Last Updated: July 30, 2026

1. Information We Collect

1.1 Account Data

When you create an account, place an order, or subscribe to our emails, we collect account data: your email address, name, date of birth, and gender. Date of birth is used only for age-appropriate recommendations.

1.2 Address Data

We collect shipping address data: country, state or province, city, and postal code. We use state-level location only for aggregate analysis and regional compliance (for example, identifying California residents for CCPA/CPRA purposes). We do not use your address for street-level geolocation or to map where individual users live.

If you save an eyewear prescription with us, we collect prescription-related data, including prescription type and lens parameters. This data is used solely to generate inferred preference tags (for example, “may be due for new lenses”); raw diopter values (SPH/CYL/AXIS) are never exported, displayed in marketing, or shared with third parties.

We are not a health care provider and are not a covered entity under HIPAA; this Policy does not create HIPAA obligations. We nevertheless voluntarily restrict prescription data as described in this section.

1.4 Order Data

We collect order data: products purchased and their product types (glasses, sunglasses, sports glasses, kids’ glasses, reading glasses, and accessories), lens and coating options, order status, amounts paid, and purchase timestamps.

1.5 Device & Source Data

We collect device and source data: the channel you registered through (desktop site, mobile site, or app), your third-party login provider if you use one (Google, Facebook, or Apple), device identifiers, and the device type used for your orders.

1.6 Cookies & Analytics (GA4)

We use cookies and similar technologies, including Google Analytics 4 (GA4), to measure website traffic and email engagement. You can control cookies through your browser settings. We do not use advertising or remarketing cookies.

2. How We Use Your Information

2.1 Service Delivery

We use your information to process and deliver your orders, provide customer support, maintain your account, and prevent fraud.

With your opt-in consent, we send marketing emails about products and offers. You can withdraw consent at any time — see Section 3 (Your Privacy Rights). We do not email users who have unsubscribed, whose accounts are disabled or deleted, or whose email addresses fail validation.

2.3 Cross-Category Marketing

Our main category is prescription eyewear and glasses. Based on your inferred preference tags, we may also recommend products in these adjacent categories: (a) contact lenses; (b) eye care supplements, such as lutein and eye-health vitamins; and (c) sunglasses and blue-light glasses.

These recommendations are based on inferred preference tags — for example, your age range, purchase history, and the product types you have bought — not on your raw health data. We do not use raw prescription values (SPH/CYL/AXIS) for marketing, and we do not send raw prescription data or health-sensitive inferred tags to any affiliate network, advertiser, or merchant.

2.4 Affiliate Marketing

Some of our emails and web pages contain affiliate links. If you buy through these links, we may earn a commission at no extra cost to you. For details, see our Affiliate Disclosure.

2.5 Personalization

We use inferred preference tags and your purchase history to personalize product recommendations and email content — for example, reminding you when you may be due for new glasses based on your past purchase cycle.

2.6 No Sale of Personal Information

We do not sell your personal information for money. We do not share your personal information with third parties for cross-context behavioral advertising.

2.7 Data Retention

We keep marketing-related personal information for up to 24 months or until you withdraw consent or delete your account, whichever comes first. Order and transaction records may be kept longer where required for tax, accounting, or legal obligations. When data is no longer needed, we delete it or irreversibly anonymize it within 90 days. De-identified, aggregated data may be retained for analytics.

3. Your Privacy Rights

3.1 Unsubscribe (Opt-Out)

You can unsubscribe from marketing emails at any time by clicking the “Unsubscribe” link in any marketing email. We process unsubscribe requests within 10 business days, as the CAN-SPAM Act requires. Unsubscribing does not affect transactional emails, such as order confirmations and shipping notices.

3.2 Access & Correction

You may request a copy of the personal information we hold about you, or ask us to correct inaccurate information, by emailing privacy@nuvueo.com. We may need to verify your identity before fulfilling your request.

3.3 CCPA/CPRA Rights for California Residents

If you are a California resident, you have the right to: (1) know what personal information we collect, use, disclose, and sell or share; (2) request deletion of your personal information; (3) request correction of inaccurate personal information; (4) opt out of the sale or sharing of your personal information by emailing privacy@nuvueo.com with the subject line “Do Not Sell or Share My Personal Information” — this opt-out also covers the cross-category marketing described in Section 2.3; (5) limit our use and disclosure of sensitive personal information, including prescription-related data, which we already restrict as described in Section 1.3; and (6) not be discriminated against for exercising these rights.

We respond to verifiable requests within 45 days; where reasonably necessary, we may extend this period once by up to 45 additional days, and we will tell you if we do.

3.4 EU/EEA Residents

Our marketing list is limited to U.S. residents. If we identify EU/EEA residents in our database, they are excluded from all marketing communications.

4. Contact Us

If you have questions about this Policy, or want to exercise your privacy rights, contact us:

We aim to respond within 5 business days, and always within the deadlines required by law.

5. Changes to This Policy

If we make material changes to this Policy, we will notify you by email and post a prominent notice on this page before the changes take effect. We review this Policy at least once every 12 months.

6. Version History