Security Policy
Last updated: September 2026
Mutan Unlimited (MutanUnlimited.com) is the trading name of CV Mutan Nusantara, Mataram, Lombok, Indonesia. This page explains what information we hold about you, how we keep it safe, and how to tell that a message or payment request from us is genuine. It should be read together with our Terms and Conditions.
1. What we collect
To run your trip we collect only what we need:
Your name, email address and phone or WhatsApp number, so we can confirm and manage your booking.
Passport or ID details where required by port, harbour or local authorities for boat travel or island stays.
Health, medication, swimming ability and dietary information, so your guide can plan and run the trip safely.
Emergency contact details.
We use this information only to run your trip, to meet Indonesian legal requirements, and to contact you about your booking. We do not sell it, rent it or share it with anyone except the guides, boat operators and accommodation providers who need it to deliver your trip. Health information is seen only by your guide and the trip organiser.
2. How your information is stored
Our website and booking system run on a hosted business platform (ERPNext) maintained for us by Enterprise Systems Australia. Your information is encrypted in transit using industry-standard TLS, stored on servers with access limited to named Mutan Unlimited staff, and backed up regularly. Enterprise Systems Australia looks after the servers, updates and monitoring; they do not use or access your booking information for any purpose of their own.
We keep booking records for as long as Indonesian tax and business-record rules require. You can ask us at any time what information we hold about you, or ask us to correct or delete it, by emailing [email protected]. We will delete health and passport details once they are no longer needed for your trip or for legal record-keeping.
3. Payments — please read this carefully
We are paid by bank transfer in Indonesian rupiah. Bank-transfer fraud, where a scammer sends a "new bank details" message pretending to be a business, is common in travel. To protect yourself:
Our bank details appear only on the official quotation or invoice you receive from us. They are also listed here:
Account name: [CV Mutan Nusantara]
Bank: [bank name]
Account number: [to be added]
SWIFT/BIC: [to be added]
We will never email, message or WhatsApp you to say our bank account has changed. If you receive a message like that, it is not from us — do not send money, and phone or WhatsApp us on +62 821 9899 9876 to check.
Check that the account name your bank shows matches the account name above before you confirm a transfer.
We never ask for card numbers, PINs, online-banking passwords or one-time codes, by any channel.
After paying, please send us a screenshot or remittance advice so we can match the payment to your booking.
4. Recognising a genuine message from us
Genuine messages from Mutan Unlimited:
come from an email address ending in @mutanunlimited.com, or from WhatsApp number +62 821 9899 9876;
link only to pages on mutanunlimited.com or photos.mutanunlimited.com;
refer to your actual booking — the trip name, dates and quotation or invoice number;
never pressure you to pay within hours, threaten to cancel immediately, or ask you to keep something confidential.
If an email looks like it is from us but the address is different, the spelling is off, the link goes somewhere unexpected when you hover over it, or it just doesn't feel right, don't click anything or reply. Forward it to [email protected] and we will confirm whether it is real. We would much rather answer a "was this you?" than have a guest lose money.
5. Your website account
If you create an account on mutanunlimited.com to view your bookings, quotations and invoices, it is protected by your email address and a password. You can also turn on two-step authentication, which asks for a code from an authenticator app on your phone each time you sign in; we recommend it. Choose a password you don't use anywhere else, and contact us straight away if you think someone else has accessed your account. Mutan Unlimited staff never need your password and will never ask for it.
6. Website security
Every page on mutanunlimited.com is served over HTTPS — look for the padlock in your browser. The site is protected by a firewall, kept up to date, and monitored by our hosting provider. We use Google Analytics with IP addresses anonymised to understand how the site is used; we do not use advertising trackers.
7. Reporting a security concern
If you notice anything unusual about our website, our emails, or your account, or if you have received a message you think is impersonating us, please tell us:
Email: [email protected] | Phone / WhatsApp: +62 821 9899 9876
We will confirm receipt within [2] business days and tell you what we have done about it.