PRIVACY POLICY

For the purpose of this policy, personal information is any information about an identifiable individual. We collect the following types of personal information:

Information You Provide

We may collect the following personal information that you voluntary provide us in using our Platforms:

If you are providing delivery information or other information which is not your own, then you must have that person’s permission to give us their information and for us to use and share it for the purposes specified.

• Create an Account. If you create an account with us, you will provide us with your name, email address, birth date, and you will create a password for future logins. You can also choose to login with your Facebook account instead.
• Subscribe to Our Newsletter. If you subscribe to our newsletter, you will provide us with your email address.
• Customer Service. If you contact our customer service department, you may need to provide us with additional information so that we can respond to your questions or concerns as completely and thoroughly as possible.
• Purchases. When you make a purchase, you will provide us with your name, email address, phone number, physical address, and credit card or gift card information. We also will collect your payment card, gift card, or other payment information. We use a third-party service provider to process payments. For in-store purchases we may also collect your signature.
• SunLove Protection Plan. If you choose to enroll in the eyewear protection plan, you are directing Sunglass Hut to disclose the personal information in the application to the company that manages the eyewear protection plan.
• Prescriptions. If you purchase prescription products, you will provide us your gender, valid prescription, prescribing doctor contact information; we will also collect your pupillary distance and/or as well as your Segment Height (Seg Height or SH) and Ocular Center Height (OH).
• Register Products. If you decide to register your product(s), you may choose to voluntarily provide the date, of your last eye exam, the type(s) of products to register the purchase date, of the products, and the reason(s) why you decided to buy
• Find Your Match. If you use our Frame Advisor Technology, you will either upload a photograph of your face or you will allow the technology to take a scan of your face.
• Book an Appointment. If you book a store appointment, you will provide us with your name, email address, birth date, physical address, and phone number.
• Loyalty Program. If you sign up for our loyalty program, you will provide us with your name, email address, and you may choose to provide us with your birth date and gender.
• Track and Return Orders. If you check your order status or start a return, you will provide us with your order number and email address.
• Refer a Friend. To refer a friend, you will provide us with your name and email address, and the email address of the friend you are referring.
• Promotions. If you enter a sweepstakes, contest, giveaway, or other promotion (each a “Promotion”), you will provide us with your age or birth date along with, in certain instances, confirmation of residency.
• Apply for a Job. If you apply for a job through one of our Platforms, we will collect any information you provide in your application, including, but not limited to, work authorization information, visa status, desired salary, language proficiency, educational background, employment history, and references. You may also choose to voluntarily provide optional information such as race, gender, or whether you are disabled.
• Survey. If you are participating in a survey, you may provide your gender and age, income, ethnicity, family size and marital status.
• Business Information. We may collect personal information from business clients or vendors, including company name, physical address, phone number, email address, and credit card information.
• HIPAA. Some of the affiliates and brands covered by this Policy are subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). These affiliates and brands may collect additional information that is considered “protected health information” (“PHI”) as defined by HIPAA. When the information that we collect is considered PHI, we will handle that information in accordance with our Notice of Privacy Practices. Please visit that notice for information on our privacy practices, our legal duties, and your rights concerning your PHI.
• Biometric Information. We may collect biometric information to provide you with certain services. See the “BIOMETRIC INFORMATION” section of this Policy to learn more about how this information is collected, used, disclosed and stored.
• Visual footage. When you visit one of our store locations, you can expect that we will collect CCTV footage.

Information as You Navigate Our Platforms

We automatically collect certain personal information through your use of the Platforms, such as the following:

• Usage Information. For example, the pages on the Platforms you access, the frequency of access, and what you click on while on the Platforms.
• Device Information. For example, hardware model, operating system, application version number, and browser.
• Mobile Device Information. Aggregated information about whether the Platforms are accessed via a mobile device or tablet, the device type, and the carrier.
• Location Information. Location information from Platform visitors on a city-regional basis.

