This Privacy Policy or Privacy Notice (“Privacy Notice”) becomes effective on June 1, 2025.
This Privacy Notice explains how We, PT Kartika Bina Medikatama (hereinafter referred to as “Medika Plaza” or “We”), collect, store, control, use, process, analyze, improve, update, display, publish, transfer, disclose, and protect Your Personal Data (“Processing Your Personal Data” or “Personal Data Processing”). This Privacy Notice applies to all Users of the Medika Plaza mobile application, website, features, services, and products (collectively “the Application”), unless otherwise stated in a separate privacy notice.
Please read this Privacy Notice thoroughly to ensure you understand Our data protection practices. We have summarized key points in the Summary section for easy understanding.
Terms in uppercase have the same meaning as those in the Terms and Conditions applicable between you and Medika Plaza. The Privacy Notice also has the same meaning as the privacy policy mentioned in the Application, products, and services on Our Applications, Platform, and Healthcare Facilities.
By agreeing to this Privacy Notice, you acknowledge that you have read and understood this Privacy Notice and agree to all its terms. Specifically, you agree and consent to Our Processing of Your Personal Data in accordance with this Privacy Notice.
If you provide Us Personal Data relating to another individual (e.g., data relating to your partner, family member, friend, or other third party), you represent and warrant that you have obtained consent from that individual and hereby consent, on their behalf, to their Personal Data Processing by Us. We may request evidence of such consent from you at any time.
You may withdraw your consent for any or all Personal Data Processing at any time by giving Us reasonable written notice using the contact details below. You should understand and acknowledge that after withdrawal of consent, you may no longer be able to use the Medika Plaza Application or services. Your withdrawal may result in service termination, account deletion, or termination of contractual relationship with Us, with all rights and obligations arising still fully in effect. After receiving your withdrawal of consent, We will inform you of potential consequences to help you decide whether you still wish to withdraw.
We collect Personal Data when you use the Application and when you receive services from Medika Plaza, including identity data, contact data, medical data, transaction data, financial data, payment data, log data, and/or location data. We also collect device and technical data from you, and other data you provide or send when using Our Application. If you choose not to provide such data, We may not be able to provide services and the Application to you normally.
We use your data to organize and manage your account with Us, to manage medical data in Our system, to communicate with you, and to provide various features, services, and functions on Our Application.
We also use your data to maintain Our Application and tailor Our products and services to your preferences. Additionally, We use your data to market and provide information related to Our products and services.
We share your data with providers who guarantee payment for the services you receive and with the Project Owner as per the package configured for direct access by the Project Owner.
We process your data in Indonesia.
We process your data for as long as you provide consent and as necessary to achieve the purposes of obtaining and collecting it, or as required by Applicable Laws and Regulations.
You may have various rights regarding Your Personal Data under Applicable Law.
If you wish to exercise your rights, you may file a data subject request with Medika Plaza, including requests for deletion of User data. For full information, you may contact Email: info@medikaplaza.com.
If you have questions, comments, complaints, or claims regarding this Privacy Notice or wish to access and/or correct Your Personal Data, please contact Email: info@medikaplaza.com.
We will update this Privacy Notice from time to time and notify you of the updated version via Our Application or the email address you have registered with Us. Please check periodically for any updates or changes to this Privacy Notice.
Please check periodically for any updates or changes to this Privacy Notice.
“Personal Data” means data that identifies or can be used to identify, contact, or locate a person or device related to the data. Personal Data includes, but is not limited to, name, address, date of birth, occupation, phone number, email address, bank account and credit card details, gender, identification (including KTP/Passport or other government-issued IDs) or other government-issued identifiers, photos, nationality, medical data, financial data, transaction data, and other data that constitutes Personal Data under applicable laws. To avoid doubt, applicable laws mean all laws in force, household regulations, statutes, regulations, policy regulations, ordinances, protocols, industry codes, traffic codes, permits or regulatory requirements from courts, tribunals, or any government authority, including approvals, rules, judicial or administrative orders, or supervisory authorities, as amended from time to time during the Privacy Notice period (“Applicable Law”). Additionally, other data, including profile information and/or unique identifiers, linked or combined with Personal Data, are also Personal Data.
The Types of Personal Data We Collect depend on the circumstances of collection and the nature of the requested service or transaction.
