PRIVACY POLICY

Effective Date: January 1st, 2026

Vilona Onyx (“Vilona Onyx,” “we,” “us,” or “our”) operates **vilonaonyx pages, services, communications, and online storefronts that link to this Privacy Policy, collectively referred to as the “Services.”

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you:

• Visit or interact with our website;
• Create a customer account;
• Purchase or return a product;
• Request a custom order or consultation;
• Arrange shipping, freight, installation, or delivery;
• Subscribe to marketing communications;
• Contact us for customer service; or
• Otherwise interact with Vilona Onyx.

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. WHO CONTROLS YOUR PERSONAL INFORMATION?

Vilona Onyx is generally the business responsible for deciding how and why personal information collected through our Services is used.

Our online store is hosted by Shopify. Shopify and other service providers may also process personal information under their own privacy policies and terms.

2. PERSONAL INFORMATION WE COLLECT

“Personal information” means information that identifies, relates to, describes, or can reasonably be linked to an individual or household. It does not generally include information that has been lawfully made public or information that has been deidentified or aggregated so that it can no longer reasonably identify an individual.

The personal information we collect depends on how you interact with Vilona Onyx.

Contact and Identification Information

We may collect:

• Your name;
• Email address;
• Telephone number;
• Billing address;
• Shipping or delivery address;
• Customer-account information; and
• Other contact details you provide.

Order and Transaction Information

We may collect:

• Products viewed, purchased, returned, or exchanged;
• Order numbers;
• Purchase dates;
• Product preferences;
• Custom-order selections;
• Measurements and specifications;
• Billing and shipping information;
• Discounts and promotional information;
• Delivery instructions;
• Order communications; and
• Refund, return, warranty, or dispute information.

Payment Information

Payments are generally processed by Shopify Payments or another authorized payment provider.

Depending on the payment method, the payment provider may collect:

• Credit or debit card information;
• Bank or wire-transfer information;
• Billing address;
• Payment authorization information;
• Transaction identifiers; and
• Fraud-prevention information.

Vilona Onyx generally does not receive or store your complete credit-card number when payment is processed through a third-party payment provider. We may receive limited payment details, such as the payment type, last digits of a card, transaction status, and billing information.

Device, Network, and Website Activity

When you visit the website, we and our service providers may automatically collect:

• Internet Protocol address;
• Browser type and version;
• Device type;
• Operating system;
• General location derived from your IP address;
• Time zone;
• Cookie and device identifiers;
• Pages and products viewed;
• Search terms;
• Referring and exit pages;
• Website interactions;
• Cart and checkout activity;
• Date and time of access;
• Advertising interactions; and
• Website performance and diagnostic information.

Customer-Service and Communication Information

When you communicate with us, we may collect:

• Emails;
• Text messages;
• Telephone-call information;
• Social-media messages;
• Product inquiries;
• Custom-project details;
• Design preferences;
• Photographs or videos you provide;
• Delivery questions;
• Complaints;
• Reviews; and
• Other information included in your communication.

Please do not send sensitive personal information that is unnecessary for us to answer your request or complete your order.

Custom Design and Delivery Information

For custom products, specialty delivery, white-glove service, or installation coordination, we may collect:

• Product dimensions and placement details;
• Room, wall, ceiling, or installation measurements;
• Interior photographs;
• Building-access information;
• Delivery-site information;
• Contractor, designer, electrician, or installer contact information;
• Elevator, staircase, doorway, or loading information; and
• Other information needed to create, deliver, or install the product.

Marketing and Preference Information

We may collect:

• Email or text-message subscription status;
• Marketing preferences;
• Product interests;
• Responses to promotions;
• Advertisement interactions;
• Communication preferences; and
• Records of consent or withdrawal of consent.

Reviews and User-Submitted Content

If you submit a review, testimonial, photograph, video, comment, social-media tag, or other content, we may collect and use that content along with your name, username, or other information you choose to make available.

