Where journeys create family. Authentic volunteer travel and cultural immersion in Lombok, Indonesia.
Last Updated:
Beyond Lombok (“We,” “Us,” or “Our”) is committed to protecting the privacy and security of the personal information shared with us by our volunteers, alumni, and website visitors (“You”). This policy describes how we collect, use, store, and disclose your personal data in connection with our programs and website.
1. Information We Collect
We adhere to the principle of data minimization, collecting only the personal information strictly necessary for program enrollment, safety, and operation.
A. Data You Directly Provide to Us
This information is collected when you inquire, apply, or register for a program. The data collected may include:
- Identity & Contact Data: Name, date of birth, gender, email address, phone number, nationality, and passport details (including passport number and expiry date).
- Program Data: Details of the volunteer programs you have participated in or inquired about, including travel dates, program fee payments, and testimonials.
- Logistical Data: Dietary requirements, accommodation preferences (for host family placement), and emergency contact details.
- Sensitive Data (Health & Security): Relevant medical background (for safety/accommodation purposes only) and, where required, criminal background checks or health/vaccination records necessary for Indonesian visa compliance or safety protocols.
- Financial Data: Bank statements showing proof of funds (where legally required for Indonesian visa processing) 1, although we do not directly store full banking or credit card details after processing.
B. Data Automatically Generated by Your Activity
When you use our website, we may automatically collect data related to your browsing activity:
- Usage Data: IP address, browser type, device type, referral source, pages viewed, and engagement time (to measure the effectiveness of the website and marketing efforts).
- Cookies: Small data files stored on your device used to remember your preferences and manage session status.
2. How We Use Your Information
We use your personal data based on specific, lawful grounds, primarily to perform our contract with you (enrollment) and ensure your safety during your placement.
| Purpose | Personal Data Used | Lawful Basis |
| Program Enrollment | Identity, Contact, Program Data | Necessary for the performance of a contract (booking your program) |
| Safety & Logistics | Emergency Contacts, Medical Background, Dietary Requirements | Necessary for protecting your vital interests (safety abroad) |
| Visa & Immigration | Passport, Nationality, Financial Proof | Necessary for compliance with legal obligations (Indonesia C6 Visa) |
| Communication | Email Address, Program Data | Legitimate interest (presenting relevant program updates and marketing) |
| Service Improvement | Usage Data, Program Feedback/Testimonials | Legitimate interest (enhancing user experience and program efficacy) |
3. Data Storage, Security, and Retention
A. Security Measures
We prioritize robust cybersecurity measures to safeguard your data from unauthorized access, loss, or theft.
- Secure Storage: All sensitive volunteer and organizational data are securely stored and hosted.
- Access Control: Access to personal data is restricted to authorized local staff members who require the information to perform their duties (e.g., placing you with a host family, processing visa documentation).
- Staff Training: All team members are educated on data security protocols to reduce human error risks.
B. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.
- We may delete your personal information after a reasonable period following your program conclusion.
- We may retain information longer where necessary to comply with regulatory or legal requirements (e.g., financial records, visa documentation) or for our legitimate organizational purposes (e.g., maintaining alumni connection and tracking program impact).
4. Disclosure of Information to Third Parties
We do not sell your personal data. We only share information with third parties when necessary for the operation of your program or when legally required.
- Local Partners: We share necessary logistical and identity data (Name, Dietary, Emergency Contact) with vetted local Sasak host families and our local team members in Lombok to arrange your accommodation, meals, and daily activities.
- Government & Immigration: We share required documents and information with Indonesian government authorities (e.g., the Immigration Directorate General for the C6 Volunteer Visa application).
- Emergency Services: We may disclose health and emergency contact data to medical providers or emergency services when necessary to protect your vital interests.
- Lawful Request: We may disclose personal data if legally required to cooperate with supervisory authorities, ensuring all disclosures are proportionate and documented.
5. Your Rights (Access, Correction, Erasure)
You have rights regarding the personal data we hold about you.
- Right to Access: You have the right to request a copy of the personal information we hold about you (a data “dump”).
- Right to Rectification: You have the right to request that inaccurate or incomplete data be corrected and updated.
- Right to Erasure (“Right to Be Forgotten”): You have the right to request that your personal data be deleted and no longer processed, provided the data is no longer necessary for the purposes for which it was collected or retained for legal reasons.
- Right to Object: You have the right to object to the processing of your data for direct marketing purposes.
6. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your rights (access, correction, or deletion), please contact us using the details below.
Data Protection Contact:
info@beyondlombok.com