As permitted by Applicable Law, We may process, collect, use, store, and transfer different types of Personal Data, including general and sensitive/personal data, about you categorized as follows:
1. Identity Data: name, username, national ID (KTP), tax identification number, user ID or other identifiers, position, date of birth, gender, place of birth, occupation, nationality, photo, and/or biometric data.
2. Medical Data: health history, medical records, examination results, Laboratory & Diagnostic data, insurance & payment information, medication & therapy history, genetic data, mental health information, and lifestyle data relevant to health data. This data is used for health services, claims processing, quality improvement, and compliance with Applicable Law.
3. Contact Data: billing and shipping addresses, email addresses, phone numbers, and contact lists.
4. Transaction Data: purchases of services or products, interests, preferences, feedback, survey responses relating to User, services sought, details of pickup and/or delivery, and service types available at the time.
5. Financial Data includes details of bank accounts and payment cards such as the type of payment card or account used, the name of the issuer of the payment card or account, the name of the holder of the payment card or account, the identification number of the account or payment card, the verification code of the payment card or account, and the expiration date of the payment card or account, as applicable, virtual account data, financial history (including but not limited to the transaction history of the payment card or account, details of the payment card or account.
6. Payment Data: payment or transfer details by the User on Our Application, including usage, payment details, beneficiary details (including their account details), payment method, amount paid, billing details, and invoice details.
7. Technical Data includes details about your use of Our Application such as identification generated by the Application (user id) internet protocol (IP) address, data as to the web pages viewed previously or subsequently, the duration of each visit/session, internet device identity (ID) or media access control address, advertising ID and other device information including information regarding the manufacturer, model and operating system of the device you use to access the Application and crash logs.
8. Device Data includes device data, including the type of device you use to access the Application, including hardware model, operating system and version, software, IMEI number, file name and version, language selection, unique device identifier, advertising identifier, serial number, device movement information, and/or cellular network information.
9. Log Data includes records on servers that receive data such as the device’s IP address, date and time of access, application features or pages viewed, application work processes and other system activities, browser type, and/or third-party sites or services that the User uses before interacting with the Application.
10. Location Data includes your real-time geographic location data, location coordinates in the form of longitude and latitude, and Wi-Fi location.
We may create, use, license, or disclose Aggregated Data (statistical or demographic data) for any purpose. Aggregated Data may originate from Personal Data but will not be considered Personal Data because the data will not directly or indirectly identify you, and we will ensure: (i) all identifiers are removed so that the data, alone or with other data, cannot be linked to any individual, and (ii) the data is then combined with similar data so that the original data forms part of a larger dataset.
When We need to collect Personal Data by law, or under the terms of an agreement We have with You, and You choose not to provide such Personal Data or provide incomplete Personal Data to Us when requested, We may not be able to provide services and perform the agreement We have or are in the process of entering into with You.
The Personal Data We collect may be provided by you directly (for example: when you make a reservation and register for Our Healthcare Facility Services, when you register or use the Application, when you contact Our customer service, or otherwise when you provide Personal Data to Us). We may collect data in various forms and for various purposes (including purposes permitted by Applicable Laws and Regulations).
1. Data We collect from you or your mobile device directly
You may provide us with Identity, Medical, Contact, Eligibility, Profile, Financial, and Payment Data, including when requested by us or required by applicable laws and regulations, when interacting with us directly or by correspondence with us via mail, email, or otherwise.
This includes Personal Data you provide when you:
1. Make reservations and register for Medika Plaza services;
2. Register and create an account using the Application;
3. Use the Application, including if you use the service as a User;
4. Make payments using available methods, including but not limited to credit cards, virtual accounts, bank transfers, electronic money facilities, and/or electronic wallets (either as the payer or recipient);
5. Add funding sources for payments on the Application;
6. Provide feedback or contact us.
2. Data collected whenever you use the Application
You may provide us with technical and location data whenever you use and/or visit the Application. Each time you access the Application through your mobile device, we will track and collect your real-time geographic location data. In some situations, you will be asked to enable the Global Positioning System (GPS) on your mobile device so we can provide you with a better experience using the Application (for example, to provide you with data on how close a courier is to you). You can always choose to temporarily disable geographic location tracking data on your mobile device. However, doing so may affect the functionality available on the Application.
If you use and/or make payments using the e-money and/or e-wallet options available on the Application, we may collect certain financial, profile, and payment data related to those payments and transfers.
