Privacy Policy

SHAZ Aesthetic Clinic & Salon ("SHAZ", "we", "us", or "our") operates the websiteshazaestheticbali.com and provides aesthetic medicine, dermatology, and salon services from our clinic in Seminyak, Bali, Indonesia ("Clinic").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, communicate with us through WhatsApp or other channels, book a consultation, or receive treatment at our Clinic.

By using our website or booking a consultation or treatment with us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not use our website or services.

We use the information we collect to:

• Schedule, confirm, and manage your consultations and treatment appointments
• Enable our doctors and aesthetic practitioners to assess your suitability for treatments and design bespoke, individualized treatment protocols
• Maintain accurate medical records as required by applicable healthcare regulations in Indonesia
• Process payments, issue invoices, and manage packages or membership benefits
• Communicate with you regarding appointments, aftercare instructions, promotions, and clinic updates (where you have consented to receive such communications)
• Improve our website, services, and patient experience
• Comply with legal, regulatory, and medical record-keeping obligations
• Protect the safety, rights, and property of our patients, staff, and Clinic

We process your personal data on the basis of: your consent (particularly for medical treatment and marketing communications); the necessity of processing to perform our services to you; compliance with legal and medical regulatory obligations in Indonesia; and our legitimate interests in operating and improving our Clinic and website, provided such interests do not override your fundamental rights.

Given the nature of our services, we collect health-related and, at times, sensitive personal information. We treat this information with heightened confidentiality. Access to medical records and treatment photographs is restricted to doctors, licensed practitioners, and authorized clinic staff directly involved in your care. Before-and-after photographs are only used for external marketing, social media, or promotional purposes with your explicit, separate, written consent, and you may withdraw that consent at any time.

We do not sell your personal information. We may share your information only in the following circumstances:

• With doctors, nurses, and staff within SHAZ who are directly involved in providing your care
• With third-party service providers who support our operations, such as payment processors, appointment/booking platforms, IT and hosting providers, and courier services for product delivery, under confidentiality obligations
• With regulatory authorities, insurers, or legal bodies where required by Indonesian law, court order, or to protect health and safety
• With your explicit consent, such as when sharing before/after images for marketing purposes

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal and medical information from unauthorized access, alteration, disclosure, or destruction. Medical records and treatment photographs are stored in access-controlled systems. While we take data protection seriously, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

We retain your personal and medical information for as long as necessary to fulfil the purposes described in this Policy, including to comply with applicable Indonesian healthcare record-keeping requirements, after which it will be securely deleted or anonymized.

shazaestheticbali.com may use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand visitor behavior. You can control or disable cookies through your browser settings; however, doing so may affect certain website functionality.

Subject to applicable Indonesian data protection law (including Law No. 27 of 2022 on Personal Data Protection), you have the right to:

• Access and request a copy of the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to our legal and medical record-keeping obligations
• Withdraw consent for marketing communications or use of your images at any time
• Object to or request restriction of certain processing activities
• Lodge a concern with us directly by contacting [email protected]

Our services are intended for adults. Where treatment is sought for or by a minor, we require the consent and presence of a parent or legal guardian, in accordance with our clinical and legal obligations.

Our website may contain links to third-party platforms such as Instagram, TikTok, or WhatsApp. We are not responsible for the privacy practices of these third-party platforms, and we encourage you to review their respective privacy policies.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. Any changes will be posted on this page with a revised effective date. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

• Email: [email protected]
• WhatsApp / Phone: +62 823-4217-6585
• Clinic Address: Seminyak, Bali, Indonesia

Last updated: 1 September 2026