 Third Party Information

In some cases, we may receive certain personal information from you about a third party including receiving personal information from data brokers. Additionally, the receipt of information from third parties may also include, when you refer a friend and provide the email address, or other contact information, of a third party. If you submit any personal information about another individual to us, you are responsible for making sure you have the authority to do so and to allow us to use their personal information in accordance with this Policy.

We use the personal information we collect to improve our Platforms and to protect our legal rights. In addition, we may use the personal information we collect to:

• Process your account registration;
• Process and fulfill your order, including sending you emails to confirm your order status and shipment, and to provide other related communications;
• Take measurements to fit prescription sunglasses;
• Send you our newsletter;
• Sign you up for our loyalty program;
• Identify your preferences to customize our communications and marketing and undertake such communications and marketing;
• Manage and record your settings, consents, communications and opt-out choices;
• Provide information regarding vision, vision care, and vision correction;
• Administer a Promotion;
• Review your job application;
• Communicate with you about our Platforms or to inform you of any changes to our Platforms;
• Allow you to find an eyecare professional or doctor, distributor, store or sales consultant in your area and schedule eye exams or similar appointments with such persons;
• Operate and improve the Platforms, including to analyze visits to the Platforms and learn about our visitors so we can operate the Platforms and improve our products and services and deliver the best user experience;
• Create audiences for our advertisements, target our advertisements, and generate reports about the performance of our advertisements;
• Communicate with you, including responding to your inquiries;
• Comply with the law and to maintain the integrity and security of our Platforms;
• Defend our legal rights and the rights of others;
• Investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Us and to otherwise fulfill our legal obligations; and
• Fulfill any other purposes for which you provide it, or any other purpose we deem necessary or appropriate.

We may share the personal information that we collect about you in the following ways:

• We engage service providers to perform services in connection with the operation of our business. We may share personal information with service providers to the extent necessary for them to provide services to you or us that are aligned with the purposes outlined above. Examples of these services include payment processing and authorization, text messaging services, fraud protection and credit risk reduction, product customization, order fulfillment and shipping, marketing and promotional material distribution, website evaluation, data enrichment and/or cleansing.
• In proceeding with your online order, you agree that any information associated with the order, such as the delivery name and address (if different from yours), will be processed using service providers.
• Personal information collected through our Platforms may be shared between the brands and affiliates, including future affiliates that are owned or operated by Luxottica.
• We also share personal information with selected third parties for their own marketing purposes (except for your phone number or biometric information). This also includes information collected through pixels and other tracking technologies operated by third parties, as described elsewhere in this Policy. See the “YOUR CHOICES” section of this Policy for more information.
• We may release personal information if we believe in good faith that: (i) the law or legal process requires it; (ii) we have received a valid administrative request from a law enforcement agency; or (iii) such release is necessary or appropriate (in our sole discretion) to protect the rights, property, or safety of Luxottica, or any of our respective affiliates, service providers, customers, or (iv) as Luxottica deems necessary to resolve disputes, troubleshoot problems, prevent fraud and otherwise enforce the Terms of Use.
• We may also share your information with your consent or as otherwise disclosed at the time of data collection or sharing.
• As with any business, it is possible that as ours develops, we might go through a business transition, such as a merger, acquisition by another company, or the sale of all or a portion of our assets, or buying online stores or other assets, including at bankruptcy. In such transactions, information about customers will likely be transferred.
• The Platforms may allow you to provide comments in various sections, such as in product reviews. Please be aware that the information you post in these areas may be available to visitors of the Platforms and to the general public. To the fullest extent allowed under applicable law, we do not monitor such content and are not responsible for material posted by you or others in these public forums.
• We are a multi-national organization with locations in many countries around the world. Your personal information may be stored and processed outside of your country, province or state of residence, in any jurisdiction where we have facilities or in which we engage service providers, to the extent allowed in accordance with applicable law. This means that your personal information may be transferred in jurisdictions that have less restrictive privacy laws than your country, province, or state of residence, in which case we will ensure, through contractual means or otherwise, that it will receive an adequate protection in compliance with generally accepted data protection principles. We take steps to process personal information according to the provisions of this Privacy Policy and the requirements of applicable law.