Fraud, Security, and Compliance Information

We and our service providers may collect information used to:

• Verify transactions;
• Authenticate accounts;
• Detect suspicious activity;
• Prevent fraud;
• Protect customers and the business;
• Enforce our policies; and
• Comply with legal obligations.

This may include device identifiers, payment-risk information, transaction patterns, account activity, and communications related to a claim or dispute.

Information from Other Sources

We may receive personal information from:

• Shopify;
• Payment processors;
• Shipping and freight carriers;
• Marketing and advertising providers;
• Analytics providers;
• Social-media platforms;
• Fraud-prevention providers;
• Designers, contractors, or representatives acting for a customer;
• Publicly available sources; and
• Other service providers involved in a transaction.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

Provide Products and Services

This includes using information to:

• Process and fulfill orders;
• Accept and verify payments;
• Create customer accounts;
• Prepare invoices and order confirmations;
• Coordinate parcel, freight, white-glove, or hand delivery;
• Manage returns, refunds, exchanges, and warranty claims;
• Complete custom orders;
• Communicate about production and delivery;
• Provide customer support; and
• Maintain records relating to an order.

Operate and Improve Our Website

We may use information to:

• Display the website correctly;
• Remember cart contents and preferences;
• Understand how visitors use the website;
• Diagnose technical problems;
• Improve website navigation and performance;
• Measure product interest;
• Develop new products and services; and
• Personalize the customer experience.

Communicate with You

We may use your contact information to send:

• Order confirmations;
• Invoices;
• Payment notifications;
• Production updates;
• Shipping and delivery notifications;
• Return or refund communications;
• Customer-service responses;
• Policy or account notices; and
• Other transactional communications.

Transactional communications are not marketing messages and may be sent when necessary to complete or administer your order.

Marketing and Advertising

Where permitted, we may use personal information to:

• Send email or text-message marketing;
• Show advertisements that may be relevant to you;
• Measure advertising performance;
• Understand whether an advertisement resulted in a website visit or purchase;
• Create or use advertising audiences; and
• Recommend products based on your interactions with the website.

You may unsubscribe from marketing emails by using the unsubscribe link included in the message. You may withdraw consent to text-message marketing by following the instructions provided in the message.

Unsubscribing from marketing does not prevent us from sending necessary transactional communications.

Security and Fraud Prevention

We may use personal information to:

• Detect and prevent fraudulent transactions;
• Verify customer or payment information;
• Protect accounts and payment systems;
• Prevent misuse of the website;
• Investigate suspicious activity;
• Enforce our Terms of Service; and
• Protect the safety, property, and legal rights of Vilona Onyx, our customers, and others.

Legal and Business Purposes

We may use information to:

• Comply with tax, accounting, recordkeeping, and legal requirements;
• Respond to valid legal requests;
• Establish, exercise, or defend legal claims;
• Manage insurance and carrier claims;
• Resolve chargebacks and payment disputes;
• Enforce contracts and policies;
• Conduct audits;
• Complete a business transaction; and
• Protect our legitimate business interests.

4. SOURCES OF PERSONAL INFORMATION

We collect personal information:

• Directly from you;
• Automatically through the website and connected technologies;
• From Shopify and other service providers;
• From payment processors;
• From shipping, delivery, and freight providers;
• From advertising or analytics providers;
• From social-media platforms;
• From a designer, contractor, family member, representative, or other person acting on your behalf; and
• From publicly available sources when reasonably necessary.

5. COOKIES AND SIMILAR TECHNOLOGIES

We, Shopify, and our service providers use cookies, pixels, tags, software-development kits, local storage, and similar technologies.

These technologies may be used for:

Essential Functions

Essential technologies allow the website to operate and may support:

• Shopping carts;
• Checkout;
• Payment processing;
• Customer accounts;
• Security;
• Fraud prevention;
• Privacy preferences;
• Localization; and
• Website navigation.

Blocking essential technologies may prevent parts of the website from functioning.

Analytics and Performance

Analytics technologies help us understand:

• Website traffic;
• Visitor interactions;
• Product interest;
• Website performance;
• Referral sources; and
• General shopping behavior.

