Legal · Philippines
Showing the privacy policy applicable to your region. Switch region from the footer to view the other version.
PRIVACY POLICY
IAO – Island And Ocean – Philippines
Last updated: 19 August 2026
IAO – Island And Ocean ("IAO", "we", "us", or "our") respects your privacy and is committed to protecting the personal information of customers and website visitors in the Philippines.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, purchase physical surfing and lifestyle products, purchase digital products, contact us, or otherwise interact with our online store.
This Privacy Policy is intended to comply with the applicable requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC").
1. Personal Information Controller
For purposes of Philippine data-protection law, IAO – Island And Ocean is responsible for the processing of personal information collected through our online store.
IAO – Island And Ocean Ritterstrasse 01 19055 Schwerin Germany
Email: info@islandandocean.surf
Website: www.islandandocean.surf
For privacy questions, requests or concerns, please contact us using the email address above.
2. Personal Information We Collect
Depending on how you use our website, we may collect:
- Full name
- Billing address
- Shipping address
- Email address
- Telephone or mobile number
- Order information
- Product information
- Payment status
- Transaction information
- Delivery and tracking information
- Customer-service communications
- Information voluntarily provided through contact forms
- Technical information such as IP address, browser type and device information
- Cookie and similar technology information
We aim to collect only personal information that is reasonably necessary for the purposes described in this Privacy Policy.
3. Purposes of Processing
We may process your personal information for the following purposes:
Order processing
To:
- Receive and process your order
- Confirm your purchase
- Process payment
- Deliver your products
- Provide digital product access
- Manage returns and refunds
- Provide customer support
Website operation
To:
- Operate our website
- Maintain website functionality
- Improve website performance
- Maintain website security
- Prevent fraud, abuse and unauthorised activity
Customer communication
To:
- Respond to enquiries
- Communicate regarding your order
- Resolve customer-service issues
- Provide important service-related information
Legal and regulatory compliance
To:
- Comply with applicable legal obligations
- Maintain accounting and transaction records
- Respond to lawful requests from authorities
- Establish, exercise or defend legal claims
Marketing
Where required, we will obtain appropriate consent before using personal information for direct marketing purposes.
You may withdraw marketing consent at any time.
4. Lawful Processing
Personal information may be processed where permitted under applicable Philippine law, including where:
- You have provided consent;
- Processing is necessary to fulfil a contract or take steps before entering into a contract;
- Processing is necessary to comply with a legal obligation;
- Processing is necessary to protect vital interests;
- Processing is authorised by applicable law; or
- Another lawful basis recognised under the Data Privacy Act applies.
5. Payment Information
IAO may offer payment methods including:
- PayPal
- Credit and debit cards
- Other payment methods made available through our Wix store
Payment information may be processed by the applicable payment provider.
Where payment is processed directly by a third-party provider, IAO does not intentionally store complete credit-card information or card security codes.
Payment providers may independently process personal information in accordance with their own privacy policies and applicable laws.
6. PayPal
If you select PayPal as your payment method, your personal and transaction information will be processed by PayPal as necessary to provide payment services.
This may include information relating to:
- Your identity
- Contact information
- Transaction details
- Payment information
- Shipping information
- Technical information
PayPal maintains its own privacy policy governing its processing activities.
IAO is not responsible for processing activities carried out independently by PayPal.
7. Wix
Our online store is operated using Wix.
Wix may process personal information in connection with:
- Website hosting
- Ecommerce functionality
- Customer accounts
- Website security
- Cookies
- Analytics
- Website functionality
- Payment and transaction functionality
- Other services and integrations activated on our website
Wix maintains its own privacy and security policies.
8. Cookies
Our website may use cookies and similar technologies.
Some cookies are necessary for the operation and security of the website.
Other cookies may be used for:
- Analytics
- Website performance
- Personalisation
- Marketing
- Advertising
- Remembering preferences
Where required, we will request consent before using non-essential cookies.
You may manage your cookie preferences through the tools made available on our website.
