Welcome to Full Moon Group

PRIVACY POLICY

Full Moon Tour & Travel respects your privacy and is committed to protecting your Personal Data.

This Privacy Policy explains how Full Moon Tour & Travel (“Full Moon Tour & Travel,” “we,” “us,” or “our”) collects, uses, stores, discloses, transfers, and protects Personal Data when you:

• Visit or use www.vollemaangroup.com;

• Contact us through our website, email, telephone, WhatsApp, social media, or other communication channels;

• Request information, quotations, bookings, reservations, travel arrangements, visa assistance, transportation, rentals, luggage storage, or other services;

• Subscribe to newsletters or promotional communications;

• Participate in promotions, surveys, events, or other activities;

• Submit a review, testimonial, photograph, or other content; or

• Otherwise interact with Full Moon Tour & Travel.

This Privacy Policy applies to visitors, customers, prospective customers, travellers, travel companions, business partners, suppliers, and other individuals whose Personal Data we process.

This Privacy Policy is intended to provide transparent information in accordance with applicable privacy and data-protection laws, including the laws of the Republic of Indonesia and, where applicable, the General Data Protection Regulation of the European Union, the United Kingdom General Data Protection Regulation, and other applicable international privacy requirements.

This Privacy Policy is a notice describing our data-processing practices. Your use of our website does not constitute consent to every form of processing described in this Privacy Policy. Where consent is legally required, including for certain cookies, advertising technologies, direct marketing, or sensitive Personal Data, we will request it separately.

---

1. Who We Are

The organisation responsible for determining how and why Personal Data is processed through this website and our related services is:

Full Moon Tour & Travel

Address:
Kampus Politeknik El Bajo Street
Wae Kelambu, Komodo
West Manggarai Regency
East Nusa Tenggara, Indonesia

Website: www.vollemaangroup.com
Email: vollemaangroup@gmail.com
Telephone: +62 823 3924 8776

For the purposes of applicable privacy laws, Full Moon Tour & Travel generally acts as the Personal Data Controller or Data Controller for the processing activities described in this Privacy Policy.

Questions, complaints, and requests relating to Personal Data may be submitted using the contact information provided above.

---

2. Scope of This Privacy Policy

This Privacy Policy applies to Personal Data processed through:

• Our website;

• Website forms;

• Booking and reservation requests;

• Email communications;

• Telephone and WhatsApp communications;

• Social-media communications;

• Customer-service interactions;

• Marketing activities;

• Promotions and surveys;

• Travel and tourism services;

• Visa and travel-document assistance;

• Transportation, rental, and luggage-storage services;

• Events and special travel experiences;

• Business and supplier relationships; and

• Other services provided under the Full Moon Tour & Travel name.

This Privacy Policy does not govern the independent processing activities of third parties such as airlines, hotels, accommodation providers, vessel operators, tour operators, payment providers, insurance providers, government authorities, immigration authorities, social-media platforms, or advertising providers.

Those organisations may process Personal Data under their own privacy policies and legal responsibilities.

---

3. Meaning of Personal Data

“Personal Data” means any information relating to an identified or identifiable individual.

Personal Data may identify you directly, such as your name or passport number, or indirectly, such as through a combination of your device information, booking details, travel dates, and contact information.

Certain Personal Data may be classified as sensitive, specific, or special-category data under applicable law and may require additional protection.

---

4. Personal Data We Collect

The Personal Data we collect depends on how you interact with us and which services you request.

4.1 Identity and Contact Data

We may collect:

• Full name;

• Title;

• Date of birth;

• Gender, where relevant to a requested service;

• Nationality;

• Country of residence;

• Residential or mailing address;

• Email address;

• Telephone number;

• WhatsApp number;

• Social-media contact information;

• Signature;

• Emergency contact details; and

• Other information you voluntarily provide.

