Privacy Policy

Overview

WAVFlow ("we", "us", or "our") operates the wavflow.co website and the WAVFlow6 in-store audio platform. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights as a data subject.

We are committed to complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and, where applicable, the European Union General Data Protection Regulation (GDPR).

Information We Collect

We collect information you provide directly to us, including:

• Contact and inquiry details — name, email address, phone number, and company name when you fill out a contact or inquiry form.
• Account credentials — email address and password when you register for a WAVFlow6 account.
• Billing information — business name, billing address, and payment method details processed securely through our payment processor.
• Communications — messages, feedback, and support requests you send to us.

We also collect information automatically when you use our website or platform, including IP address, browser type and version, pages visited, time and date of visits, and device identifiers. This data is collected through cookies and similar tracking technologies.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the WAVFlow6 platform and our website.
• Process transactions and send related information, including purchase confirmations and invoices.
• Respond to your comments, questions, and requests, and provide customer support.
• Send you technical notices, updates, security alerts, and administrative messages.
• Send promotional communications, such as information about products, services, and events, where you have given consent or where permitted by law.
• Monitor and analyse trends, usage, and activities in connection with our services.
• Comply with legal obligations, including the Philippine Data Privacy Act and GDPR.

Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data on the following legal bases:

• Contract — processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests — processing is necessary for our legitimate business interests, such as improving our services and preventing fraud, provided those interests are not overridden by your rights.
• Consent — where you have given clear consent for us to process your personal data for a specific purpose.
• Legal obligation — processing is necessary to comply with a legal obligation.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers — third-party vendors who perform services on our behalf, such as payment processing, data analytics, email delivery, and customer support. These parties are contractually obligated to keep your information confidential and use it only to provide services to us.
• Business transfers — in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• Legal requirements — when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of WAVFlow, our users, or the public.

Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and applicable legal requirements.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to access — you may request a copy of the personal information we hold about you.
• Right to rectification — you may request that we correct inaccurate or incomplete personal information.
• Right to erasure — you may request that we delete your personal information, subject to certain exceptions.
• Right to restrict processing — you may request that we restrict the processing of your personal information in certain circumstances.
• Right to data portability — you may request that we provide your personal information in a structured, commonly used, machine-readable format.
• Right to object — you may object to our processing of your personal information where we rely on legitimate interests as the legal basis.
• Right to withdraw consent — where we rely on your consent to process your personal information, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. Under the Philippine Data Privacy Act, you may also lodge a complaint with the National Privacy Commission.

Cookies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

Third-Party Links

Our website may contain links to third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date below. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, your personal data, or our data practices, please contact us: