Bali Medevac collects only the identity and medical details needed to coordinate an evacuation or repatriation case — name, location, condition summary, insurance data and contact details you send us by WhatsApp, email or a website form — and shares them solely with the licensed operators, hospitals and insurers handling that specific case. We do not sell data, run ad-retargeting pixels on personal medical details, or keep files longer than a case and its record-keeping duty require.
This policy explains how Juara Holding Group, the publisher and operator of balimedevac.com, handles the personal data of anyone who contacts Bali Medevac — patients, their family members, villa or resort staff acting on a guest’s behalf, and travel or dive operators reporting an incident. Bali Medevac is an independent coordination desk: it arranges services with licensed hospitals, air-ambulance operators, ground and sea ambulance providers and insurers, and is not itself a hospital, airline, ambulance operator or insurer. Last updated 18 September 2026.
What Personal Data Do We Collect?
We collect data only when you initiate contact — there is no passive tracking of medical information on this site.
| Category | Examples | Collected via |
|---|---|---|
| Identity data | Full name, date of birth, passport or ID number, nationality | WhatsApp, email, contact form |
| Contact data | Phone number, WhatsApp number, email address, villa/hotel address | WhatsApp, email, contact form |
| Case and health data | Reported condition, location of incident (Nusa Penida, Gili, Lombok, Sumba, Labuan Bajo or elsewhere), symptoms as described by the sender, receiving hospital | WhatsApp, email, phone |
| Insurance data | Insurer name, policy number, policy limits, pre-authorisation correspondence | WhatsApp, email, forwarded documents |
| Payment-adjacent data | Billing name and invoicing address for coordination fees (never full card numbers, which we never request) | Email, invoice exchange |
| Technical data | IP address, browser type, pages viewed | Automatically, via standard server logs |
Health data and, where relevant, insurance data are treated as specific personal data under Indonesia’s Personal Data Protection Law, Law No. 27 of 2022 (UU PDP), which requires a higher standard of protection and, in most cases, your explicit consent before we process or forward it.
Why Do We Process This Data?
We process personal data for one narrow purpose: arranging and coordinating a medical evacuation, repatriation or standby plan, and the insurer liaison that supports it. Specific uses are:
- Relaying case details to the hospital, air-ambulance provider, boat or ground ambulance operator best placed to respond
- Liaising with your insurer or third-party administrator to confirm coverage, pre-authorisation or guarantee of payment
- Coordinating with the destination hospital’s admitting team for handover
- Sending case updates to the family member, villa manager or dive operator who initiated contact, where the patient has authorised this
- Keeping a case file for post-incident reference, billing and dispute resolution
We do not use medical or identity data for marketing, do not build advertising profiles from it, and do not share it with any party outside a given case.
Who Do We Share Your Data With?
| Recipient | What is shared | Why |
|---|---|---|
| Licensed hospital or clinic receiving the patient | Identity data, reported condition, insurance data | Clinical handover and admission |
| Air-ambulance, helicopter, boat or ground ambulance operator arranged for the case | Identity data, pickup location, condition summary | Dispatch and en-route care |
| Patient’s insurer or its assistance company | Identity data, case summary, invoices | Coverage confirmation and claims |
| Destination-country receiving facility, for Singapore, Australia or Jakarta repatriation cases | Identity data, medical summary supplied by the treating team | Continuity of care on arrival |
| Payment or invoicing service used for coordination fees | Billing name, invoice amount | Fee collection |
We do not share your data with operators, hospitals or insurers who are not directly involved in your case, and we never publish case details, names or photographs without separate written consent.
How Long Do We Keep Data?
Active case data is retained for the duration of the case plus 24 months, to support billing queries, insurer disputes and any follow-up care coordination. Case files involving invoicing are kept for the period required by Indonesian tax and bookkeeping rules, generally up to 10 years for financial records. Contact-form submissions that do not lead to a case are deleted after 12 months if no further correspondence follows. You can ask us to delete data sooner where no legal retention duty applies, as set out below.
Your Rights Under Indonesia’s PDP Law
Under UU 27/2022, and consistent with the awareness international visitors may already have from the EU’s GDPR, you have the right to:
- Access the personal data we hold about your case
- Correct inaccurate or incomplete data
- Withdraw consent to processing, where consent is the basis we rely on
- Request deletion of data we no longer need for the case, billing or a legal duty
- Object to processing carried out for reasons other than coordinating your case
- Request a copy of your data in a portable format
- Lodge a complaint with Indonesia’s Personal Data Protection Authority once fully operational, or pursue other remedies available under Indonesian law
To exercise any of these rights, email bd@juaraholding.com with your name and a description of the case, or message WhatsApp 6281139414563. We aim to respond within 14 working days; where a request would compromise an active evacuation or a hospital’s clinical record-keeping duty, we will explain the limitation in writing.
A Note for International Visitors
Many Bali Medevac cases involve travellers from Australia, Singapore, Europe and beyond. Where the sender is in a jurisdiction covered by the GDPR or a similar regime, we handle the request in the same spirit — lawful basis for processing, data minimisation, and a named contact for enquiries — even though Indonesian law, not EU law, governs our processing as the party based in Indonesia. If your home-country insurer or embassy requires a formal data-processing statement, request it through the same contacts above.
Legal Basis for Processing
We process case data on the basis of your explicit consent when you or someone on your behalf sends us case details, or on the basis of vital interest when a delay to seek consent would endanger the patient — for example, an unconscious diver reported by dive-boat crew. Insurer liaison and invoicing are processed under contractual necessity, to deliver the coordination service you or your insurer requested.
How We Secure Your Data
Case correspondence is handled through WhatsApp Business and email accounts restricted to the coordination desk team, with access limited to staff working the specific case. We do not store card numbers, CVV codes or online-banking credentials — invoicing and payment take place through the billing channel agreed with you directly, never inside a chat thread. If you believe a message claiming to be from Bali Medevac is fraudulent, verify it only through WhatsApp 6281139414563 or bd@juaraholding.com before sending any data or payment.
Cookies and Website Data
balimedevac.com uses only the technical cookies and server logs needed to keep the site running and measure basic traffic (page views, browser type, approximate location by IP). These logs are separate from case data and are not cross-referenced with any patient file.
Changes to This Policy
We may update this policy as our coordination process, insurer partnerships or Indonesian data-protection rules change. The effective date at the top of this page shows the last revision; material changes affecting how we handle health data will be reflected here before they take effect.
Publisher and Contact
Bali Medevac is published and operated by Juara Holding Group, an independent coordination desk (established 2015) that arranges evacuation, repatriation and insurer-liaison services with licensed hospitals, air-ambulance providers and ambulance operators. Juara Holding Group is not a hospital, airline, ambulance operator, insurer, or a licensed financial, legal or tax adviser, and this page is not legal advice for your specific case.
For any privacy question, data request or correction, contact:
- WhatsApp: 6281139414563
- Email: bd@juaraholding.com
All figures and dates in this policy are current as of 2026 and subject to change; check back or ask us directly before relying on a retention period or process step for a time-sensitive case.