4.2 Booking and Travel Data

When you request or purchase travel-related services, we may collect:

• Travel dates;

• Arrival and departure information;

• Flight details;

• Hotel or accommodation information;

• Pick-up and drop-off locations;

• Tour selections;

• Preferred destinations;

• Travel itinerary;

• Number and identity of travellers;

• Room or accommodation preferences;

• Transportation preferences;

• Vessel or tour preferences;

• Special-service requests;

• Travel history relevant to the requested service;

• Booking references;

• Reservation status;

• Cancellation and refund information;

• Travel-companion information; and

• Other information necessary to arrange or administer your trip.

4.3 Passport, Visa, and Immigration Data

Where you request visa assistance, immigration support, or services requiring identity verification, we may collect:

• Passport name;

• Passport number;

• Passport copy;

• Passport issue and expiry dates;

• Place of passport issuance;

• National identity information;

• Date and place of birth;

• Nationality;

• Visa information;

• Immigration documents;

• Entry and departure information;

• Passport photographs;

• Supporting travel documents;

• Sponsorship or guarantee information;

• Accommodation information;

• Employment or financial information required for an application; and

• Other documents required by the relevant authority.

We collect this information only when reasonably necessary to provide the requested service or comply with applicable legal requirements.

Providing visa assistance does not guarantee that a visa, permit, extension, or immigration approval will be granted. Decisions remain under the authority of the relevant government or immigration agency.

4.4 Payment and Transaction Data

We may collect:

• Billing name and address;

• Invoice information;

• Booking amount;

• Payment status;

• Transaction date;

• Bank-transfer information;

• Limited bank-account information;

• Proof of payment;

• Refund information;

• Payment reference number;

• Transaction history; and

• Other information required to process or verify a payment.

Payments may be processed by banks, payment gateways, card networks, or other independent payment-service providers.

Unless expressly stated otherwise, we do not directly store complete payment-card numbers, card-security codes, or online-banking passwords.

4.5 Health, Accessibility, and Safety Data

Where necessary for traveller safety or to provide requested assistance, we may collect:

• Medical conditions relevant to travel;

• Allergies;

• Mobility or accessibility requirements;

• Dietary requirements;

• Emergency medical information;

• Medication information voluntarily provided by you;

• Swimming ability or other safety-related information;

• Travel-insurance information; and

• Emergency contact details.

We process this information only when necessary and permitted by law, including on the basis of explicit consent, contractual necessity, legal obligation, or vital interests, as applicable.

4.6 Communications and Customer-Service Data

We may collect and retain:

• Emails;

• Website-form submissions;

• WhatsApp messages;

• Telephone-call notes;

• Social-media messages;

• Questions and enquiries;

• Quotations;

• Complaints;

• Customer-service requests;

• Feedback;

• Survey responses;

• Reviews and testimonials;

• Records of agreements;

• Records of consent; and

• Other correspondence with us.

4.7 Marketing and Preference Data

We may collect:

• Newsletter subscription status;

• Marketing preferences;

• Preferred language;

• Preferred destinations;

• Travel interests;

• Service interests;

• Communication preferences;

• Promotion participation;

• Previous interactions with marketing communications; and

• Records of consent or withdrawal of consent.

4.8 Photographs, Videos, and User-Submitted Content

We may collect photographs, videos, reviews, testimonials, or other content when you voluntarily submit them to us.

We will not publish identifiable customer photographs, videos, or testimonials for promotional purposes without an appropriate legal basis and, where required, your prior consent.

You may withdraw consent for future promotional use by contacting us. Withdrawal does not necessarily require the removal of materials already lawfully printed, distributed, or otherwise used before withdrawal where removal is impracticable or not legally required.

