Privacy Policy

Last Updated: November 25, 2025

Ivystone Group, LLC and its affiliated entities (“Ivystone,” “we,” “us,” or “our”) value your trust and are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit Ivystone.com or any website we manage (collectively, the “Site”).

By using the Site, you agree to the terms of this Privacy Policy. If you do not agree, you should discontinue use of the Site.

1. Information We Collect

We collect information to operate our business, fulfill orders, improve our services, and maintain Site security.

A. Information You Provide

We collect personal information that you submit directly through the Site, including:

  • Account registration details
  • Order and payment-related information
  • Name, phone number, email address, billing and shipping address
  • Federal tax ID numbers or resale certificates (for account approval)
  • Customer service communications
  • Business profile information you choose to share

This information allows us to process orders, manage accounts, respond to requests, and personalize your experience.

B. Information Collected Automatically

When you visit the Site, we automatically collect:

  • IP address
  • Browser type, device type, and operating system
  • Pages viewed and links clicked
  • Session information (load times, errors, performance data)
  • Navigation paths and referring URLs
  • General usage metrics

This information helps us maintain security, understand user behavior, and improve Site performance.

C. Information Received from Third Parties

We may receive information from:

  • Ivystone-affiliated entities
  • Payment processors
  • Analytics and tracking partners
  • Email marketing systems
  • Shipping and fulfillment partners

This information helps keep your account accurate and supports order fulfillment.

2. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Recognize your browser and maintain login sessions
  • Remember preferences
  • Support Site functionality
  • Prevent fraud
  • Analyze Site performance and usage
  • Improve marketing relevance
  • Measure advertising effectiveness

Types of cookies include session cookies, persistent cookies, and third-party cookies.

Most browsers allow you to block or delete cookies; however, certain Site features may not function correctly without them.

3. Analytics, Session Tracking and Marketing Technologies

To support transparency and compliance, we disclose all tracking and analytics tools used on Ivystone.com.

A. Google Analytics 4 (GA4)

We use Google Analytics 4 (“GA4”), which collects information about how visitors use the Site. GA4 may collect:

  • Device and browser information
  • Page interactions
  • Navigation patterns
  • Scroll depth and engagement metrics
  • Site search interactions
  • Outbound link clicks
  • Session duration and engagement data

Google Signals. Because Google Signals is enabled, Google may associate your activity across devices if you are signed into a Google account and have consented to ad personalization. This may include cross-device tracking, aggregated demographic reporting, and interest reporting. We do not receive personally identifiable information from Google.

Advertising and Data Sharing. We may use GA4 for aggregated audience measurement or Google Ads integration, but we do not sell or share personal information as those terms are defined under the California Privacy Rights Act.

B. Hotjar

We use Hotjar to analyze usage patterns and improve the Site. Hotjar may record:

  • Clicks
  • Scroll behavior
  • Cursor movement
  • Session engagement

Hotjar does not record sensitive data such as payment details or passwords, and these fields are masked. This disclosure supports compliance with communications and privacy laws.

C. Meta (Facebook) Pixel

We use the Meta (Facebook) Pixel to measure advertising performance, understand the effectiveness of our ads, and develop aggregated audience insights. We do not sell or share personal information for cross-context behavioral advertising.

D. Acoustic Email Tracking

If you open an email or click a link in an email that we send, our email marketing provider (Acoustic) may record engagement information such as open rates, link clicks, and navigation paths on the Site.

E. Hawksearch

We use Hawksearch to provide search functionality, filtering tools, navigation enhancement, and personalized product relevancy.

F. UserWay Accessibility Tool

We use UserWay to provide additional accessibility tools. No automated tool can guarantee complete WCAG compliance, but it supports our broader accessibility efforts.

4. How We Use Personal Information

We use personal information to:

  • Process and fulfill orders
  • Authenticate users and maintain accounts
  • Provide customer service
  • Improve Site performance, functionality, and security
  • Conduct analytics and reporting
  • Personalize your experience
  • Send promotional or administrative communications
  • Prevent fraud or misuse
  • Comply with legal obligations

5. How We Share Personal Information

We do not sell or share personal information as those terms are defined under the California Privacy Rights Act.

We may share information with:

A. Affiliated Entities and Business Partners

We may share personal information with affiliated entities and business partners who assist with order fulfillment or account services.

B. Third-Party Service Providers

We may share personal information with service providers, including:

  • Payment processors
  • Shipping carriers
  • Analytics providers
  • Email platforms
  • Cloud hosting providers
  • Security and fraud-prevention services

These providers receive only the information reasonably necessary to perform their services.

C. Legal or Safety Obligations

We may disclose data when necessary to:

  • Comply with laws, regulations, or legal processes
  • Respond to lawful requests from authorities
  • Investigate and prevent fraud or security issues
  • Protect the rights, property, and safety of Ivystone, customers, or others

D. Business Transfers

If Ivystone is involved in a merger, acquisition, or asset transfer, customer information may be transferred consistent with this Privacy Policy.

6. Payment Information and Security

Credit card payments are processed using a secure, tokenized iframe provided by our payment processor. Payment card information is not stored on Ivystone servers.

We use SSL encryption to protect data transmitted through the Site. No system is fully secure, and you are responsible for maintaining the confidentiality of your login credentials.

7. Updating or Accessing Your Information

You may update certain account information through your account settings. To request updates, corrections, or deletion of your data, contact us at customerservice@ivystone.com. We may require identity verification.

8. Children’s Privacy

This Site is intended for adults. We do not knowingly collect personal information from individuals under age 18.

9. Accessibility Commitment

Ivystone strives to comply with WCAG 2.1 AA accessibility guidelines and is committed to improving accessibility. If you encounter issues, contact us at customerservice@ivystone.com.

10. Third-Party Links

We are not responsible for the privacy practices of external websites linked from our Site.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates take effect when posted.

12. Contact Information

Ivystone Group, LLC
301 Commerce Drive
Exton, PA 19341
Email: customerservice@ivystone.com

California Privacy Rights Addendum (CPRA/CCPA)

This section applies to California residents.

A. Categories of Personal Information Collected

We may collect the following categories of personal information:

  • Identifiers (name, email, postal address, phone number, IP address)
  • Commercial information (purchase records, product interactions)
  • Internet activity data
  • Business identifiers (federal tax ID numbers, resale certificates)
  • Device data and general geolocation
  • Inferences about preferences or characteristics

We do not use sensitive personal information for purposes beyond those allowed by CPRA.

B. Purposes for Collection

We collect and use personal information for:

  • Order processing and fulfillment
  • Account management
  • Customer support
  • Marketing and communications
  • Site operation and analytics
  • Security and fraud prevention
  • Compliance with legal obligations

C. Your Privacy Rights

California residents have the right to:

  • Know what personal information we collect
  • Request access to specific pieces of personal information
  • Request deletion of personal information
  • Request correction of inaccurate data
  • Know what information is disclosed and to whom
  • Not be penalized for exercising these rights

To exercise your rights, contact: customerservice@ivystone.com or call 1-800-327-9036.

We may require identity verification.

D. No Sale or Sharing of Personal Information

We do not sell or share personal information as defined under the California Privacy Rights Act.

We also do not knowingly sell or share the data of consumers under age 16.

E. Authorized Agents

If you use an authorized agent to submit a request, we may require signed permission and direct identity verification.

F. Data Retention

We retain personal information as long as reasonably necessary for:

  • Business operations
  • Legal and regulatory obligations
  • Fraud prevention and security
  • Accounting and recordkeeping requirements