PRIVACY POLICY & USER DATA
DELETION POLICY

1. About BA MEDICALE

BA MEDICALE is an Indonesian medical and healthcare education platform founded on 20 November 2024. Its activities include medical education, seminars, webinars, workshops and training, educational publishing, professional knowledge sharing, and digital medical-learning resources. BA MEDICALE serves healthcare professionals and, through its digital platform, may also provide public-facing health education.

2. Scope of This Policy

This Policy explains how BA MEDICALE may collect, use, store, disclose, protect, correct, and delete personal data when a person uses BAMedicale.com, communicates through WhatsApp or other official digital channels, registers for an event or service, submits a form, subscribes to updates, or otherwise interacts with BA MEDICALE's digital services.

3. Personal Data We May Process

Depending on the service used, BA MEDICALE may process only data reasonably necessary for the relevant purpose. This may include:

• Identity and contact information voluntarily provided by the user, such as name and contact details.
• Account, registration, seminar, webinar, workshop, or service-related information submitted by the user.
• Messages and conversation content sent through official communication channels, including WhatsApp, when necessary to respond to enquiries or provide support.
• Technical and usage information generated when interacting with the website, where applicable, such as device/browser information, log information, and cookie or analytics data.
• Information required to process a request, provide a requested service, maintain security, prevent misuse, comply with legal obligations, or exercise BA MEDICALE's lawful rights.

BA MEDICALE does not intend to collect personal data that is unnecessary for the stated purpose. Users should avoid sending sensitive medical or other highly sensitive personal information through general website or WhatsApp support channels unless specifically requested through an appropriate and secure process.

4. Purposes of Processing

Personal data may be processed to respond to enquiries; provide requested information or services; administer registrations and educational activities; operate and improve BAMedicale.com; manage customer support; deliver relevant transactional communications; maintain service security and integrity; comply with applicable law; manage records; and establish, exercise, or defend legal rights where necessary.

5. Lawful Basis and Consent

BA MEDICALE processes personal data only where there is an appropriate legal basis under applicable Indonesian law. Depending on the context, this may include valid consent, performance of a contract or steps requested before entering a contract, compliance with a legal obligation, protection of vital interests, performance of a task permitted by law, or another legitimate interest that appropriately balances BA MEDICALE's needs with the rights of the data subject. Where consent is relied upon, the request for consent should be clear, specific, accessible, and distinguishable from unrelated matters.

6. WhatsApp, Meta, and Automated Assistance

BA MEDICALE may use WhatsApp Business Platform and related Meta services to receive and respond to messages. Messages may be routed through approved technology providers and automation tools to support customer service. Automated assistance may classify a request, retrieve relevant BA MEDICALE content, and draft or deliver a response. Where the available information is insufficient, confidence is low, a user asks for a person, or the request requires human handling, the conversation may be transferred to authorized BA MEDICALE staff.

7. Medical and Health Information

BA MEDICALE's public digital content and automated support are intended for education and general information. They are not intended to replace an individual medical consultation, diagnosis, emergency assessment, or personalized treatment decision. Requests that require individualized clinical judgment may be redirected to appropriate human or healthcare support rather than answered automatically.

8. Disclosure and Service Providers

BA MEDICALE may use third-party infrastructure and service providers where reasonably necessary to operate its digital services, such as website hosting, communications, messaging, analytics, automation, cloud infrastructure, security, or related technology services. Personal data should be shared only to the extent necessary for the relevant purpose and subject to appropriate safeguards and contractual or legal requirements.

9. Cross-Border Processing

Some technology providers may process or store data outside Indonesia. Where personal data is transferred outside Indonesia, BA MEDICALE should apply the safeguards required by applicable Indonesian personal data protection law, including appropriate protection standards, binding safeguards, or consent where required.

10. Data Retention

BA MEDICALE retains personal data only for as long as reasonably necessary for the purpose for which it was collected, to meet legitimate operational and record-keeping needs, or as required by applicable law. When the purpose has been fulfilled or the applicable retention period ends, data should be deleted, destroyed, anonymized, or otherwise handled in accordance with applicable requirements, unless continued retention is legally permitted or required.

11. Security

BA MEDICALE applies reasonable technical and organizational measures intended to protect personal data against unauthorized access, disclosure, alteration, misuse, destruction, or loss. Access should be limited to authorized persons and service providers that require it for legitimate operational purposes. No internet-based system can eliminate all security risk, so safeguards should be reviewed as BA MEDICALE's services evolve.

12. Rights of Data Subjects

Subject to applicable law, individuals may have rights to obtain information about processing; access their personal data; request correction or updating; withdraw consent where consent is the applicable basis; request restriction or termination of processing; request deletion or destruction; object to certain solely automated decisions that produce legal or similarly significant effects; and exercise other rights provided under Indonesian personal data protection law.

13. User Data Deletion Requests

A user may request deletion of personal data associated with BA MEDICALE's website or connected digital services. This section is intended to serve as BA MEDICALE's public user-data-deletion instructions, including for integrations that require a publicly accessible deletion process.

1. Submit a deletion request through the official privacy/contact channel identified on the BA MEDICALE website. The request should clearly state that it is a personal-data deletion request.
2. Provide enough information for BA MEDICALE to identify the relevant account, interaction, registration, or record without requesting unnecessary additional personal data.
3. BA MEDICALE may take reasonable steps to verify the requester's identity before deleting data, particularly where disclosure or deletion could affect another person or create a security risk.
4. After verification, BA MEDICALE will assess the request and delete, destroy, anonymize, restrict, or retain the relevant data as required or permitted by applicable law.
5. Where deletion is completed, BA MEDICALE should provide confirmation through the available contact channel. Data that must be retained for legal, regulatory, security, dispute, fraud-prevention, or legitimate record-keeping reasons may be excluded from immediate deletion to the extent permitted by law.

Meta / WhatsApp note: deleting a conversation from a user's own WhatsApp application does not necessarily constitute a request to delete records lawfully held by BA MEDICALE or its processors. A user who wants BA MEDICALE to process a formal deletion request should use the official support channel at support@bamedicale.com.

14. Children and Vulnerable Users

Where BA MEDICALE knowingly processes personal data of children or persons for whom special consent or communication requirements apply, the processing should follow the additional protections and consent requirements established by applicable Indonesian law.

15. Cookies and Similar Technologies

BAMedicale.com may use cookies or similar technologies that are necessary for website functionality, security, preferences, analytics, or other disclosed purposes. Where consent is legally required for a particular technology or purpose, BA MEDICALE should provide an appropriate consent mechanism. The published website policy should be kept consistent with the actual cookies and analytics deployed on the site.

16. Changes to This Policy

BA MEDICALE may update this Policy when its services, technology, data practices, or legal obligations change. Material changes should be reflected on the published page with an updated effective date and, where required, communicated before the changed processing takes effect.

17. Organization and Official Contact

BA MEDICALE is the organization responsible for this Policy and for the digital services described here. Business location: Jakarta, Indonesia - 2026. For privacy requests, user-data deletion requests, service enquiries, support, partnerships, collaborations, and other official business communications, contact support@bamedicale.com. Personal phone numbers, private email addresses, passwords, access tokens, API keys, authentication credentials, and other non-public credentials must not be published in this Policy.

18. Governing Framework

This Policy is intended to operate consistently with applicable laws and regulations of the Republic of Indonesia, including Law No. 27 of 2022 on Personal Data Protection and other applicable rules governing electronic systems, digital services, communications, and personal-data processing. If a provision of this Policy conflicts with a mandatory legal requirement, the applicable legal requirement prevails.