4.9 Website and Technical Data

When you visit our website, we or our authorised providers may automatically collect:

• Internet Protocol address;

• Browser type and version;

• Device type;

• Device identifiers;

• Operating system;

• Language settings;

• Screen resolution;

• Approximate location derived from an IP address;

• Referring website;

• Landing page;

• Pages viewed;

• Links clicked;

• Search activity on the website;

• Date and time of access;

• Time spent on pages;

• Session information;

• Cookie identifiers;

• Advertising identifiers;

• Error logs;

• Security logs; and

• Website-performance information.

This information may constitute Personal Data under applicable law, even where it does not directly identify you by name.

4.10 Data Relating to Other People

You may provide Personal Data about another traveller, family member, travel companion, employee, customer, or emergency contact.

Before providing another person’s Personal Data, you must ensure that:

• You are authorised to provide the information;

• The information is accurate;

• The individual has been informed about the relevant processing; and

• Any legally required consent has been obtained.

We may contact the individual directly where necessary to verify information or provide privacy information.

---

5. How We Collect Personal Data

We may collect Personal Data:

• Directly from you;

• Through our website;

• Through booking or contact forms;

• Through email, telephone, or WhatsApp;

• Through social-media platforms;

• When you request a quotation;

• When you make or manage a booking;

• When you make a payment;

• When you subscribe to marketing communications;

• When you submit feedback, reviews, or other content;

• From a person booking on your behalf;

• From travel agents or referral partners;

• From hotels, airlines, tour operators, vessel operators, guides, and transportation providers;

• From banks or payment-service providers;

• From visa or immigration-service partners;

• From government or immigration authorities;

• From analytics and advertising providers;

• Through cookies and similar technologies; and

• From publicly available sources where permitted by law.

---

6. How We Use Personal Data

We may process Personal Data for the following purposes.

6.1 Responding to Enquiries

We use Personal Data to:

• Respond to questions;

• Provide service information;

• Prepare quotations;

• Recommend appropriate services;

• Confirm availability;

• Communicate prices and conditions; and

• Follow up on requested services.

6.2 Providing Travel and Tourism Services

We use Personal Data to:

• Create and manage bookings;

• Arrange tours and activities;

• Arrange accommodation;

• Arrange transportation;

• Coordinate hotel pick-up and drop-off;

• Arrange traditional boats, speedboats, yachts, or other vessels;

• Coordinate tour guides and local operators;

• Provide rental or luggage-storage services;

• Prepare itineraries;

• Manage special requests;

• Process changes or cancellations;

• Provide emergency support; and

• Fulfil our contractual obligations.

6.3 Visa and Travel-Document Assistance

We may use Personal Data to:

• Review documents;

• Prepare applications;

• Communicate with visa or immigration-service partners;

• Submit information to authorised government authorities;

• Monitor application progress;

• Request additional documentation;

• Communicate decisions or updates; and

• Maintain records required by law.

6.4 Payments, Accounting, and Refunds

We use Personal Data to:

• Process and verify payments;

• Issue invoices and receipts;

• Maintain transaction records;

• Process refunds;

• Detect payment fraud;

• Resolve payment disputes;

• Comply with tax and accounting requirements; and

• Conduct financial audits.

6.5 Customer Service and Communications

We use Personal Data to:

• Send booking confirmations;

• Communicate itinerary updates;

• Inform you about operational changes;

• Respond to complaints;

• Resolve disputes;

• Provide safety information;

• Maintain customer-service records; and

• Protect our contractual and legal rights.

6.6 Website Operation and Improvement

We may use website and technical data to:

• Operate and maintain our website;

• Provide requested website functions;

• Remember user preferences;

• Improve website navigation;

• Monitor performance;

• Identify technical problems;

• Prevent unauthorised access;

• Protect website security;

• Understand how visitors use our website; and

• Develop or improve our services.

6.7 Marketing and Promotions

Where permitted by law, we may use Personal Data to:

• Send newsletters;

• Communicate special offers;

• Promote tours and travel services;

• Inform you about events or new services;

• Personalise marketing communications;

• Measure campaign performance; and

• Conduct surveys or promotions.