Advertising and Personalization

Advertising technologies may help us:

• Measure advertising performance;
• Display relevant advertisements;
• Understand interactions across websites or services;
• Limit repetitive advertising; and
• Build or use advertising audiences.

The specific cookies and technologies used may change as Shopify, our theme, and installed applications are updated.

You can manage applicable cookie choices through the cookie banner or privacy controls displayed on our website. You may also adjust your browser settings to reject or delete cookies, although doing so may affect website functionality.

6. SHOPIFY

Our store is hosted by Shopify, which provides the e-commerce platform used to operate our website, checkout, customer accounts, payments, analytics, and related services.

Shopify processes personal information to provide its services to us and may process information for its own permitted purposes under its applicable terms and privacy notices.

Depending on our enabled Shopify settings, Shopify may provide enhanced services or network-based features that use customer activity involving Shopify and other merchants. Where required, customers may opt out through the Your Privacy Choices page available through our website.

7. ANALYTICS AND ADVERTISING PROVIDERS

We may use analytics, advertising, social-media, and marketing services to understand website activity and promote Vilona Onyx products.

Depending on the services currently enabled, these providers may include Shopify, Google, Meta, Microsoft, and similar technology providers.

These providers may collect or receive:

• Device and browser information;
• IP address;
• Cookie identifiers;
• Website activity;
• Product views;
• Cart and checkout activity;
• Purchase information;
• Advertisement interactions; and
• Hashed or otherwise protected contact information.

These providers may use information according to their own privacy policies.

8. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients:

Shopify and E-Commerce Providers

We disclose information to Shopify and related providers to operate our store, checkout, customer accounts, payments, analytics, and other e-commerce functions.

Payment Processors and Financial Institutions

We disclose information to payment processors, banks, card networks, and fraud-prevention providers to process and verify payments.

Shipping and Delivery Providers

We may disclose names, addresses, telephone numbers, email addresses, order details, and delivery instructions to:

• Parcel carriers;
• Freight carriers;
• White-glove services;
• Specialty art or furniture carriers;
• Crating providers;
• Local delivery providers; and
• Other businesses involved in transporting or delivering an order.

Contractors and Professional Service Providers

For custom, delivery, or installation-related projects, we may disclose information to contractors, designers, installers, electricians, engineers, insurers, accountants, legal advisers, and other professional service providers when reasonably necessary.

Technology and Business Providers

We may disclose information to providers that assist with:

• Website hosting;
• Customer support;
• Email and text communications;
• Data storage;
• Analytics;
• Marketing;
• Advertising;
• Fraud detection;
• Cybersecurity;
• Accounting; and
• Business administration.

Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with applicable law;
• Respond to a subpoena, court order, warrant, or lawful government request;
• Protect the legal rights or property of Vilona Onyx;
• Prevent or investigate fraud or unlawful activity;
• Protect the safety of a person; or
• Establish, exercise, or defend a legal claim.

Business Transfers

Personal information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, change in ownership, bankruptcy, or similar business transaction.

9. SALE, SHARING, AND TARGETED ADVERTISING

Vilona Onyx does not sell personal information to third parties in exchange for money.

However, certain uses of advertising, analytics, pixels, cookies, Shopify enhanced services, or similar technologies may be legally defined in some jurisdictions as:

• A “sale” of personal information;
• “Sharing” personal information;
• Processing for targeted advertising; or
• Cross-context behavioral advertising.

Where applicable law provides the right to opt out, you may use the Your Privacy Choices link available in our website footer or contact us using the information at the end of this policy.

Your opt-out choice may apply only to the browser and device used to submit it unless you are signed into a customer account or applicable law requires otherwise.

We do not knowingly sell or share the personal information of individuals under 18 for targeted advertising.

10. GLOBAL PRIVACY CONTROL AND DO NOT TRACK

Where required by law and supported by our website settings, we recognize the Global Privacy Control signal and other legally recognized universal opt-out mechanisms as requests to opt out of sale, sharing, or targeted advertising.