Like many other companies, we use cookies and other tracking technologies (such as pixels and web beacons) (collectively, “Cookies”). To learn more about how we use cookies and to change your cookie settings, please see our Cookie Policy:

Like many other companies, Luxottica uses cookies and other tracking technologies (such as pixels and web beacons) (collectively, “Cookies”) when you visit our websites including our blogs and client portals (“Sites”), and use the services provided through our Sites (“Services”). This Cookie Policy explains how we use Cookies and how you can manage them. Please review the Privacy Policy featured on our Sites to learn more about our privacy practices.

This Cookie Policy covers the following topics:

1. COOKIES AND ONLINE TRACKING TECHNOLOGIES WE USE
2. HOW YOU CAN MANAGE COOKIES
3. HOW TO CONTACT US

COOKIES AND ONLINE TRACKING TECHNOLOGIES WE USE
“Cookies” are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets). 

We may use the following types of Cookies:

Strictly Necessary Cookies
These Cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these Cookies, but some parts of the Sites will not then work. These Cookies do not store any personally identifiable information.

Performance Cookies 
These Cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Sites. They help us to know which pages are the most and least popular and see how visitors move around the Sites. If you do not allow these Cookies we will not know when you have visited our Sites and will not be able to monitor its performance.
We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies or other tracking technologies to help us analyze how users interact with the Sites and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt-out of tracking of analytics by Google, click here.
We may use Cookies and similar technologies third-party vendors provide to collect information on user behavior (e.g., screens and pages visited, buttons and links clicked, limited information entered, and user taps and mouse movements). This information enables us to monitor and improve the user experience. 

Functional Cookies
These Cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these Cookies, then some or all of the Services may not function properly.

Targeting Cookies
These Cookies may be set through our Sites by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other websites. If you do not allow these Cookies, you will experience less targeted advertising.

Social Media Cookies
These Cookies are set by a range of social media services that we have added to the Sites to enable you to share our content with your friends and networks. They are capable of tracking your browser across other websites and building a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these Cookies, you may not be able to use or see these sharing tools.

HOW YOU CAN MANAGE COOKIES

Your Preferences
When you first visit our Sites, you may be presented with a banner that offers you choices about whether to accept or reject Cookies or tracking technologies of different types. If you wish to manage your Cookies, you can do so by clicking here.

Browser Settings
Cookies can be blocked by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Sites.
You can find out more about Cookies and how to manage them by visiting www.AllAboutCookies.org. 

Platform Controls
You can opt out of Cookies set by specific entities following the instructions found at these links:

• Adobe: https://www.adobe.com/privacy/opt-out.html 
• Google: https://adssettings.google.com
• Facebook: https://www.facebook.com/about/ads
• Microsoft: https://account.microsoft.com/privacy/ad-settings/
• Twitter: https://twitter.com/personalization

Advertising Industry Resources 
You can understand which entities have currently enabled Cookies for your browser or mobile device and how to opt-out of some of those Cookies by accessing the Network Advertising Initiative’s website or the Digital Advertising Alliance’s website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative’s Mobile Choices website.
Please note that these opt-out mechanisms are specific to the device or browser on which they are exercised. Therefore, you will need to opt out on every browser and device that you use.
 

We may partner with ad networks and other ad serving providers (“Advertising Providers”) that serve ads on behalf of us and others on the Platforms and non-affiliated platforms. Some of those ads may be personalized, meaning that they are intended to be relevant to you based on information Advertising Providers collect about your use of the Platforms and other sites or apps over time, including information about relationships among different browsers and devices (“Interest-based Advertising”).

You may choose whether to receive some Interest-based Advertising by submitting opt outs. Some Advertising Providers may participate in the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. To learn more about how you can exercise certain choices regarding Interest-based Advertising, visit http://www.aboutads.info/choices, and http://www.aboutads.info/appchoices for information on the DAA’s opt-out program for mobile apps.

