I use Gandi for a load of domains (they're great!) and have just bought an io one through them but sadly there isn't much whois privacy apart from hiding your email address. Name, postal address and telephone are all visible. I think this might be a .io requirement though since Gandi offer whois protection for free. You just enable it on your contact record and any domain linked to that contact will then use Gandi's data rather than yours. Depending on the tld this means either everything is masked apart from the owner's name (e.g. for .com or .net) or only certain fields are (as determined by the various registries and each one's policy on hiding real owner info).