This Privacy Policy explains how BaliRent (an operating division of PT Medisfera Farmasi Group, located in Badung Regency, Bali, Indonesia, hereinafter "Data Controller", "we", "us", or "our") collects, processes, and protects your personal data when you visit our website, submit reservations, or communicate with our team via WhatsApp and other channels.
We adhere strictly to Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection ("UU PDP"), as well as international data protection principles (including the EU GDPR where applicable to European travelers visiting Indonesia).
1. Scope & Applicable Law
This policy applies to all tourists, expatriates, and residents who rent medical equipment, request delivery, or interact with our patient support services in Bali. By providing your information, you acknowledge that your data will be handled in accordance with this Privacy Policy.
2. Information We Collect
We only collect personal information that is strictly necessary to fulfill equipment delivery and coordinate customer care:
- Identity Data: Full legal name, title, and preferred language.
- Contact Details: WhatsApp mobile number, telephone number, and email address for order notifications.
- Accommodation & Delivery Information: Hotel, villa, or resort name, room or villa unit number, check-in date, and scheduled checkout date in Bali.
- Equipment Verification: For specialized high-value medical assets (such as motorized wheelchairs or oxygen concentrators), a photographic copy of your national identity card or international passport may be requested at delivery handover strictly for anti-fraud and security verification.
- Transaction Records: Billing address, receipt confirmation, payment method used (note: full credit card numbers are handled securely by PCI-DSS compliant third-party payment gateways and are never stored on our servers).
3. How We Use Your Data
Your personal data is processed under legitimate legal grounds, including contractual necessity and explicit consent:
- Coordinating same-day delivery and pickup schedules with our logistics couriers and hotel front-desk staff.
- Providing real-time order tracking and dispatch confirmations via WhatsApp messaging.
- Issuing official tax invoices and rental receipts in accordance with Indonesian fiscal regulations.
- Responding promptly to customer care inquiries, emergency replacement requests, and equipment support questions.
- Improving website security, preventing malicious bookings, and analyzing overall platform usability.
5. Data Security & Retention
We implement rigorous technical and organizational safeguards, including SSL/TLS 256-bit encryption for all data transmissions, firewalls, and restricted employee access protocols.
Personal delivery records are retained only for the duration of your rental contract and for the statutory period required under Indonesian accounting and tax regulations (typically five years for fiscal records), after which identification files are permanently purged.
6. Your Rights (UU PDP & GDPR)
Under Law No. 27/2022 on Personal Data Protection, you have the following guaranteed rights:
- Right to Access: Obtain confirmation of whether your personal data is being processed and receive a copy thereof.
- Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data once your rental contract is fulfilled, subject to mandatory statutory recordkeeping.
- Right to Withdraw Consent: Revoke consent for optional communications at any time.
8. Contact Our Data Privacy Officer
If you have questions regarding this Privacy Policy or wish to exercise your statutory data subject rights:
Data Privacy Officer (DPO) — PT Medisfera Farmasi Group
Email: [email protected]
Operational Hotline / WhatsApp: +62 821-8119-673
Office Address: Jalan Batu Mejan, Canggu, Kec. Kuta Utara, Kabupaten Badung, Bali 80361, Indonesia