Some of these companies may also be members of the Network Advertising Initiative (“NAI”). To learn more about the NAI and the opt-out options for their members, see http://www.networkadvertising.org/choices. Please be aware that, even if you are able to opt out of certain kinds of Interest-based Advertising, you may continue to receive other types of ads.

Opting out only means that those selected members should no longer deliver certain Interest-based Advertising to you but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). Also, if your browsers are configured to reject cookies when you visit these opt-out webpages, or you subsequently erase your cookies, use a different device or web browser or use a non-browser-based method of access (e.g., mobile app), your NAI / DAA browser-based opt-out may not, or may no longer, be effective. We support the ad industry’s 2009 Self-regulatory Principles for Online Behavioral Advertising (https://www.iab.com/wp-content/uploads/2015/05/ven-principles-07-01-09.pdf) and expect that ad networks we directly engage to serve you Interest-based Advertising will do so as well, though we cannot guarantee their compliance. We are not responsible for the effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

Advertising Providers may use data collected in connection with our advertising campaigns for the following purposes:

• For measurement and insight reporting (to produce and provide us with reports measuring the impact and performance of our advertising campaigns).
• To produce benchmarking reports to share with their other customers, but such benchmarking reports will not identify you.
• To target our ad campaigns to specific groups of individuals having particular characteristics.
• To improve and optimize advertising services (for example, to support the objectives of our ad campaigns, improve the effectiveness of their own advertising services and determine the relevance of ads to individuals).
• To personalize ads that the Advertising Providers show, including to enhance user profiles with inferred interests.
• For their internal purposes, including (i) to promote and ensure the safety and security on and of their products and services; (ii) to detect and prevent malicious, deceptive, fraudulent, invalid or illegal activity; (iii) for research and development purposes; and (iv) to maintain the integrity of and to improve their products and services.
• To combine it with other data collected by Advertising Providers in order to provide greater insights in respect of our advertisements.

We may also work with service providers that collect data about your use of the Platforms Sites and other sites or apps over time for non-advertising purposes subject to their privacy policies. We use analytics providers such as Google Analytics to gather and analyze aggregated anonymous user information. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners/ You can opt out of Google’s collection and processing of data generated by your use of the Sites by going to https://tools.google.com/dlpage/gaoptout.

We use web analytics tools to enhance user experience by optimizing the efficiency, design, and quality of the Platforms. Our analytics tools use cookies and similar technologies to collect and analyze information related to user behavioral metrics on the Platforms, such as mouse movements, clicks, user inputs, scrolling, access time, visit duration, pages viewed, IP address (including approximate location), operating system, and page reloading. These tools provide insight into what works and what doesn’t work for users of the Platforms and they allow us to, for example, identify and repair technical errors such as broken links that impair the Platforms’ functionality. The web analytics tools also help us reconstruct the user experience to better understand, for example, where users may be encountering frustration or impediments to using the Platforms.

We use a website analytics tool that provides session replay, heatmaps, funnels, form analytics, feedback campaigns, and similar features/functionality. This session replay software may record your clicks, mouse movements, scrolling, form fills (keystrokes) in non-excluded fields, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), anonymized IP address, location (city/country), language, and similar metadata. This software does not collect information on pages where it is not installed, nor does it track or collect information outside your web browser.

We use this web-based analytics software because it gives us a tool to track the online behavior of visitors while on the Platforms and lets us replay visitors’ actions. This tool gives us the opportunity to make the Platforms better and, in turn, provide you with an enhanced online experience as well. Thanks to this tool, we are able to gain insight on how you and other visitors use the Platforms; for example, whether you can easily locate the “Find a Store” page or whether it takes multiple clicks to get to that page. Information about these small choices and interactions are of paramount value to us, as they can easily make your experience better and more intuitive and, more importantly, allow us to provide you with a more seamless, customer-friendly e-shopping experience while on the Platforms.

For more information on this session replay software, see Contentsquare’s Privacy Policy at https://contentsquare.com/privacy-center/privacy-policy/.

We may use pixel tags (also known as web beacons and clear GIFs) to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, and compile statistics about usage of the services and response rates. Our Advertising Providers may use pixel tags to collect information for the purposes described above.

