Privacy Policy
Your data protection and privacy rights matter to us. This policy explains how we handle your information with transparency and care.
Effective Date: January 15, 2025
Introduction
At Flareon Energex, we take your privacy seriously. As a security
testing and vulnerability assessment company operating in Thailand,
we understand the critical importance of protecting sensitive
information. This privacy policy explains how we collect, use, store,
and protect your personal data in accordance with Thailand's Personal
Data Protection Act (PDPA) and international best practices.
We believe in being straightforward about our data practices. This
policy covers all interactions with our website, services, and
business operations. When you work with us or visit our site, you're
trusting us with your information, and we don't take that lightly.
Information We Collect
Personal Information You Provide
When you contact us or request our services, we collect information
you voluntarily share:
Contact details (name, email address, phone number)
Company information and job title
Project requirements and technical specifications
Communication preferences and meeting availability
Billing and payment information for contracted services
Technical Information
Our website and services automatically collect certain technical
data:
IP address and general location information
Browser type, operating system, and device information
Website usage patterns and page visit statistics
Referral sources and search terms used to find us
System vulnerabilities and security data (only during authorized
testing)
Security Testing Data
During vulnerability assessments and penetration testing, we may
access sensitive system information. This data is handled under
strict confidentiality agreements and is never used for purposes
beyond the authorized testing scope.
How We Use Your Information
We use your personal information for legitimate business purposes and
only in ways you'd reasonably expect:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Service delivery and project management | Contact info, technical requirements | Contract performance |
| Communication and support | Contact details, project history | Legitimate interest |
| Website improvement and analytics | Usage data, technical information | Legitimate interest |
| Security testing and assessment | System data, vulnerability information | Contract performance |
We never use your data for marketing purposes without explicit
consent. If you subscribe to our security updates or industry
insights, you can unsubscribe anytime. We also don't sell your
information to third parties - that's not our business model, and it
goes against our core values of trust and security.
Data Storage and Security
How We Protect Your Data
As a security company, we practice what we preach. Your data is
protected using industry-standard security measures:
Encrypted data transmission using TLS 1.3 or higher
Secure data centers with physical access controls in Thailand
Regular security audits and vulnerability assessments of our own
systems
Access controls ensuring only authorized personnel can view your
data
Regular data backups with encryption at rest
Data Retention
We keep your information only as long as necessary for business
purposes and legal requirements. Here's our general approach:
Active client data: Retained during the business relationship
plus 3 years
Project documentation: Kept for 5 years for reference and
compliance
Website analytics: Aggregated data retained for 2 years
Security testing data: Deleted within 90 days after project
completion unless contracted otherwise
Marketing communications: Until you unsubscribe or after 2 years
of inactivity
Your Privacy Rights
Under Thailand's PDPA and international privacy standards, you have
several rights regarding your personal data. We've made it
straightforward to exercise these rights:
Access and Portability
You can request a copy of all personal data we hold about you.
We'll provide this information in a readable format within 30 days.
If you want to transfer your data to another service provider,
we'll help make that process smooth.
Correction and Updates
Found incorrect information in our records? Just let us know, and
we'll fix it promptly. We want to make sure our records are
accurate, so don't hesitate to reach out if something needs
updating.
Deletion and Restriction
You can request that we delete your personal data or restrict how
we process it. We'll honor these requests except where we have
legitimate business needs or legal obligations to retain certain
information. We'll always explain our reasoning if we can't
immediately comply.
How to Exercise Your Rights
Contact our privacy team at contact@flareon-energex.com with your
request. Include your name and enough information for us to verify
your identity. We typically respond within 5 business days and
complete most requests within 30 days.
Data Sharing and Transfers
We don't sell or rent your personal information. However, we may
share data in specific circumstances:
Service Providers
We work with trusted partners for essential business functions like
payment processing, cloud hosting, and communication tools. These
partners are contractually bound to protect your data and can only
use it for the specific services they provide to us.
Legal Requirements
We may disclose information when required by Thai law, court
orders, or to protect our legal rights. We'll notify you about such
requests unless prohibited by law, and we'll always verify the
legitimacy of any legal demand before complying.
International Transfers
Some of our service providers may process data outside Thailand.
When this happens, we ensure appropriate safeguards are in place,
such as standard contractual clauses or adequacy decisions. Your
data security remains our priority regardless of where processing
occurs.
Cookies and Tracking
Our website uses cookies and similar technologies to improve your
experience and help us understand how visitors use our site. We
believe in being transparent about this:
Essential Cookies
These are necessary for basic website functionality, like
remembering your preferences and maintaining security. You can't
opt out of these while using our site, but they don't track you
across other websites.
Analytics and Performance
We use analytics tools to understand which pages are most helpful
and how we can improve the site. This data is aggregated and
doesn't identify individual users. You can opt out through your
browser settings or by contacting us.
Updates and Changes
We'll update this privacy policy as our business evolves and privacy
laws change. When we make significant changes, we'll notify you via
email (if you've provided one) and post a notice on our website.
Minor updates for clarity or administrative changes won't trigger
notifications, but you can always check the effective date at the top
of this policy. We recommend reviewing this policy periodically,
especially if privacy is a key concern for your organization.
Questions or Concerns?
We're here to help with any privacy-related questions. Our team takes
these matters seriously and will respond promptly to your
inquiries.
Email: contact@flareon-energex.com
Phone: +66 74 343 055
Address: 250/14-5 บรมไตรโลกนารถ, Wat Chan, Mueang Phitsanulok District, Phitsanulok 65000, Thailand
Email: contact@flareon-energex.com
Phone: +66 74 343 055
Address: 250/14-5 บรมไตรโลกนารถ, Wat Chan, Mueang Phitsanulok District, Phitsanulok 65000, Thailand