Information Stewardship Statement
Effective from March 1, 2026Our Approach to Data Responsibility
Operating infrastructure technology services requires receiving and holding certain client details. We've built our business around a simple belief: information you share with us stays under your authority. This document explains how we handle what you provide, where it travels, how long it remains in our systems, and the mechanisms available for you to maintain oversight.
Everything described here applies specifically to dynamicwavemax.dev services. If you interact with external platforms or third-party tools through our infrastructure, those entities operate under their own governance frameworks. We recommend reviewing those separately.
What Enters Our Systems
When you establish an account or engage our virtualization services, certain identifiers become necessary. These typically include contact coordinates, organizational affiliation, and technical configuration preferences.
- Registration credentials and authentication tokens
- Billing coordinates and payment instrument metadata
- Infrastructure deployment specifications and resource allocation requests
- Technical support exchanges and service inquiry records
Your containerized environments may generate operational logs—resource consumption patterns, system performance metrics, deployment timestamps. We record these automatically as part of service delivery. The specific log retention depends on your service tier and compliance requirements you've selected.
Why Collection Occurs
Each category serves a specific operational function. Identity verification prevents unauthorized infrastructure access. Payment coordinates enable billing reconciliation. Technical specifications let us provision appropriate resources and troubleshoot when issues emerge.
Performance metrics help us detect capacity constraints before they affect your workloads. Security logs become essential during incident investigation or when responding to suspicious activity patterns. Support communications create institutional memory so you don't need to re-explain context with each new inquiry.
Some information assists with long-term service improvement. Aggregated deployment patterns might reveal opportunities for new features. Anonymized resource utilization statistics can inform infrastructure capacity planning. But these analytical activities happen only after stripping away identifying markers.
Movement Beyond Our Infrastructure
Most client information stays within our controlled environment. However, specific operational necessities require selective outbound transfer. Payment processing demands sharing transaction coordinates with financial intermediaries. These relationships operate under contractual restrictions limiting their ability to repurpose your details.
If legal authorities present valid demands—properly scoped court orders or regulatory inquiries—we evaluate each carefully but ultimately comply when obligations are clear. We resist overly broad requests and seek court review when appropriate.
Corporate restructuring events like acquisitions might transfer information as part of business continuity. In such scenarios, the receiving entity would inherit these same stewardship commitments, or we'd provide advance notification allowing you to discontinue service before transfer occurs.
Your Authority Over Information
Inspection Rights
Request a structured export of information we maintain about your account. Delivery typically occurs within seven business days through secure download portal.
Correction Mechanisms
Update outdated or inaccurate details directly through your account dashboard or by submitting correction requests to our support team.
Deletion Requests
Terminate your relationship and request information removal. We'll process this within thirty days, subject to retention obligations for financial records and legal compliance.
Processing Objections
Challenge specific uses of your information that exceed service delivery necessities. We'll evaluate each objection and either accommodate it or explain why continuation remains essential.
Marketing Communications
Opt out of promotional messages through unsubscribe links or account preference settings. Operational notifications about your infrastructure remain unaffected.
Data Portability
Receive your information in machine-readable format for transfer to alternative service providers. Format specifications available upon request.
Regulatory Framework and Geographic Scope
Our operations center in Bangkok, Thailand, where national data protection regulations establish baseline requirements for information handling. Client relationships span multiple jurisdictions, each potentially imposing additional obligations. We've structured our practices to satisfy the most stringent applicable standards.
European clients benefit from GDPR protections regardless of our geographic location. When processing involves EU residents, we rely on performance of contract as our primary legal basis—the information becomes necessary to deliver requested services. Legitimate interests justify certain operational activities like security monitoring and fraud prevention. Marketing communications require explicit consent, which we obtain separately.
California residents gain rights under CCPA provisions. Thai data subjects fall under the Personal Data Protection Act. We've harmonized our approach to respect the broadest set of protections, creating a unified framework rather than maintaining jurisdiction-specific policies.
International transfers follow standard contractual clauses approved by relevant authorities. Our infrastructure partners maintain appropriate certifications and undergo regular compliance audits. You can request current certification documentation and transfer mechanism details at any time.
Cross-border data movement inherently creates regulatory complexity. If you operate under sector-specific requirements—financial services regulations, healthcare privacy rules, government contracting restrictions—additional safeguards may apply. Contact our compliance team to discuss specialized handling arrangements.
Questions and Formal Objections
Ambiguity about how we handle your information shouldn't persist. Our Bangkok office maintains dedicated personnel responsible for privacy inquiries. Response time for straightforward questions typically falls within two business days. Complex investigations requiring technical research may extend to ten business days.
If our response doesn't resolve your concern, escalation paths exist. Request supervisory review by our data protection officer. For clients in jurisdictions with regulatory oversight bodies, you maintain the right to file complaints with those authorities while we work toward internal resolution.
Email Inquiries
help@dynamicwavemax.devPhone Support
+66 3 232 1562Postal Correspondence
1128 Lat Phrao Rd
Samsen Nok, Huai Khwang
Bangkok 10310
Thailand