California Resident Online Privacy Policy

NOTICE TO CALIFORNIA RESIDENTS

To exercise your rights under the California Consumer Privacy Act, please use the following form, US State Privacy Law Consumer Request Form.  For assistance, or if questions, please email privacyoffice@eyemed.com or call 1-877-323-0339.

Last Updated: January 6, 2026

This California Resident Privacy Policy is intended solely for, and is applicable only to, California residents. If you are not a California resident, this policy does not apply to you, and you should not rely on it.

The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information.

The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern. For purposes of this policy, we will refer to this information as “Personal Information.”

Much of the information that EyeMed collects is exempt from the CCPA because it is protected under other federal and/or state privacy laws. For example, if you are a member of EyeMed, your protected health information is governed by HIPAA and exempt from the CCPA. Please see our HIPAA Notice of Privacy Practices for information about how we handle your personal information subject to HIPAA. 

If you are a California resident and a current or former employee, job applicant, or independent contractor of ours, please see our privacy notice available on our job applicant website(s) for more information on our collection and use of your Personal Information in that capacity. 

Notice at Collection of Personal Information

We currently collect and, in the 12 months prior to the Last Updated date of this Policy, have collected the following categories of Personal Information:

• Identifiers (name, postal address, online identifier, Internet Protocol address, email address)
• Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number)
• Telephone number
• Insurance policy number
• Medical information
• Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application, or advertisement)
• Geolocation data
• Characteristics of protected classifications under California or federal law (sex/gender), age (40 and older)
• Inferences drawn from above information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

We collect Personal Information directly from California residents and from advertising networks, data analytics providers, and operating systems and platforms. We do not collect all categories of Personal Information from each source.

How We Use Your Information 

We use the personal information we collect to improve the Site and EyeMed’s business, such as to analyze trends, to administer the site, to understand how visitors use the Site, and to gather demographic information about our users as a whole. We use this information to improve the content of our webpages, and to customize the content and layout of our pages.

 In addition, we may use the personal information for any lawful purpose, including the following:

• Process your account registration;
• Send you our newsletter;
• Identify your preferences to customize our communications and marketing;
• Manage and record your settings, consents, communications and opt-out choices;
• Provide information regarding vision insurance, vision, vision care, and vision correction;
• Communicate with you about our Site or to inform you of any changes to our Site;
• Allow you to find an eyecare professional or doctor, and schedule eye exams or similar appointments with such persons;
• Operate and improve the Site, including to analyze visits to the Site and learn about our visitors so we can operate the Site and improve our products and services and deliver the best user experience;
• Communicate with you, including responding to your inquiries;
• Comply with the law and to maintain the integrity and security of our Site;
• Defend our legal rights and the rights of others;
• Investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Us and to otherwise fulfill our legal obligations;
• Fulfill any other purposes for which you provide it, or any other purpose we deem necessary or appropriate; and
• Any purpose with your consent.

In addition to the purposes stated above, we currently collect and have collected and sold the above categories of Personal Information for the following business or commercial purposes:

• Our commercial purposes including personalized marketing and advertising as well as enabling commercial transactions. 
• Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes
• Debugging to identify and repair errors that impair existing intended functionality
• Performing services including maintaining or servicing accounts, providing customer service, verifying customer information, providing analytic services, providing storage, or providing similar services
• Undertaking internal research for technological development and demonstration
• Advancing our commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction
• Our business purposes, including: 
  • Auditing related to our interactions with you; 
  • Surveys to gauge your experience with our services;
  • Legal compliance; 
  • Detecting and protecting against security incidents, fraud, and illegal activity; 
  • Certain advertising and marketing, 
  • Internal operations; 
  • Managing our provider network, including: provider recruitment and onboarding/offboarding;    and 
  • Other one-time uses. 

Sale, Sharing, and Disclosure of Personal Information

The following table identifies the categories of Personal Information that we sold or shared to third parties in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the categories of third parties to whom we sold or shared Personal Information:

We collect this personal information from the following categories of sources:

• Our commercial purposes including personalized marketing and advertising as well as enabling commercial transactions. 
• Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes
• Consumers;
• Eyecare practitioners;
• Service providers; 
• Selected business partners and agents, including advertising partners and analytics partners; and
• Business contacts: We may receive your contact information, such as your personal identifiers (including your name, telephone number, and email address) and/or professional or business-related information (including your business address), through our online or offline interactions with you, such as while working together on a project, or discussing opportunities to work together. We may send you emails, surveys or call you with information about our business dealings, news, or marketing information to communicate with you for business purposes. 

