Privacy Policy & Resident Data Safeguards

Effective Date: January 1, 2026 | Last Updated: October 2026

1. Data Controller Identity

This Privacy Policy applies to the collection, storage, and processing of personal data by PT Serena Sejahtera Nusantara ("Serena Living", "we", "our"), registered and operating in Jakarta Selatan, DKI Jakarta.

2. Personal and Health Data Collected

In delivering specialized assisted living and geriatric healthcare services, we handle specific categories of sensitive personal data:

• Resident Identification: Full legal name, date of birth, Indonesian NIK/KTP or passport number, and emergency family contact details.
• Sensitive Clinical Information: Medical diagnoses, physician prescription schedules, allergy histories, vital telemetry data, and dietary restrictions necessary for resident wellbeing and emergency care.
• Family Representative Information: Legal power-of-attorney documentation, contact email, WhatsApp numbers, and billing data.
• Digital Interaction Data: Cookies and analytics collected during browsing of our web services to preserve family portal sessions and tour bookings.

3. Purpose and Lawful Basis for Processing

Processing of clinical and personal data is conducted strictly under lawful grounds defined in Article 20 of Law No. 27 of 2022 (UU PDP), namely: provision of healthcare services, vital safety interests of the elder resident, performance of residential contracts, and explicit consent provided during onboarding.

4. Medical Confidentiality & Security Protocols

All electronic medical records (EMR) are encrypted with AES-256 standard and stored within sovereign cloud servers physically located in Indonesia. Only authorized healthcare personnel and the elder's designated family guardians have access to clinical records. We do not sell or disclose any personal data to commercial third parties or advertisers.

5. Resident & Family Data Rights

Under Indonesian statutory law, residents or their authorized legal family representatives retain the right to:

• Access and obtain complete copies of ongoing health and vital summaries.
• Request prompt rectification of outdated or inaccurate personal details.
• Request the restriction or cessation of optional non-medical photography or social activity postings.
• Lodge data protection inquiries directly with our Data Protection Officer.

6. Data Protection Officer Contact

For inquiries regarding privacy, data rights, or medical records protection, please reach:
Data Protection Officer - PT Serena Sejahtera Nusantara
Jl. Lebak Bulus I No. 35, Cilandak Barat, Jakarta Selatan 12430
Email: [email protected] | WhatsApp: +62 811-8899-220