Book a consultation

✦ Legal

Privacy policy

Last updated: 10 November 2026

Who we are

Wave Skin Wellness is operated by PT Wave Skin Wellness, Jl. Drupadi No.99G, Seminyak, Kec. Kuta, Kabupaten Badung, Bali 80361, Indonesia.

We are responsible for the personal information covered by this policy. For privacy questions or requests, contact hello@waveskinwellness.com.

Information we collect

We collect information you provide through our website, forms and communications. This may include:

Please provide only information relevant to your enquiry. Required fields are identified on our forms. Without necessary information, we may be unable to respond or assess your request.

How and why we use information

We use personal information to respond to enquiries, assess treatment suitability, arrange appointments, provide and administer services, maintain records, protect our systems and meet legal obligations.

Depending on the purpose, we rely on your consent, steps requested before entering an agreement, performance of an agreement, legal obligations, or legitimate interests balanced against your rights.

We request explicit consent to process health information submitted for an enquiry. Any additional processing needed for your care will be explained when you become a patient. Consent to data processing is separate from consent to treatment.

We obtain separate consent before using identifiable patient photographs or stories publicly or sending optional marketing communications. You can withdraw consent by contacting us.

Children and information about other people

A parent or legal guardian must provide the required consent for a child’s personal information. If you enquire for another adult, you must have their authority to share their information. We may verify that authority and obtain consent directly where needed.

Sharing information

We do not sell personal information.

We share relevant information only where necessary with authorised personnel involved in your enquiry or care, service providers supporting our operations, professional advisers, and authorities where legally required or permitted.

Service providers acting on our behalf must protect the information and use it only for authorised purposes. Health information is shared subject to applicable confidentiality requirements.

Processing outside Indonesia

Some supporting services may process personal information outside Indonesia. Before transferring information, we assess whether the destination provides an equivalent or higher level of protection. If it does not, we require adequate, binding safeguards. If neither condition can be met, we obtain your explicit consent before the transfer.

Additional restrictions applicable to medical records remain applicable.

Retention

We process information from collection until the relevant purpose is completed, subject to necessary retention:

Information may be retained longer where required by law or necessary for an ongoing complaint or legal claim. We delete or anonymise information when it is no longer needed and retention is no longer required.

Cookies and similar technologies

We use necessary technologies to operate and secure the website. Optional analytics or advertising technologies are enabled only after you consent. You may refuse or withdraw that consent through the website’s privacy controls.

You can also manage cookies through your browser settings. Blocking necessary cookies may affect website functionality.

Security

We use appropriate technical and organisational safeguards, including access restrictions and confidentiality controls, to protect personal information.

If a personal-data protection failure occurs, we will notify affected individuals and the relevant authority as required by Indonesian law, including the applicable 3 × 24-hour notification deadline.

Your rights

Subject to applicable legal conditions, you may request information about our processing, access or obtain a copy of your data, correct inaccuracies, withdraw consent, restrict or end processing, request deletion, and request data portability. You may also object to decisions based solely on automated processing that have legal or similarly significant effects.

Contact hello@waveskinwellness.com to exercise your rights or raise a complaint. We may verify your identity and will respond within applicable legal deadlines. If a request cannot be fulfilled, we will explain why.

Withdrawal of consent does not affect earlier lawful processing. Some records must be retained by law. You retain the right to complain to the competent authority and seek legal remedies.

Changes to this policy

We may update this policy and will display the revised date above. We will notify you before changes to information underlying your consent take effect and obtain fresh consent where required.