Traditional browser “Do Not Track” signals are not interpreted consistently across the industry. We may not respond to a traditional Do Not Track signal unless required by law.

11. SENSITIVE PERSONAL INFORMATION

Vilona Onyx does not intentionally collect sensitive personal information unless it is reasonably necessary to complete a transaction, prevent fraud, comply with law, or provide a service requested by the customer.

We do not use sensitive personal information to infer characteristics about customers.

Please do not provide government identification numbers, health information, biometric information, account passwords, or other highly sensitive information unless specifically requested and reasonably necessary.

12. AUTOMATED PROCESSING

Vilona Onyx does not ordinarily use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects concerning a customer.

Shopify, payment processors, and fraud-prevention providers may use automated systems to identify potentially fraudulent or unauthorized transactions.

An order may be held, declined, or reviewed when a payment or transaction is identified as potentially fraudulent. Where appropriate, customers may contact us to request additional review.

13. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to:

• Complete and administer transactions;
• Provide customer support;
• Maintain warranties and order histories;
• Process returns and claims;
• Comply with tax, accounting, and legal requirements;
• Maintain records of marketing consent or opt-out requests;
• Resolve disputes;
• Prevent fraud; and
• Enforce agreements.

Retention periods vary depending on the type of information and applicable obligations.

Order, payment, tax, shipping, and transaction records may generally be retained for up to seven years after the applicable transaction or longer when reasonably necessary for an active dispute, warranty, legal hold, or other legal obligation.

Marketing information may be retained until you unsubscribe or withdraw consent. We may retain a limited suppression record to ensure that your opt-out preference continues to be honored.

Customer-service communications may be retained for as long as reasonably necessary to manage the inquiry, transaction, claim, or relationship.

When personal information is no longer reasonably required, we may delete, deidentify, or aggregate it.

14. DATA SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

However, no website, network, storage system, payment system, or electronic transmission can be guaranteed to be completely secure. You provide information electronically at your own risk.

You are responsible for protecting your customer-account credentials and for notifying us if you believe your account or information has been compromised.

If we determine that a security incident requires notification under applicable law, we will provide notice as required.

15. YOUR PRIVACY RIGHTS

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Confirm whether we process your personal information;
• Access personal information we maintain about you;
• Request correction of inaccurate personal information;
• Request deletion of personal information;
• Obtain a portable copy of certain personal information;
• Opt out of the sale or sharing of personal information;
• Opt out of targeted advertising;
• Opt out of certain profiling that produces legal or similarly significant effects;
• Limit certain uses of sensitive personal information;
• Withdraw consent where processing is based on consent;
• Object to or restrict certain processing;
• Appeal a refusal to act on a privacy request; and
• Receive equal service and pricing without unlawful discrimination for exercising a privacy right.

These rights are not absolute. We may retain or continue processing information when permitted or required for purposes such as completing a transaction, maintaining required records, preventing fraud, exercising legal rights, or complying with law.

16. COLORADO PRIVACY RIGHTS

Where the Colorado Privacy Act applies, Colorado residents may have the right to:

• Access personal data;
• Correct inaccuracies;
• Delete certain personal data;
• Obtain certain personal data in a portable format;
• Opt out of the sale of personal data;
• Opt out of targeted advertising; and
• Opt out of certain profiling involving decisions with legal or similarly significant effects.

Colorado residents may also use a legally recognized universal opt-out mechanism, including Global Privacy Control, where applicable.

If we deny a Colorado privacy request, you may appeal by emailing vilonaonyx@gmail.com with the subject line Privacy Request Appeal. Please explain the request and why you believe the decision should be reconsidered.

We will respond to an appeal within the period required by applicable law. If an appeal is denied, we will provide information about contacting the Colorado Attorney General where required.

