Privacy Policy

ProCam Rental decides how your personal data is used for your booking. We follow Malaysia's Personal Data Protection Act 2010 (PDPA). Our contact details are on the Contact page.

• Your name, phone number and email, to make and manage your booking.
• An identity check: a photo of your MyKad or passport and a live selfie, taken in the check run by our verification provider, Didit. We receive the result of the check (passed or not) and the reference needed to match it to your booking. We do not keep our own copy of your ID photo or selfie. The shop staff also look at your photo ID when you collect the drone.
• Payment information. Your card details go straight to our payment processor, Stripe. We never see or store your card number. We keep a Stripe reference to your payment and saved card so we can release your deposit, and charge late fees, battery swaps or damage you agreed to.
• Photos of the drone and its accessories at hand-over and return, and notes about their condition. They show equipment, not you.
• Booking details: what you rented, when, from which shop, what you paid, and any late fee or damage review.
• Basic technical data when you use the site, such as the language you chose (kept in a cookie). We do not run advertising trackers.

• To confirm you are eligible, take your payment and hold your deposit.
• To hand over and take back the equipment, and to deal with late returns, damage and loss.
• To contact you about your booking and to give support.
• To keep our records, prevent fraud and meet legal and tax obligations.

We do not sell your personal data, and we do not use it for advertising by other companies.

• The shop that rents you the drone sees your name, phone number and booking so that they can hand over the drone to the right person.
• Stripe (payments), Didit (identity check), Supabase (our database) and Vercel (our website hosting) process data for us under their own security and privacy terms. Some of them store data outside Malaysia.
• A weather service gets only the location of the shop to check the wind, never anything about you.
• The authorities, where the law requires, or to protect our equipment and rights, for example in a dispute or a case of theft.

We keep booking and payment records for as long as we need them for the booking, for disputes and for the time the law requires us to keep accounting records. After that we delete them or remove what identifies you.

Under the PDPA you can ask to see the personal data we hold about you, ask us to correct it, and ask us to stop using it for something that is not needed for your booking. Contact us through the Contact page. We may need to check who you are first, and we may have to keep some records the law requires. If you cannot agree to us using the data we need for an identity check or a payment, we cannot rent you a drone.

Our website uses an encrypted connection. Access to bookings and personal data is limited to the people who need it for the rental. No system is perfectly secure, so please tell us at once if you think your data has been misused.

We may update this policy. The date at the top shows when it last changed.