top of page

Privacy Policy

Last updated: 2 August 2026

1. Introduction

ILANA (“ILANA”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information that we collect and process.

​

ILANA operates an online technology products store from South Australia, Australia. Our website is hosted on the Wix platform, and our products may be supplied and shipped directly to customers by third-party suppliers and fulfilment providers.

This Privacy Policy explains:

​

  • what personal information we collect;

  • how and why we use that information;

  • when we disclose information to third parties;

  • how cookies and similar technologies are used;

  • how long we retain personal information;

  • how international transfers are handled; and

  • the privacy rights available to you.

​

This Privacy Policy is intended to comply with applicable Australian privacy laws, including the Australian Privacy Principles where applicable, and the European Union General Data Protection Regulation (“GDPR”) where the GDPR applies to our activities.

​

2. Who Is Responsible for Your Personal Information?

For the purposes of applicable data protection laws, the data controller responsible for your personal information is:

 

Business name: ILANA
Email: shoptheilana@gmail.com

​

We do not publish our private operating or residential address online. Written privacy correspondence may be sent to the email address above. An appropriate postal address may be provided where reasonably required by law.

​

ILANA has not appointed a Data Protection Officer because our current activities do not require one. Privacy enquiries may be directed to the email address above.

​

3. Personal Information We Collect

Depending on how you interact with our website, we may collect the following categories of personal information.

​

3.1 Identity and contact information

This may include your:

  • name;

  • email address;

  • telephone number;

  • billing address;

  • delivery address; and

  • account or customer profile information.

​

3.2 Order and transaction information

This may include:

  • products ordered;

  • order value;

  • currency;

  • order number;

  • transaction date;

  • payment status;

  • delivery and tracking information;

  • discount codes;

  • refunds, returns or disputes; and

  • communications relating to your order.

​

3.3 Payment information

Payments may be processed through PayPal or through the credit or debit card payment provider displayed at checkout.

​

We generally do not directly receive or store your complete credit or debit card number. Payment providers may provide us with limited information such as:

  • the payment method used;

  • a transaction identifier;

  • payment confirmation;

  • the last digits of a payment card;

  • the card type; and

  • fraud or payment-risk information.

​

Payment providers process payment information under their own terms and privacy policies.

​

3.4 Communications

We may collect information you provide when you:

  • contact us by email;

  • submit a website contact form;

  • request customer support;

  • make a complaint;

  • ask about a product;

  • respond to a survey; or

  • communicate with us about an order, delivery, return or refund.

​

3.5 Technical and usage information

When you access our website, Wix and other authorised service providers may automatically collect information such as:

  • your Internet Protocol address;

  • device type;

  • browser type and version;

  • operating system;

  • approximate location based on your IP address;

  • referring website;

  • pages viewed;

  • time and date of visits;

  • actions taken on the website;

  • cookie identifiers; and

  • website diagnostic, security and error information.

​

3.6 Marketing information

Where applicable, we may collect:

  • your email marketing preferences;

  • records of consent;

  • newsletter interactions;

  • advertisements viewed or selected; and

  • information about how you respond to promotional communications.

​

We will not intentionally collect sensitive personal information unless it is reasonably necessary, permitted by law and, where required, collected with your consent.

​

4. How We Collect Personal Information

We may collect personal information:

  • directly from you when you place an order, contact us or create an account;

  • automatically through cookies, server logs and similar technologies;

  • from Wix and applications connected to our Wix website;

  • from PayPal and other payment processors;

  • from fraud-prevention, security and identity-verification providers;

  • from delivery and tracking providers;

  • from our product suppliers and fulfilment partners; and

  • from advertising or analytics providers, where those services have been enabled.

​

Please ensure that any personal information you provide is accurate and current.

​

When you provide another person’s information, such as their name and address for a gift delivery, you confirm that you are authorised to provide that information to us.

​

5. How We Use Personal Information

We may use personal information to:

  • process and confirm orders;

  • collect and verify payments;

  • provide order information to suppliers;

  • arrange fulfilment and delivery;

  • provide tracking updates;

  • communicate about an order;

  • respond to questions and customer support requests;

  • process refunds, returns, disputes or chargebacks;

  • detect and prevent fraud, abuse and security incidents;

  • maintain and improve our website;

  • analyse website performance and customer activity;

  • remember website and checkout preferences;

  • comply with taxation, accounting, consumer protection and legal obligations;

  • establish, exercise or defend legal claims;

  • maintain business and transaction records;

  • send marketing communications where permitted;

  • measure advertising performance; and

  • protect our customers, business, website and service providers.

​

We will not use personal information for a materially different purpose unless that use is permitted by law or we obtain any consent required by law.

​

6. GDPR Lawful Bases for Processing

Where the GDPR applies, we process personal data under one or more of the following lawful bases.

