California Resident Online Privacy Policy

To exercise your rights under the California Consumer Privacy Act, please use the following form, US State Privacy Law Consumer Request Form.  For assistance, or if questions, please email privacyoffice@eyemed.com or call 1-877-323-0339.

Last Updated: December 16, 2024

This California Resident Online Privacy Policy is intended solely for, and is applicable only as to, California residents.  This Policy contains disclosures required by the California Consumer Privacy Act (“CCPA”) and applies only to “personal information” that is subject to the CCPA.  The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern. For purposes of this “California Resident Online Privacy Policy” section we will refer to this information as “Personal Information.”

Much of the information that EyeMed collects is exempt from the CCPA because it is protected under other federal and/or state privacy laws.  For example, if you are a member of EyeMed, certain personal information about you is governed by HIPAA and is exempt from the CCPA.  Please see our HIPAA Notice of Privacy Practices for information about how we handle your personal information subject to HIPAA. 

If you are a California resident and a current or former employee, job applicant, or independent contractor of ours, please see our privacy notice available on our job applicant website(s) for more information on our collection and use of your Personal Information in that capacity. 

Table of Contents

• Collection, Use, and Disclosure of Personal Information
• Your Rights
• How to Submit a Rights Request
• Verifying Your Identity 
• Authorized Agent
• Retention of Personal Information
• Privacy Questions

Notice at Collection of Personal Information

We currently collect and, in the 12 months prior to the Last Updated date of this Policy, have collected the following categories of Personal Information:

• Identifiers (name, postal address, online identifier, Internet Protocol address, email address)
• Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number)
• Telephone number
• Credit card number
• Insurance policy number
• Medical information
• Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application, or advertisement)
• Geolocation data
• Commercial information (records of personal property, products or services purchased, obtained, or considered; other purchasing or consuming histories or tendencies; or other commercial information)
• Education information
• Professional or employment-related information (including employment history)
• Biometric information (imagery of iris, imagery of retina, fingerprint, imagery of face, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted)
• Characteristics of protected classifications under California or federal law (sex/gender), age (40 and older)
• Inferences drawn from above information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

We collect Personal Information directly from California residents and from advertising networks, data analytics providers, and operating systems and platforms. We do not collect all categories of Personal Information from each source.

Sale, Sharing, and Disclosure of Personal Information

The following table identifies:

• The categories of Personal Information that we sold or shared to third parties in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the categories of third parties to whom we sold or shared Personal Information
• The categories of Personal Information that we disclosed for a business purpose in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the categories of recipients to whom we disclosed Personal Information  

We collect this personal information from the following categories of sources: 

• Consumers; 
• Eyecare practitioners;
• Service providers; and 
• Selected business partners and agents, including advertising partners and analytics partners. 

We disclose the categories of personal information designated above to the categories of third parties listed below for business purposes:  

• Service providers; 
• Selected business partners; 
• Social media companies; 
• Advertising partners; 
• Analytics partners; 
• Internet service providers; 
• Marketing and analytics providers; and 
• Operating systems and platforms. 

In addition to the purposes stated in the Privacy Policy Section “HOW DO WE USE THIS INFORMATION”, we have collected, used, and disclosed the above categories of Personal Information for the following business or commercial purposes: 

• Our commercial purposes, including personalized marketing and advertising as well as enabling commercial transactions. 
• Our business purposes, including: 
  • Auditing related to our interactions with you; 
  • Ensuring the security and integrity of our systems 
  • Legal compliance; 
  • Detecting and protecting against security incidents, fraud, and illegal activity; 
  • Debugging; 
  • Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics; 
  • Certain advertising and marketing, 
  • Internal research for technological improvement; 
  • Internal operations; 
  • Activities to maintain and improve our services; 
  • Managing our provider network, including: provider recruitment and onboarding/offboarding;    and 
  • Other one-time uses. 

We sold or shared Personal Information to third parties for the following business or commercial purposes: 

• Analytics related to the use of the Site and marketing; and 
• Advancing our commercial or economic interests, including by marketing our product and services. 

We do not sell the personal information of minors that we know to be under 16 years of age.

Your Rights 

If you are a California resident, you have the following rights with respect to your Personal Information: 

1. The right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which we collected Personal Information, the business or commercial purpose for collecting, selling or sharing Personal Information (if applicable), the categories of third parties to whom we disclose Personal Information (if applicable), and the specific pieces of Personal Information we collected about you; 
2. The right to delete Personal Information that we collected from you, subject to certain exceptions; 
3. The right to correct inaccurate Personal Information that we maintain about you; 
4. If we sell or share Personal Information, the right to opt out of the sale or sharing; 
5. If we use or disclose sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure; and 
6. The right not to receive discriminatory treatment by us for the exercise of privacy rights the CCPA confers.  

How to Submit a Rights Request 

To exercise any of the above rights, please contact us using the following information: 

• Online at US State Privacy Law Consumer Request Form. 
• Online at the My Privacy Choices link located at the bottom of all pages in the site's footer. 
• By email at privacyoffice@eyemed.com 
• By phone at 1-877-323-0339 

Right to Opt Out of Sale or Sharing of Personal Information

If you are a California resident, you have the right to direct us to stop selling or sharing your Personal Information. You may submit a request to opt out of sales or sharing by clicking on the US State Privacy Law Consumer Request Form. To opt out of our use of third-party advertising Cookies please click on the Do Not Sell My Personal Information link in our website footer. If you have enabled privacy controls on your browser (such as a plugin), we will also treat that as a valid request to opt out. Please see the “Universal Opt-Out Mechanisms” section above for more information.

Verifying Your Identity 

We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request.  

For requests to access categories of personal information and for requests to delete or correct Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion or correction, we will verify your identity with at least two data points that you previously provided to us.  

For requests to access specific pieces of personal information or for certain requests to delete or correct personal information, we will verify your identity with at least three data points that you previously provided to us. In addition, you must submit a signed declaration under penalty of perjury stating that you are the individual whose personal information is being requested.  

Authorized Agent 

You may designate an authorized agent to make a CCPA request on your behalf. If you choose to submit a request through an authorized agent, we will require proof that the authorized agent has your written permission to submit a request and receive information your behalf.  

Retention of Personal Information 

We retain your Personal Information for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the service you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us. 

Shine the Light Law

If you are a California resident, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third -parties’ direct marketing purposes (as those terms are defined in that statute). To make such a request, please send an email to privacyoffice@eyemed.com with the subject line “Shine the Light Request.”
 

Privacy Questions 

If you want more information about our privacy practices or have privacy questions or concerns, please contact us: 

Privacy Office
EyeMed Vision Care LLC
4000 Luxottica Place
Mason, Ohio 45040
Phone: 1-877-323-0339
Email: privacyoffice@eyemed.com