Legal
Privacy Policy
Effective as of August 16, 2026.
Last updated on October 15, 2026.
This Privacy Policy explains how PT Get VeWell Indonesia ("VeWell," "we") collects, uses, shares, and protects your personal data when you use our hospital coordination and insurance claim assistance service. By using VeWell's service, you agree to the practices described in this policy.
Data we collect
When you submit an assistance request, we collect information you provide directly, such as your name, a way to reach you back, the care or specialty you need, and your insurance details if relevant. If you create a VeWell account, we also collect your email address, a securely hashed password (or, if you sign in with Google, your Google account's name, email, and profile photo), and — if someone referred you — which referral code you used. When you sign up, we ask for your mobile number. We use it to secure your account, prevent misuse of the referral program, and contact you (including via WhatsApp) about your membership, your paid period, and your assistance requests. We don't sell your number or use it for promotions without your consent. You can ask the VeWell team to change or delete your number. We only ask for what's actually needed to help you.
How we collect data
When you submit an assistance request through your VeWell account, we collect the information you enter directly in our in-app assistance form. That data is processed by VeWell's systems so our team can follow up with you.
How we use your data
We use your data to understand your care needs, contact you back, coordinate registration with the hospital you choose, help with your insurance claim, and improve our service. If you have a VeWell account, we also use your data to authenticate you, track your referral points balance, and award points after the friend you invited verifies their email and saves their mobile number. We do not use your data for third-party marketing purposes.
Legal basis for processing
We process your data based on the consent you give when submitting an assistance request, and to the extent necessary to carry out the service you've requested. To share data with a hospital and/or insurer on your behalf, we'll first ask you for an official Power of Attorney (Surat Kuasa).
Your health data
Some of the data you provide — such as your care needs or relevant medical history — falls under the "specific" (sensitive) personal data category under Indonesia's Personal Data Protection Law. We treat this data with extra care: only team members who genuinely need it to help with your request can access it, and we only use it to the extent needed to help with your care and insurance claim. As we build our own request system, we plan to carry out a data protection impact assessment (DPIA) to make sure how we handle your health data stays aligned with Indonesia's Personal Data Protection Law.
Data storage and security
We keep data from your assistance request for as long as your care and insurance claim process is active, plus 12 months after your request is complete for follow-up and legal obligations, then delete or anonymize it. We apply reasonable security measures to protect your data from unauthorized access, alteration, or disclosure.
Data breach notification
If a security breach results in unauthorized access to or disclosure of your personal data, we will notify you and the relevant authority no later than 3x24 hours after we become aware of the breach, in accordance with Indonesia's Personal Data Protection Law.
Your rights as a data owner
Under Indonesia's Personal Data Protection Law, you have the right to access your personal data, request correction of inaccurate data, request deletion of your data, withdraw consent you've given, object to certain processing, and request a copy of your data in a portable format. To exercise these rights, contact us at [email protected]. To protect your data, we may need to verify your identity before processing this kind of request.
Third-party data
If you submit a request on someone else's behalf, such as a family member, please make sure you have their permission to share their data with us.
Data transfers
Assistance requests are processed on VeWell's systems. Infrastructure and technical providers we use (for example hosting and email delivery) may process data on servers outside Indonesia under their data-processing terms. We'll update this policy if processing locations or providers change in a material way.
Changes to this policy
We may update this policy from time to time. Changes take effect once published on this page.
Contact us
For questions about your personal data or this policy, contact us at [email protected]. This service is operated by PT Get VeWell Indonesia. Our official Data Protection Officer is Dewi, reachable at [email protected].