World Class Plastic Surgeons (“the Clinic,” “we,” “us,” or “our”) is committed to protecting the privacy and personal data of every individual who interacts with us, whether in person at our clinic, through our website at worldclassplasticsurgeons.com, by email, via WhatsApp, or through any other communication channel.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, with whom we may share it, and your rights in relation to it. It applies to patients, prospective patients, website visitors, enquirers, and any other individual whose personal data we hold.

We are committed to handling personal data responsibly and in compliance with the applicable legal and regulatory framework, including:

• Indonesia’s Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi / UU PDP), which governs the collection, processing, and protection of personal data in Indonesia
• Government Regulation No. 71 of 2019 on the Implementation of Electronic Systems and Transactions, as applicable
• Indonesian Ministry of Health (Kementerian Kesehatan / Kemenkes) regulations governing the operation of healthcare facilities and the handling of patient medical records
• Any other applicable Indonesian laws and regulations in force from time to time

By using our website, submitting an enquiry, or engaging our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

World Class Plastic Surgeons acts as the data controller (pengendali data pribadi) in respect of all personal data collected through this website and through our clinical operations. All decisions about how and why personal data is processed are made by the Clinic.

Clinic Name: World Class Plastic Surgeons
Clinic Address: The Solitaire, 1st Floor, Suite 9, KSpecial Economic Zone, The Sanur, Lot H3A, Sanur Kaja, Denpasar Selatan, Kota Denpasar, Bali 80227, Indonesia
Email: [email protected]
WhatsApp: +62 812 9925 3375
Website: worldclassplasticsurgeons.com

For data protection enquiries or to exercise your rights under this Privacy Policy, please contact us at the email address above, marked for the attention of the Data Protection Officer.

We collect personal data that you provide directly to us and technical data collected automatically when you visit our website.

3.1 Data You Provide Directly

When you submit an enquiry through our website contact form, via email, or via WhatsApp, we may collect:

• Full name
• Email address
• Phone number
• The nature of your enquiry or procedure of interest
• Any message or information you choose to include

When you become a patient of the Clinic, we additionally collect:

• Date of birth and identity document details (KTP, passport, or equivalent) for patient identity verification
• Medical history, current medications, allergies, and pre-existing conditions
• Surgical history and relevant clinical photographs taken for medical record and treatment planning purposes
• Information provided during consultations, clinical assessments, and follow-up reviews
• Payment information sufficient to process your account (full card details are not stored by the Clinic)
• Next-of-kin or emergency contact details where provided

3.2 Data Collected Automatically

When you visit worldclassplasticsurgeons.com, we collect certain technical data automatically through cookies and similar technologies, including:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited, time spent on pages, and referral source
• Interaction data such as clicks and form interactions

This data is collected via Google Tag Manager (GTM-PC888G83) and associated analytics tools, including Google Analytics. It is processed in aggregate and anonymised form to understand how visitors use our website and to improve its content and performance.

Our website is also protected by Google reCAPTCHA on enquiry forms, which helps prevent automated spam submissions. reCAPTCHA collects hardware and software information and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.

We use your personal data only for the purposes for which it was collected, or for directly related purposes that you would reasonably expect. These include:

4.1 Responding to Enquiries

To respond to messages, questions, and consultation requests submitted through our website, email, or WhatsApp.

Legal basis: Your consent, given when you submit an enquiry.

4.2 Providing Clinical Care

To assess your suitability for procedures, conduct consultations, perform surgery or clinical treatments, manage your recovery and follow-up care, and maintain accurate medical records in accordance with Indonesian Ministry of Health requirements.

Legal basis: Performance of a contract (your clinical engagement with the Clinic) and compliance with legal obligations under Indonesian health regulations, which require healthcare facilities to maintain patient medical records for a minimum period specified by applicable law.

4.3 Clinical Safety and Communications

To send pre-operative instructions, post-operative care guidance, appointment reminders, and follow-up communications relevant to your treatment.

Legal basis: Legitimate interests in providing safe and effective clinical care, and your contractual engagement with the Clinic.

4.4 Administrative and Billing Purposes

To process payments, issue receipts and invoices, and manage clinic administration including scheduling, records management, and coordination with surgical facilities.

Legal basis: Performance of a contract and legitimate interests.

4.5 Compliance with Legal and Regulatory Obligations

To comply with our obligations under applicable Indonesian law, Kemenkes regulations, facility licensing conditions, and any other legal or regulatory requirement. This includes disclosures required by law, court order, or government authority.

Legal basis: Legal obligation.