Additionally, whenever you use and/or visit the Application, certain data may also be automatically collected using cookies. Cookies are small application files stored on your computer or mobile device. We use cookies to track User activity and improve the user interface and experience. Most mobile devices and internet browsers support the use of cookies; however, you can adjust the settings on your mobile device or internet browser to refuse certain types of cookies or certain specific cookies.
Your mobile device and/or browser also allows you to delete any previously stored cookies at any time. However, this may affect the functionality available on the Application.
Medika Plaza may also use features provided by third parties to improve Medika Plaza services and content, including assessing, customizing, and presenting offers to each User based on their interests or browsing history. If a User does not wish to display offers based on such customization, they can opt out through their browser.
3. Data collected every time you receive services at our Health Facilities
Each time you receive care at our healthcare facility, the data collected includes personal information, medical history, examination and diagnostic results, service details, including medical procedures and treatments provided, visit data, and customer satisfaction data. This data is used to ensure service quality, support diagnosis and treatment, and facilitate administrative processes.
4. Data about third parties that you provide to us
You may provide us with Personal Data relating to other third parties (including Personal Data relating to your spouse, family members, friends, or other individuals). In such circumstances, you will, of course, require the consent of such other third parties.
We may use the collected Personal Data for the following purposes or for other purposes permitted by Applicable Laws and Regulations (“Purposes”):
1. If you are a User, We may use your Personal Data:
1. to identify and register you as a User and to create, verify, deactivate, or manage your account on Our Application or other Medika Plaza applications;
2. to enable Medika Plaza to provide services, including services already available, services you request, and services that will be available in the future;
3. to process and facilitate the services and payment transactions you make, including, as applicable, transactions made through payment cards, electronic money and/or e-wallets, or accounts available on the Application;
4. to notify you of transactions or activities occurring within the Application or other systems connected to Our Application;
5. to facilitate account and/or e-wallet linking, if you enable account and/or e-wallet linking between your Medika Plaza account and your account and/or e-wallet you choose to link (as applicable);
6. to communicate with you and send you data related to your use of the Application;
7. to notify you of any updates to the Application or changes to the services provided;
8. to process, process, resolve, and respond to complaints, issues, questions, and suggestions received from you;
9. to maintain, develop, test, improve, and personalize the Application to meet your needs and preferences as a User, including enabling features to personalize User accounts.
10. to monitor and analyze user activity, behavior, and demographic data, including habits and usage of various services available on the Application;
11. to send you direct or targeted marketing communications, service information, advertisements, vouchers, surveys, and data about special offers or promotions via WhatsApp messages, email, and the Application.
2. Whether you are a User or a party providing Personal Data to Us, We may also use your Personal Data more generally for the following purposes (although under certain circumstances, We will always act reasonably and not use your Personal Data more than is necessary for those purposes):
1. to perform related business processes and functions;
2. to monitor Application usage and manage, support, and improve the efficiency, performance, growth, user experience, and functionality of the Application;
3. to provide your data to companies that guarantee payment for the services you receive;
4. to send your medical data to SATUSEHAT, the Ministry of Health of the Republic of Indonesia, in accordance with applicable policies and regulations;
5. to provide assistance in connection with and to resolve technical difficulties or operational issues with the Application or services;
6. to generate statistical and analytical data for testing, research, analysis, product development, commercial partnerships, and collaboration purposes;
7. to prevent, detect, and investigate any suspicious transactions or prohibited, illegal, unauthorized, or fraudulent activities;
8. to enable Us to comply with all obligations under Applicable Laws and Regulations, including but not limited to responding to requests, investigations, or decisions in accordance with regulations, complying with filing, reporting, and licensing requirements required by law or Applicable Laws and Regulations, and conducting audits, due diligence, and investigations; and
9. for other purposes that We notify You and, if required by Applicable Laws and Regulations, for which We obtain Your consent.
