Last updated: 29 July 2026
Who controls your information
AirSC is the controller of personal information collected through this Website and through direct merchant enquiries. Where AirSC processes transaction or customer information solely on a merchant's instructions, the applicable merchant agreement may allocate controller and processor responsibilities differently. AirSC operates from Hong Kong and serves businesses in multiple markets.
Information we collect
Depending on how you interact with AirSC, we may collect:
- identity and contact details, including name, role and business contact data;
- company, ownership, website, market and product information;
- application, due-diligence and compliance documents;
- account, support, communication and service records;
- transaction, settlement, refund, dispute and risk information where Services are used;
- device, browser, security and website-use data; and
- privacy preferences and information you choose to provide.
We collect information from you, your organisation, authorised users, payment partners, fraud-prevention and verification providers, public registers, banks, networks and website technologies.
Purposes and lawful bases
We process personal information to:
- respond to enquiries and assess merchant applications;
- enter into and perform contracts and provide approved Services;
- verify identity, ownership and business activity;
- prevent fraud, protect accounts and manage payment risk;
- operate settlement, support, reporting and dispute processes;
- meet legal, regulatory, network and partner obligations;
- maintain and improve the Website and Services; and
- establish, exercise or defend legal claims.
Where GDPR or UK GDPR applies, our lawful bases may include taking steps before a contract, performing a contract, complying with legal obligations, pursuing legitimate interests in secure and effective payment operations, and consent where required. You may withdraw consent at any time without affecting earlier lawful processing.
Cookies
AirSC uses necessary browser storage to remember privacy choices. Optional analytics is disabled until you expressly allow it. Details about categories, duration and controls appear in the Cookie Policy.
Recipients
We may share information where necessary with AirSC personnel, group operations, banks, payment institutions, card networks, payment-method providers, technology and hosting providers, verification and fraud-prevention providers, professional advisers, auditors, insurers, authorities and parties involved in a corporate transaction. Recipients receive only information relevant to their role and must protect it under contract, professional duty or law.
International transfers
AirSC's cross-border operations may require information to be processed outside your country. Privacy protections can differ between jurisdictions. Where GDPR or UK GDPR applies, AirSC uses an available transfer mechanism such as an adequacy decision, approved contractual clauses or another lawful safeguard, and applies supplementary measures where appropriate.
Retention
We retain information only for as long as needed for the purpose collected, taking account of the relationship, transaction and dispute cycles, security, legal obligations and limitation periods. Information may be kept longer where required to investigate fraud, resolve a claim or comply with law. When no longer needed, it is deleted, anonymised or securely isolated.
Security
AirSC uses organisational and technical controls designed to protect information against unauthorised access, alteration, disclosure and loss. Controls are selected according to the information and risk and may include access management, secure transmission, monitoring, supplier review and incident procedures. No internet system can be guaranteed completely secure.
Your GDPR and UK GDPR rights
Where these laws apply, you may have rights to access, correct, erase or restrict personal information; object to processing based on legitimate interests; receive portable data; and withdraw consent. You may also ask about safeguards used for an international transfer. Rights can be limited by identity verification, another person's rights, legal duties or available exemptions.
Complaints
Please contact AirSC first so we can examine a privacy concern. If GDPR or UK GDPR applies, you may also complain to the data-protection authority in the place where you live or work, or where you believe an infringement occurred. Other jurisdictions may provide equivalent complaint rights.
Children
The Website and Services are intended for businesses and are not directed to children. AirSC does not knowingly collect personal information directly from a child through a merchant application. Contact us if you believe a child has provided information without appropriate authority.
Updates
We may update this Policy when practices, Services or legal requirements change. The updated date identifies the current version. Material changes may also be highlighted through the Website or another appropriate channel.
Contact
To ask a privacy question or exercise a right, use the channels published on the Contact page. Please describe your request and your relationship with AirSC. We may request information needed to confirm identity and protect account information.