Privacy Policy

1. Data We Collect

Depending on how you interact with us, we may collect:

• identity and contact data, such as name, phone number, email, and WhatsApp details;
• booking data, including selected treatment, date, time, number of guests, location type, service area, address, and notes;
• health-related information you voluntarily provide or that is recorded as required for screening, consent, treatment, safety, and follow-up;
• communications with our team, including booking confirmations and support messages;
• payment and transaction references where applicable; and
• technical data such as IP-derived security records, browser information, device information, and website logs.

2. How We Use Personal Data

We process personal data to:

• respond to inquiries and manage booking requests;
• confirm identity, schedule, location, eligibility, and service details;
• support clinical screening, informed consent, treatment delivery, safety, and follow-up;
• process payments and maintain operational, accounting, and legal records;
• secure our systems, prevent misuse, investigate incidents, and enforce our terms;
• improve our website and service quality; and
• send marketing only where permitted and with an available opt-out.

3. Basis for Processing

Depending on the context, we process data with your consent, to take steps requested before providing a service, to perform an agreed service, to comply with legal obligations, to protect vital interests, or for legitimate operational and security interests permitted by applicable law.

Where explicit consent is required for sensitive personal data or a particular communication, you may withdraw that consent. Withdrawal does not affect processing already carried out lawfully and may limit our ability to provide a requested service.

4. Health Information

Health information is used only for legitimate service, safety, professional, recordkeeping, and legal purposes. Please do not submit unnecessary health details through public or insecure channels. Our team may move sensitive discussions to a more appropriate channel or conduct them in person.

5. Sharing of Data

We do not sell personal data. We may share only what is reasonably necessary with:

• authorized staff and qualified professionals involved in your booking or service;
• technology, hosting, communications, payment, security, and business service providers acting under appropriate obligations;
• your hotel, villa, host, or representative when you ask us to coordinate access or when reasonably necessary for the requested visit;
• professional advisers, insurers, regulators, law enforcement, courts, or other parties where required or permitted by law; and
• a successor organization in a legitimate restructuring, subject to applicable safeguards.

6. WhatsApp and International Processing

When you use WhatsApp or another third-party platform, that provider processes information under its own terms. Data may be processed or stored outside Indonesia. We use such channels for convenience and take reasonable steps to limit the information shared to what is necessary.

7. Retention

We retain personal data only for as long as reasonably necessary for booking, service, safety, accounting, dispute handling, legal, and professional recordkeeping purposes. Retention periods vary by data type and applicable requirements. Data that is no longer needed will be deleted, anonymized, or securely isolated where appropriate.

8. Security

We use reasonable administrative, technical, and organizational safeguards, including access controls and protection of selected booking fields. No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.

If a personal data incident occurs, we will assess and handle it in accordance with applicable obligations.

9. Your Rights

Subject to applicable Indonesian data protection law, including Law No. 27 of 2022 on Personal Data Protection, you may have rights to obtain information about processing, access data, correct inaccurate data, end or restrict certain processing, withdraw consent, object to certain automated decisions, request deletion where applicable, and seek available remedies.

We may need to verify your identity and may retain information where continued storage is required by law or legitimate professional obligations.

10. Cookies, Website Logs, and Location

The website may use essential storage or similar technologies for functionality, preferences such as language selection, security, and performance. We do not use optional advertising cookies unless they are separately disclosed and, where required, consented to.

The booking form includes an optional "Use my current location" button. If you click it, your browser will request permission to access your device's GPS coordinates. These coordinates are sent to OpenStreetMap's Nominatim service (a third-party geocoding API) solely to look up a human-readable address, which is then pre-filled into the address field for your convenience. Your coordinates are never stored on our servers and are never shared with us. If you deny location access or do not use the button, no location data is collected. You remain free to type your address manually.

11. Children

Our booking service is not intended to let children independently consent to medical treatment or submit sensitive information. A parent or legal guardian must be involved where required, and treatment remains subject to professional assessment.

12. Policy Changes and Contact

We may update this policy to reflect changes in law, technology, or our services. The current version and update date will remain available on this page.

For privacy questions or requests, contact support@dripstoyou.com or use the official WhatsApp contact shown on this website.