Privacy policy
This describes how Islora handles personal data. It is written against the Data Privacy Act of 2012 (Republic Act No. 10173). Islora is pre-launch, so the amount of processing is deliberately small: what you send through a form, and nothing else.
Last updated 6 September 2026
Draft for review. This document has been prepared ahead of Islora's launch and has not yet been reviewed by a lawyer. It describes how the site works today — sample listings, no bookings, no payments — and will be finalised before any real booking is taken. It is not legal advice.
The short version
When you submit a form on this site, what you typed is stored so that we can reply to you. That is the whole purpose: an operator application nobody kept would be an operator nobody answered.
Nothing is sold, shared or used for advertising. There are no tracking scripts and no advertising cookies. Some information is kept in your own browser, on your own device, and never reaches us at all.
What the forms collect
Four forms on this site accept information:
- Newsletter — your email address.
- Founding-operator waitlist — your business name and location, a contact name, mobile number, email address, accreditation status, an optional web address, and a description of what you offer.
- Traveller enquiry — your name, email address, an optional destination and party size, and your message.
- Listing wizard — the business, listing and permit details you enter, plus a payout method and account holder name. It never asks for an account or wallet number.
What happens to it
Your submission is written to Islora's database, given a reference, and read by Je Ursos so that he can reply. Where email notification is switched on, a copy of the submission is sent to that same address.
Contact details are deliberately kept out of the server logs. A log line records the reference and, for an operator application, the business name and municipality — never a person's name, phone number or email address.
Nobody outside Islora sees your submission. It is not passed to other operators, added to an advertising list, or used to train anything.
How long it is kept
Operator applications and listings are kept for as long as the business is being considered or is listed, and for two years after that.
Traveller enquiries are kept for two years, which covers a repeat trip and a season either side of it.
Newsletter addresses are kept until you ask to come off the list. Submitting the same address twice does not create a second record.
Ask us to delete any of it sooner and we will, unless we are required to keep it.
Where it is stored, and who can reach it
In a database controlled by Islora, reachable only by Je Ursos through a password-protected page that is not published on the public site.
This is a small operation and the honest description is that the protection is one person keeping one credential safe, not a security department. As Islora grows, this section will need rewriting and the access controls will need to grow with it.
What is kept in your browser
Three things are stored on your own device using browser storage. They are not transmitted to Islora and we cannot read them.
- Saved experiences — the list of listings you have hearted.
- A part-finished listing draft, if you are an operator using the listing wizard, so you can leave and come back.
- Your currency preference.
Photographs and documents
Photographs chosen in the listing wizard are previewed from your device and are never uploaded. Permit documents are not collected through this site at all — when they are needed, we ask for them through a channel you choose.
Cookies and analytics
The site sets no advertising cookies and runs no third-party analytics or tracking scripts. Browser storage is used only for the three purposes listed above.
Sharing
Your details are not sold, rented or shared with third parties for marketing.
When Islora launches, a booking will necessarily share what the operator needs to deliver it — your name, contact details and party size. That is the point of a booking, and it will be stated clearly at the time.
Your rights
Under the Data Privacy Act you have the right to be informed, to access your data, to object to processing, to have inaccurate data corrected, to have data erased or blocked in certain circumstances, to data portability, and to damages for a violation of your rights.
To exercise any of these, write to ujeeursos@gmail.com. Quote your reference if you have one — it is the fastest way to find your record. We will respond within thirty days.
You may also complain to the National Privacy Commission.
Before launch
Islora now stores personal data, which brings obligations under the Data Privacy Act that are not yet fully met. Specifically: a named data protection officer has not been appointed, a formal breach-response procedure is not written down, and registration with the National Privacy Commission has not been assessed against the current thresholds. The retention periods above are set but not yet enforced automatically.
This is stated plainly rather than left out. These need to be in place before Islora handles bookings at any volume, and this section will be updated as each one is done.
Contact
Privacy questions go to ujeeursos@gmail.com, or +63 917 617 3375. Islora's operating address is Provincial Road, Brgy. Geotina, Basilisa, Dinagat Islands.