Cloud Vertex Hub
Inquire Audit
Data Protection

Privacy Policy

Last Updated: August 2026

1. Data Controller Identity

Cloud Vertex Hub Co., Ltd. (“Company”, “we”, “us”) acts as the Data Controller for personal data collected through this website (cloud-vertexhub.click) and during professional advisory engagements.

  • Registered Office: Office 10, 48 Sample Avenue, Chiang Rai 00000, Thailand
  • Data Protection Contact: info@cloud-vertexhub.click
  • Direct Telephone: +66 53 000 218

2. Categories of Information We Process

As a privacy-focused technical advisory practice, we practice strict data minimization across all business operations:

  1. Inquiry & Consultation Data: When you complete our contact or audit request forms, we collect your full name, work email address, target mobile platform, selected service category, and project scope notes.
  2. Client Project & Source Code Materials: During active audit engagements under formal NDA, we may process repository access tokens, binary archives (IPA, APK, AAB), and network egress traces strictly for technical analysis.
  3. Essential Technical Web Telemetry: When browsing our site, we process temporary server connection logs (IP address, User-Agent, request timestamp) solely for network security, DDoS prevention, and routing integrity.

We process personal and engagement data under the following legal bases pursuant to the Thailand Personal Data Protection Act (PDPA B.E. 2562) and the EU General Data Protection Regulation (GDPR):

  • Performance of Contract: Processing project materials and communication necessary to deliver advisory services and fulfill Statements of Work.
  • Legitimate Interests: Operating a secure website, defending against cyber threats, and communicating regarding relevant professional inquiries.
  • Consent: Processing optional preferences such as cookie choices and newsletter notifications where explicit affirmative consent was granted.

4. Data Retention & Secure Deletion

  • Inquiry Messages: Retained for twelve (12) months following the conclusion of correspondence, after which records are permanently purged.
  • Client Code Repositories & Audit Artifacts: Stored on encrypted, access-controlled workstations for the duration of the audit engagement. All client source code copies, build archives, and packet captures are permanently destroyed within thirty (30) days following final deliverable acceptance.
  • Financial & Billing Records: Retained for seven (7) years in compliance with Thai statutory accounting and tax regulations.

5. International Data Transfers

When collaborating with international clients, project data may be processed between our primary technical office in Chiang Rai, Thailand and client locations. We ensure that all international transfers are safeguarded through standard contractual clauses, encrypted transport protocols (TLS 1.3), and strict technical security controls.

6. Your Statutory Rights

Subject to applicable laws (PDPA and GDPR), you possess the following rights regarding your personal information:

  • Right of Access & Portability: Request a copy of personal records held by our practice.
  • Right to Rectification: Request correction of inaccurate or incomplete contact records.
  • Right to Erasure (‘Right to be Forgotten’): Request deletion of your inquiry data where statutory retention obligations do not apply.
  • Right to Object or Restrict Processing: Object to specific processing activities or request restriction.

To exercise any of these rights, contact our privacy team at info@cloud-vertexhub.click. We respond to verified data subject requests within thirty (30) calendar days.