Where consent is required, we will send marketing communications only after obtaining valid consent.

You may unsubscribe at any time through the unsubscribe mechanism provided in the communication or by contacting us.

6.8 Analytics and Advertising

Where permitted and, where required, after obtaining consent, we may use Personal Data to:

• Analyse website traffic;

• Measure visitor engagement;

• Understand audience interests;

• Measure advertising effectiveness;

• Prevent advertising fraud;

• Limit how often an advertisement is displayed;

• Display personalised or non-personalised advertisements; and

• Improve the relevance of website content and advertising.

6.9 Security, Fraud Prevention, and Legal Protection

We may process Personal Data to:

• Detect and prevent fraud;

• Investigate suspicious activity;

• Verify identity;

• Protect travellers and staff;

• Prevent misuse of our website;

• Maintain network and information security;

• Enforce contracts;

• Establish, exercise, or defend legal claims; and

• Protect our rights, property, safety, and reputation.

6.10 Compliance With Law

We may process Personal Data to:

• Comply with Indonesian and international legal obligations;

• Respond to lawful government requests;

• Meet immigration and border-control requirements;

• Meet tourism, transportation, tax, accounting, and consumer-protection requirements;

• Comply with court orders;

• Cooperate with regulators or law-enforcement authorities;

• Maintain legally required records; and

• Report or investigate unlawful activity.

---

7. Legal Bases for Processing

Depending on the circumstances and applicable law, we process Personal Data under one or more of the following legal bases.

7.1 Consent

We may rely on consent for:

• Non-essential cookies;

• Personalised advertising;

• Certain analytics activities;

• Marketing communications;

• Processing certain sensitive Personal Data;

• Publishing identifiable testimonials;

• Publishing customer photographs or videos; and

• Other activities for which consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

7.2 Performance of a Contract

Processing may be necessary to:

• Respond to a service request;

• Prepare a quotation;

• Confirm availability;

• Process a booking;

• Arrange travel services;

• Process payments;

• Manage changes or cancellations;

• Provide customer support; or

• Perform another agreement with you.

7.3 Legal Obligation

We may process Personal Data where necessary to comply with:

• Tax requirements;

• Accounting requirements;

• Immigration requirements;

• Consumer-protection laws;

• Tourism regulations;

• Court orders;

• Government requests; or

• Other legal and regulatory obligations.

7.4 Legitimate Interests

Where permitted by law, we may process Personal Data for legitimate interests such as:

• Operating and improving our business;

• Responding to customers;

• Maintaining records;

• Protecting website security;

• Preventing fraud;

• Managing supplier relationships;

• Promoting related services to existing customers;

• Resolving disputes; and

• Protecting our legal rights.

We consider whether these interests are proportionate and whether they are overridden by your rights, interests, or reasonable expectations.

7.5 Vital Interests

In an emergency, we may process Personal Data when reasonably necessary to protect your life, health, or safety, or that of another person.

7.6 Public Interest or Official Authority

In limited circumstances, processing may be necessary for a task carried out in the public interest or in cooperation with an authorised public authority.

---

8. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, web beacons, local storage, software-development tools, and similar technologies.

A cookie is a small file stored on your browser or device. Some cookies are necessary for the website to function, while others support analytics, preferences, or advertising.

8.1 Strictly Necessary Cookies

These cookies may be required to:

• Operate the website;

• Maintain security;

• Prevent fraud;

• Remember privacy choices;

• Enable basic website functions; and

• Deliver services specifically requested by the visitor.

Strictly necessary cookies may be used without consent where permitted by law.

8.2 Preference Cookies

Preference cookies may remember:

• Language selections;

• Display preferences;

• Location preferences;

• Previous website choices; and

• Other personalisation settings.

8.3 Analytics Cookies

Analytics cookies may help us understand:

• The number of website visitors;

• How visitors reach our website;

• Which pages are visited;

• How long visitors remain on a page;

• How website features are used;

• Whether technical errors occur; and

• How the website can be improved.