4.6 Website Analytics and Improvement

To understand how our website is used and to improve its structure, content, and accessibility. This is done using aggregate and anonymised data collected through Google Tag Manager and Google Analytics.

Legal basis: Legitimate interests in maintaining and improving our website and user experience.

4.7 Marketing Communications

We do not send unsolicited marketing communications. Where you have expressly consented to receive updates about our services or procedures, we may send relevant clinical information or service updates by email or WhatsApp. You may withdraw this consent at any time by contacting us at [email protected].

Legal basis: Consent.

Medical and health information constitutes sensitive personal data (data pribadi yang bersifat spesifik) under Indonesian law and is subject to heightened protection. We handle all clinical data — including medical history, diagnoses, surgical records, and clinical photographs — with a high level of care and in accordance with applicable Indonesian health and data protection regulations.

Clinical photographs taken for medical record and treatment planning purposes are stored securely. They are not used for any other purpose, including marketing or publication, without your specific, separate written consent.

We will not sell, rent, or share your medical information with third parties for commercial purposes.

We do not sell your personal data. We may share your data with third parties only in the following circumstances:

6.1 Surgical Facilities and Anaesthetic Teams

Procedures performed at World Class Plastic Surgeons may require coordination with accredited surgical facilities and anaesthetic practitioners. Where this is the case, relevant clinical information will be shared with the facility’s medical and nursing teams as necessary for your safe surgical care.

6.2 Referring and Collaborating Practitioners

Where you have been referred to or from another healthcare practitioner, or where collaborative clinical input is required, relevant clinical information will be shared as necessary to coordinate your care.

6.3 Laboratories and Diagnostic Services

Where pre-operative blood tests, imaging, or other diagnostic investigations are required, your identifying information and relevant clinical details will be shared with the relevant laboratory or diagnostic provider.

6.4 Service Providers and Technology Partners

We engage third-party service providers to support the operation of our website and clinic systems. These include:

• Google (Google Analytics, Google Tag Manager, reCAPTCHA): For website analytics and form protection. Google may process your data in accordance with its own privacy policy. You can opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.
• WordPress / Hosting Provider: Our website is built on WordPress and hosted with a CDN (BunnyCDN). Data processed through the website may be handled by these providers under appropriate agreements.
• WhatsApp (Meta Platforms): When you contact us via WhatsApp (+62 812 9925 3375), your message is processed by Meta Platforms Inc. We recommend reviewing WhatsApp’s privacy policy at www.whatsapp.com/legal/privacy-policy.
• Email Service Provider: Emails sent to and from the Clinic are processed through our email service provider.
• Social Media Platforms: We maintain profiles on Instagram, Facebook, Twitter/X, YouTube, and LinkedIn. Interactions on these platforms are subject to the privacy policies of those respective platforms.

All third-party service providers engaged by us are expected to handle your data responsibly and in accordance with applicable data protection law.

6.5 Legal and Regulatory Disclosure

We may disclose personal data to regulators, law enforcement agencies, courts, or government bodies where required by applicable Indonesian law or where we are legally permitted to do so, including to the Indonesian Ministry of Health (Kemenkes) in connection with a licensing or regulatory matter. This includes mandatory integration and reporting of electronic medical records (RME) to the Ministry of Health’s SATUSEHAT platform, as required by Regulation of the Minister of Health No. 24 of 2022. 

We retain personal data for as long as necessary for the purpose for which it was collected or as required by applicable law.

When personal data is no longer required and retention is not mandated by law, it is securely deleted or anonymised.

Our website uses cookies and similar tracking technologies to enable core functionality, analyse website traffic, and improve the visitor experience.

8.1 Types of Cookies We Use

Strictly Necessary Cookies: Required for the website to function and cannot be disabled. These do not store personally identifiable information.

Analytics Cookies: Placed by Google Analytics via Google Tag Manager to collect anonymised data about how visitors use the website. This helps us understand which pages are most visited and how users navigate the site.

Security Cookies: Used by Google reCAPTCHA to distinguish human users from automated systems. These are placed on pages containing enquiry forms.

Functional Cookies: Used to remember preferences and support the delivery of website features.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or to be notified when cookies are being placed. Please note that disabling certain cookies may affect the functionality of parts of the website.

To opt out of Google Analytics tracking, visit tools.google.com/dlpage/gaoptout. For more general information about managing cookies, visit www.aboutcookies.org.

Under Indonesia’s Personal Data Protection Law (UU PDP No. 27 of 2022), you have the following rights in relation to your personal data:

Right to Information: You have the right to be informed about the personal data we hold about you and how it is being processed.

Right of Access: You may request a copy of the personal data we hold about you.

Right of Correction: You may request that inaccurate or incomplete personal data be corrected.

Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. It may affect our ability to continue providing certain services to you.

Right to Request Deletion: Subject to legal and clinical record-keeping obligations, you may request that personal data we no longer have a legal basis to retain be deleted.

Right to Object: You may object to certain types of processing, including direct marketing communications, at any time.

Right to Data Portability: You may request that personal data you have provided to us be returned to you or transferred to another party in a structured, commonly used format, where technically feasible.

Right to be Notified of Data Breaches: You have the right to be notified in the event of a personal data breach that may cause material harm to you, in accordance with the UU PDP’s obligation to notify you and the relevant authorities within 3 x 24 hours (72 hours) of discovering the breach. 

To exercise any of these rights, please contact us in writing at:

Email: [email protected]
Post: Data Protection Officer, World Class Plastic Surgeons, The Solitaire, 1st Floor, Suite 9, KSpecial Economic Zone, The Sanur, Lot H3A, Sanur Kaja, Denpasar Selatan, Kota Denpasar, Bali 80227, Indonesia

We will respond to verified requests within 3 x 24 hours (72 hours) or such other period as permitted by applicable law. We may ask you to verify your identity before processing your request.

Please note that certain data, particularly medical records, may not be deleted on request where retention is required by law or where deletion would affect patient safety.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Secure password-protected clinic and records management systems
• Restricted access to clinical and personal data on a need-to-know basis
• Use of secure and encrypted communication channels where applicable
• Regular review of our data protection and security practices

While we take reasonable steps to protect your data, no method of electronic transmission or internet-based storage is completely secure. We cannot guarantee the absolute security of data transmitted over the internet.

World Class Plastic Surgeons operates in Bali, Indonesia, and serves an international patient base. Personal data provided by patients residing outside Indonesia may be processed within Indonesia in connection with your clinical care.

Where any personal data is transferred outside Indonesia to a service provider or technology partner, we take steps to ensure it is handled with a comparable standard of protection, including through appropriate contractual arrangements where required.

Some of our technology service providers, including Google and Meta Platforms, may process data in jurisdictions outside Indonesia. We rely on applicable transfer mechanisms and contractual safeguards when such transfers occur.

We do not knowingly collect personal data from individuals under the age of 18 through our website without verifiable parental or guardian consent. Where a minor is a patient of the Clinic, personal data is collected and processed with the consent of the parent or legal guardian and is handled in accordance with this Privacy Policy and applicable clinical obligations.

Our website may contain links to external websites, including those of associated clinics, healthcare facilities, professional societies, media publications, and social media platforms. This Privacy Policy applies only to worldclassplasticsurgeons.com. We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any external site you visit.

The Clinic maintains profiles on Instagram, Facebook, Twitter/X, YouTube, and LinkedIn. When you interact with us on these platforms, your interactions are subject to the privacy policies of the respective platform operators. We do not control how these platforms collect or use your data.

We do not collect or retain social media data unless you contact us directly through a platform, in which case the contents of that communication may be retained as a record of your enquiry.

Our website uses Google reCAPTCHA on enquiry forms to help prevent spam and fraudulent submissions. reCAPTCHA collects information about your hardware, software, and online behaviour and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google’s Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms). By submitting an enquiry form on our website, you consent to the processing of your data by Google reCAPTCHA for this purpose.

Clinical photographs taken during consultations or procedures are used solely for medical documentation, treatment planning, and continuity of care purposes. They are stored as part of the patient’s confidential medical record and are not shared, published, or used in any marketing, advertising, or promotional material without your specific written consent.

Patient confidentiality is a fundamental commitment of the Clinic, consistent with the ethical standards expected of plastic surgery practitioners and consistent with the discretion and privacy values central to the World Class Plastic Surgeons brand.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or applicable regulatory guidance. The “Last Updated” date at the top of this page will be revised whenever material changes are made.

We encourage you to review this page periodically. Where changes are material, we will take reasonable steps to inform you, which may include a notice on our website or direct communication where appropriate.

Continued use of our website or services following an update constitutes your acknowledgement of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us:

World Class Plastic Surgeons
The Solitaire, 1st Floor, Suite 9
KSpecial Economic Zone, The Sanur
Lot H3A, Sanur Kaja, Denpasar Selatan
Kota Denpasar, Bali 80227, Indonesia

Email: [email protected]
WhatsApp: +62 812 9925 3375
Website: worldclassplasticsurgeons.com

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Indonesia. Any disputes relating to this Privacy Policy or the processing of personal data shall be subject to the jurisdiction of the competent courts in Indonesia.

This Privacy Policy was last reviewed and updated on 24 July 2026.