This policy is written to comply with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP).
1. Personal Data We Collect
Bali Home Care ("we") collects the following data, depending on how you use our services:
- Booking users: name, WhatsApp number, address, preferred schedule, and any health-related complaint/notes you voluntarily provide.
- Medical staff who register: name, email, WhatsApp number, photo, education and work history, STR/SIP license numbers, and supporting documents (diploma, STR, SIP, certificates).
- Technical data: IP address and browser user agent, recorded when you give consent on certain forms, for compliance record-keeping.
2. Purpose of Collection
Data is collected to: (a) process and coordinate your home-care service request; (b) assign a suitable medical staff member; (c) contact you regarding your booking status; (d) verify medical staff qualifications; (e) legal compliance and audit record-keeping.
3. Legal Basis for Processing
Your personal data is processed based on the explicit consent you provide when submitting a booking or registration form, and our legitimate interest in operating the service you requested.
4. Storage and Retention
Booking data is kept as long as necessary for service purposes. Inactive booking data is automatically anonymized after the retention period (currently 24 months from the booking date) — name, contact number, and complaint notes are removed/replaced, while aggregate data (service type, status, date) may be retained for internal statistics. Medical staff data is kept while the account remains active, and can be deleted on request (see Section 8).
5. Data Controller
Your personal data is controlled by:
- Business name: Bali Home Care
- Address: (not yet published)
- Email: blankamade@gmail.com
6. Who Receives Your Data
Your booking data (name, WhatsApp number, address, complaint) is shared with the medical staff member assigned to your request, only to the extent needed to deliver the service. We do not sell or share your data with third parties for marketing purposes. Third-party data processors we use:
- WhatsApp (Meta Platforms, Inc.) — for booking communication and confirmation
7. Personal Data Breach Notification
If a personal data breach occurs (such as a leak or unauthorized access) affecting your data, we will notify you no later than 3 (three) times 24 (twenty-four) hours after the breach is discovered, in accordance with UU PDP. Notification will be sent via the email and/or WhatsApp number registered to your account, describing the nature of the breach, the data affected, and the steps we are taking.
8. Your Rights as a Data Subject
Under UU PDP, you have the right to:
- Access and obtain a copy of the personal data we hold about you;
- Request correction of inaccurate data;
- Request deletion of your data;
- Withdraw consent you previously gave;
- Object to certain processing.
Users with an account (medical staff/client) can submit these requests directly from their own dashboard. Other users may contact us using the details in Section 9.
9. Contact
For questions or requests about your personal data, contact us via WhatsApp at the number shown in this site's footer, or email blankamade@gmail.com.