8.4 Advertising Cookies

Advertising cookies and similar technologies may be used to:

• Display advertisements;

• Measure advertising performance;

• Prevent advertising fraud;

• Limit repeated advertisements;

• Understand advertisement interactions;

• Create audience segments; and

• Display personalised advertising where permitted.

8.5 Cookie Consent

Where required by law, non-essential cookies and similar technologies will not be activated until you provide consent through our cookie banner or consent-management system.

You must be provided with a genuine opportunity to:

• Accept non-essential cookies;

• Reject non-essential cookies;

• Select cookie categories;

• Review relevant advertising providers; and

• Withdraw or change your consent.

You may also manage cookies through your browser settings. Blocking or deleting certain cookies may affect website functionality.

Consent to cookies is separate from acceptance of our Terms and Conditions.

---

9. Google AdSense and Advertising Partners

We use, or may use, Google AdSense to display advertising on our website.

Third-party vendors, including Google, may use cookies, web beacons, IP addresses, advertising identifiers, or similar technologies to serve and measure advertisements.

Google’s use of advertising cookies enables Google and its advertising partners to serve advertisements based on a user’s previous visits to our website, other websites, or applications.

Depending on your location, consent choices, and Google settings, advertisements may be:

• Personalised based on interests, previous activity, or other permitted information; or

• Non-personalised and selected using contextual information, general location, device information, or the content of the page being viewed.

Users may opt out of personalised advertising through Google Ads Settings.

Users may also review Google’s page titled “How Google Uses Information From Sites or Apps That Use Our Services” for information about how Google processes information received from partner websites.

Other third-party vendors or advertising networks may also use cookies or similar technologies to serve or measure advertisements. Where applicable, the current vendors and their purposes will be identified through our consent-management platform or cookie settings.

We do not control the independent privacy practices of Google or other advertising providers. Their processing is governed by their respective policies.

We do not sell Personal Data in exchange for monetary payment. However, advertising providers may receive technical, device, cookie, and website-usage information as described in this Privacy Policy.

---

10. Google Analytics and Website Measurement

Where enabled, we may use Google Analytics or similar measurement services to understand how visitors use our website.

These services may process:

• IP address;

• Device information;

• Browser information;

• Approximate location;

• Website interactions;

• Page views;

• Referral information;

• Session information; and

• Cookie or device identifiers.

Where consent is legally required, analytics technologies will be activated only after valid consent has been obtained.

Analytics information may be aggregated or otherwise processed to reduce direct identifiability where appropriate.

Google processes information received from websites using Google services in accordance with its own privacy documentation and the consent choices communicated through the website.

---

11. When We Disclose Personal Data

We may disclose Personal Data only where reasonably necessary and permitted by law.

11.1 Travel and Tourism Providers

We may disclose relevant Personal Data to:

• Hotels;

• Villas;

• Homestays;

• Airlines;

• Transportation companies;

• Drivers;

• Vessel operators;

• Traditional-boat operators;

• Speedboat operators;

• Yacht operators;

• Tour guides;

• Tour operators;

• Restaurants;

• Activity providers;

• Event organisers;

• Rental providers;

• Luggage-storage providers; and

• Other suppliers involved in providing your requested service.

11.2 Visa, Immigration, and Government Recipients

Where necessary, we may disclose Personal Data to:

• Visa-service providers;

• Immigration consultants;

• Embassies or consulates;

• Immigration authorities;

• Border-control authorities;

• Government agencies; and

• Other authorised recipients involved in an application or legal process.

11.3 Payment and Financial Providers

We may disclose relevant information to:

• Banks;

• Payment processors;

• Payment gateways;

• Card networks;

• Accounting providers;

• Auditors; and

• Fraud-prevention providers.