17. CALIFORNIA PRIVACY RIGHTS

Where California privacy law applies, California residents may have the right to:

• Know the categories and specific pieces of personal information collected;
• Know the sources and purposes of collection;
• Know the categories of third parties receiving personal information;
• Request deletion;
• Request correction;
• Opt out of sale or sharing;
• Limit certain uses of sensitive personal information;
• Use an authorized agent; and
• Receive equal service without unlawful discrimination for exercising privacy rights.

During the preceding 12 months, we may have collected the categories of information described in Section 2 and disclosed them to the categories of recipients described in Section 8.

We do not sell personal information for money. Certain advertising or analytics disclosures may constitute sale or sharing under California law. Eligible customers may opt out through the Your Privacy Choices link.

We do not currently offer financial incentives in exchange for personal information.

18. EUROPEAN ECONOMIC AREA AND UNITED KINGDOM

When European or United Kingdom privacy law applies, we may process personal information under one or more of the following legal bases:

• Performance of a contract, including processing and delivering an order;
• Compliance with a legal obligation;
• Our legitimate interests, provided those interests are not overridden by your rights;
• Your consent; and
• Establishment, exercise, or defense of legal claims.

Our legitimate interests may include operating and securing the website, preventing fraud, improving our products, providing customer service, and marketing our products where permitted.

You may have rights to access, correct, erase, restrict, object to processing, withdraw consent, and receive a portable copy of certain information.

You may also lodge a complaint with the data-protection authority in your country.

19. INTERNATIONAL DATA TRANSFERS

Vilona Onyx is located in the United States.

Shopify and our other service providers may process information in the United States, Canada, Europe, or other countries. Privacy and data-protection laws in those countries may differ from the laws where you live.

Where required, service providers may use approved contractual safeguards or other legally recognized transfer methods to protect international data transfers.

20. CHILDREN AND MINORS

Our Services are intended for adults and are not directed to children.

We do not knowingly collect personal information directly from children under 13. We also do not knowingly use personal information from individuals under 18 for sale, targeted advertising, or profiling that could produce legal or similarly significant effects.

A parent or legal guardian who believes a minor has provided personal information to us may contact us to request review or deletion.

21. SOCIAL MEDIA AND EXTERNAL LINKS

Our website may contain links to social-media platforms, videos, payment services, or third-party websites.

Third-party websites and platforms operate under their own privacy policies. Vilona Onyx is not responsible for the privacy, security, or content practices of a third party.

Information you post publicly on social media may be visible to others and may be collected or used by the applicable platform.

22. EXERCISING YOUR PRIVACY RIGHTS

To submit a privacy request, contact us at:

Email: vilonaonyx@gmail.com
Mail: Vilona Onyx, P.O. Box 480, Berthoud, Colorado 80513, United States

Please include:

• Your name;
• The email address associated with your order or account;
• The state or country where you reside;
• The privacy right you wish to exercise; and
• Sufficient information for us to identify and respond to the request.

We may need to verify your identity before completing a request. Verification may require matching information you provide with information already maintained in our records.

We will use information collected for verification only to process and protect the privacy request.

You may use an authorized agent where permitted by law. We may request proof that the agent is authorized to act for you and may require you to verify your identity directly.

We will respond within the period required by applicable law.

23. NON-DISCRIMINATION

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Exercising a privacy right will not result in unlawful denial of products, different pricing, reduced product quality, or retaliation.

Different services or experiences may still be provided when a difference is reasonably related to the information required to provide the requested service.

24. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our practices, technology, Shopify settings, installed applications, services, or legal obligations.

The updated policy will be posted on this page with a revised effective date.

When required, we may provide additional notice of a material change through the website, email, customer account, or another appropriate communication method.

25. QUESTIONS AND COMPLAINTS

For questions, privacy requests, or complaints, contact:

Vilona Onyx
P.O. Box 480
Berthoud, Colorado 80513
United States

Email: vilonaonyx@gmail.com

We will review and respond to privacy concerns in accordance with applicable law.

Residents of jurisdictions with a privacy or data-protection regulator may also have the right to file a complaint with the relevant regulator or attorney general.