Privacy Policy
This Privacy Policy (hereinafter referred to as “Privacy Policy”) is the terms of use of Your personal data/information contained in the Platform, owned and managed by PT Prodia Digital Indonesia (“PRDI”) that binds between PRDI and You as You (“YOU”).
This Privacy Policy regulates how PRDI treats Your personal data/information such as obtaining, collecting, processing, analyzing, storing, displaying, announcing, sending, disseminating, and/or opening access and destroying Your personal data/information, which is a PRDI’s compliance with the applicable law in the Republic of Indonesia especially Law No. 27 of 2022 on Personal Data Protection, Law No. 11 of 2008 on Electronic Information and Transaction as amended by Law No. 19 of 2016 on Amendment of Law No. 11 on 2008, Government Regulation No. 71 of 2019 on Implementation of Electronic System and Transaction, Minister Regulation of the Minister of Communication and Informatics No. 20 of 2016 concerning Personal Data Protection in Electronic System, Regulation of the Minister of Health No. 24 of 2022 concerning Medical Record, Regulation of the Minister No. 36 of 2012 concerning Medical Confidentiality, Government Regulation No. 10 of 1966 concerning Must Keep the Medical Confidentiality and its implementing regulations and their amendments from time to time.
PRDI highly values Your personal data or information as private, and is committed to maintaining and protecting the confidentiality, integrity, and security of any personal data or information about a person, whether identified and/or identifiable separately or is combined with other information directly or indirectly, either electronically through the Platform and/or non-electronically, whether full name, date of birth, phone number, home address or billing address, email address, medical information or other information that is considered as personal data based on the applicable laws and regulations, which You provide to PRDI (“Personal Information”).
This Privacy Policy and other related documents in relation to how the Personal Information that You provide to PRDI or the Personal Information that PRDI collects from You, is used for the purpose of providing access to the Platform and Services to You as well as the development and improvement of the Platform and Services to You (in accordance with Article No. 4 of this Privacy Policy), which is subject to the prevailing laws and regulations. Please read the following provisions carefully to understand how PRDI treats Your Personal Information.
This Privacy Policy applies to all users, healthcare service providers (such as doctors), agents, vendors, suppliers, PRDI partners (such as pharmacies, labs, insurance partners, and hospitals), and contractors unless otherwise specified in separate privacy policies. If You use the Platform on behalf of individuals other than yourself, You represent that You are authorized by that individual to act on their behalf and that individual acknowledge the practices and policies outlined in this Privacy Policy.
1. DEFINITION
Personal data refers to any information, data, and/or details in any form that can identify You, which You provide to PRDI from time to time or You disclose through, on, and/or via the Platform, relating to information about yourself. Personal data includes but is not limited to Your full name, government-issued identification numbers (NIK), address, date of birth, nationality, gender, phone number (including but not limited to IP address, location information, Your device data, IMEI number, names of applications attached to Your device), banking and credit card details, email address, images of Yourself, biometric data, marital status, personal health information, insurance information, financial information, and other data classified as personal data.
Please note that Personal Data herein does not include any publicly available personal information. Terms that are capitalized, unless otherwise defined in this Privacy Policy, have the same meaning as defined in the Terms and Conditions accessible at Terms & Conditions.
2. ACCESS AND PREMISSIONS ON YOUR DEVICE
For Your Android and iOS device, Platform will need permission/access to:
a. Access the internet & network state;
b. Platform requires an internet connection, so Platform monitors Your internet & network conditions to be able to provide notifications, if there is a lost-connection at any time which results in Platform not being able to run (optimally);
c. camera access;
i. Platform requires You to include photos in some parts of Platform, You can use the Camera as one of the media to be able to take pictures;
ii. granting access to the Camera on the device serves for You to take pictures in choosing Your profile photo, photo when chatting and/or with the doctor, to photos when attaching a reference letter; and
iii. granting access to Platform to use the camera and/or photo gallery or storage media like access “READ_EXTERNAL_STORAGE” & “WRITE_EXTERNAL_STORAGE” on your device to read and store photos, images or videos, may be temporary (processed files specifically for this application may disappear by themselves).
d. access photo, gallery and files; and
i. Platform requires You to include picture and/or document in each part of the Platform, You can see in the gallery and/or file browser to find related photos, pictures, or files required;
ii. Platform requires You to be able to store data generated from the Platform side and third-party applications that are integrated with the Application;
iii. providing access to photo, galleries and files serve for You to choose a profile photo and/or select supporting documents needed in Teleconsultation and/or registration for health services through live chat; and
iv. granting access Platform to read, write and process files on the storage media on your device, with the possibility of being temporary (the results of specially processed files for this application can disappear by themselves).
