Dear valued IKEA Family members and/or guardians of småles members at IKEA,
At IKEA, we are committed to respecting and protecting the privacy rights of all our data subjects.
This IKEA Family and småles Membership Personal Data Protection Notice (“Membership Data Privacy Notice”) is issued to all our valued IKEA Family members/applicants and/or guardians of småles members/applicants of Ikano (Philippines) Inc. (“IKEA”, “us”, “we”, “our” or “ours”), pursuant to the statutory requirements of the Philippines’ Data Privacy Act of 2012 (“PDPA”).
IKEA is the Personal Information Controller (“PIC”) of the Personal Data of IKEA Family members, guardians of småles members and småles members.
This means that IKEA determines the purposes for which such Personal Data will be used. Where your and your småles members’ Personal Data is disclosed to third parties under a data sharing agreement, such third parties are also constituted as PICs.
This Membership Data Privacy Notice tells you what to expect when IKEA processes your and your småles members’ Personal Data. This Notice is incorporated into and made part of the Membership Agreement executed with you.
Unless otherwise provided in this Membership Data Privacy Notice or the context otherwise requires, the capitalized terms herein shall have the same meaning as provided in the PDPA.
“Person” means any natural or juridical person.
“Personal Data” means all types of Personal Information including Sensitive Personal Information and Privileged Information.
“Personal Information” refers to any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information, would directly and certainly identify an individual;
“Privileged Information” refers to any and all forms data, which under the Rules of Court and other pertinent laws constitute privileged communication;
“Processing” refers to any operation or any set of operations performed upon personal data including, but not limited to, the collection, recording, organization, storage, updating, or modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction of data. Processing may be performed through automated means, or manual processing, if the personal data are contained or are intended to be contained in a filing system.
“Sensitive Personal Information” refers to personal information: (1) about an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations; (2) about an individual’s health, education, genetic or sexual life of a person, or to any proceeding for any offense committed or alleged to have been committed by such individual, the disposal of such proceedings, or the sentence of any court in such proceedings; (3) issued by government agencies peculiar to an individual which includes, but is not limited to, social security numbers, previous or current health records, licenses or its denials, suspension or revocation, and tax returns; or (4) specifically established by an executive order or an act of Congress to be kept classified
Whenever the word “include,” “includes” or “including” are used in this Notice, they shall be deemed to be followed by the words “without limitation”.
The meaning assigned to each term used here will be equally applicable to both the singular and plural forms of such term, and the words denoting any gender shall include all genders.
During your and/or your småles member’s course of dealing with us, we will collect, use, disclose, store, maintain, access, process and/or transfer your and/or your småles member’s Personal Data.
Personal data which we collect and process may include Sensitive Personal Information and/or Privileged Information, including:
We need to collect, use, disclose, store, maintain, access, process and/or transfer your or and/or your småles member’s Personal Data for the following purposes (collectively referred to as “Purposes”):
The Personal Data may be transferred/disclosed to, and processed by the following:
In this regard, please note that we may be transferring your and/or your småles member’s Personal Data outside of the Philippines to our central customer data storage and processing servers located overseas.
We will store and retain your and/or your småles member’s Personal Data for such period as may be required by applicable law or as may be needed to fully and efficiently achieve the Purposes, or as may be necessary to comply with our legal obligations, resolve disputes and enforce our agreements.
Your and/or your småles member’s Personal Data are treated as confidential and processed and securely.
We are committed to ensuring that your and/or your småles member’s Personal Data are stored securely.
We apply appropriate technical, organizational and physical measures intended for the protection of Personal Data against any accidental or unlawful destruction, alteration and disclosure, as well as against any other unlawful processing.
We use firewalls and data encryption to keep Personal Data safe. Personal Data in transit is always encrypted.
We limit access to Personal Data to employees who need to have access thereto in order to fulfill their functions.
We periodically conduct tests to determine our systems’ potential vulnerabilities and implement solutions to further strengthen our information security posture.
You have the following rights in relation to your and/or your småles member’s Personal Data held by us.
Upon the passing of the data subject, or in case of his incapacity or incapability to exercise his legal rights, the lawful heirs and assigns may invoke the data subject’s rights in his place.
The data subject’s rights under this clause are subject to limitations provided by law.
Please ensure that you provide complete and accurate Personal Data to us and keep us updated on any changes to your Personal Data.
You have the right at any time to request us to limit the processing and use of your and/or your småles member’s Personal Data (for example, requesting us to stop sending you and/or your småles member any marketing and promotional materials or contacting you and/or your småles member for marketing purposes).
You should be address your written requests or inquiries to:
If you want to delete and control any cookies already on your computer, please refer to your browser vendor’s instructions by clicking "Help" in your browser menu.
When you use the corresponding Membership Card/Number, or otherwise exercise your membership privileges, you confirm your consent to IKEA’s processing of the Personal Data.
We will also take it that all Personal Data provided by you and/or your småles member is accurate and complete, and that none of it is misleading or out of date as of the date of this Membership Data Privacy Notice. You will promptly update us in the event of any change to your and/or your småles member’s Personal Data.
In some circumstances, you may have provided Personal Data relating to other individuals (such as your spouse, family members or other third parties, including minors). You hereby represent and warrant that where you provide the Personal Data of other individuals to us, you are validly acting on their behalf and have obtained their consent to disclose their Personal Data to us for the Purposes for which we are collecting, using, disclosing, storing, maintaining, accessing and processing the Personal Data.
Your consent to this Membership Data Privacy Notice supplements but does not override nor replace any other consent you have previously granted or will grant us as regards the Personal Data. Nor does your consent to this Notice derogate against the existence of other lawful bases for our collection and processing of the Personal Data.
Date of issuance of this Membership Data Privacy Notice: 11 August 2021