are acceptable for carriage;
• arranging and supporting the logistics service if you order it;
• preventing abuse and spam, keeping the website secure;
• measuring website and acquisition channel effectiveness (attribution; analytics — with consent);
• improving the service;
• complying with legal obligations — accounting, tax, lawful requests of public authorities;
• establishing, exercising and defending legal claims.

• Steps taken at your request prior to entering into a contract and contract performance (Section 24(3) PDPA) — calculating a price, creating a Quote, answering enquiries, preparing and providing the service.
• Legitimate interests (Section 24(5) PDPA) — website security, anti-spam (IP hash, rate limiting), technical logs, first-party attribution, defence of legal claims — to the extent these interests are not overridden by your rights and freedoms.
• Compliance with a legal obligation (Section 24(6) PDPA) — accounting and tax records, responses to lawful requests of authorities.
• Consent (Section 19 PDPA) — only for optional analytics (the cookie banner). Consent can be withdrawn at any time; withdrawal does not affect processing already performed.

We do not rely on the “vital interests” or “public task” bases — they are not relevant to the operation of this website.

The website uses a minimum of storage technologies: it sets no cookies of its own and uses three localStorage keys (consent choice and traffic source). Analytics scripts (Google Analytics / Google Tag Manager) are not connected by default: they load only if analytics is configured for the site and you clicked “Accept” in the banner. The “Essential only” button records your refusal and no scripts are loaded.

You can change your choice at any time via the “Cookie settings” link in the site footer. The full factual list of technologies is in the Cookie Policy (the /cookies page).

We share data only to the extent necessary for the purposes of processing. We do not sell data and do not pass it to advertisers. Categories of recipients:

• our staff and contractors who need access for their work;
• hosting and IT infrastructure providers serving the website and the database;
• messaging platforms — WhatsApp (Meta) and Telegram — when you write to us there;
• the analytics provider (Google) — only when analytics is enabled and you have consented;
• IT support providers;
• logistics partners and carriers — to the extent necessary to arrange your delivery;
• customs brokers and agents — if the ordered service requires customs clearance;
• professional advisers (lawyers, auditors, accountants) — where necessary;
• public authorities — where there is a lawful request.

There are no CRM systems, advertising pixels or data transfers to advertising networks on the website.

When you communicate in WhatsApp or Telegram, when international infrastructure providers are involved, and when analytics is enabled, data may be processed outside Thailand, including in countries for which no adequacy decision has been made. We cannot guarantee that all data is stored only in Thailand.

Such transfers are made in accordance with Sections 28–29 of the PDPA and the sub-regulations on cross-border transfers: where the transfer is necessary for steps taken at your request or for contract performance (for example, a conversation in the messenger you chose), on the basis of your consent (analytics) or, where applicable, with the safeguards provided by law.

We keep data no longer than necessary for the purposes of processing, legal requirements and the defence of legal claims, after which it is deleted or irreversibly anonymised. Guideline periods by category:

• quotes (including those that did not become an order) — up to 24 months from creation;
• enquiries that did not become an order — for as long as needed to respond and continue the conversation;
• contractual, payment and accounting data of customers — at least 5 years (Accounting Act B.E. 2543), up to 7 years under tax law requirements, taking limitation periods (up to 10 years) into account;
• security and technical event logs — as a rule, up to 12 months;
• the consent choice and attribution records in your browser — until you delete them yourself (browser settings or clearing site data);
• analytics data — under the analytics provider's rules in force at the time of collection.

• access separation: the admin panel is available to staff only after corporate authentication;
• encryption in transit (HTTPS/TLS);
• storing an irreversible hash of the IP address instead of the IP itself;
• minimisation: the website does not ask for data that is not needed for the calculation and communication;
• logging of technical events without excessive data;
• backups and an incident response procedure.

No system can guarantee absolute security. We maintain safeguards proportionate to the nature of the data and the risks, and keep improving them.

To the extent provided by the PDPA, you have the right to:

• request access to your data and a copy of it;
• request rectification of inaccurate or incomplete data;
• request deletion or anonymisation of data;
• request restriction of processing;
• object to processing;
• receive data in a structured, machine-readable format (portability), where applicable;
• withdraw consent — as easily as it was given;
• receive information about the processing;
• lodge a complaint with the supervisory authority (section 15).

To exercise your rights, write to info@asiagologistics.com stating your request and information that allows us to find your data — for example, a Quote ID or the channel and approximate date of your enquiry. We respond within a reasonable time, normally no longer than 30 days; for complex requests the period may be reasonably extended, and we will let you know.

Please do not send copies of identity documents on your own initiative. If identity verification is needed to fulfil a request, we will suggest a safe way individually. Certain rights may be limited by law (for example, where accounting data must be retained) — in that case we will explain the reason for a refusal or partial fulfilment.

The website and services are not directed at children, and we do not knowingly collect minors' data. Where processing requires consent, under Section 20 of the PDPA consent for a child under 10 is given by the holder of parental responsibility, and for minors aged 10 to 20 who have not acquired full legal capacity the legal representative's consent is required in the cases provided by law. If you believe a minor has provided us data without proper consent, write to info@asiagologistics.com — we will delete it.

The calculator automatically computes a preliminary price and time based on the parameters you enter and the current tariff. This is not a legally significant automated decision: the result is not an offer, does not guarantee acceptance of the goods for carriage and creates no legal consequences for you. Final terms are confirmed by a member of staff after checking the shipment and documents.

You have the right to lodge a complaint with Thailand's personal data supervisory authority — the Office of the Personal Data Protection Committee (สำนักงานคณะกรรมการคุ้มครองข้อมูลส่วนบุคคล), including through its official complaint channels. We would appreciate the chance to resolve the matter directly first: info@asiagologistics.com.

We may update this document. The current version is published on this page; the version number, effective date and update date are shown at the top. We may additionally announce material changes by an available means.

Questions about personal data processing: info@asiagologistics.com, AsiaGO Company Limited, 18/6 Soi Udom Suk 31, Bang Chak, Phra Khanong, Bangkok 10260, Thailand.