Customer document

Customer Data Privacy Policy

Please read this policy together with the other customer policies before creating an account or completing a transaction.

Scope

This policy applies when you visit www.gas-av.com, create an account, shop through GAS Online Store, request a quotation, make a payment, use the customer portal, or communicate with GAS AVL Solution. GAS acts as the data controller for the services we operate.

Data we may collect

Identity and contact details such as name, email, phone/WhatsApp, company, and venue.
Account information, encrypted credentials, member status, preferences, and login history.
Transaction, quotation, invoice, payment, shipping address, courier, tracking, and order data.
Inquiry, support ticket, complaint, attachment, and communication records.
Technical and security data such as IP address, browser, device, session, and essential cookies.

How we use data

Create and secure customer accounts.
Process checkout, payment, invoice, fulfillment, shipping, refunds, and after-sales support.
Apply the correct member or Retail Partner pricing.
Send transactional updates, service notifications, and support replies.
Prevent fraud, unauthorized transactions, misuse, and security incidents.
Improve services and meet accounting, audit, tax, and legal obligations.
Send promotions where permitted; promotional communications can be stopped on request.

Legal basis and consent

We process data to perform a contract or transaction, comply with legal obligations, protect legitimate interests such as service security, and obtain consent where required. Transactional messages may continue even if marketing consent is withdrawn.

Sharing with service providers

We do not sell customer personal data. Necessary data may be shared with Midtrans or payment providers, couriers and fulfillment partners, email/hosting/security providers, professional advisers, auditors, or authorities where legally required.

Security and retention

We use role-based access, authentication, activity records, password encryption, backup, and internal access controls. Full card details are handled through the payment provider and are not stored by GAS. Data is retained only while needed for the account, service, transaction, audit, dispute, accounting, tax, or legal requirements.

Your rights

Subject to applicable law, you may request access, correction, a copy, restriction of certain processing, or deletion. Identity verification may be required, and some records must be retained for transactions, security, audit, or legal compliance.

Cookies, updates, and contact

Essential sessions and cookies support login, cart, checkout, language selection, and security. This policy may be updated as services or laws change. Questions and data requests can be sent through GAS official contact channels.