Legal
Privacy Policy
Effective as of August 16, 2026.
Last updated on August 16, 2026.
This Privacy Policy explains how PT KLAIMQU INDONESIA SEJAHTERA ("VeWell," "we") collects, uses, shares, and protects your personal data when you use our hospital coordination and insurance claim assistance service. By using VeWell's service, you agree to the practices described in this policy.
Data we collect
When you submit an assistance request, we collect information you provide directly, such as your name, a way to reach you back, the care or specialty you need, and your insurance details if relevant. If you create a VeWell account, we also collect your email address, a securely hashed password (or, if you sign in with Google, your Google account's name, email, and profile photo), and — if someone referred you — which referral code you used. We only ask for what's actually needed to help you.
How we collect data
Right now, your assistance request is submitted through a form hosted by Google Forms. That means the information you submit through that form is also subject to Google's own privacy policy, before our team accesses it to help you. We're preparing our own request system for the future.
How we use your data
We use your data to understand your care needs, contact you back, coordinate registration with partner hospitals, help with your insurance claim, and improve our service. If you have a VeWell account, we also use your data to authenticate you, track your referral coin balance, and credit rewards when someone you refer joins. We do not use your data for third-party marketing purposes.
Legal basis for processing
We process your data based on the consent you give when submitting an assistance request, and to the extent necessary to carry out the service you've requested. To share data with a hospital and/or insurer on your behalf, we'll first ask you for an official Power of Attorney (Surat Kuasa).
Your health data
Some of the data you provide — such as your care needs or relevant medical history — falls under the "specific" (sensitive) personal data category under Indonesia's Personal Data Protection Law. We treat this data with extra care: only team members who genuinely need it to help with your request can access it, and we only use it to the extent needed to help with your care and insurance claim. As we build our own request system, we plan to carry out a data protection impact assessment (DPIA) to make sure how we handle your health data stays aligned with Indonesia's Personal Data Protection Law.
Data storage and security
We keep data from your assistance request for as long as your care and insurance claim process is active, plus 12 months after your request is complete for follow-up and legal obligations, then delete or anonymize it. We apply reasonable security measures to protect your data from unauthorized access, alteration, or disclosure.
Data breach notification
If a security breach results in unauthorized access to or disclosure of your personal data, we will notify you and the relevant authority no later than 3x24 hours after we become aware of the breach, in accordance with Indonesia's Personal Data Protection Law.
Your rights as a data owner
Under Indonesia's Personal Data Protection Law, you have the right to access your personal data, request correction of inaccurate data, request deletion of your data, withdraw consent you've given, object to certain processing, and request a copy of your data in a portable format. To exercise these rights, contact us at [email protected]. To protect your data, we may need to verify your identity before processing this kind of request.
Third-party data
If you submit a request on someone else's behalf, such as a family member, please make sure you have their permission to share their data with us.
Data transfers
Our assistance request form is currently hosted by Google Forms as our service provider (data processor), so your data may be processed on Google's servers located outside Indonesia, in accordance with Google's privacy policy. We'll update this policy once our own request system replaces Google Forms.
Changes to this policy
We may update this policy from time to time. Changes take effect once published on this page.
Contact us
For questions about your personal data or this policy, contact us at [email protected]. PT KLAIMQU INDONESIA SEJAHTERA is registered under business registration number (NIB) 0305230061217. Our official Data Protection Officer is Dewi, reachable at [email protected].