The Platforms may provide links to third-party websites or apps, including our social media pages. We do not control the privacy practices of those websites or apps, and they are not covered by this Policy. You should review the privacy policies of other websites or apps that you use to learn about their data practices.

The Platforms may also include integrated social media tools or “plug-ins,” such as social networking tools offered by third parties. If you use these tools to share information or you otherwise interact with social media features on the Platforms, those social media companies may collect information about you and may use and share such information in accordance with their own policies, including by sharing such information with us or the general public. Your interactions with third-party social media companies and the use of their features are governed by the privacy policies of the companies that provide those features. We encourage you to read the privacy policies for any social media accounts you create and use.

Through various technology features, including but not limited to our virtual technology features and/or when you upload a photo through one of our Platforms, we may collect data that potentially falls under the definitions of “biometric identifiers” or “biometric information” under the Illinois Biometric Information Privacy Act, 740 ILCS § 14/1 et seq. and Texas Capture or Use of Biometric Identifier Act (“CUBI”), Bus. & Com. § 503.001 et seq. “Biometric identifiers” are defined as retina or iris scans, fingerprints, voiceprints, or scans of the hand or face geometry. “Biometric information,” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier used to identify an individual.

Any collection of biometric identifiers and biometric information are for the sole purpose of assisting you in viewing how certain eyeglasses may look on your facial features. We will not disclose or disseminate any biometric information to any entity, other than those contracted parties that assist us in providing this service to you, or as required by applicable federal, state or local law, or required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.

We will not share your biometric identifiers and biometric information with any entity except in the following cases:

• We will share your biometric identifiers and biometric information with contacted parties that assist us in providing services to you via our Platforms
• We will share your biometric identifiers and biometric information where it is required by applicable federal, provincial, or local law
• We will share your biometric identifiers and biometric information where it is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction

We shall retain any biometric identifiers or biometric information for the limited period of time required to provide you with the service, and shall not exceed six months as long as you consent to such retention, maintain an account with us, and expressly request to save your virtual profile to your account. If you do not maintain an account with us we shall retain biometric identifiers or biometric information for up to six months, but we will not be able to retrieve or connect your information to your identity. After six months, all biometric identifiers or biometric information we have collected from you shall no longer be retrievable or readable by our operating systems or applications.

We use appropriate technical, administrative, and physical safeguards to store, transmit, and protect from disclosure any biometric identifiers or biometric information collected. Such storage, transmission, and protection from disclosure shall be performed in a manner that is the same or more protective than the manner in which we store, transmit, and protect from disclosure other confidential and sensitive information.

Biometric information will only be collected by us with your prior explicit consent. Before using our virtual technology features, you will be prompted with a copy of this policy. By clicking “I accept” you are consenting to our collection and storage of your biometric identifiers or biometric information.

SUNGLASS HUT LOYALTY PROGRAM “THE SUN CLUB” (“LOYALTY PROGRAM”) is a voluntary loyalty program.

• Members can earn Loyalty Program Points (“Points”) with the purchase of qualifying products from USA Sunglass Hut retail stores that participate in the Loyalty Program or online at www.sunglasshut.com/us or by fulfilling “Accrual Missions”.

• For each dollar spent on qualifying products, members will receive a certain amount of Points based on the active rules in that specific moment and purchasing channel.

• To earn Points you must be (i) a registered member of the Loyalty Program and provide the Loyalty Card number and the email address associated with a registered Loyalty Membership or (ii) join the Loyalty Program at the same time as the purchase or, for online purchases, immediately after the purchase from the thank you page.

• For non-transactional points accrual, the members will be invited to complete some actions (“Accrual Missions”), online or instore, that will grant them Points. The members will be informed about the available and completed Accrual Missions from their online Loyalty My Account.

*Benefits examples are illustrative and non-binding.

Under the CCPA, the Loyalty Program may be considered a Financial Incentive Program. When we provide you with the incentives described above, we collect personal information about you including your name, email address, purchase history, etc. to identify you as a member of the program and provide you with relevant messaging, experiences and offers. These financial incentives are reasonably related to the value of the data you provide.

