Privacy Policy
At Zone Two Sec, we are committed to operational transparency. This Privacy Policy governs the data processing practices of our platform and details how information is handled, collected, and protected when you interact with our website, access our resources, and utilize our strategic advisory digital touchpoints. By accessing or using our services, you acknowledge and agree to the data practices outlined in this policy.
1. Information We Do Not Collect (Proprietary & Client Operational Data)
Zone Two Sec operates as an independent strategic technology and AI advisory practice. Our website serves as an informational portal and executive briefing channel. In line with our core principles of data minimization and commercial discretion:
No Proprietary Source Code or Financial Ledgers
We do not request, ingest, or store client proprietary source code, internal accounting ledgers, employee records, or confidential commercial contracts through this website. Our digital platform is purely informational.
Zero AI Model Training on Client Communications
We never sell, monetize, or disclose client communication data, and we do not use your inquiry details, business context, or correspondence to train public AI models. All strategic advisory engagements are governed by separate, bilateral non-disclosure agreements (NDAs) with dedicated enterprise security controls.
2. Information We Collect Automatically (Metadata & Telemetry)
To maintain platform stability, defend our infrastructure, analyze usage trends, and process voluntary briefing requests, we collect specific, non-personally identifiable metadata:
A. Log Data
Our hosting infrastructure automatically logs standard technical telemetry transmitted by your browser during your session. This log data includes your Internet Protocol (IP) address (anonymized at the edge), browser type and version, operating system details, referring/exit pages, specific timestamps, and session duration.
B. Cookies and Tracking Technologies
We implement Google Consent Mode v2 with default denied states. Strictly necessary cookies (Turnstile anti-bot verification and consent preferences) maintain site security. Analytical telemetry (Google Analytics 4) operates solely upon explicit affirmative consent.
C. Voluntary Inquiries
When you submit an executive consultation or data inquiry, we collect your full name, work email address, company website, strategic objective selection, and context message.
D. Statutory Consent Audit Records
An anonymous unique identifier (UUID), category decisions (analytics, marketing), and banner version are logged via POST /consent for statutory compliance verification.
3. Third-Party Interactions and Asset CDNs
To optimize performance and deliver a lightweight user experience, our platform pulls certain static components (such as web fonts from Google Fonts and security scripts from Cloudflare Turnstile) from global Content Delivery Networks (CDNs). These networks process standard network routing indicators (such as your IP address) solely to deliver requested assets to your browser. Our platform may feature links to external web environments. We do not exercise operational control over third-party platforms and advise reviewing their respective privacy documentation upon redirection.
4. Do Not Track (DNT) Disclosure
Note that while you may configure your web browser to transmit a 'Do Not Track' (DNT) signal, our platform and its integrated services do not alter operational behaviors in response to DNT signals at this time, as no unified industry standard has been established. Instead, we provide immediate, direct control through Google Consent Mode v2. All optional cookies remain blocked until you grant explicit authorization via our preference interface.
5. Children's Privacy Compliance
Our services are directed toward a commercial, enterprise, and professional leadership audience and are not intentionally designed for or targeted at children under the age of 16. We do not knowingly or purposefully collect, track, or solicit tracking information from minors. If you believe a minor has accessed our site and provided personal details without parental consent, please contact us immediately to purge the records.
6. Corporate Adjustments and Business Transfers
In the event of a strategic business transition (such as a merger, corporate acquisition, re-branding, asset sale, or structural reorganization), passively logged infrastructure data and basic consultation records maintained in administrative accounts may be transferred to the acquiring entity as part of operational continuity under customary confidentiality protections.
7. Security Disclaimer and Limitation of Liability
While Zone Two Sec enforces end-to-end TLS 1.3 encryption, deploys unprivileged non-root delivery containers (UID 101), and maintains strict Content Security Policies across our edge infrastructure, the ultimate security of any digital interaction depends on the integrity of your local hardware, software, and network environment. Zone Two Sec assumes no responsibility or legal liability for client-side security vulnerabilities, local browser caching exploits, malicious third-party browser extensions, local malware, or hardware compromises operating on your device.
8. Statutory Data Subject Rights (PDPA & GDPR)
Under the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and the European General Data Protection Regulation (GDPR), you maintain enforceable sovereign rights regarding your personal information:
- ●Right of Access & Portability: Request confirmation and copies of personal data maintained in our records.
- ●Right to Rectification: Require correction of inaccurate, outdated, or incomplete personal records.
- ●Right to Erasure ('Right to be Forgotten'): Request deletion of your inquiry records when no longer necessary.
- ●Right to Withdraw Consent: Revoke previously granted cookie consent at any time with immediate effect.
- ●Right to Lodge a Complaint: File a petition with the Personal Data Protection Committee (PDPC Thailand) or relevant supervisory authority.
9. Contact Information & Privacy Inquiries
If you have questions regarding this Privacy Policy, wish to assert data subject rights under PDPA or GDPR, or require further clarification regarding our data practices, you can reach out via our official communication channel:
10. Policy Updates & Amendments
Zone Two Sec explicitly reserves the right to modify or update this Privacy Policy at any time to align with platform enhancements, framework updates, or regulatory integrations. Any revisions take effect immediately upon publication to this page. Continued access or use of our services constitutes acceptance of the amended terms.
Submit Data Protection & Privacy Inquiry
All requests are verified via Cloudflare Turnstile and handled directly by our governance team.