11.4 Technology and Business-Service Providers

We may use providers that support:

• Website hosting;

• Cloud storage;

• Email delivery;

• Customer-relationship management;

• Communications;

• Cybersecurity;

• Website analytics;

• Advertising;

• Document storage;

• Data backup;

• Accounting;

• Customer support; and

• Technical maintenance.

These providers may process Personal Data only for authorised purposes and subject to appropriate contractual or confidentiality obligations.

11.5 Professional Advisers

We may disclose Personal Data to:

• Lawyers;

• Accountants;

• Auditors;

• Insurers;

• Consultants; and

• Other professional advisers.

11.6 Legal and Regulatory Disclosures

We may disclose Personal Data when reasonably necessary to:

• Comply with law;

• Respond to a lawful court order;

• Respond to an authorised government request;

• Cooperate with law enforcement;

• Investigate fraud or unlawful activity;

• Protect health or safety;

• Enforce our agreements; or

• Establish, exercise, or defend legal claims.

11.7 Business Transfers

Personal Data may be disclosed as part of a business restructuring, merger, acquisition, investment, financing, transfer, or sale of all or part of our operations.

Where required by law, affected individuals will be informed about material changes to the control or processing of their Personal Data.

11.8 With Your Instructions or Consent

We may disclose Personal Data to another recipient when you instruct us to do so or provide valid consent.

---

12. International Transfers of Personal Data

Travel services and online technologies frequently involve organisations located in different countries.

Your Personal Data may therefore be transferred to or processed in:

• Indonesia;

• Your country of residence;

• Your travel destination;

• Countries where our service providers operate;

• Countries where travel suppliers are located; or

• Countries where cloud, analytics, communications, or advertising infrastructure is located.

Data-protection laws in those countries may differ from the laws of your home country.

Where required by applicable law, we will use appropriate safeguards, which may include:

• Transfers to countries recognised as providing adequate protection;

• Standard contractual clauses;

• Data-protection agreements;

• Contractual confidentiality obligations;

• Technical and organisational security measures;

• Transfers necessary to perform a contract requested by you;

• Transfers necessary for important public interests;

• Explicit consent where legally permitted; or

• Another lawful international-transfer mechanism.

For example, when you request an international travel service, it may be necessary to transfer relevant booking information to an airline, hotel, tour provider, government authority, or other supplier located in the destination country.

You may contact us for further information about safeguards relevant to a particular transfer.

---

13. Data Retention

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods depend on:

• The nature of the Personal Data;

• The service requested;

• The duration of our relationship;

• Contractual requirements;

• Legal and regulatory obligations;

• Tax and accounting requirements;

• Immigration requirements;

• Security requirements;

• Applicable limitation periods;

• The existence of a dispute or claim; and

• Whether consent has been withdrawn.

In general:

• Enquiry and correspondence records may be retained for a reasonable follow-up period;

• Booking and transaction records may be retained for the period required for accounting, tax, audit, consumer-protection, and legal purposes;

• Passport, visa, health, and other sensitive documents will be retained only for as long as necessary to provide the requested service or meet applicable legal obligations;

• Marketing information may be retained until you unsubscribe or withdraw consent;

• Limited suppression information may be retained after an unsubscribe request to ensure that your preference is respected;

• Website security logs may be retained for fraud prevention, security, and troubleshooting;

• Cookie and advertising information may be retained according to the relevant cookie duration and provider settings; and

• Information relating to a complaint, dispute, investigation, or legal claim may be retained until the matter and applicable limitation periods have concluded.

When Personal Data is no longer required, we will take reasonable steps to securely delete, destroy, anonymise, or isolate it.

---

14. Data Security

We implement reasonable and proportionate technical, organisational, and administrative safeguards designed to protect Personal Data against:

• Unauthorised access;

• Unlawful processing;

• Accidental loss;

• Misuse;

• Alteration;

• Unauthorised disclosure;

• Destruction; and

• Other security threats.

