Privacy policy

Last updated: November 08, 2026

ILONA, INC. (“ILONA,” “we,” “us”) is a Colorado corporation located at 3201 East 2nd Avenue, Suite 300, Denver, Colorado 80206, U.S.A. ILONA® and ILONA Beauty® are registered trademarks of ILONA, INC. This Privacy Policy explains how we collect, use and disclose personal information when you visit ilona.com, shop with us, place an order by phone, receive products from us, or otherwise communicate with us (together, the “Services”). Our online store is powered by Shopify.

If this Privacy Policy conflicts with our Terms of Service, this Privacy Policy controls with respect to personal information. By using the Services, you acknowledge that you have read this Privacy Policy.

Personal information we collect

“Personal information” means information that identifies, or can reasonably be linked to, you or your household. It does not include information that is de-identified or aggregated so that it cannot reasonably be linked to you. Depending on how you interact with us, we may collect:

  • Contact details: name, billing and shipping address, phone number and email address.
  • Order and transaction information: products you view, add to your cart or wishlist, purchase, return or exchange; order history; and payment confirmation details such as payment type and the last four digits of a card. Full card numbers are collected and processed directly by our payment processors (Shopify Payments and Shop Pay) and are not stored by ILONA. If you choose to save your details with Shop Pay, Shopify stores them under its own terms and privacy policy.
  • Account information: username, password, preferences and settings.
  • Communications: what you tell us when you email, call, chat with or write to us, including phone orders and customer service requests.
  • Reviews and content you submit: product reviews, ratings, photos, videos and comments.
  • Device and usage information: IP address, browser and device type, pages viewed, links clicked, referring site and similar information, collected through cookies and similar technologies (see “Cookies, pixels and similar technologies”).
  • Loyalty program and wishlist information: points, tier status, rewards earned and redeemed, referrals and saved wishlists.
  • Marketing preferences: whether you have signed up for, opened or clicked our emails or text messages.
  • Partner and influencer information: for creators and partners who receive product from us, contact and shipping details and social media handles.

Where we get it

  • From you, when you shop, create an account, place a phone order, sign up for emails or texts, join our rewards program, write a review or contact us.
  • Automatically, from your browser or device when you use the Services.
  • From service providers who operate the Services for us, such as Shopify, our payment processors and our email and text message providers.
  • From partners, such as influencer marketing platforms and social media platforms when you interact with our accounts or ads.

Consumer health data

ILONA sells cosmetic skincare products. We do not ask for, collect or share information about your physical or mental health, medical conditions or diagnoses, and we do not use your browsing or purchases to infer them. The “shop by concern” categories on our website (for example, fine lines, dryness or uneven tone) describe cosmetic goals to help you browse; they are not health information, and we do not use visits to those pages to build advertising audiences. Please do not send us health or medical information through reviews, email or customer service.

How we use personal information

  • To provide the Services: process payments, fulfill and ship orders (including phone orders), handle returns and exchanges, manage your account and rewards, post your reviews and send order and account notices.
  • To personalize and improve: remember your preferences, recommend products related to your purchases, and understand how the Services are used so we can improve them.
  • For marketing: send emails, text messages and mail you have signed up for, and show ads for our products on other websites and platforms, as described below. You can opt out at any time.
  • For security and fraud prevention: verify accounts and payments, and detect and stop fraud, bots and other abuse.
  • To communicate with you: answer questions and provide customer service.
  • For legal reasons: comply with law and valid legal process, enforce our terms, and protect the rights and safety of ILONA, our customers and others.

You are responsible for keeping your account password confidential.

Cookies, pixels and similar technologies

We and our partners use cookies, pixels, tags, software development kits and similar technologies on the Services. These tools collect information about your device and how you interact with the Services. Some are placed by third parties, who receive that information directly from your browser. By using the Services, you consent to this collection as described here and in our cookie settings.

Type

What it does

Tools on ilona.com

Essential

Runs the store: cart, checkout, login, payments, security and bot protection

Shopify, Shop Pay

Analytics

Measures traffic and how pages are used

Google tag, Shopify analytics

Session recording

Records mouse movements, clicks, scrolling and other interactions with our pages so we can see how the site is used and fix problems

Microsoft Clarity, Hotjar

Advertising

Measures ads and shows you ILONA ads on other sites, based on your activity on our site

Meta (Facebook and Instagram), Google Ads, Pinterest

Affiliate

Credits our affiliate partners when a visit they referred leads to a purchase

Awin

Email and text marketing

Recognizes subscribers, runs signup forms and triggers messages such as cart reminders

Klaviyo

Loyalty, reviews and wishlists

Runs our rewards program, product reviews and wishlists

Growave

Accessibility

Provides the on-site accessibility toolbar

accessiBe

Your choices. You can manage optional cookies through the cookie settings link at the bottom of every page. You can also block or delete cookies in your browser, though parts of the store may not work. Where required by law, we treat a Global Privacy Control signal from your browser as a request to opt out of advertising cookies for that browser. To learn about opting out of interest-based ads more broadly, visit optout.aboutads.info and youradchoices.com. Our partners use information they collect under their own privacy policies.

