DentCloud Start free

Privacy Notice

Last updated 27 September 2026

DentCloud has two privacy notices under Thailand's Personal Data Protection Act B.E. 2562 (PDPA): one for dentists, staff and partners of the clinics that use DentCloud, and one for patients. This page summarises both. The Thai version of each notice is the official one.

Who we are and our role

DentCloud Co., Ltd., 1/50 Sukhaphiban 5 Road, Sai Mai, Bangkok 10220, Thailand. Email admin@dentcloud.app.

We are the data controller for some activities, such as clinic users signing in. For most activities involving patient data, such as appointments, treatment records, payments and marketing, the clinic is the controller and we process data only on its instructions. Patients who want to exercise their rights should contact their clinic; we help the clinic handle the request.

Data we process

  • Clinic users: identity, contact, work (including dental licence number), financial, transaction and IT data, and supporting documents.
  • Patients: identity (including national ID and Dental Number), contact, financial, history, transaction and IT data, supporting documents, and sensitive health data such as treatment history, X-rays, medical conditions and drug allergies.

Legal bases

Contract; legal obligation; for health data, section 26 (5) (a) of the PDPA; and consent for marketing, including AI-based marketing.

Who receives data

  • Krungthai Bank and Internet Thailand PCL, for payments, civil-servant medical benefits and dental licence checks.
  • Amazon Web Services, which hosts DentCloud.
  • 2C2P, for clinic plan payments.
  • DentCare, for LINE appointment notices and receipt links when the clinic turns it on.
  • OpenAI, for AI features; and Claude or ChatGPT only when the clinic turns on the AI assistant and accepts the data processing agreement.
  • Integrations the clinic chooses, and the National Health Security Office or other authorities where required.

Transfers outside Thailand

DentCloud stores and processes data on Amazon Web Services in Singapore, and some AI providers may process data outside Thailand. Transfers follow the conditions of the PDPA.

Your rights

You may withdraw consent and ask to access, port, object to, delete, restrict or correct your personal data, as the PDPA provides. Contact us at admin@dentcloud.app, or your clinic for patient records. You may complain to the Office of the Personal Data Protection Committee at complaint.pdpc.or.th.