Depending on the nature of the information, these measures may include:

• Access controls;

• Password protection;

• Role-based access;

• Restricted access to sensitive documents;

• Secure hosting;

• Encryption where appropriate;

• Confidentiality obligations;

• Staff awareness;

• Security monitoring;

• Data minimisation;

• Secure backup;

• Vendor review; and

• Secure deletion or disposal.

Access to Personal Data is limited to employees, contractors, and providers who reasonably require access for authorised purposes.

No method of Internet transmission or electronic storage is completely secure. Although we take reasonable precautions, we cannot guarantee absolute security.

You are responsible for protecting your devices, account credentials, and passwords and for avoiding the transmission of highly sensitive documents through insecure communication channels.

---

15. Personal Data Breaches

If we become aware of a Personal Data breach, we will take reasonable steps to:

• Investigate the incident;

• Contain the breach;

• Reduce potential harm;

• Restore security;

• Identify affected information;

• Document the incident;

• Notify relevant authorities where required; and

• Notify affected individuals where required by law.

A notification may include the nature of the incident, the categories of information affected, potential consequences, measures taken, and recommended steps to reduce risk.

---

16. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Receive information about how your Personal Data is processed;

• Request confirmation that we process your Personal Data;

• Request access to your Personal Data;

• Receive a copy of your Personal Data;

• Correct inaccurate information;

• Complete incomplete information;

• Update your information;

• Request deletion or destruction of Personal Data;

• Request restriction or suspension of processing;

• Object to certain processing;

• Withdraw consent;

• Object to direct marketing;

• Request data portability where applicable;

• Request information about international transfers;

• Request human review of certain automated decisions;

• Submit a complaint to a competent data-protection authority; and

• Seek remedies available under applicable law.

These rights are not absolute and may be limited where processing is necessary to:

• Comply with law;

• Complete a contract;

• Protect another person’s rights;

• Prevent fraud;

• Protect health or safety;

• Maintain legally required records; or

• Establish, exercise, or defend legal claims.

16.1 Marketing Preferences

You may stop receiving marketing communications by:

• Using the unsubscribe link in the communication;

• Changing available marketing preferences; or

• Contacting us at vollemaangroup@gmail.com.

You may continue to receive non-promotional communications such as booking confirmations, payment information, itinerary updates, safety notices, and responses to your enquiries.

16.2 Cookie Preferences

You may accept, reject, or manage non-essential cookies through our cookie banner or website privacy settings.

You may withdraw cookie consent at any time. Withdrawal will not affect processing carried out before consent was withdrawn.

16.3 Submitting a Privacy Request

Privacy requests may be submitted to:

Email: vollemaangroup@gmail.com
Suggested subject: Privacy Request

Please provide:

• Your full name;

• Your contact information;

• Your relationship with Full Moon Tour & Travel;

• A clear description of your request; and

• Information reasonably necessary to locate the relevant records.

We may request additional information to verify your identity and prevent unauthorised disclosure, alteration, or deletion of Personal Data.

We will respond within the period required by applicable law.

Where legally permitted, we may charge a reasonable fee or refuse a request that is manifestly unfounded, excessive, repetitive, fraudulent, or abusive.

You may also authorise another person to submit a request on your behalf where permitted by law. We may require proof of that authorisation.

---

17. Rights of Individuals in Indonesia

Where Indonesian data-protection law applies, individuals may have rights relating to:

• The identity and accountability of the Personal Data Controller;

• The purposes and legal basis of processing;

• Access to Personal Data;

• Copies of Personal Data;

• Correction and completion;

• Updating Personal Data;

• Withdrawal of consent;

• Termination of processing;

• Deletion or destruction;

• Restriction or suspension of processing;

• Objection to certain automated decisions;

• Data portability where applicable;

• Compensation or other legal remedies; and

• Complaints concerning unlawful processing.

We will handle such requests in accordance with applicable Indonesian law.

