Privacy Policy
Last updated: 1 September 2026
Cocoon Medical Spa respects your privacy and is committed to handling your personal and medical information carefully.
Cocoon Medical Spa is operated by PT Spa Kepompong Cantik in Bali, Indonesia. This Privacy Policy explains what information we collect, why we use it and the choices available to you.
It applies when you visit our website, contact us, submit a form, book an appointment, receive treatment, make a purchase or subscribe to our communications.
1. Information we collect
Depending on how you interact with us, we may collect:
- Your name, date of birth and contact information
- Your preferred location and appointment details
- Treatment enquiries and consultation information
- Purchases, payments, packages and gift-voucher records
- Email, WhatsApp, telephone and social-media communications
- Feedback, questions and complaints
- Newsletter preferences
- Technical information about how you use our website
If you provide information about another person, you must have permission to share it with us.
2. Medical information, photographs and videos
When you enquire about or receive treatment, we may collect information about:
- Medical conditions and treatment history
- Allergies and sensitivities
- Medication and supplements
- Previous procedures or surgery
- Pregnancy or breastfeeding status
- Lifestyle factors relevant to treatment
- Anaesthetic, bleeding, scarring and healing history
- Consultation notes, consent records and treatment plans
- Treatment, recovery and aftercare information
We may also collect photographs or videos for consultation, treatment planning, clinical records, progress monitoring or review of a concern.
Clinical photographs and videos will not be used for advertising, social media, case studies or other promotional purposes without separate and specific consent.
Submitting an online form or photographs does not confirm that you are suitable for treatment and does not replace an in-person consultation.
3. How we collect and use information
We collect information directly from you, through our website and forms, during consultations and treatments, and through communication, booking and payment services.
We use it to:
- Respond to enquiries
- Arrange consultations and appointments
- Assess possible treatment suitability
- Provide treatments and aftercare
- Maintain medical and administrative records
- Process payments and purchases
- Contact you about appointments or follow-up care
- Manage packages, promotions and gift vouchers
- Improve our services and website
- Protect our clients, staff and systems
- Meet legal, professional and accounting obligations
- Handle concerns, complaints or legal claims
We process information based on your consent, our relationship with you, applicable legal obligations, health and safety requirements and our reasonable business needs.
You may withdraw consent, but this will not affect processing that was lawful before withdrawal. It may also mean that we can no longer assess your enquiry or provide certain services safely.
4. Who may receive your information
We do not sell your personal or medical information.
Information may be shared when reasonably necessary with:
- Cocoon doctors, nurses, practitioners and authorised staff
- Medical advisers or healthcare providers involved in your care
- Website, form, hosting and technical-service providers
- Email, communication and storage providers
- Payment processors, banks and accounting providers
- Professional legal, insurance or compliance advisers
- Government, regulatory or judicial authorities when required by law
External providers may process information under their own terms and privacy policies. We select providers for legitimate business purposes and limit the information shared to what is reasonably necessary.
5. Email, WhatsApp and other communications
We may use email, telephone, WhatsApp or social media to:
- Respond to your enquiry
- Confirm appointments
- Send preparation or aftercare information
- Request information needed for your consultation
- Follow up about your treatment
These communication platforms are operated by external providers and may process information outside Indonesia.
Please do not post medical or other sensitive information in public comments or unsecured public channels.
6. Marketing and promotional consent
We may send news, treatment information or offers when you have subscribed, provided consent or where communication is otherwise permitted by law.
You can unsubscribe at any time through the email link or by contacting us.
Messages about an appointment, payment, treatment, safety or aftercare are service communications and may still be sent when necessary.
Participation in testimonials, case studies and promotional photography is voluntary. We will request separate consent before using identifiable treatment information, photographs or videos for promotional purposes.
Declining promotional consent will not affect your treatment.
7. Cookies, analytics and technical information
Our website may collect technical information such as:
- Internet Protocol address
- Browser and device type
- Operating system
- Pages visited and links selected
- Approximate location
- Referring website
- Visit dates and times
- Cookie identifiers
- Website-performance and error information
We may use cookies and similar technologies to:
- Make the website function correctly
- Remember preferences
- Maintain security and prevent misuse
- Understand how visitors use the website
- Measure performance
- Improve content and services
- Assess the effectiveness of marketing
Some cookies are necessary for the website to work. Other cookies may depend on your consent choices.
You can manage cookies through the website’s cookie settings or your browser. Disabling certain cookies may affect website functionality.
Analytics, embedded content and other external website services may also collect technical information under their own policies.
8. International processing
Some website, communication, payment, analytics, storage or technical providers may process information outside Indonesia.
Where information is processed internationally, we take reasonable steps to use appropriate providers and safeguards as required by applicable law.
When you independently use services such as WhatsApp, social media or external file-sharing platforms, their own international processing terms may also apply
9. Storage, retention and security
We retain information only for as long as reasonably necessary for the purpose for which it was collected and to meet medical, legal, tax, accounting, insurance and dispute-resolution requirements.
Medical and treatment records may need to be kept longer than general enquiries or marketing information.
When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it.
We use reasonable administrative, organisational and technical measures to protect information from unauthorised access, misuse, loss, alteration or disclosure.
No website, email system or online transmission can be guaranteed completely secure. Contact us promptly if you believe your information may have been accessed or used improperly.
10. Your privacy rights
Subject to applicable law, you may ask us to:
- Confirm whether we process your information
- Provide access to your information
- Correct inaccurate or incomplete information
- Delete information when legally permitted
- Withdraw consent
- Stop direct marketing
- Restrict or object to certain processing
- Explain how your information has been used
Some requests may be limited where information must be retained for medical, legal, safety or regulatory reasons.
We may need to verify your identity before responding.
11. Children
Our medical consultation forms and independent booking services are intended for adults aged 18 or older.
Information about a person under 18 should be provided only with the involvement and appropriate consent of a parent or legal guardian.
Contact us if you believe a child has submitted personal information without proper permission.
12. Changes and contact information
We may update this Privacy Policy when our services, systems, providers or legal obligations change. The current version and last-updated date will be published on this page.
For privacy questions or requests, contact:
Cocoon Medical Spa
PT Spa Kepompong Cantik
Email: info@cocoonmedicalspa.com
WhatsApp: +62 811 388 815
Where possible, use Privacy Request as the email subject.