Legal

Privacy Policy

Last updated: 3 October 2026

1. Who is responsible

The controller for this website and the DroneClear Thailand service is BRS Properties Co., Ltd. (trading as DroneClear Thailand), 789/1, Hua Hin 77110, Prachuap Khiri Khan, Thailand. Contact: hello@droneclearthailand.com, +66 80 2504249. Represented by Suthara Lang. We are a private company in Thailand and not affiliated with CAAT, NBTC or any government authority.

2. What we collect and why

Website visit. Our web server (netcup GmbH, Germany) keeps standard server logs: IP address, time, page requested, browser type. Purpose: security and fault finding. Legal basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f)). Logs are deleted automatically by the hosting provider.

DroneClear app in ChatGPT. If you use our app inside ChatGPT, ChatGPT sends us only what the app needs to answer: drone model or weight, whether it has a camera, the place in Thailand and the purpose of the flight. We do not ask for or store your name, contact details or the conversation; our server keeps only the standard server log described above. Your conversation in ChatGPT is processed by OpenAI under OpenAI's own privacy policy.

Contact form and email. Name, email address, subject and message. Purpose: answering your enquiry. Legal basis: pre-contractual steps at your request (Art. 6(1)(b)). Messages are sent to and stored in our Google Workspace mailbox (Gmail).

Order and onboarding. When you buy a package we collect what the Thai authorities need for registration: full name, nationality, passport data page, passport photo, Thai arrival stamp, Thai mobile number, travel dates, drone model, serial numbers and photos of the drone and remote, and for insurance your address and the drone weight class. Purpose: performing the contract, i.e. preparing and submitting your CAAT and NBTC registrations and arranging insurance. Legal basis: Art. 6(1)(b).

Payments. Handled by Stripe (Stripe Payments Europe Ltd., Dublin, and Stripe Inc., USA). We receive your name, email, amount and a payment reference. We never see or store your full card number. Stripe's own privacy policy applies to the payment itself.

Analytics. Only if you accept it in the cookie banner, we load Google Analytics 4 (Google Ireland Ltd., Dublin). It sets the cookies _ga and _ga_* and reports which pages are visited, roughly from where, on which device. Google Analytics 4 does not log or store full IP addresses. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time through "Cookie settings" in the footer. Without consent no analytics script is loaded and no analytics cookie is set.

3. Who receives your data

  • The Civil Aviation Authority of Thailand (CAAT) and the National Broadcasting and Telecommunications Commission (NBTC): we enter your data into their registration portals on your behalf.
  • A licensed Thai insurance broker, if you order insurance: name, passport data, drone details, travel dates.
  • Proton AG (Switzerland): we create a dedicated mailbox for your CAAT account so verification emails reach you; you receive the login.
  • netcup GmbH (Germany): web hosting, including temporary storage of uploaded documents.
  • Google (Ireland/USA): Google Workspace for email and Google Drive for the order file; Google Analytics only with your consent.
  • Stripe (Ireland/USA): payment processing.
  • Meta Platforms (WhatsApp), if you choose to contact us there.

Some of these providers are outside the European Economic Area. Google, Stripe and Meta are certified under the EU-US Data Privacy Framework; where that does not apply we rely on the EU standard contractual clauses. Thailand itself is a third country; the authorities receive your data because you have asked us to register you there.

4. How long we keep it

Uploaded documents are removed from the web server after they have been transferred to your order file. The order file (documents, certificates, correspondence) is kept in our Google Drive for as long as we need it to support you and to meet Thai accounting and record-keeping duties, then deleted. Contact-form messages are kept until the enquiry is closed. Analytics data is kept for the standard Google Analytics retention period. You can ask us to delete your order file earlier once the registration is complete.

5. Your rights

Under the GDPR you can ask us at any time for access to your data, correction, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest. You can withdraw consent at any time with effect for the future. You can also complain to a data protection supervisory authority, for example the one in your EU member state. Write to hello@droneclearthailand.com.

6. Security

The site runs on HTTPS only. Uploads go through a signed link tied to your order. Access to order files is limited to the people who process your registration. No online system is completely secure; please do not send us documents we have not asked for.

7. Changes

We update this policy when our processing changes. The current version is always the one published here.

See also our Terms & Disclaimer and Legal notice.