Indonesia Medevac collects only the medical, passport and contact data needed to arrange an evacuation or transfer — name, condition, location, travel documents — and shares it strictly with the licensed hospitals, operators, insurers or assistance companies handling that specific case, under Indonesia’s Personal Data Protection Law (UU PDP No. 27/2022). We never sell data or use it for marketing without separate consent.
Indonesiamedevac.com is operated by Juara Holding Group, an independent medevac coordination desk and broker (not a hospital, not an air operator, not an aircraft owner) arranging services through licensed partners since 2015. This page explains what we collect when you contact us through WhatsApp or email to arrange a medical evacuation, inter-island transfer or international repatriation, and how that data is used, shared, retained and protected.
What data do we collect when you contact us?
We collect only what a case requires to be coordinated safely. Typical categories:
| Data category | Examples | When collected |
|---|---|---|
| Identity & travel documents | Full name, passport number, nationality, date of birth | At case intake, for cross-border repatriation or airport/immigration coordination |
| Medical information | Diagnosis, vital signs, current facility, treating physician’s notes, fit-to-fly status | Shared by the patient, family, or referring hospital during case set-up |
| Contact details | WhatsApp number, email address, next-of-kin contact | To coordinate updates and confirmations |
| Location & logistics | Pickup site (hospital, resort, expedition camp, mine site), destination hospital, insurer or assistance-company reference number | To route the case to the right licensed operator and receiving facility |
| Payment-related references | Insurer policy number, guarantee-of-payment reference (not card numbers) | Where a case is billed through an insurer or corporate retainer |
We do not ask for bank card numbers or passwords through WhatsApp or email, and we do not store payment credentials on our systems.
Why do we need medical and passport data specifically?
A medevac or repatriation case cannot be coordinated blind. Fit-to-fly status, current diagnosis and treating-facility details determine which licensed operator, aircraft type and receiving hospital are appropriate — this follows the medical evacuation guidelines set out in Decree of the Minister of Health 882/Menkes/SK/X/2009, which defines the fit-to-fly concept and the roles of flight doctors, air nurses and assistants. Passport data is needed only for cases crossing an international border, such as repatriation from Jakarta or Bali toward Singapore, Kuala Lumpur, Penang, Bangkok or Australia, where receiving points typically include Darwin, Brisbane or Sydney depending on the case. Domestic inter-island cases — Papua, Raja Ampat, Komodo liveaboards, Kalimantan mining sites, Mentawai — generally require only identity and medical data, not passport data.
Who do we share your data with, and why?
Data is shared on a case-by-case, need-to-know basis only, never in bulk and never for marketing by the receiving party. We may pass relevant fields to:
- The licensed air ambulance, helicopter or fixed-wing operator assigned to the case
- The receiving or referring hospital and its treating clinicians
- The patient’s insurer or assistance company, where they are the payer or case manager
- Government authorities, only where required for flight approval or immigration clearance (for example, under Transport Regulation PM 66/2015, which requires foreign aircraft to secure Ministry of Transportation flight approval, with Article 16 fast-tracking medical evacuation flights)
Because Juara Holding Group is a coordination desk and not an operator, every party above is a separate, independently licensed entity responsible for its own handling of your data once the case reaches them. We are not affiliated with, and do not claim to represent, any named provider in the wider Indonesian medevac market.
What is our legal basis under Indonesia’s PDP Law?
Processing under UU PDP No. 27/2022 rests on one or more of these bases, depending on the situation:
| Legal basis (UU PDP 27/2022) | When it applies to your case |
|---|---|
| Explicit consent | You or a family member contact us via WhatsApp/email to request coordination |
| Vital interest of the data subject | Medical emergency where data must move quickly between hospital, operator and insurer |
| Legal obligation | Where immigration, customs or flight-approval authorities require identity or medical documentation |
| Contract performance | Corporate or expedition standby retainer agreements |
Health data and passport numbers are treated as specific categories of personal data under Indonesian law and are handled with additional care — access is limited to the staff directly coordinating your case.
Are international visitors also covered by GDPR?
If you contact us from the European Economic Area, the United Kingdom, or another jurisdiction with its own data protection law, we apply the same minimisation, purpose-limitation and security practices described here, consistent with GDPR principles, even though Indonesian law (UU PDP 27/2022) is our primary legal basis as the data is processed and stored in Indonesia. If you are an EEA or UK resident and want to exercise a GDPR-specific right — access, rectification, erasure, or data portability — email bd@juaraholding.com and state which right you are invoking; we will confirm how it applies given the emergency nature of medevac coordination.
How long do we retain your data?
| Data type | Retention approach |
|---|---|
| Active case data (medical, passport, contact) | Kept only while the case is open, plus a limited period afterward for insurer billing reconciliation and any follow-up |
| Closed-case records | Retained in line with standard case-file practice, then deleted or anonymised once no longer needed for billing, legal or insurer purposes |
| General enquiries that do not become a case | Deleted or anonymised once the enquiry is resolved |
We do not keep medical data indefinitely, and we do not build marketing profiles from case data.
How is data transmitted and kept secure over WhatsApp and email?
WhatsApp (+62 811-3941-4563) and email (bd@juaraholding.com) are our two intake channels. WhatsApp messages are encrypted in transit by WhatsApp’s own protocol; email is protected on our side by restricted account access. As with any digital channel, no transmission method is completely risk-free — avoid sending payment card numbers or passwords through either channel, since we never ask for them.
What are your rights over your data?
Under UU PDP 27/2022, and GDPR where applicable, you can ask us to:
- Tell you what data we hold about your case
- Correct inaccurate medical, contact or identity details
- Delete data once a case is closed and no legal or insurer retention need remains
- Withdraw consent for anything beyond active case coordination
Send these requests to bd@juaraholding.com. Because medevac cases are time-critical, a request made during an active evacuation may be actioned once the immediate medical coordination is complete.
Liability and booking terms
Juara Holding Group coordinates and arranges access to licensed third-party operators, hospitals and assistance companies; we are not the air operator, aircraft owner, hospital or insurer, and we do not guarantee flight timing, medical outcomes, insurer approval or aircraft availability, all of which depend on the licensed party actually delivering the service, weather, airspace clearance and case circumstances. Costs are quoted case by case in USD or IDR based on operator pricing at the time of the case, as of 2026 and subject to change; no fixed public tariff applies market-wide. We are not a licensed financial, legal, tax or medical adviser.
Changes to this policy and how to reach us
We may update this policy as regulations such as UU PDP 27/2022, Permenkes 14/2021 or related health-sector rules evolve; the version on this page is the current one. For any privacy question, data request, or to start a case, contact the Juara Holding Group business development desk: WhatsApp +62 811-3941-4563 or email bd@juaraholding.com.