In order to offer a more personalized and relevant member experience, Loyalty Program incurs expenses including but not limited to the leveled tier functionality and exclusive benefits available only to members. The expenses associated with the Loyalty Program incentives will vary as it is dependent on your engagement with the Loyalty Program, including total annual spend at Sunglass Hut and frequency and type of benefits you choose to redeem.

After joining our Loyalty Program, if you wish to opt out of the Loyalty Program or wish to opt out of the sale of your personal information to support the Loyalty Program, you may do so online through your Loyalty My Account, instore, or by contacting Sunglass Hut Customer Care at 1-800-786-4527. We will not discriminate against you for exercising your rights under CCPA.

Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. Please review the sections below if you are a California, Nevada, Oregon, or Virginia resident. For other state residents, your privacy rights may include (if applicable):

• The right to confirm whether or not we are processing your personal data and to access such personal data and the categories of personal data we are processing or have processed;
• The right to obtain a copy of your personal data that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;
• The right to delete personal data that we collected from and/or about you, subject to certain exceptions;
• The right to correct inaccurate personal data that we maintain about you, subject to certain exceptions;
• The right, if applicable, to opt out of the processing of your personal data for purposes of (1) targeted advertising; (2) the “sale” of your personal data (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• If we are required by applicable law to obtain your consent to process sensitive personal data, the right to withdraw your consent; and
• The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

We use cookies and other tracking technologies to display advertisements about our products to you on nonaffiliated websites, applications, and online services. This is “targeted advertising” under applicable privacy laws. When we engage in those activities, we sell personal data (i.e., information from cookies) to third-party advertisers and analytics companies. We do not use personal data for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.

To exercise your rights, please submit a request through our interactive webform available here or by emailing us at privacyoffice@luxotticaretail.com. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting a request on behalf of another individual, please use the same contact methods described above. If we refuse to take action regarding your request, you may appeal our decision through our interactive webform available here or by emailing us at privacyoffice@luxotticaretail.com. If you would like to opt out of targeted advertising, you may alter your cookie preferences here by toggling off the three cookie options in the cookie manager tool.

If you enter into a Loyalty Program with us, we will collect your name, email address, and you may choose to provide us with your birth date and gender. We do not provide your personal data to data brokers. If you ask us to delete your personal data, we will not be able to provide you with the benefits of our Loyalty Program because we will delete your account .

Universal Opt-Out Mechanisms

The Sites recognize the Global Privacy Control (“GPC”) signal. If you are using a browser setting or plug-in that sends an opt-out preference signal to each website you visit, we will treat that as a valid request to opt out. To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. See the “DO NOT TRACK SIGNALS” section below for information on our treatment of do not track signals.

Nevada law allows Nevada residents to opt out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. We currently do not sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt out of sales and will record your instructions and incorporate them in the future if our policy changes. You may send opt-out requests through our interactive webform available here or by emailing us at  privacyoffice@luxotticaretail.com.

The Virginia Consumer Data Protection Act (“VCDPA”) provides Virginia residents with the right to receive certain disclosures regarding the personal data we process about them. For purposes of this section, personal data means any information that is linked or reasonably linkable to an identified or identifiable natural person. Personal data does not include de-identified or publicly available information as the VCDPA defines those terms.

For a discussion of the categories of personal data we process, the purposes for our processing, the categories of personal data that we share with third parties, and the categories of third parties with whom we share personal data, please see Section 1 through 3 above, and Section below.

If you are a Virginia resident, the VCDPA grants you the right to: (1) confirm whether or not we are processing your personal data to access such personal data; (2) correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data; (3) delete personal data you have provided or we have obtained about you; (4) obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means; and (5) opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

We sell personal data to third parties as defined in the VCDPA. We process personal data for targeted advertising.

To exercise your rights, please email us at privacyoffice@luxotticaretail.com, with your name, the fact that you are a Virginia resident, and specifying the right(s) you wish to invoke. If we refuse to take action regarding your request, you may appeal our decision by email us at privacyoffice@luxotticaretail.com. If you would like to opt out of targeted advertising, you may alter your cookie preferences by clicking here.