We do not sell personal information in exchange for monetary consideration. We may disclose personal information by allowing certain third parties (such as online advertising services) to collect personal information via automated technologies on our websites for cross-context behavioral advertising purposes. Under CCPA/CPRA, these kinds of disclosures may be considered a “sale” when the personal information is exchanged for non-monetary consideration, or “sharing” when the personal information is disclosed for cross-context behavioral advertising purposes. You have the right to opt-out of these types of disclosures of your information.

We may sell or share (and may have sold or shared during the 12-month period prior to the Last Updated date of this Notice) the following categories of personal information about you to online advertising services:

• Our commercial purposes including personalized marketing and advertising as well as enabling commercial transactions. 
• Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes
• Identifiers, 
• Commercial Information, 
• Online Activity, 
• Inferences. 

 We do not have actual knowledge that we sell or share personal information of minors under 18 years of age.

We sold or shared Personal Information to third parties for the following business or commercial purposes:

• Advancing our commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction

The following table identifies the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the categories of recipients to whom we disclosed Personal Information. 

We disclosed Personal Information for the following business or commercial purposes:

• Performing services including maintaining or servicing accounts, providing customer service, verifying customer information, providing analytic services, providing storage, or providing similar services 

We do not knowingly collect, sell, or share the Personal Information of consumers under 18 years of age. We do not use Sensitive Personal Information for purposes other than those the CCPA and its regulations allow for.

Retention of Personal Information

We retain your Personal Information for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the service you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us.

Your Rights

If you are a California resident, you have the following rights with respect to your Personal Information:

1. The right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which we collected Personal Information, the business or commercial purpose for collecting, selling or sharing Personal Information (if applicable), the categories of third parties to whom we disclose Personal Information (if applicable), and the specific pieces of Personal Information we collected about you;
2. The right to delete Personal Information that we collected from you, subject to certain exceptions;
3. The right to correct inaccurate Personal Information that we maintain about you;
4. If we sell or share Personal Information, the right to opt out of the sale or sharing;
5. If we use or disclose sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure; and
6. The right not to receive discriminatory treatment by us for the exercise of privacy rights the CCPA confers. 

How to Submit a Request to Know, Delete, and/or Correct

You may submit a request to know, delete, and/or correct through our interactive webform available here or by calling us toll free at 1-877-323-0339.

If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.

Authorized Agent

You may designate an authorized agent to make a CCPA request on your behalf. If you choose to submit a request through an authorized agent, we will require proof that the authorized agent has your written permission to submit a request and receive information on your behalf. 

Our Process for Verifying a Request to Know, Delete, and/or Correct

We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request. 

We will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable. 

For requests to access categories of Personal Information and for requests to delete or correct Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonable degree of certainty” by verifying at least two data points that you previously provided to us and which we have determined to be reliable for the purpose of verifying identities. 

For requests to access specific pieces of Personal Information or for requests to delete or correct Personal Information that is sensitive and poses a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonably high degree of certainty” by verifying at least three pieces of Personal Information you previously provided to us and which we have determined to be reliable for the purpose of verifying identities. In addition, you must submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.

Right to Opt Out of Sale or Sharing of Personal Information

If you are a California resident, you have the right to direct us to stop selling or sharing your Personal Information.

You may submit a request to opt out of sales or sharing through our interactive webform available by clicking on the link titled Do Not Sell/Share located at the bottom of all pages in the website's footer. You also may submit a request by calling us at 1-877-323-0339. If you have enabled privacy controls on your browser (such as a plugin), we will also treat that as a valid request to opt out. 

Shine the Light Law

If you are a California resident, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third -parties’ direct marketing purposes (as those terms are defined in that statute). To make such a request, please send an email to privacyoffice@eyemed.com with the subject line “Shine the Light Request.”

California Privacy Rights Metrics

Request to Know (Access)
· Requests Received: 4
· Requests Completed in Whole or in Part: 4
· Requests Not Completed*: 0
· Average Days to Complete: 1

Request to Delete
· Requests Received: 60
· Requests Completed in Whole or in Part: 60
· Requests Not Completed*: 0
· Average Days to Complete: 4

Do Not Sell My Information
· Requests Received: 0
· Requests Completed in Whole or in Part: 0
· Requests Not Completed*: 0
· Average Days to Complete: 0

This data reflects all requests received from individuals in the U.S. as well as certain requests from individuals outside of the U.S. between January 1 and December 31, 2025.
* Requests may not be completed due to various factors including because a request was not verifiable, was made multiple times, or where we did not have any personal information associated with the requester.

Privacy Questions 

If you want more information about our privacy practices or have privacy questions or concerns, please contact us: 

Privacy Office
EyeMed Vision Care LLC
4000 Luxottica Place
Mason, Ohio 45040
Phone: 1-877-323-0339
Email: privacyoffice@eyemed.com