​

Performance of a contract

We process information when it is necessary to:

  • process your purchase;

  • receive payment;

  • arrange fulfilment and shipping;

  • communicate about your order;

  • provide customer service; or

  • process a return, refund or complaint.

​

Legitimate interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights. These interests may include:

  • operating and improving our store;

  • protecting our website and customers;

  • preventing fraud;

  • managing supplier relationships;

  • keeping appropriate business records;

  • understanding store performance; and

  • responding to customer communications.

​

Legal obligations

We may process or retain information where necessary to comply with legal, regulatory, taxation, accounting, consumer protection or law-enforcement obligations.

​

Consent

We rely on consent where required, including for:

  • certain marketing communications;

  • non-essential cookies;

  • certain analytics or advertising technologies; and

  • any other processing for which applicable law requires consent.

​

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect processing that occurred lawfully before consent was withdrawn.

​

7. Dropshipping Suppliers and Fulfilment Providers

ILANA uses a dropshipping business model. This means products may be stored, packaged and shipped directly by third-party suppliers or fulfilment partners.

​

To fulfil your order, we may provide a supplier or logistics provider with information such as:

  • your name;

  • delivery address;

  • telephone number;

  • email address where required for delivery notifications;

  • products ordered;

  • product variations;

  • order number; and

  • delivery instructions.

​

Suppliers are provided only with information reasonably necessary to manufacture, prepare, fulfil or deliver the order. Suppliers do not ordinarily receive your complete payment card information.

​

Some suppliers and fulfilment providers may be located outside Australia, including in countries where privacy laws may differ from those in your jurisdiction.

​

8. Other Third-Party Service Providers

We may disclose personal information to trusted third parties that help us operate the store, including:

​

Wix

Our website is hosted through Wix. Wix may store and process website visitor, account, order and technical information on our behalf and for its own legitimate service, fraud-prevention and legal purposes.

​

Payment processors

Payments may be processed by:

  • PayPal;

  • the credit or debit card processor displayed during checkout;

  • Wix or its payment processing partners; and

  • associated banks, card schemes and fraud-prevention providers.

​

Payment providers may act as independent data controllers for some of their processing and handle your information according to their own privacy policies.

​

Suppliers and fulfilment partners

We share order and delivery information with suppliers, warehouses, sourcing agents and fulfilment providers where necessary to process and deliver purchases.

​

Shipping and delivery providers

We may share delivery information with postal services, couriers, freight companies and tracking providers.

​

Professional advisers

Information may be disclosed to accountants, legal advisers, insurers, auditors and other professional advisers where reasonably necessary.

​

Technology and security providers

We may use providers that offer:

  • website hosting;

  • cloud storage;

  • email services;

  • customer support systems;

  • cybersecurity;

  • fraud detection;

  • data backup;

  • website maintenance; and

  • technical troubleshooting.

​

Analytics and advertising providers

Where enabled and permitted, we may use analytics, social media or advertising providers to understand website use and measure advertising performance.

​

We require service providers to use personal information only for authorised purposes and to apply appropriate safeguards, subject to their independent legal obligations.

​

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small data files placed on your device when you visit a website.

Cookies may include:

​

Strictly necessary cookies

These cookies are required for the website to function and may support:

  • shopping cart functions;

  • checkout;

  • payment processing;

  • security;

  • fraud prevention;

  • account login; and

  • remembering privacy choices.

​

These cookies cannot always be disabled through our cookie controls because the website may not operate correctly without them.

​

Functional cookies

These cookies remember choices such as language, region, account settings or other website preferences.

​

Analytics cookies

Where enabled, analytics cookies help us understand:

  • how visitors use the website;

  • which pages are viewed;

  • where visitors encounter errors;

  • how customers move through the checkout process; and

  • how website performance can be improved.

​

Advertising cookies

Where enabled, advertising cookies may be used to:

  • measure advertising performance;

  • limit repeated advertisements;

  • understand whether advertisements result in website visits or purchases; and

  • provide advertising that may be more relevant to visitors.

​

Where required by law, non-essential cookies will not be activated until you provide consent through our cookie banner or privacy settings.

​

You may withdraw or change your cookie choices through the cookie settings available on our website. You may also control cookies through your browser settings. Disabling cookies may affect the availability or operation of some website features.

​

10. Marketing Communications

We may send marketing communications where:

  • you have consented to receive them;

  • the communication is otherwise permitted by applicable law; or

  • you are an existing customer and the communication relates to similar products, where permitted.

​

You may unsubscribe at any time by:

​

Unsubscribing from marketing will not prevent us from sending necessary service communications relating to orders, payments, deliveries, security or customer support.

​

11. International Data Transfers

ILANA is based in Australia and uses service providers, payment processors, suppliers and fulfilment providers that may operate in other countries.

​

Your personal information may therefore be accessed, stored or processed in countries outside your country of residence, including Australia and countries in which Wix, PayPal, payment processors, cloud providers, suppliers or shipping providers operate.

