Privacy & enquiries

Last updated: 4 November 2026

Who to contact

This website is operated by Islakite Kitesurfing & Wingfoil School on Bulabog Beach, 5608 Malay, Aklan, Philippines. For questions about your information or a privacy request, email jen@islakitesurfing.com.

When you send an enquiry

Our form asks for your name, email address and message. You can also provide your enquiry type, arrival date and riding level. We use this information to answer your questions, discuss availability and help arrange the lessons or services you request. Please avoid including payment-card details, passport details or sensitive personal information in your message.

When you click Send enquiry, the website sends your details directly to jen@islakitesurfing.com through our OVHcloud email service. Our team uses the email address you enter to reply to you.

The form does not publish your message or subscribe you to a mailing list. Its submission handler does not save the full enquiry as a WordPress submission record. Your message is received and retained as email. Access to the enquiry mailbox is limited to the school’s owner/manager.

WhatsApp, Viber and email links

If you choose Send via WhatsApp, the website opens WhatsApp with a prepared message containing your form details. You review it and tap Send in WhatsApp to send it to us. Opening WhatsApp is not the same as sending an enquiry through the website’s email service.

When you contact us using WhatsApp, Viber or your email application, that service handles the information you share, including your contact details and message, under its own privacy terms. Read the WhatsApp privacy policies and Viber privacy policy.

Security and spam protection

The enquiry form uses Cloudflare Turnstile to help distinguish visitors from automated submissions. Cloudflare processes technical signals such as your IP address and browser or device information for this security check. See the Cloudflare Turnstile Privacy Addendum.

To limit repeated submissions, the form also stores temporary counts associated with hashed versions of an IP address and email address. These records are set to expire after one hour and do not contain the full enquiry. Expired technical records may remain until routine database cleanup, and backups may retain older copies.

Hosting and other services

OVHcloud provides our website hosting and outgoing email service. Hosting and email services may process technical information such as IP addresses, request times and mail-delivery information to operate, secure and troubleshoot their services. See OVHcloud’s privacy policy.

Embedded Google Maps and Kwind weather content connect your browser to those providers when they load. This can share technical information such as your IP address, browser information and the page being loaded. These services may use cookies or similar technologies under their own policies. See Google’s privacy policy. The Kwind widget also embeds a Windguru forecast, which connects your browser to Windguru when it loads. Kwind may use browser storage for app functionality and display preferences.

Hotel booking, reviews, social-media and other external links take you to separate services with their own privacy policies. Providers may process information outside the Philippines. Their policies explain their own processing and retention practices.

Cookies and analytics

We use Google Analytics to measure page visits, contact-link clicks and successfully sent enquiries worldwide. By default, Google receives measurements from your browser without analytics cookies. A previously saved opt-in permits analytics cookies. We honour earlier opt-outs and supported browser privacy signals. Contact events exclude the contents of your enquiry. Advertising storage and ad personalisation are disabled. You can switch off analytics for this browser below.

Contact events include the page language. Forms work either way. Security features and embedded services may use separate cookies.

How long information is kept

Enquiry emails and replies remain in the school’s mailbox until manually deleted. There is currently no automatic deletion schedule for these emails. Resetting or closing the website form does not delete a message already sent. Copies in your own inbox and records held by external services are managed separately.

You can ask us to review or delete information we hold about you. Some information may need to be retained for an ongoing booking, legal obligations or the establishment, exercise or defence of legal claims. The form’s one-hour security-record expiry is separate from email, service-log and backup retention.

Your choices and rights

You can contact us to request access to or correction of your information, ask for deletion, or object to processing where applicable. We may need to verify your identity before acting on a request. If a request concerns a third-party service, you may also need to contact that provider. You can raise a concern with the Philippine National Privacy Commission.

For help, email jen@islakitesurfing.com. We will update this notice if the website’s forms, providers or data-handling practices change.