What we collect, and why

1. Data controller

DTV Thailand is operated by Martin Ferret, registered as a French micro-entrepreneur (auto-entrepreneur). Reach us at contact.dtvthailand@gmail.com for any data-related question, including access, rectification, or deletion requests.

2. What we collect

We collect only what we need to run the eligibility check, the audit, or the dossier preparation you have asked us to perform. Concretely:

• Contact details: name, email address, and (optionally) WhatsApp or Telegram handle.
• Eligibility answers: the short-form responses you submit on /start - nationality, residency, professional status, income range, intended consulate.
• Identity and financial documents you choose to send us once engaged: passport scan, bank statements, employment or contractor proof, ID card or driving licence, and family civil-status documents where relevant.
• Payment metadata: Stripe receipt IDs, last four digits of the card, billing country. We never see or store your full card number - Stripe handles that exclusively.
• Correspondence: the email or WhatsApp threads we exchange to prepare your file.

3. Why we collect it

Each category has one purpose and one purpose only:

• Contact details - to reach you, send the receipt, the engagement email, and the deliverable.
• Eligibility answers - to assess whether the DTV is appropriate and which consulate fits.
• Identity and financial documents - to perform the audit or assemble the dossier you have hired us to prepare.
• Payment metadata - to reconcile orders, issue refunds where applicable, and meet French accounting obligations.
• Correspondence - to maintain the working record of your case until the application is decided.

Lawful basis: contract performance (Art. 6.1.b GDPR) for the paid services, and consent (Art. 6.1.a GDPR) for the free eligibility check on /start.

4. How long we keep it

• Documents: deleted within 30 days of audit delivery or of the visa decision, whichever applies. Retained longer only where French law requires (e.g. invoices kept for 10 years) or where a resubmission case is active.
• Eligibility answers: retained 90 days, then deleted unless you have become a paid client.
• Invoices and accounting records: retained for the duration required by French tax law (currently 10 years).
• Email correspondence: retained for 24 months after case closure, then archived or deleted.

5. Who else sees your data

We do not run mailing lists. We do not sell data. We do not share data with anyone outside of the strictly necessary processors and recipients listed below:

• The Royal Thai consulate or the e-Visa portal, as required for submission. The client submits via their own account, so this transfer is made by the client, not by us.
• Stripe (Stripe Payments Europe Ltd., Ireland) - for payment processing.
• Resend - for transactional email delivery.
• Cloudflare R2 - encrypted document storage, EU region.
• Recommended translation or notarisation partners - only with your explicit consent, and only the specific document required.

6. Your rights

Under EU and UK GDPR, you have the right to:

• Ask us what we hold about you (right of access).
• Correct anything that is wrong (right of rectification).
• Ask us to delete it (right of erasure).
• Ask us to restrict or object to processing.
• Request a copy in a portable format (right of portability).
• Withdraw consent at any time, where consent is the basis.
• Lodge a complaint with a supervisory authority. In France, that is the CNIL (cnil.fr).

Email us at contact.dtvthailand@gmail.com with “Data request” in the subject line. We respond within 30 days.

7. Cookies and analytics

We use Google Analytics 4 to see how many people visit the site and which pages are read - nothing more granular than that. It is the only analytics tool we use, and it loads only if you allow it.

When you first arrive, a banner asks whether to allow analytics. If you decline - or simply ignore it - Google Analytics is never loaded: no analytics cookie is set and nothing is sent to Google. If you accept, it sets cookies in your browser (the “_ga” cookie and similar) and processes the visit through Google, which may transfer data outside the EU, including to the United States. Your choice is stored in your browser; clear your site data to be asked again.

We do not run advertising pixels and we do not profile visitors for marketing. Stripe Checkout sets its own cookies during a payment session; those are governed by Stripe’s policy.

8. International transfers

Documents are stored in Cloudflare R2’s EU region. Stripe processes payments under EU adequacy decisions. Email passes through Resend, which operates EU-region infrastructure. When you submit your application yourself on the Thai e-Visa portal, the data leaves the EU under your own action - that transfer is governed by the portal’s terms, not ours.

9. Contact

Any question, any concern, any request: contact.dtvthailand@gmail.com. The full terms governing our service sit on the terms of service page.