e. location access;
i. You can view the permissions used by Platform and disable them at any time through the settings menu; and
ii. granting access to the Platform to use your current location data when this Platform is used, like “ACCESS_COARSE_LOCATION” & “ACCESS_FINE_LOCATION” Granting location access is used to make it easier to determine your current location with the nearest branch for home service facilities and Your address.
f. PRDI also reserves the right to collect information when You use the Platform, including but not limited to: location/coordinate of GPS (if You enable this feature), Internet Protocol (IP) address (if you are using a browser), operation system, browser type, Platform address which refers to Your activity in the Platform, Files and Camera access. You can enable or disable the location recognition service when You use the Platform.
g. PRDI has the right to conduct direct verification to You regarding the information of the personal data that You have submitted through the Platform.
h. By using the Platform, You hereby warrant that the information You provide is accurate and true. If the information You provide is incorrect, PRDI shall not be liable for any consequences that may occur in connection with the provision and use of such incorrect information.
i. You agree that when You use the Platform, every feature or facility on the Platform can be updated or changed according to the needs and developments of the Platform, including the integration of Your data from Prodia Mobile to the U By Prodia Platform which will be stored to make it easier for You to use the services on the Platform better.
3. ACCURACY OF PERSONAL DATA & USER CONSENT
PRDI requires Your Personal Data, including but not limited to, processing transactions on the Platform. Therefore, the Personal Data You provide to PRDI must be as accurate as possible and not misleading. You must update and notify PRDI of any changes to your Personal Data. By doing so, You hereby release PRDI from any claims, lawsuits, damages, and/or claims related to transaction processing failures on the PRDI Platform or the use of Services caused by inaccuracies in the Personal Data you provide to PRDI.
By using the Platform, you have read, understood, and legally agreed to this Privacy Policy. This Privacy Policy includes the applicable terms and conditions, as stated at https://prodia.co.id/id/kebijakan-privasi-pelanggan. You also state that you are at least 18 (eighteen) years old or married. If you are under 18 (eighteen) years old, you must be accompanied by a parent or guardian to use the Platform. You warrant that you have the right and authority to use the Platform. If you do not agree, please do not continue using the Platform.
4. COLLECTION OF PERSONAL INFORMATION
Through Your use of the Platform, PRDI will collect, process, analyze and store Your Personal Information in various ways in connection with Your use of the Platform, in the following ways:
a. data and/or personal identity information submitted independently by You, including but not limited to when You:
i. asked to fill out a form requesting information/data or upload Your personal data in connection with providing Services on the Platform, including but not limited to, name, address, e-mail, phone number, medical history, gender, medication, allergies, vaccinations, health targets, insurance used, and government-issued Identification Number (NIK), personal photo and/or other information, when creating an account on the Platform, or collected automatically when You use the Platform;
ii. contact PRDI, including through Customer Service;
iii. fill out surveys that sent by PRDI in connection with Platform development;
iv. use the Services on the Platform, including but not limited to information/data obtained from consultations with Doctors, as well as other services that may be provided from time to time;
v. fill in the data on the payment page on the Platform during the payment process including but not limited to bank account data, credit cards, virtual accounts, instant payments, internet banking;
vi. fill in information/data on the registration page on the Platform, including but not limited to home address, office address, phone number and e-mail address;
vii. use features that require access permission to Your device;
viii. interact with PRDI social media; and
ix. other data submitted through third party services in connection with the use of the Platform.
b. data recorded when You use the Platform, including but not limited to when You visit the Platform, the Platform administrator will process technical data such as Your Internet Protocol address (IP address), site pages You have visited, internet browser You use, site pages Your previous/next visit and the duration of each visit/session that allows PRDI to deliver Platform functions; and
c. data that PRDI obtains from other sources such as PRDI business partners who help PRDI in developing and delivering Services on the Platform to You such as Doctors, health service providers other than Doctors, payment service providers, marketing service providers, social media service providers, Platform infrastructure providers, and other partners (subject to any provisions in the agreement between PRDI and PRDI's business partners).
5. PURPOSE OF COLLECTING PERSONAL INFORMATION
PRDI will use Personal Information in whole or in part that PRDI obtains and collects from You as stated in Article 3 of this Privacy Policy to use the Personal Information for the following purposes or for other purposes permitted by applicable laws and regulations:
a. answer questions or requests that You submit;
b. process orders or requests that You send;
c. ensure that the contents of the Platform are presented effectively for You and Your device;
d. provide information or Services that You request or that PRDI deems important to You, with the consideration that You have consented to PRDI contacting You for that purpose;
e. carry out PRDI's obligations arising as a result of the contract created between You and PRDI;
f. enable You to participate in interactive features of the Services, when You click on them or select them;
g. inform You about changes via the Platform;
h. carry out PRDI's obligations in connection with the implementation of collaboration with any third party;
i. send You marketing communications, promotions, development, research, education, medical audits and information about special offers or promotions;
j. create products or provide access to Services that meet Your needs;
k. matters relating to products, Platform development, research, market research, marketing, project planning and education, medical audits;
l. troubleshooting, detecting and protecting against system errors, fraud and other criminal activities;
m. providing features as part of PRDI's efforts to provide, realize, maintain and improve the services that PRDI provides such as carrying out internal activities required to provide services on the Platform such as solving software problems, bugs, operational problems, conducting data analysis, testing, research, and to monitor and analyze usage and activity trends;
n. anticipate or service that meets Your needs; and
o. analyze Platform usage and improve Platform services.
