Privacy Policy

Who we are

kyoung.id is run by PT Diva Akara Piranti, which operates Klinik Pratama K Young, Jl. D. Tondano No.7A, Bendungan Hilir, Tanah Abang, Central Jakarta 10210. We are the controller of the personal data you give us on this website.

What we collect

When you book: your first name, WhatsApp number, treatment, date and time, message language, a note (optional), and your choice about treatment and clinic news.

At the clinic, staff may record your national ID number (NIK) in the patient list, only if you agree. It is not required, never asked on the booking form, and stored encrypted.

For security: a scrambled (hashed) IP address that changes every day, to stop misuse. We use no advertising cookies or trackers.

In the note you may write your medical history or allergies, but you do not have to. The note is stored encrypted, only read by the clinic team, and deleted together with the booking data. Full medical records are made at the clinic when you visit and kept in the clinic system, separate from the website.

WhatsApp and Instagram chats with our automated assistant

Your chats to WhatsApp 0811-596-864 and Instagram @kyoung.id may be answered first by an automated assistant (AI). It always introduces itself as an automated assistant, and you can ask to talk to our staff at any time.

To reply, the chat text is processed by the Claude AI service from Anthropic. Anthropic does not use this data to train its AI models.

The chat text is stored encrypted on our servers only so the assistant remembers the conversation, and is deleted automatically 24 hours after the last message. The chat history stays in the clinic WhatsApp and Instagram inbox, which our staff read.

The assistant can make a booking after you read the same consent text as on the booking form and reply AGREE. It gives no diagnosis or medical advice; medical questions go to the clinic team.

For internal reports we record each conversation without its text: channel, time, whether it came from an ad, and whether it led to a booking, a visit and a payment within 30 days. These records are deleted after 13 months. For Instagram chats that come from our ads, we may tell Meta that a booking was made or a payment happened, with its value in Rupiah and your Instagram ID from Meta, to improve our ads. Treatment names, complaints and health data are never sent to Meta.

Why we use it

To manage your appointment, send confirmations and reminders on WhatsApp, and contact you if your appointment has to change.

Treatment and clinic news is only sent if you agree, at most twice a week. You can stop it at any time.

We process your data based on the consent you give when booking, and because we need it to provide the service you asked for.

Who can see it

Clinic staff with access, who log in with two-step verification. Doctors, nurses and beauticians do not see your WhatsApp number.

Service providers that help us: Cloudflare (servers and storage), a WhatsApp service provider to send messages, Anthropic (the Claude AI service) to answer chats, and Meta for Instagram messages. WhatsApp messages only contain your name, date, time and treatment, never medical notes.

We do not sell your data.

How long we keep it

Booking data on the website, including notes, is deleted automatically 90 days after the appointment date.

Your name, WhatsApp number and booking history (date, time, treatment, status, no notes) are kept in the clinic patient list, so we recognize you when you book again. After 2 years without a booking they move to an archive. After 5 years without a booking they are deleted automatically if you never had a treatment at the clinic. If you did, they are part of your medical record and stay in the archive for at least 25 years after your last visit, as required by Health Ministry Regulation 24 of 2022. Staff activity logs (without personal data) are kept for up to 1 year.

Medical records at the clinic are kept as required by Indonesian Health Ministry Regulation 24 of 2022 on Medical Records.

How we protect it

Connections are always encrypted (HTTPS). Names, WhatsApp numbers and notes are stored encrypted. Staff access is logged. Data is stored on Cloudflare servers.

If a data breach happens, we tell you and the relevant authority within 3 x 24 hours of finding out, as required by Indonesian Law 27 of 2022 on Personal Data Protection.

Your rights

You can ask for a copy of your data, correct it, delete it, withdraw your consent, and stop treatment and clinic news. You can cancel a booking with the link in your WhatsApp message.

Send your request on WhatsApp at 0811-596-864 or by email to info@kyoung.id. We reply within 3 x 24 hours.

Content from others

The Instagram section on the home page shows photos from @kyoung.id loaded from Instagram servers. The WhatsApp button opens the WhatsApp app.

Changes

If this policy changes, the date above changes too. We announce big changes on the website.