The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. This section of the Policy is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this section does not apply to you and you should not rely on it. 

The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern. For purposes of this “NOTICE TO CALIFORNIA RESIDENTS” section we will refer to this information as “Personal Information.”

If you are a California resident and a current or former employee, job applicant, or independent contractor of ours, please see our privacy notice available on our job applicant website(s) for more information on our collection and use of your Personal Information in that capacity.

Notice at Collection of Personal Information

We currently collect and, in the 12 months prior to the Last Updated date of this Policy, have collected the following categories of Personal Information: 

• Identifiers (name, postal address, online identifier, Internet Protocol address, email address)
• Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number)
• Telephone number
• Credit card number
• Insurance policy number
• Medical information
• Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application, or advertisement)
• Geolocation data
• Commercial information (records of personal property, products or services purchased, obtained, or considered; other purchasing or consuming histories or tendencies; or other commercial information)
• Education information
• Professional or employment-related information (including employment history)
• Biometric information (imagery of iris, imagery of retina, fingerprint, imagery of face, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted)
• Characteristics of protected classifications under California or federal law (sex/gender), age (40 and older)
• Inferences drawn from above information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

We collect Personal Information directly from California residents and from advertising networks, data analytics providers, and operating systems and platforms. We do not collect all categories of Personal Information from each source.

In addition to the purposes stated above in the Section “HOW WE USE YOUR INFORMATION” we currently collect and have collected and sold the above categories of Personal Information for the following business or commercial purposes:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
• Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes
• Debugging to identify and repair errors that impair existing intended functionality
• Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of your current interaction with us, provided that your Personal Information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your individual consumer’s experience outside the current interaction with us, including, but not limited to, the contextual customization of ads shown as part of the same interaction
• Performing services including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services
• Providing advertising and marketing services, except for cross-context behavioral advertising, to you provided that, for the purpose of advertising and marketing, our service providers and/or contractors shall not combine the Personal Information of opted-out consumers that the service provider or contractor receives from us, or on our behalf with Personal Information that the service provider or contractor receives from, or on behalf of, another person or persons or collects from its own interaction with you
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us
• Advancing our commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction

Sale, Sharing, and Disclosure of Personal Information

The following table identifies the categories of Personal Information that we sold or shared to third parties in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the categories of third parties to whom we sold or shared Personal Information:

We sold or shared Personal Information to third parties for the following business or commercial purposes:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
• Advancing our commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction

The following table identifies the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the categories of recipients to whom we disclosed Personal Information. 

We disclosed Personal Information for the following business or commercial purposes:

• Performing services including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.

We do not knowingly collect, sell, or share the Personal Information of consumers under 16 years of age. We do not use Sensitive Personal Information for purposes other than those the CCPA and its regulations allow for.

Retention of Personal Information

We retain your Personal Information for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the service you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us.

Your Rights

If you are a California resident, you have the following rights with respect to your Personal Information:

1. The right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which we collected Personal Information, the business or commercial purpose for collecting, selling or sharing Personal Information (if applicable), the categories of third parties to whom we disclose Personal Information (if applicable), and the specific pieces of Personal Information we collected about you;
2. The right to delete Personal Information that we collected from you, subject to certain exceptions;
3. The right to correct inaccurate Personal Information that we maintain about you;
4. If we sell or share Personal Information, the right to opt out of the sale or sharing;
5. If we use or disclose sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure; and
6. The right not to receive discriminatory treatment by us for the exercise of privacy rights the CCPA confers.

How to Submit a Request to Know, Delete, and/or Correct

You may submit a request to know, delete, and/or correct through our interactive webform available here or by calling us toll free at 1-800-786-4527 or emailing privacyoffice@luxotticaretail.com.

If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.

Our Process for Verifying a Request to Know, Delete, and/or Correct

We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request.

We will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable.

