You can use a notebook where WiFi/BT module can be easily removed. Examples include: Toshiba U925t Ultrabook, most (if not all) HP contemporary notebooks (just to mention few). IMO most of the contemporary notebooks use the same interface for WiFi/BT module which mean you can remove it on most of them. Just for the record for most of notebooks removing this module means you need to disassemble it in some degree.
Combining this hardware with MS Windows BitLocker (for an encrypted filesystem) and encrypted container based on Veracrypt or PGP disk as second level can do what you want. If you are not a fan of MS (almost) any Linux distribution has disk encryption for entire disk and can be combined also with Veracrypt/PGP Here is a image how this module looks like:
Edit: Some notebooks (Dell, not sure about the model) have hardware switch to go in "Airplane mode" which cut off all the wireless communications. This switch can be used to permanently disable WiFi/BT