Privacy Policy
Effective Date: June 2026 · Version 1.0
Data Controller: PT Raditya Anugerah Medika
Contact: [email protected]
Applies to: Meta / Facebook Lead Generation Forms
1. Introduction
This Privacy Policy explains how PT Raditya Anugerah Medika ("Bali Belly Doctor," "we," "us," or "our") collects, uses, stores, and protects your personal data when you submit your information through our Meta (Facebook/Instagram) Lead Generation Forms.
We are committed to protecting your privacy in compliance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP) and applicable international standards including the GDPR where relevant. By submitting our lead form, you confirm that you have read and understood this policy.
2. What Data We Collect
When you submit our Meta Lead Generation Form, we collect the following:
Full name
Email address
Phone number
Current location or accommodation in Bali
Symptoms or reasons for requesting medical assistance
The service type you select may constitute health-related personal data. We treat this category of data with the highest level of care and process it solely for the purpose of arranging your medical consultation or treatment.
3. How We Collect It
Your data is collected through Meta Lead Generation Forms embedded within our Facebook and Instagram advertisements. When you tap “Submit,” your data is transmitted from Meta’s platform to our secure systems. If you follow up by WhatsApp, phone, or at our clinic, information you share during that interaction may also be retained as part of your care record.
4. Why We Collect It and Legal Basis
We process your data for the following purposes, based on your explicit consent given at the time of form submission:
To contact you via WhatsApp or phone to confirm your appointment, location, and medical needs
To dispatch a doctor to your hotel, villa, or other location in Bali
To provide you with a consultation, treatment plan, and aftercare instructions
To issue an itemised invoice and medical report to support travel insurance reimbursement
To send follow-up care communications where clinically appropriate
Health-related data you provide is processed solely to deliver the medical service you have requested. It is not used for marketing purposes. You may withdraw your consent at any time without affecting the lawfulness of prior processing.
5. Data Storage and Security
Your data is stored securely within our systems and is accessible only to authorised clinical and administrative staff at PT Raditya Anugerah Medika. We implement industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or misuse.
We retain clinical and treatment records for a minimum of 5 years from the date of your last visit, in accordance with Indonesia’s Minister of Health Regulation No. 24 of 2022 on Medical Records. Non-clinical lead data is retained for as long as you remain an active contact or subscriber. You may request deletion at any time by exercising your rights under Section 8 of this policy.
6. Third-Party Sharing
We do not sell, rent, or share your data with unrelated third parties for commercial purposes. Your data may be shared only with:
Referring or specialist medical providers — where your condition requires referral or specialist care, and only with your knowledge
Travel insurance providers — where you request a medical report or invoice for an insurance claim, and only upon your instruction
CRM and communication technology providers — who act as data processors under our instruction and are bound by data processing agreements
Authorised marketing service providers — third-party partners engaged to manage and optimise our advertising campaigns may access lead data solely for campaign performance purposes. These partners are contractually prohibited from using your data for any purpose outside of this engagement and are bound by confidentiality obligations
WhatsApp (Meta Platforms Ireland Limited) — used as our primary follow-up communication channel. By engaging with us via WhatsApp, your personal data is processed on Meta's infrastructure. This does not constitute a sale or commercial transfer of your data. Users are also subject to WhatsApp's own privacy policy, available at whatsapp.com/legal/privacy-policy
Law enforcement or regulatory authorities — where required by Indonesian law or court order
7. Health Data Notice
Bali Belly Doctor operates within the healthcare sector. Any symptom information or health details you provide through our lead form or subsequent communications are classified as special category personal data under UU PDP. We process this data exclusively to deliver the medical service you have requested.
8. Your Rights
Under UU PDP and GDPR, you have the right to:
Access the personal data we hold about you
Rectify any inaccurate or incomplete data
Erase your data from our systems (subject to medical record retention obligations)
Withdraw consent at any time
Restrict how we process your data
Object to non-clinical communications
Lodge a complaint with Indonesia’s data protection authority (BSSN / Kominfo)
To exercise any of these rights, email [email protected] with the subject line “Data Privacy Request.” We will respond within 14 business days.
9. Opt-Out
You may unsubscribe from our non-clinical communications at any time by:
Replying “STOP” to any WhatsApp message from our team
Replying “Unsubscribe” to any email from our team
Emailing [email protected] with the subject line “Unsubscribe”
We will remove you from all marketing lists within 5 business days. Communications directly related to your medical care or ongoing treatment cannot be opted out of while your care is active.
10. Compliance with Indonesian Law (UU PDP)
PT Raditya Anugerah Medika complies fully with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP), which governs the collection, processing, storage, and use of personal data for businesses operating in Indonesia. PT Raditya Anugerah Medika additionally complies with Indonesia's Health Law No. 17 of 2023 (Omnibus Health Law), which governs patient data confidentiality and the lawful disclosure of health information by medical providers operating in Indonesia. Our doctors are personally bound by the Code of Medical Ethics (Kode Etik Kedokteran Indonesia / KODEKI) and are individually prohibited from disclosing your health information to any third party without your explicit consent, except where required by Indonesian law or a court order. This obligation applies to all consultations whether conducted in person, by phone, or via WhatsApp. Where we serve individuals in the European Economic Area, we additionally apply the standards of the GDPR.
11. Cookies and Technical Data
When you visit www.balibellydoctor.com, our website may collect technical data including your IP address, device type, browser type, and pages visited. This data is collected via cookies and the Meta Pixel, which enables us to measure the performance of our advertisements and understand how visitors interact with our website. You may disable cookies through your browser settings, though doing so may affect the functionality of certain features. By continuing to use our website, you consent to this data collection.
12. Children’s Privacy
Our services are intended for adults aged 18 and above. Where a minor requires medical assistance, a parent or legal guardian must submit the lead form and consent to data processing on their behalf. If you believe an unaccompanied minor has submitted data through our form, contact us at [email protected] and we will handle it immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When material changes are made, we will update the effective date above. Continued engagement with Bali Belly Doctor after any changes constitutes acceptance of the updated policy.
14. Contact
PT Raditya Anugerah Medika
Jl. Sunset Road No. 27C, Kuta (Inside Revive Medical Clinic), Bali, Indonesia
Email: [email protected]
WhatsApp: +62 813 2605 2230
Website: www.balibellydoctor.com
For data privacy requests, use the subject line: “Data Privacy Request”
For unsubscribe requests, use the subject line: “Unsubscribe”