---

18. Individuals in the EEA, United Kingdom, and Switzerland

Where the GDPR, UK GDPR, or equivalent applicable law applies, you may have rights including:

• The right to be informed;

• The right of access;

• The right to rectification;

• The right to erasure;

• The right to restrict processing;

• The right to object;

• The right to data portability;

• The right to withdraw consent;

• The right to object to direct marketing;

• Rights relating to automated decision-making; and

• The right to complain to a competent supervisory authority.

Where we rely on legitimate interests, you may object to the processing based on circumstances relating to your particular situation.

Where we rely on consent, you may withdraw it at any time.

For visitors located in the European Economic Area, United Kingdom, or Switzerland, we seek legally valid consent for non-essential cookies, advertising personalisation, and related uses where required.

---

19. Automated Decision-Making

We do not ordinarily make decisions that produce legal or similarly significant effects based solely on automated processing.

We may use limited automated tools for:

• Website analytics;

• Fraud detection;

• Advertising measurement;

• Audience segmentation;

• Content recommendations; and

• Marketing personalisation.

Where applicable law grants rights concerning significant automated decisions, we will provide the legally required information, safeguards, and opportunity for human review.

---

20. Children’s Privacy

Our website and direct booking services are intended to be used by adults who are legally capable of entering into an agreement.

We do not knowingly invite children to independently submit Personal Data, make bookings, or subscribe to marketing communications.

Where a parent, guardian, school, family member, or authorised adult books travel for a child, we may process the child’s Personal Data when necessary to:

• Arrange transportation or accommodation;

• Make a booking;

• Meet immigration requirements;

• Protect the child’s safety;

• Respond to accessibility or health needs; or

• Provide the requested service.

The adult providing the information must be authorised to do so and must provide any consent required by law.

If you believe that a child has provided Personal Data without appropriate authorisation, please contact us immediately.

---

21. Third-Party Websites and Embedded Services

Our website may contain links to or embedded content from:

• Social-media platforms;

• Mapping services;

• Video platforms;

• Payment providers;

• Booking providers;

• Hotels;

• Airlines;

• Tour operators;

• Government services; and

• Other third-party websites.

When you interact with third-party content, the third party may collect information directly from your browser or device.

We do not control and are not responsible for the privacy, security, accuracy, or availability practices of independent third parties.

You should review the privacy policy of each third-party service before providing Personal Data.

---

22. Accuracy and Required Information

You are responsible for ensuring that the information you provide is accurate, complete, and current.

Certain Personal Data may be required to:

• Respond to an enquiry;

• Prepare a quotation;

• Process a booking;

• Arrange travel;

• Complete a visa or immigration request;

• Process a payment;

• Meet legal requirements; or

• Protect traveller safety.

Where required information is not provided, we may be unable to provide the requested service.

Please contact us when your Personal Data changes or requires correction.

---

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes to our services;

• Changes to website technology;

• Changes to advertising or analytics providers;

• Changes to our business practices;

• Changes to applicable law;

• Regulatory guidance;

• Security improvements; or

• New processing activities.

The updated version will be published on this page with a revised “Last Updated” date.

Where changes are material or legally require additional notice, we may provide notice through:

• Our website;

• A cookie banner;

• Email;

• A booking communication; or

• Another appropriate communication method.

We encourage you to review this Privacy Policy periodically.

---

24. Contact Us

Questions, concerns, complaints, and requests relating to this Privacy Policy or our processing of Personal Data may be submitted to:

Full Moon Tour & Travel

Kampus Politeknik El Bajo Street
Wae Kelambu, Komodo
West Manggarai Regency
East Nusa Tenggara, Indonesia

Website: www.vollemaangroup.com
Email: vollemaangroup@gmail.com
Telephone: +62 823 3924 8776

For privacy-related communications, please use the subject:

Privacy Request
or
Privacy Complaint

Effective Date: 5 August 2026
Last Updated: 5 August 2026