You are allowed to share Your Personal Data with third parties at Your own risk. PRDI is not responsible for the compliance of third parties who may view and use any information disclosed by You, with the Privacy Policy.
6. COLLECTION OF NON-PERSONAL INFORMATION
PRDI may automatically collect Non-Personal Information about You, such as the type of internet browser You use or the websites that direct You to the PRDI Platform. PRDI also collects data that You submit to the site (e.g., your age and city of residence). You cannot be identified through this information, and the data is only used to assist us in providing effective services on the PRDI Platform. PRDI may from time to time provide this non-personal or aggregated data to third parties for use in connection with the PRDI Platform.
7. DISCLOSURE OF PERSONAL INFORMATION TO THIRD PARTIES
PRDI may collect, announce, send, disseminate and/or disclose Personal Information to third parties, in the following circumstances:
a. Providing Services: PRDI will disclose Personal Information to PRDI business partners who help PRDI in developing and providing access to Services to You such as Doctors, other health service providers other than Doctors, payment service providers, marketing service providers, social media service providers, infrastructure providers Platform, and other partners (subject to any provisions of the agreement between PRDI and PRDI's business partners).
b. Business Transfer: PRDI may sell or transfer Personal Information to third parties, as part of a transaction, in the event of a corporate action including but not limited to a merger, consolidation, takeover or other form of reorganization that causes a change in structure and/or ownership and/or control over PRDI.
c. Transfer to Affiliates: PRDI will disclose Personal Information to its affiliates with the intention that the designated affiliates assist PRDI in providing access to the Services, to operate PRDI's business or for the purposes of processing Personal Information on behalf of PRDI. For example, a PRDI affiliate in another country may process and/or store Your Personal Information on behalf of a PRDI group company in Your country. All PRDI affiliates are committed to processing the Personal Information they receive from PRDI in accordance with this Privacy Policy and applicable laws and regulations.
d. Law Enforcement Process: If required under statutory regulations, PRDI is obliged to provide Personal Information contained on the Platform based on a lawful request from law enforcement officials and competent authorities based on the provisions of statutory regulations.
e. Use of Third Party Services: PRDI can cooperate by providing access to Personal Information to any party that PRDI appoints (You can ask PRDI not to provide third parties with Your name) to help PRDI facilitate or provide assistance in maintenance, service or development of the Platform and certain services for and/or on behalf of PRDI.
8. SECURITY AND PERSONAL DATA PROTECTION
a. PRDI is committed to maintaining security and protecting Your Personal Information from threats by unauthorized parties. Personal Information has been protected by using an encrypted security system. PRDI is obliged to provide written notification (electronic or non-electronic) to You, if there is any failure of security and protection of Personal Information in the Platform. You are advised to update and change the password of Your Account regularly to avoid unwanted Personal Information leakage.
b. The confidentiality of Your Personal Data is the most important thing for PRDI, where PRDI guarantees that the data and information that You provide are confidential and will not be disclosed except for the purposes mentioned in this Privacy Policy and as You agree in this Privacy Policy. PRDI makes its best efforts to protect and secure Your Personal Data from unauthorized access, collection, processing, analysis, storage, disclosure, correction, and deletion by unauthorized parties through physical security measures, electronic security, and managerial procedures. For the security of Your data, PRDI highly recommends that You regularly update the PRDI Platform.
c. While PRDI makes its best efforts to secure and protect Your Personal Data, it should be noted that data transmission over the Internet is never entirely secure. Therefore, PRDI cannot guarantee 100% security of the data that You provide or send to PRDI, and providing information to You is at Your own risk. In the event of a data breach related to Your Personal Data, as required by applicable regulations, PRDI will notify You through PRDI's official channels, both directly and indirectly, to provide You with sufficient information about the data breach and will work to prevent misuse of Your Personal Data.
d. You bear the obligation to uphold the confidentiality of Your account details, including Your phone number, email, password (if applicable), and one-time password (OTP) to all individuals, with anyone and must always ensure and be responsible for the security of the device You use. You will release PRDI from any form of loss or claim in the event of Your negligence in maintaining the confidentiality of Your PRDI account details, including passwords, emails, or one-time passwords (OTPs), as well as Your negligence in maintaining the security of the device You use.
e. The obligation to maintain the confidentiality of Personal Data will not apply to or no longer apply to Personal Data that:
i. has been known to the public at the time of disclosure or has been known to the public thereafter by means other than PRDI's actions or omissions;
ii. PRDI has been obtained appropriately from third parties without the obligation to maintain the confidentiality of such Personal Data;
iii. the disclosure has been authorized by You; and/or
iv. must be disclosed in accordance with applicable laws and regulations, court decisions, or other authorized government institutions, in any jurisdiction.