9. Shipping and Fulfilment
To deliver physical products, we may share necessary information with:
- Postal operators
- Courier services
- Shipping companies
- Fulfilment providers
- Suppliers
- Dropshipping partners, where applicable
Information may include:
- Name
- Shipping address
- Email address
- Telephone number
Only information reasonably necessary to fulfil and deliver your order should be provided.
10. Digital Products
For digital products, we may process your:
- Name
- Email address
- Order information
- Payment status
- Download or access information
This information may be used to provide your digital product, confirm your purchase, provide technical support and administer refunds or disputes.
11. Data Sharing
We may share personal information with service providers where necessary to operate our business.
These may include:
- Wix
- PayPal
- Payment processors
- Credit-card processors
- Shipping and courier providers
- Fulfilment providers
- Suppliers and dropshipping partners
- IT and website providers
- Email and communication providers
- Accounting and professional advisers
- Government authorities where required by law
We do not sell your personal information.
Where appropriate, we will implement reasonable safeguards governing the processing or sharing of personal information.
12. International Data Transfers
IAO is a German business and operates an international online store.
Your personal information may therefore be transferred to, stored in, or processed in countries outside the Philippines.
Such transfers may occur when we use:
- Wix
- PayPal
- Payment providers
- International shipping providers
- Cloud or IT service providers
- Suppliers or fulfilment providers
- Other international service providers
IAO will take reasonable and appropriate measures to protect personal information during international processing and transfers, consistent with applicable privacy laws.
13. Data Retention
IAO will retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required or permitted by applicable law.
Transaction, accounting, tax and other business records may need to be retained for statutory or legal purposes.
When personal information is no longer necessary and there is no legal reason to retain it, we will take reasonable steps to delete, destroy or anonymise it.
14. Security Measures
IAO implements reasonable and appropriate organisational, physical and technical measures designed to protect personal information against:
- Unauthorised access
- Accidental or unlawful destruction
- Loss
- Alteration
- Unauthorised disclosure
- Unlawful processing
- Other security threats
No electronic system or internet transmission can be guaranteed to be completely secure.
15. Your Rights Under Philippine Privacy Law
Subject to applicable law and relevant exceptions, you may have rights including the right to:
- Be informed about the processing of your personal information;
- Access your personal information;
- Correct inaccurate or incomplete information;
- Object to certain processing;
- Withdraw consent where processing is based on consent;
- Request blocking, removal or destruction where legally applicable;
- Obtain remedies for unlawful or unauthorised processing; and
- Lodge a complaint with the National Privacy Commission.
For privacy requests, contact:
We may need to verify your identity before processing certain requests.
16. Direct Marketing
If IAO sends promotional communications, we will comply with applicable privacy requirements.
Where consent is required, we will obtain the appropriate consent before sending direct marketing communications.
You may withdraw your consent or unsubscribe at any time.
Transactional communications, such as order confirmations, shipping notifications and customer-service communications, may still be sent where necessary to fulfil your order or provide requested services.
17. Complaints
If you have concerns regarding our processing of your personal information, we encourage you to contact IAO first:
Email: info@islandandocean.surf
You may also have the right to lodge a complaint with the:
National Privacy Commission (NPC) Republic of the Philippines
The NPC is the independent government authority responsible for administering and enforcing the Data Privacy Act of 2012.
18. Children's Privacy
Our online store is not intended to knowingly collect personal information from children for independent purchases without appropriate legal authorisation.
If you believe that a child has provided personal information to us without appropriate permission, please contact:
19. Changes to This Privacy Policy
IAO may update this Privacy Policy from time to time to reflect:
- Changes to our business
- New products or services
- Changes to payment providers
- Changes to shipping or fulfilment providers
- Changes to our website
- Changes to applicable privacy laws
- Changes to our data-processing practices
The latest version will be published on our website with the relevant update date.
20. Contact Us
For questions, privacy requests or concerns regarding this Privacy Policy, please contact:
IAO – Island And Ocean Ritterstrasse 01 19055 Schwerin Germany
Email: info@islandandocean.surf
Website: www.islandandocean.surf
