Privacy Policy
Your information when you visit and contact us.
Effective from · Last updated
Scope and responsibility
This policy describes data use when you visit the Zotect website or contact our team. The website operates under ZOTECT DIGITAL CAPITAL CO., LTD. (registration no. 0105569040454), registered at 999 Gaysorn Building, 5th Floor, Unit 5B-1, Ploenchit Rd., Lumpini, Pathumwan, Bangkok 10330, Thailand. Project data covered by a service contract may be subject to separate data processing terms.
Information we receive
The contact form requires a subject, name, company, position, email address and phone number. Additional details are optional. Without the required fields the form cannot be submitted; you can contact us by email instead. Please keep passwords, health information and other sensitive personal data out of the message field.
Technical and security information
Infrastructure receives network information, such as IP addresses and request details, to deliver pages and help prevent abuse. The contact service derives a hashed rate-limit key from the IP address and email, and validates a Turnstile token. Successful submissions also include a reference ID, language and submission time.
Purposes and processing grounds
We use contact information to answer questions, assess requirements and follow up on your request. Processing grounds are steps at your request before entering a contract where applicable, and legitimate interests for general enquiries and abuse prevention. Sending the form does not constitute consent to marketing.
Service providers and disclosures
Hosting and network providers receive network information, such as your IP address, to deliver the website. The website and contact service also use the providers below. Providers may process or store data outside Thailand under their contractual safeguards, such as Cloudflare's and Microsoft's data processing terms.
The contact service runs on Cloudflare Workers, and enquiries pass through it on their way to Microsoft 365. On the Contact page, your browser loads Cloudflare Turnstile directly to confirm that a person is sending the form, and the contact service sends your IP address and the verification token to Turnstile. Cloudflare rate limiting receives only the hashed key derived from your IP address and email address.
Cloudflare Turnstile Privacy Addendum
Microsoft 365 receives enquiries sent through the form. The contact service sends the details you enter, with the reference ID, language and submission time, as an email through Microsoft Graph from a company Microsoft 365 account to hello@zotect.com. Your email address is set as the Reply-To address so our team can answer you directly. Microsoft 365 stores the email delivered to hello@zotect.com and keeps a copy in the sending account's Sent Items.
The Contact page embeds a Google Maps map to show our office location. When the map loads, your browser connects directly to Google and sends it technical information such as your IP address, browser and device information, and the address of the page you are viewing (referrer). Google may use cookies or similar technologies, subject to your browser settings, and processes this information under its own privacy policy. The directions link opens Google Maps in a new tab.
Retention
The website keeps no database of enquiries, and the contact service does not write the details you enter to its logs. Delivered enquiries are kept as email in Microsoft 365, as described under Service providers, with no separate backup beyond Microsoft 365. Retention periods for enquiries, security logs and backups are still being established. We will add confirmed periods or applicable criteria, together with deletion or anonymisation procedures, to this policy. The company will consider enquiry follow-up, contractual and legal obligations, and dispute handling when setting these periods.
Your rights and contact
Subject to legal conditions, you may request access and a copy, correction, erasure, restriction, objection or portability. Where processing relies on consent, you may withdraw it without affecting lawful processing before withdrawal. You may complain to Thailand’s Office of the Personal Data Protection Committee. We may request information necessary to verify your identity before acting.
Send requests to exercise these rights to dpo@zotect.com.
Policy updates
Changes will appear on this page with an updated date. Where a new purpose or processing activity requires further notice or consent, we will provide it before using data in that way.