Privacy Policy — Revive Medical Bali

· Version 1.0

Data Controller: PT Raditya Anugerah Medika
Trading as: Revive Medical Bali
Address: Jl Sunset Road No. 27, Bali, Indonesia
Contact: info@revivemedicalbali.com
Applies to: www.revivemedicalbali.com, our WhatsApp and telephone enquiry channels, and care delivered in clinic or at your location

1. Introduction

This Privacy Policy explains how PT Raditya Anugerah Medika ("Revive Medical Bali", "we", "us", "our") collects, uses, stores and protects your personal data when you visit our website, contact us by WhatsApp or telephone, or receive medical care from us.

We are committed to protecting your privacy in compliance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP), Indonesia's Health Law No. 17 of 2023, and applicable international standards including the GDPR where relevant.

2. What Data We Collect

2.1 When you visit our website

We collect technical data automatically:

  • IP address, approximate location derived from it, device and browser type

  • Pages viewed, time on page, scroll depth, and links clicked — including when you click a WhatsApp or telephone link

  • Referring source, including whether you arrived from an advertisement

  • Cookie and advertising identifiers

We do not operate contact forms, booking forms or account registration on this website. We do not collect your name, email address or telephone number through the website itself.

2.2 When you contact us

When you message us on WhatsApp, call us, or attend our clinic, we may collect:

  • Your name and contact number

  • Your location or accommodation in Bali

  • Symptoms, medical history, medications and allergies you choose to share

  • Details of the service you request

2.3 When we provide care

  • Clinical notes, diagnosis, treatment provided and aftercare instructions

  • Invoicing and payment records

  • Medical reports issued at your request

Health information you share with us is special category personal data under UU PDP and is handled under Section 7 below.

3. How We Collect It

  • Website — cookies and tracking technologies described in Section 9

  • WhatsApp — you initiate contact by tapping a WhatsApp link or messaging our number. Messages are delivered over WhatsApp's infrastructure

  • Telephone — you call a number listed on our website

  • In person — information you provide to our doctors and nurses during consultation or treatment

We do not purchase contact lists and we do not contact you unless you have contacted us first.

4. Why We Collect It, and Our Legal Basis

  • Responding to your enquiry and arranging care — your explicit consent, given when you contact us

  • Delivering consultation, treatment and aftercare — provision of healthcare services

  • Issuing invoices and medical reports for insurance — your instruction; legal obligation

  • Maintaining medical records — legal obligation under Indonesian law

  • Measuring website and advertising performance — your consent, given via our cookie notice

Health-related data is processed solely to deliver the medical service you have requested. It is never used for marketing, advertising targeting, or shared with advertising platforms.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Data Storage, Security and Retention

Your data is stored securely and is accessible only to authorised clinical and administrative staff of PT Raditya Anugerah Medika. We apply technical and organisational measures appropriate to the sensitivity of health data.

Retention:

  • Clinical and treatment records — retained for a minimum of 5 years from your last visit, in accordance with Minister of Health Regulation No. 24 of 2022 on Medical Records

  • Enquiry and contact records — retained while you remain an active contact, and deleted on request

  • Website analytics data — retained for up to 14 months

  • Advertising identifiers — retained according to the platform's own retention periods

6. Third-Party Sharing

We do not sell or rent your personal data. We do not share health information with advertising platforms.

Your data may be shared only with:

  • Referring or specialist medical providers — where your condition requires referral, and only with your knowledge

  • Travel insurance providers — where you request a medical report or invoice, and only on your instruction

  • Technology providers acting as data processors — under contract and bound by data processing obligations

  • Authorised marketing service providers — third parties engaged to manage our advertising may access website analytics and campaign performance data. They are contractually prohibited from using it for any other purpose. They do not receive health information

  • WhatsApp (Meta Platforms Ireland Limited) — where you contact us by WhatsApp, your message is processed on Meta's infrastructure and you are also subject to WhatsApp's own privacy policy at whatsapp.com/legal/privacy-policy

  • Law enforcement or regulatory authorities — where required by Indonesian law or court order

7. Health Data Notice

Revive Medical Bali operates within the healthcare sector. Any symptom, condition, medication or treatment information you provide is classified as special category personal data under UU PDP.

Our doctors are personally bound by the Indonesian Code of Medical Ethics (KODEKI) and are prohibited from disclosing your health information to any third party without your explicit consent, except where required by Indonesian law or court order. This applies to consultations conducted in person, by telephone and via WhatsApp.

We do not transmit health information to advertising or analytics platforms. Our website measures anonymous interactions such as page views and link clicks. It does not record symptoms, conditions, or any information you send us by WhatsApp.

8. Your Rights

Under UU PDP, and under the GDPR where it applies to you, you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate or incomplete data

  • Erase your data, subject to medical record retention obligations

  • Withdraw consent at any time

  • Restrict how we process your data

  • Object to non-clinical communications

  • Receive your data in a portable format

  • Lodge a complaint with the competent Indonesian data protection authority, or with your local supervisory authority if you are in the EEA or UK

To exercise any right, email info@revivemedicalbali.com with the subject line "Data Privacy Request." We will respond within 14 business days.

9. Cookies and Tracking Technologies

Our website uses the following:

  • Squarespace essential cookies — site functionality and security (essential)

  • Google Analytics 4, via Google Tag Manager — measuring website usage and which pages lead to enquiries (analytics)

  • Meta Pixel — measuring the performance of our advertising (advertising)

These technologies record page views and link clicks — including clicks on WhatsApp and telephone links. They record that a contact was initiated. They do not record the content of your message or any medical information.

Non-essential cookies are set only where you have given consent through our cookie notice. You can change or withdraw your cookie preferences at any time using your browser settings, and you can opt out of Google Analytics using Google's browser add-on at tools.google.com/dlpage/gaoptout.

10. International Transfers

Our service providers, including Google and Meta, may process data outside Indonesia. Where data is transferred internationally, we rely on the safeguards those providers make available, including standard contractual clauses where applicable.

11. Compliance with Indonesian Law

PT Raditya Anugerah Medika complies with:

  • Law No. 27 of 2022 on Personal Data Protection (UU PDP)

  • Law No. 17 of 2023 (Omnibus Health Law), governing patient data confidentiality

  • Minister of Health Regulation No. 24 of 2022 on Medical Records

  • The Indonesian Code of Medical Ethics (KODEKI)

Where we serve individuals in the European Economic Area or the United Kingdom, we additionally apply GDPR standards.

12. Children's Privacy

Our services are intended for adults aged 18 and above. Where a minor requires medical assistance, a parent or legal guardian must make contact and consent to data processing on their behalf.

If you believe an unaccompanied minor has provided data to us, contact info@revivemedicalbali.com and we will address it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When material changes are made we will update the effective date above and, where appropriate, notify you directly.

14. Contact

PT Raditya Anugerah Medika (Revive Medical Bali)
Jl Sunset Road No. 27, Bali, Indonesia
info@revivemedicalbali.com
WhatsApp: +62 821 4274 8093