Privacy at Foundations
Your Information Is Personal. We Treat It That Way.
This policy explains how Foundations Bali collects, uses, shares and protects your information when you visit our website, contact us or engage with our recovery and treatment services.
Effective 13 August 2026
Applies to adults aged 18+
Reaching out about addiction or mental health is deeply personal.
We handle what you share with care, discretion and respect. You can make an initial enquiry without sharing more than you feel comfortable telling us.
01
Who We Are
Foundations Bali is a private residential addiction recovery and rehabilitation facility in Bali, Indonesia, operated by PT Walden Mullin Retreat. In this policy, “Foundations Bali”, “we”, “us” and “our” refer to PT Walden Mullin Retreat trading as Foundations Bali.
This policy applies to foundationsbali.com and to enquiries and communications with us by website form, telephone, WhatsApp or email. Treatment records may also be subject to additional clinical, professional and legal confidentiality requirements.
02
Information We Collect
We collect information you choose to provide when you make an enquiry, speak with our team, begin the admissions process or receive services. This may include:
- Your name and the name of anyone you are enquiring on behalf of
- Your telephone number, email address, country or time zone
- Your preferred contact method and suitable time to contact you
- How you heard about Foundations Bali
- Details you choose to share about your circumstances and treatment needs
- Health, mental health, medication, substance use and treatment history
- Admissions, identity, travel, payment and emergency-contact information where relevant
- Records created while assessing, arranging or providing your care
Information collected when you use our website
Our website and service providers may collect technical information such as your IP address, device and browser type, approximate location, pages visited, referring website and how you interact with the site. This may be collected using server logs, cookies and similar technologies.
Information provided by another person
A family member, healthcare professional or referral partner may contact us about you. We ask them to share only information they are authorised to provide. Before using that information to arrange treatment, we may need to speak with you directly and obtain your consent.
03
How We Use Your Information
We use personal information when it is reasonably necessary to:
- Respond to your enquiry and contact you using your preferred method
- Understand your circumstances, assess suitability and discuss treatment options
- Arrange admission, travel, payment and other practical requirements
- Provide, coordinate and document treatment if you become a client
- Communicate with authorised family members, professionals or referral partners
- Maintain clinical, operational, safeguarding and accounting records
- Operate, secure and improve our website and services
- Meet legal, regulatory and professional obligations
- Respond where there is a serious concern for someone’s safety
Our basis for using information
Depending on the information, service and laws that apply, we rely on your consent or explicit consent, steps you ask us to take before entering an agreement, performance of our agreement with you, our legitimate operational interests, legal obligations, and the protection of vital interests in an emergency.
You may withdraw consent by contacting us. This will not affect processing already carried out, and we may still retain or use information where another lawful basis or record-keeping obligation applies.
04
Sensitive and Health Information
Health and addiction-related information receives particular care.
Access is limited to people who need the information to respond to your enquiry, assess safety and suitability, arrange admission, provide treatment or meet an applicable obligation.
When you make an initial enquiry, please share only what you are comfortable providing. If you proceed towards admission, we will need enough accurate information about substance use, physical and mental health, medication and immediate risks to assess whether Foundations can support you safely.
We will seek your permission before sharing information with family members, employers, referral partners or external healthcare professionals, except where disclosure is authorised or required by law or is necessary to respond to a serious and immediate safety concern.
05
How We Share Information
We do not sell personal or health information. We may share relevant information with:
- Members of our admissions, clinical, medical, therapeutic and operational teams
- Healthcare providers or specialists involved in assessment, treatment or continuing care
- People you authorise us to communicate with, including family or referral partners
- Service providers supporting our website, communications, customer relationship management, document storage, payment processing, professional advice and business operations
- Insurers, payment providers or funding-related services where relevant and authorised
- Authorities, regulators, courts or professional advisers where disclosure is required or permitted by law
- Emergency services or appropriate people where necessary to protect someone from serious harm
Service providers are given only the information needed to perform their role and are expected to handle it securely and confidentially.
06
International Data Transfers
Foundations Bali operates in Indonesia and supports people from Australia, the United Kingdom, Europe and other countries. Our team and service providers may therefore store or process information in Indonesia, Australia, the United States and other locations outside the country where you live.
Privacy laws and enforcement rights vary between countries. When information is handled internationally, we take reasonable steps to use reputable providers, appropriate contractual protections and access controls consistent with the sensitivity of the information and this policy.
07
Retention and Security
How long we keep information
We keep information only for as long as reasonably necessary for the purpose for which it was collected, to provide and document treatment, resolve concerns and meet clinical, legal, safeguarding, tax and accounting obligations. Retention periods differ between a preliminary enquiry and a client treatment record.
When information is no longer needed, we take reasonable steps to delete, destroy or anonymise it securely.
How we protect information
We use technical and organisational safeguards designed to protect information from loss, misuse, interference and unauthorised access, alteration or disclosure. These include limiting access according to role, using protected systems and applying confidentiality expectations to team members and providers.
No internet transmission or storage method can be guaranteed completely secure. If you prefer not to send sensitive details through a website form or email, contact us by telephone and share only the information needed for the initial conversation.
08
Your Privacy Rights
Depending on where you live and the laws that apply, you may be able to:
- Ask whether we hold personal information about you
- Request access to a copy of that information
- Ask us to correct information that is inaccurate or incomplete
- Request deletion or restriction in certain circumstances
- Object to particular uses of your information
- Request a portable copy where that right applies
- Withdraw consent for future processing based on consent
- Raise a concern or make a complaint about our handling of information
Some rights are subject to exceptions, including clinical record-keeping, legal claims, safeguarding and other legal obligations. We may need to verify your identity before acting on a request. We will explain our decision if we cannot fulfil all or part of it.
09
Cookies, Communications and Third Parties
Cookies and analytics
We may use essential cookies required for the website to work and analytics technologies that help us understand website visits and improve performance. These may collect device, browser and usage information. You can control cookies through your browser settings, although disabling essential cookies may affect how the site works.
Phone, email and WhatsApp
When you contact us using a third-party communications service, that provider processes information under its own terms and privacy policy. WhatsApp communications are also subject to WhatsApp’s privacy practices. Avoid sending information you do not want processed through that service.
Links to other websites
Our website links to external websites and services that we do not operate. Their collection and use of information is governed by their own privacy policies.
Children’s privacy
Our services and website are intended for adults aged 18 and over. We do not knowingly collect personal information directly from children. If you believe a child has provided information to us, please contact us so we can review and address it.
10
Contact, Requests and Complaints
For questions, access or correction requests, withdrawal of consent or a privacy complaint, contact us using the details below. Please use the subject line “Privacy request” where possible.
FOUNDATIONS BALI
PT Walden Mullin Retreat Jalan Bikini No. 1, Padang sambian Klod Kecamatan Denpasar Barat, Kota Denpasar Bali 80117, Indonesia
We will review privacy concerns and respond within a reasonable period. If you remain dissatisfied, you may have the right to contact the relevant privacy or data protection authority where you live, including Indonesia’s competent data protection authority or the Office of the Australian Information Commissioner where applicable.
Changes to this policy
We may update this policy when our practices, services or legal obligations change. The effective date at the top of this page shows when it was last updated. Material changes will apply from the date the revised policy is published.
A private first conversation
Share Only What You Feel Comfortable Sharing
You can ask questions about treatment without making a commitment. We will explain what information is needed and why.
