Privacy Policy

Center for AI Readiness, Asia Pacific (AIR APAC)
Effective: 3 May 2026 · This policy governs the airapac.org website and any AIR APAC service that links to it.

---

1. Who we are

AIR APAC (the Center for AI Readiness in Asia Pacific) is an independent, vendor-agnostic research institution. We do not accept technology-vendor funding. AIR APAC publishes the Mid-Market AI Readiness Index, advises mid-market organisations on AI readiness, and produces peer-reviewed research.

Registered address: 10 Marina Boulevard, #39-00, Marina Bay Financial Centre Tower 2, Singapore 018983.

For privacy questions, write to privacy@airapac.org.

2. What we collect

We collect only what is necessary to provide our services and conduct our research.

Information you give us directly

• Contact-form submissions (name, email, organisation, message)
• Scorecard responses (organisation profile and 30 readiness questions)
• Newsletter sign-ups (email and optional preference fields)
• Engagement enquiries (name, role, organisation, contact details)

Information we collect automatically

• IP address and approximate location (country / region)
• Browser type, device, operating system
• Referring URL, pages visited, session duration
• Cookies and similar technologies (see §6)

What we do not collect

• Sensitive personal data (race, religion, political views, health) unless you volunteer it in a message
• Credit card or payment information through this website
• Children’s data – this site is not directed at children under 16

3. How we use information

Purpose	What we use	Lawful basis (GDPR)
Reply to enquiries and engagements	Contact-form data, email	Legitimate interest, contract
Deliver the Scorecard report	Scorecard responses	Contract / legitimate interest
Send research newsletters and briefings	Email and preferences	Consent
Improve site performance and content	Web analytics	Legitimate interest
Detect abuse and protect the site	Logs, IP	Legitimate interest
Compile anonymised research statistics	De-identified scorecard data	Legitimate interest, public-interest research

4. Sharing

We do not sell personal data and we do not share it with technology vendors. Vendor-neutrality is a core principle of how AIR APAC operates – including how we handle the data of people who interact with us.

We share data only with:

• Service providers – e.g. email delivery, web hosting, analytics – under contract, only as needed to operate the site
• Council members and peer reviewers when they participate in confidential review of research outputs – only de-identified or pre-agreed data
• Legal authorities where required by law or to protect rights, property, and safety

A current list of service providers is available on request to privacy@airapac.org.

5. International transfers

AIR APAC operates across Asia Pacific and may transfer personal data between Singapore, the EU/UK, and other countries. Where data leaves a jurisdiction with different protection standards, we use Standard Contractual Clauses or equivalent legal mechanisms.

6. Cookies and analytics

This site uses:

• Strictly necessary cookies (no consent required) – session, security, accessibility
• Analytics cookies (with consent where applicable) – anonymised page-view counts, sessionised timing
• No advertising cookies, no third-party retargeting, no fingerprinting.

You can decline analytics cookies via the consent banner or your browser settings.

7. Retention

Data type	Retention
Contact-form messages	24 months from last reply, then deleted
Scorecard responses	De-identified at 12 months; aggregate retained for research
Newsletter sign-ups	Until you unsubscribe; consent re-confirmed every 24 months
Web logs	12 months, then aggregated and anonymised
Cookies	Per the cookie’s own expiry (session to 12 months)

8. Your rights

Subject to the law of your jurisdiction (Singapore PDPA, EU/UK GDPR, and others), you may:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data (“right to be forgotten”) subject to legal exceptions
• Withdraw consent for newsletters or analytics at any time
• Port your data to another service in a structured, machine-readable format
• Object to certain processing based on legitimate interest
• Lodge a complaint with your data protection authority (Singapore: PDPC; EU: your national DPA; UK: ICO)

To exercise any right, write to privacy@airapac.org. We respond within 30 calendar days (extendable by 60 in complex cases, with notice).

9. Security

We use commercially reasonable safeguards including TLS encryption in transit, access controls, and contractual obligations on service providers. No system is perfectly secure; we will notify affected individuals and regulators of material breaches as required by applicable law.

10. Updates to this policy

When we make material changes we will post the revised policy and update the effective date. Continued use of the site after changes constitutes acceptance of the revised policy.

11. Contact