9. RIGHTS OF PERSONAL INFORMATION OWNER
9.1. Request for Destruction of Personal Information
At Your request, unless otherwise determined by the provisions of applicable laws and regulations, PRDI will delete or erase or destroy part or all of the documents related to Personal Information, including electronic and non-electronic ones managed by PRDI so that the Personal Information cannot be displayed again in Platform within 30 (thirty) days after PRDI receives Your request for the destruction of Personal Information, unless You re-register yourself on the Platform.
In accordance with applicable regulations, upon Your written request/application, PRDI may delete (right to erasure) and/or delist Your Personal Data from the system (right to delisting) so that the data no longer identifies You, except in cases where:
a. PRDI needs to retain Personal Data to fulfill legal, tax, audit, and/or accounting obligations, PRDI will retain the necessary Personal Data for as long as You continue to use the PRDI Platform or for the period required by applicable regulations;
b. Your Personal Data is still within the retention period based on applicable regulations; and/or
c. for the purpose of deleting Your Personal Data from the system (right to delisting), a court order submitted by You is required for PRDI to be able to delete irrelevant Personal Data from the search engine list under PRDI's management.
9.2. UPDATE THE PERSONAL INFORMATION
You have the right to complete, update, and/or correct errors and/or inaccuracies in Your Personal Information from time to time. Unless it’s not prohibited by applicable regulations, You may contact PRDI to withdraw consent for using Your Personal Data as stipulated in this Privacy Policy. If that so, You understand and accept the consequences that You cannot use the Services on the PRDI Platform or other PRDI services.
10. COLLECTION OF PERSONAL DATA
To the extent permitted by relevant regulations, all Personal Data that You provide will be collected by PRDI:
a. as long as You remain as a user of the PRDI Platform;
b. when the retention period begins from the date You stop using the PRDI Platform and/or from the request for the deletion of Your account and Personal Data; or
c. following the original purpose of collecting Personal Data.
PRDI will delete and/or anonymize Your Personal Data under PRDI's control if:
a. Your Personal Data is no longer needed to fulfill the purpose of its collection; and
b. storage is no longer necessary for compliance with applicable regulations.
Please note that there may still be a possibility that some of Your Personal Data is retained by other parties, including government institutions in certain ways. If PRDI shares Your Personal Data with authorized government institutions and/or other agencies appointed by the authorized government or cooperating with PRDI, You agree and acknowledge that the storage of Your Personal Data by the relevant institutions will follow the data storage policies of each respective institution. Information provided through communication between You as a user (e.g., Healthcare Service Providers, pharmacy partners, laboratories), conducted other than through the use of the Platform (such as through phone calls, SMS, or other communication methods, and data collection of Your Personal Data by PRDI partners) may also be stored in various ways. PRDI does not permit the storage of Personal Data in this way, and PRDI is not responsible to You for it. PRDI will not be responsible for the storage of Your Personal Data. You agree to indemnify, defend, and hold PRDI, its officers, directors, employees, agents, partners, suppliers, contractors, and affiliates from and against all claims, losses, liabilities, costs, damages, and expenses (including but not limited to legal costs and full compensation expenses) directly or indirectly resulting from any unauthorized storage of Your Personal Data.
11. APPLICABLE LAW
This Privacy Policy is governed by the laws of the Republic of Indonesia, and You are obliged to comply with all regulations that applicable to the Republic of Indonesia.
12. PRIVACY POLICY CHANGES
PRDI may review and change this Privacy Policy at any time based on PRDI's own considerations and decisions without prior written notification. PRDI will record these changes, where each change to the Privacy Policy will be announced via the Platform by explaining the last date of each change to the Privacy Policy, at the top of the Privacy Policy. If You are not willing to be bound by the new Privacy Policy, then You are not permitted to use the Platform further.
13. CONTACT PERSON
PRDI is very grateful and will welcome Your inquiries, requests, complaints, grievances, and comments in relation to this Privacy Policy. If You wish to contact PRDI regarding this Privacy Policy, please contact PRDI via:
Head Office Prodia Digital
GRHA Prodia Utama 1st Floor
Jl. Raden Saleh Raya No. 55, Cikini, Menteng
Central Jakarta 10330
Contact: 1500 830
Email: support@prodiadigital.com
Renewed on the date 26 June 2025