We do not use information about visits to our “shop by concern” pages to build advertising audiences.

Email and text message marketing

Email. If you sign up, we send promotional emails. You can unsubscribe at any time using the link in any email. We will still send order and account emails.

Text messages. If you opt in, we send recurring automated marketing texts to the number you provide. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help.

We do not sell, rent or share your mobile phone number or text message opt-in consent with third parties or affiliates for their own marketing purposes. We share this information only with the service providers that send texts for us, such as Klaviyo, and wireless carriers.

Signup discount and loyalty program (notice of financial incentive). We may offer a discount, such as 15% off your first order, when you sign up for our emails or texts. We may also offer a loyalty program in which you earn points, tiers and rewards for purchases and other activities. In exchange, we collect your contact details, purchase history and program activity, and use them as described in this policy, including for marketing. We value this information based on the expected benefit of marketing to and retaining customers, which reasonably relates to the value of the discount or rewards offered. Participation is voluntary; you can join through the signup form or program page and withdraw at any time by unsubscribing or contacting us. Rewards are subject to the program terms.

How we disclose personal information

We do not sell personal information for money. We disclose it only as follows:

  • Service providers that operate the Services for us, such as Shopify, payment processors, shipping and fulfillment companies, email and text message providers, customer service tools, cloud hosting and analytics. They may use it only to provide services to us.
  • Advertising and affiliate partners, such as social media and search platforms and our affiliate network, that receive device and activity information through the technologies described above to measure and show ILONA ads and to credit referrals. Under some state laws this may be considered a “sale” or “sharing” for targeted advertising. You can opt out as described in “Your rights and choices.”
  • At your direction, for example when you ask us to ship a gift or use a social media login.
  • Affiliates within our corporate group, if any.
  • For legal reasons and business transfers: to comply with law or legal process, to protect our rights and the safety of others, or in connection with a merger, sale of assets, financing or bankruptcy.

Our relationship with Shopify

Shopify hosts our store and processes personal information to provide and improve it. We also use some Shopify features that combine information about your interactions with our store, other merchants and Shopify. For that processing, Shopify is responsible and handles requests about it. Learn more in the Shopify Consumer Privacy Policy and exercise rights with Shopify through the Shopify Privacy Portal.

Third-party websites

The Services may link to sites and platforms we do not control, such as social media. Their privacy practices are their own, and we encourage you to review their policies. Information you post publicly on those platforms may be visible to others.

Your rights and choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you, and receive a portable copy
  • Correct inaccurate personal information
  • Delete personal information we hold about you
  • Opt out of targeted advertising and of any “sale” or “sharing” of personal information, including through the cookie settings link or a Global Privacy Control signal
  • Unsubscribe from marketing emails and texts at any time

If you live in the UK or European Economic Area, you may also object to or restrict certain processing and withdraw consent where we rely on it.

To make a request, contact us using the details below. We may need to verify your identity before acting on it. You may use an authorized agent, who must show proof of your permission. These rights are subject to exceptions under applicable law. We will not discriminate against you for exercising them. If we deny your request, you may appeal by replying to our decision with “Appeal” in the subject line. If you are not satisfied with the outcome of an appeal, you may contact your state attorney general or local data protection authority.

Children

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from anyone under 16, and we do not knowingly sell or share personal information of anyone under 18 for targeted advertising. If you believe a child has given us personal information, contact us and we will delete it.

Security

We use reasonable administrative, technical and physical safeguards to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee security. Please do not send sensitive information to us by unsecured email.

Retention

We keep personal information only as long as needed for the purposes in this policy. For example, we keep order records as long as required for tax, accounting and legal purposes (seven years); account information while your account is open; and marketing data until you unsubscribe or it is no longer used. When information is no longer needed, we delete or de-identify it.

International transfers

We are based in the United States, and our service providers may process information in other countries. When we transfer personal information out of the EEA or UK, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or the UK equivalent, unless the destination provides an adequate level of protection.

Changes to this policy

We may update this policy from time to time. We will post the revised version here, update the “Last updated” date, and give additional notice where required by law.

Contact us

For questions about this policy or to exercise your rights, contact:

ILONA, INC.
Attn: Privacy
3201 East 2nd Avenue, Suite 300
Denver, Colorado 80206, U.S.A.
Email: legal@ilona.com
Phone: (888) 38-ILONA

For the purposes of applicable data protection laws, ILONA, INC. is the controller of your personal information.