We may disclose, provide access to or share your Personal Data with other parties for the following purposes and for other purposes permitted by Applicable Laws and Regulations:
1. to respond to regulatory inquiries, questions, requests, investigations, decisions, reporting, and to comply with archiving requirements and provisions, as specified in Applicable Laws and Regulations;
2. if instructed, requested, required, or permitted by an authorized government agency, for the purposes stated in a letter, policy, government regulation, or Applicable Laws and Regulations;
3. if there is any form of legal process between you and us, or between you and another party, in connection with, or related to, the services, for the purposes of such legal process;
4. in an emergency related to health or safety for the purposes of addressing such emergency;
5. in situations related to your health or the public interest, we may share your Personal Data with authorized government agencies and/or other institutions designated by the authorized government or in collaboration with us, for the purposes of contact tracing, supporting government initiatives, policies, or programs, public health, and other purposes as reasonably necessary;
6. In connection with the insurance claim process, we will share your personal data for the purpose of processing insurance claims with insurance companies that cooperate or collaborate with us;
When Personal Data is no longer necessary to be associated with you, we will make reasonable efforts to de-identify such Personal Data from you as an individual before disclosing or sharing it.
We will not sell or rent your Personal Data.
Other than as set forth in this Privacy Notice, we may disclose and share your Personal Data by notifying you or requesting your consent for such disclosure or sharing.
The confidentiality of your Personal Data is of utmost importance to us. We will make every effort to protect and secure your Personal Data from unauthorized access, collection, use, or disclosure, and from unlawful processing, accidental loss, destruction, and damage or similar risks. However, because data transmission over the internet is not completely secure, we cannot guarantee that such Personal Data will not be intercepted, accessed, disclosed, altered, or destroyed by unauthorized third parties due to factors beyond our control. You are responsible for maintaining the confidentiality of your account details and must not share your account details, including your password and One Time Password (OTP), with anyone. You must also always maintain and be responsible for the security of the devices you use.
Your Personal Data will only be retained for as long as necessary to fulfill the purposes for which it was collected, for the retention period, or as long as such retention is required or permitted by Applicable Laws and Regulations. We will cease retaining Personal Data, or remove the purpose for which such Personal Data is associated with you as an individual, as soon as we deem that the purpose for which such Personal Data was collected is no longer met by retaining the Personal Data, upon your request to delete your account, and retention is no longer necessary for business or legal purposes.
Medika Plaza will delete and/or anonymize User Personal Data under Medika Plaza’s control if (i) the User Personal Data is no longer necessary to fulfill the purpose for which it was collected; (ii) the retention period has expired; and (iii) storage is no longer necessary for compliance purposes under applicable laws and regulations.
Please note that some of your Personal Data may be stored or controlled by other parties, including government institutions, in certain ways. If we share your Personal Data with authorized government institutions and/or other institutions designated by the authorized government or in collaboration with us, you agree and acknowledge that the storage of your Personal Data by the relevant institutions will follow the data retention policies of each institution.
To the extent permitted by applicable laws and regulations, you release us from and against any and all claims, losses, liabilities, costs, damages and expenses (including but not limited to legal fees and full compensation expenses) resulting directly or indirectly from any activity carried out outside our Application.
You may have certain rights under Applicable Laws and Regulations to request from Us access to, correction of and/or deletion of Your Personal Data that is in Our possession and control.
We may deny your request for access to, correction of, and/or deletion of, some or all of your Personal Data that We control or possess, if permitted or required by Applicable Laws and Regulations. This includes circumstances where such Personal Data may contain references to other individuals, or where the request for access or correction or deletion is for reasons We deem irrelevant, frivolous, frivolous, or suggestive of a violation of our terms and conditions or a violation of the law.
In accordance with Applicable Laws and Regulations, We reserve the right to charge an administrative fee for each request for access and/or correction.
We may send you direct marketing, service information, advertisements, and promotional communications via push notifications, in-app messages, WhatsApp messages, postal mail, social media, and email (“Marketing Materials”). You may opt out of receiving these marketing communications at any time by contacting us using the contact details listed below.
We may review and amend this Privacy Notice at Our sole discretion from time to time, to ensure that this Privacy Notice is consistent with Our future developments, and/or changes in applicable legal or regulatory requirements. If We decide to amend this Privacy Notice, We will notify You of such changes through Our official channels. You agree that It is Your responsibility to check this Privacy Notice periodically for the latest data on Our data processing and data protection practices, and that Your continued use of Our Application or website, communicating with Us, or accessing and using the services after any changes to this Privacy Notice will be deemed Your acceptance of this Privacy Notice and any changes thereto.
In the event that the User has any questions, comments, complaints or claims regarding this Privacy Notice or the User wishes to gain access, request deletion, make corrections and/or other rights regarding his/her Personal Data, please contact Email: info@medikaplaza.com.