​

These countries may have privacy laws that differ from those in your jurisdiction.

​

Where the GDPR applies and personal data is transferred outside the European Economic Area, we will take reasonable steps to ensure that the transfer is supported by an appropriate legal mechanism. Depending on the circumstances, this may include:

  • a European Commission adequacy decision;

  • approved Standard Contractual Clauses;

  • contractual data-protection requirements;

  • another legally recognised transfer mechanism; or

  • an applicable legal exception.

​

You may contact us for further information about the safeguards relevant to your personal information.

​

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to comply with legal, accounting, taxation and consumer protection requirements.

​

Retention periods depend on the type of information and why it was collected. Generally:

​

  • order, payment and taxation records may be retained for at least five years or for any longer period required by law;

  • customer support and complaint records may be retained while the matter is active and for a reasonable period afterwards;

  • account information may be retained while the account remains active;

  • fraud and security records may be retained for as long as reasonably necessary to protect our store and customers;

  • marketing information may be retained until you unsubscribe or withdraw consent; and

  • cookie information is retained according to the duration of the relevant cookie or service.

​

When information is no longer reasonably required, we will take reasonable steps to delete, anonymise or securely destroy it, unless continued retention is required or permitted by law.

​

13. Security

We take reasonable administrative, technical and organisational measures to protect personal information against:

  • unauthorised access;

  • loss;

  • misuse;

  • alteration;

  • interference;

  • disclosure; and

  • destruction.

​

These measures may include restricted access, password protection, secure payment processing, trusted hosting providers, security monitoring and appropriate access controls.

​

However, no website, electronic transmission or storage system can be guaranteed to be completely secure. Customers should use strong passwords, protect account information and contact us promptly if they suspect unauthorised use of their information.

Where required by law, we will assess suspected data breaches and notify affected individuals and relevant authorities when legally required.

​

14. Your Privacy Rights

The rights available to you depend on your location and the privacy laws that apply.

​

You may contact us to:

  • request access to personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • ask questions about how your information is handled;

  • make a privacy complaint; or

  • withdraw a consent you previously provided.

​

We may need to verify your identity before fulfilling a request. We may also retain certain information where required by law or where an exception applies.

​

Additional GDPR rights

Where the GDPR applies, you may also have the right to:

​

  • request erasure of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object to direct marketing;

  • receive certain personal data in a structured, commonly used and machine-readable format;

  • request that eligible data be transferred to another controller;

  • withdraw consent at any time;

  • receive information about applicable international transfer safeguards; and

  • lodge a complaint with a competent data protection supervisory authority.

​

These rights are not absolute and may be subject to legal conditions and exceptions.

​

We aim to respond to valid GDPR requests within one month. Where a request is complex or numerous requests are received, the response period may be extended where permitted by law. We will inform you if an extension is required.

​

15. Automated Decision-Making

We do not ordinarily make decisions that produce legal or similarly significant effects based solely on automated processing.

​

Payment processors and fraud-prevention services may use automated systems to assess transactions, detect fraud or decide whether a payment can be processed. These providers may act independently and their decisions are governed by their own privacy notices and procedures.

​

16. Children’s Privacy

Our website and products are intended for a general adult audience. We do not knowingly collect personal information directly from children under 16 without appropriate authorisation.

​

If you believe a child has provided personal information without appropriate consent, please contact us so that we can review and, where appropriate, delete the information.

​

17. External Websites

Our website may contain links to third-party websites or services.

​

We are not responsible for the privacy, security or content practices of third-party websites. Customers should review the privacy policy of any third party before providing personal information.

​

18. Privacy Complaints

To make a privacy complaint, please contact:

​

Email: shoptheilana@gmail.com

​

Please include:

  • your name and contact information;

  • a description of your concern;

  • relevant dates or order information; and

  • the outcome you are seeking.

​

We will acknowledge and investigate privacy complaints within a reasonable period. We aim to provide a response within 30 days, although complex matters may require additional time.

​

If you are not satisfied with our response and Australian privacy law applies, you may be entitled to contact the Office of the Australian Information Commissioner.

​

If the GDPR applies, you also have the right to lodge a complaint with the data protection supervisory authority in the European Union or European Economic Area country where you live, work or believe the infringement occurred.

​

You are encouraged to contact us first so that we have an opportunity to address your concerns.

​

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

​

  • changes to our business practices;

  • changes to our service providers;

  • new website features;

  • changes to legal obligations; or

  • improvements to our privacy procedures.

​

The updated policy will be published on our website with a revised “Last updated” date. Where required by law, we will provide additional notice or obtain consent for material changes.

​

20. Contact Us

For privacy enquiries, requests or complaints, contact:

ILANA
South Australia, Australia
Email: shoptheilana@gmail.com

bottom of page