PRIVACY POLICY Wandering in Asia & Beyond LLC Peachtree City, Georgia, USA Effective Date: September 16, 2026 Wandering in Asia & Beyond LLC ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with our website, communications with you, and the travel services we arrange or sell. This Policy is intended to describe our actual privacy practices. Browsing our website does not by itself require you to create an account or provide personal information. Where applicable law requires consent for a particular processing activity, we will request that consent separately. This Policy is not intended to create blanket consent to all processing. 1. Information We May Collect The information we collect depends on how you interact with us. We may collect: Contact and identification information, such as your name, email address, telephone number, mailing address, date of birth, nationality, and emergency-contact information. Travel-document information, such as passport details and information required by airlines, border authorities, visa providers, or other travel suppliers. Travel preferences and arrangements, such as flight or seating preferences, room preferences, itinerary details, and accessibility requests. Information you voluntarily provide about dietary requirements, severe food allergies, mobility needs, medical or accessibility needs, or other information necessary to make appropriate travel arrangements. Travel-insurance information, such as insurer name, policy number, and related information when you ask us to assist with insurance arrangements. Payment-related information. We primarily accept payment by bank transfer. We do not ask for or store online-banking passwords or login credentials. If you provide a check, transfer confirmation, or other payment record, we may retain the information appearing on that record for accounting and transaction purposes. Website and technical information that may be automatically transmitted when you visit our website, such as IP address, browser and device information, operating system, pages viewed, dates and times of visits, and information collected through cookies or similar technologies, depending on the website functions you use. 2. How We Use Personal Information We may use personal information to: respond to inquiries and provide requested information; process and administer travel reservations and related payments; arrange flights, hotels, cruises, transportation, guides, excursions, insurance, visas, and other requested travel services; provide information required by airlines, including applicable passenger- screening or Secure Flight programs; communicate itinerary changes, confirmations, travel documents, and other service-related notices; accommodate disclosed accessibility, mobility, dietary, allergy, or other travel needs; maintain business, accounting, tax, fraud-prevention, security, and dispute-resolution records; comply with applicable laws, regulations, court orders, and lawful government requests; and send marketing communications where permitted by applicable law. 3. Legal Bases Where GDPR or UK GDPR Applies If the EU General Data Protection Regulation (GDPR) or UK GDPR applies to our processing, the legal basis depends on the circumstances and may include: performance of a contract with you or taking steps at your request before entering into a contract; compliance with a legal obligation; our legitimate interests, where those interests are not overridden by your rights and interests; and your consent, where consent is required. For special-category information, such as certain health information, we will rely on an applicable condition under Article 9 of the GDPR/UK GDPR, which may include your explicit consent where appropriate. Providing such information is generally voluntary, but if information necessary for a particular accommodation is not provided, we may be unable to arrange that accommodation or determine whether a particular itinerary is suitable. Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal. Where we rely on legitimate interests, you may have the right to object to that processing. We do not intend to make decisions producing legal or similarly significant effects about you solely by automated means. 4. Information About European Clients If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar privacy requirements, additional rights and protections may apply. These may include rights to access, correct, delete, restrict, or object to processing; data portability; withdrawal of consent; and the right to lodge a complaint with a competent data- protection supervisory authority. You may exercise applicable rights by contacting us using the details in Section 15. We may need to verify your identity before responding. Some rights are subject to legal exceptions and limitations. If GDPR or UK GDPR applies to our activities and the law requires us to appoint an EU or UK representative, we will comply with that requirement. Any applicable representative's contact details will be provided in this Policy or through an appropriate privacy notice once appointed. 5. How We Share Personal Information We may disclose personal information reasonably necessary to provide the requested services or for the purposes described in this Policy. Recipients may include: airlines, hotels, cruise lines, rail and transportation companies; local tour operators, guides, restaurants, excursion providers, and other destination suppliers; travel-insurance providers and visa- processing providers when requested; payment, banking, technology, website-hosting, email, analytics, and other service providers that process information on our behalf; and government authorities, border agencies, law-enforcement agencies, or other parties where disclosure is required or permitted by law. We do not sell personal information for monetary consideration. We do not knowingly disclose personal information for purposes unrelated to providing requested services, operating our business, complying with law, or other purposes described in this Policy. If our use of a third-party service constitutes a sale, sharing, or targeted- advertising disclosure under a law applicable to you, we will provide any disclosures, choices, or opt-out mechanisms required by that law. 6. International Transfers Travel arrangements frequently require us to transfer personal information to suppliers or authorities in countries outside the United States, including countries in Asia where our tours operate. Those countries may have privacy