Privacy notice

Last updated 2 October 2026

1. Who we are

Global Composite Network (GCN, gcomposite.com) is operated by Messe Asia Co., Ltd., Bangkok, Thailand ("we", "us"). We are the data controller for personal data collected through this website, the GCN member platform, our emails and GCN events. GCN is co-organised with the Thai Composites Association (TCA). Contact us about privacy at hello@gcomposite.com.

2. What we collect

• Contact and business details you give us: name, work email, company, job title, country, phone number and messages.
• Member profile data: company capabilities, sectors, processes, materials, certifications, buyer intents, meeting requests and feedback.
• Verification documents: company registration and quality certificates you upload.
• Transaction data: packages ordered, invoices, payment status and TCA member codes used. Card payments are handled by our payment provider; we do not store card numbers.
• Consent records: what you agreed to, when, and from which form.
• Technical data: IP address, approximate country, browser type, and email open and click events used to keep our sending lawful and reliable.
• Business contact data from other sources: public company information and contacts from previous Composites Bridge events. We do not send marketing to these contacts unless they opt in.

3. Why we use it and our lawful basis

• To answer your request (contact, proposal, waitlist, downloads): steps you asked for before a contract, or our legitimate interest in responding to business enquiries.
• To provide membership, matching, meetings and event services: performance of a contract with you or your company.
• To share your company profile with relevant members for matching: performance of the membership contract; contact details are shared with another member only after both sides opt in to a meeting.
• To verify suppliers: performance of a contract and our legitimate interest in keeping the directory accurate.
• To send the GCN E-News and marketing about membership, matching and Bangkok 2027: your consent. We never send marketing without an opt-in.
• To invoice, keep accounts and meet tax law: legal obligation.
• To protect our services (spam prevention, rate limits, security logs): legitimate interest.

4. Consent for marketing

Marketing and E-News consent is always optional and never pre-ticked. You can withdraw it at any time using the unsubscribe link in any email or by writing to hello@gcomposite.com. Withdrawing consent does not affect processing that took place before. We may also suppress a whole company domain at the company's request.

5. Who we share data with

• Other GCN members, limited to your public profile, and your contact details only after a mutual opt-in.
• The Thai Composites Association, for members who join or claim an offer through TCA: name, company and package, so TCA can confirm membership and receive attribution.
• Service providers acting on our instructions: cloud hosting and email delivery (Cloudflare), payment processing (Stripe), and similar processors bound by contract.
• Authorities, where the law requires.

We do not sell personal data.

6. International transfers

Our service providers may process data outside Thailand, including in the European Union, Singapore and the United States. Where they do, we rely on contractual safeguards or other measures permitted under the PDPA.

7. How long we keep it

• Enquiries and leads that do not become members: up to 24 months after our last contact.
• Member profiles and matching data: for the membership, then up to 24 months after it ends.
• Invoices and accounting records: as long as Thai tax and accounting law requires (generally at least 5 years, up to 10).
• Consent and unsubscribe records: as long as needed to prove consent or to honour an opt-out.
• Verification documents: for the membership, then up to 12 months.

8. Your rights

Under the PDPA you have the right to:

• access your personal data and get a copy;
• have it corrected or completed;
• have it deleted, destroyed or anonymised where the law allows;
• restrict or object to processing, including at any time to direct marketing;
• receive it in a portable format, or have it sent to another controller;
• withdraw consent at any time;
• complain to the Personal Data Protection Committee of Thailand.

To use any of these rights, email hello@gcomposite.com. We reply within 30 days.

9. Security

We use encrypted connections, access controls by role, and sign-in by one-time email links rather than passwords. Staff access personal data only when their work requires it.

10. Cookies

We use only cookies needed to keep you signed in and to protect our forms. We do not use advertising cookies.

11. Changes

We will post changes on this page and update the date at the top. For significant changes we will tell members by email.

12. Contact

Messe Asia Co., Ltd., Bangkok, Thailand. Email hello@gcomposite.com.