Privacy Policy

This Privacy Policy explains how PriviHealth (“we”, “us”) collects, uses, stores, and protects your personal information when you use our sexual health teleconsultation platform, including doctor chat consultation, laboratory test ordering (including HIV testing), and home medication delivery.

We collect identity information, sensitive health data, transaction data, and technical data required to provide safe, private, and medically appropriate services.

Sexual health data is sensitive data protected at the highest legal level under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and other applicable regulations.

We process your data based on your explicit consent, performance of the service agreement, legal obligations, and our legitimate interests in providing safe and effective services.

We NEVER sell your health data. Your data may only be shared with doctors, partner labs, pharmacies, delivery partners, payment processors, government authorities when required by law, and trusted service providers under strict confidentiality agreements.

Your data may only be shared with:

We use end-to-end encryption, AES-256 data encryption, role-based access control, audit logs, regular security testing, and incident response procedures to protect your data at every step.

We retain data as required by Indonesian regulations: medical records minimum 5 years, transaction data 10 years, and active account data for the duration of the account plus 2 years. Data is securely deleted or anonymized after retention periods end.

After retention periods end, data is securely deleted or anonymized.

You have the right to access, correct, delete, restrict, object, and transfer your data, withdraw consent, and lodge complaints with the Personal Data Protection Authority (when established) or other relevant authorities.

Under PDP Law No. 27/2022 and related regulations, you have the right to:

We use cookies to maintain your session, ensure security, and generate anonymous analytics for service improvement. You can manage cookie preferences in your browser settings.

We use cookies and similar technologies to:

Your data is processed and stored on servers in Indonesia. If transfers outside Indonesia are required, we ensure an equivalent level of protection as required by the PDP Law.

We will notify you via email or in-app notification at least 30 days before material changes take effect. Continued use of the service after changes are effective constitutes acceptance of the updated policy.

Our Data Protection Officer is here to help with any privacy questions, requests, or concerns.