laws that differ from the laws where you live. Where GDPR/UK GDPR applies, we will use an applicable lawful transfer mechanism when required, such as an adequacy decision, Standard Contractual Clauses, or another mechanism permitted by applicable law. Additional safeguards may apply where required. Providing information to an overseas travel supplier may be necessary to perform the travel services you request. Where a transfer is based on a different lawful mechanism, we will provide the information and choices required by applicable law. 7. Website, Cookies, Google Maps, and Third-Party Services Our website may use cookies and similar technologies for essential website functions, preferences, security, analytics, or other purposes, depending on the services actually enabled on the website. Where required by law, non- essential cookies or similar technologies will be used only after obtaining the required consent. You may also be able to control cookies through your browser and, where provided, our cookie-consent controls. If our website embeds Google Maps or other third-party content, the relevant provider may receive technical information such as your IP address and information about your interaction with the embedded service. Depending on how the service is configured, information may be transmitted when the content loads or when you interact with it. Third-party services operate under their own privacy policies and terms. Before publication, the Company should verify that this Policy accurately reflects every analytics, advertising, booking, payment, map, form, newsletter, social-media, hosting, and other third-party service actually installed or enabled on the website. 8. Data Retention We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing travel services, maintaining business, accounting, and tax records, resolving disputes, enforcing agreements, and complying with legal obligations. Retention periods vary depending on the type of record and applicable legal requirements. When information is no longer required, we take reasonable steps to securely delete, anonymize, or otherwise dispose of it. 9. Data Security We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. No method of internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security. 10. U.S. State Privacy Rights Certain U.S. states have enacted privacy laws that provide rights to residents when applicable legal requirements and thresholds are met. Depending on the law that applies to you, you may have rights to access, correct, delete, obtain a copy of, or restrict certain uses of personal information, and you may have rights to opt out of certain processing or appeal a privacy-rights decision. We will honor rights that apply to us under applicable law. We may need to verify your identity and may apply legally permitted exceptions. We will not discriminate against you for exercising a privacy right where prohibited by applicable law. If a state law applicable to you requires a specific opt-out method, appeal process, authorized-agent procedure, or response timeline, we will follow the requirements of that law. 11. Health, Accessibility, and Other Sensitive Information If you voluntarily provide information about medical, mobility, accessibility, dietary, allergy, or similar needs, we use it only as reasonably necessary to assess suitability, arrange requested accommodations, protect traveler safety, and communicate relevant needs to appropriate travel suppliers. Wandering in Asia & Beyond LLC is a travel company, not a healthcare provider. This Policy does not state or imply that the Company is a HIPAA- covered entity. Please provide sensitive information only when it is relevant to your travel arrangements and through a communication method we designate. Where applicable law provides additional protections for sensitive or special-category information, we will process that information in accordance with those requirements. 12. Marketing Communications We may send promotional communications where permitted by law. Commercial email will include an appropriate unsubscribe mechanism as required by applicable law, including the federal CAN-SPAM Act. Unsubscribing from marketing communications will not stop transactional or service-related communications. Where applicable law requires consent before sending certain electronic marketing, we will obtain that consent. You may withdraw marketing consent at any time using the unsubscribe mechanism or by contacting us. 13. Children's Privacy Our website is not directed to children under 13. We do not knowingly collect personal information directly from children under 13 in circumstances where parental consent is legally required. If we learn that we have collected such information without the required authorization, we will take reasonable steps to delete it. If a parent or guardian believes a child has provided personal information to us, please contact us using the information in Section 15. 14. Third-Party Websites Our website may link to websites operated by airlines, insurers, hotels, government agencies, and other third parties. We do not control their privacy practices, security, or content and are not responsible for their privacy policies. Please review the privacy policy of any third-party website you visit. 15. Contact Us and Privacy Requests If you have questions about this Privacy Policy or wish to submit a privacy request, please contact: Wandering in Asia & Beyond LLCPeachtree City, Georgia, USAEmail: wanderinginasiatravel@gmail.com When submitting a privacy request, please identify the right you wish to exercise and provide enough information for us to understand and respond to your request. We may request additional information to verify your identity. If you are an EEA or UK resident and have a right to lodge a complaint with a supervisory authority, you may contact the data-protection authority in your country or place of residence, subject to applicable law. 16. Changes to This Policy We may update this Privacy Policy from time to time. We will post the revised Policy with a new effective date. Changes will apply from the effective date stated in the revised Policy, subject to any notice or consent required by law. 17. Important Note About Consent This Privacy Policy is a notice of our privacy practices. It is not intended to make your continued use of the website a blanket consent to all processing. Where the law requires consent, we will request it separately and in a manner appropriate to the specific processing.