For requests to access categories of Personal Information and for requests to delete or correct Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonable degree of certainty” by verifying at least two data points that you previously provided to us and which we have determined to be reliable for the purpose of verifying identities.

For requests to access specific pieces of Personal Information or for requests to delete or correct Personal Information that is sensitive and poses a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonably high degree of certainty” by verifying at least three pieces of Personal Information you previously provided to us and which we have determined to be reliable for the purpose of verifying identities. In addition, you must submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.

Right to Opt Out of Sale or Sharing of Personal Information

If you are a California resident, you have the right to direct us to stop selling or sharing your Personal Information.

You may submit a request to opt out of sales or sharing through our interactive webform available by clicking on this link: Do Not Sell or Share My Personal Information. You also may submit a request by calling us a 1-800-786-4527or emailing us at privacyoffice@luxotticaretail.com. If you have enabled privacy controls on your browser (such as a plugin), we will also treat that as a valid request to opt out. To opt out of our use of third-party advertising Cookies, please see the section “How You Can Opt Out of Cookies” above.

Notice of Financial Incentive

Sunglass Hut offers programs, benefits, and other offerings related to the collection, retention, use, or sale of your Personal Information that may be deemed a “financial incentive” or “price or service difference” under the California Consumer Privacy Act (“CCPA”).  We are providing you this information so that you may make an informed decision on whether to participate in our programs, including our Loyalty Program, Referral Program, and Exclusive Club. Participation in our promotional programs is always optional!  You can end program participation at any time by contacting us at privacyoffice@luxotticaretail.com to unsubscribe or cancel your participation in any program.  We will not discriminate against you, in any manner prohibited by applicable law, for exercising these rights.  Please note that we may add or change incentive programs, or their terms by posting notice on the program descriptions and terms linked to above, so check them regularly.

Each financial incentive or price or service difference relate to the collection and use of personal information is based upon our reasonable, good-faith determination of the estimated value of such information to our business, taking into consideration the value of the offer or benefit itself and the anticipated revenue generation that may be realized by rewarding brand loyalty.  We calculate the value of the offer and financial incentive by using the expense related to the offer.  By participating in any of the referenced promotional programs, you agree that the benefits are reasonably related to the Personal Information collected, retained, used or sold.

Shine the Light Law

If you are a California resident, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third -parties’ direct marketing purposes (as those terms are defined in that statute). To make such a request, please send an email to privacyoffice@luxotticaretail.com with the subject line “Shine the Light Request.”

CALIFORNIA PRIVACY RIGHTS METRICS

Request to Know (Access)

- Requests Received: 1
- Requests Completed in Whole or in Part: 1
- Requests Not Completed*: 0
- Average Days to Complete: 6

Request to Delete
- Requests Received: 252
- Requests Completed in Whole or in Part: 251
- Requests Not Completed*: 1
- Average Days to Complete: 14

Request to Correct/Rectify
- Requests Received: 0
- Requests Completed in Whole or in Part: 0
- Requests Not Completed*: 0
- Average Days to Complete: 0

Do Not Sell My Information
- Requests Received: 145
- Requests Completed in Whole or in Part: 145
- Requests Not Completed*: 0
- Average Days to Complete: 0.6 days

This data reflects all requests received from individuals in the U.S. as well as certain requests from individuals outside of the U.S. between January 1 and December 31, 2023.

* Requests may not be completed due to various factors including because a request was not verifiable, was made multiple times, or where we did not have any personal information associated with the requester.

Oregon Consumer Privacy Act (“OCPA”) provides residents of Oregon with the right to receive certain disclosures regarding the personal data we process about them. For purposes of this section, personal data means any information that is linked or reasonably linkable to an identified or identifiable natural person.

Collection of Personal Information

We currently collect and, in the 12 months prior to the Last Updated date of this Policy, have collected the following categories of Personal Information. Not all categories will be collected or received for every individual. For more information on the categories of personal data we collect, please see “The Information We Collect” section of this Site’s privacy policy.

• Identifiers (name, postal address, online identifier, Internet Protocol address, email address)
• Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number)
• Telephone number
• Credit card number
• Insurance policy number
• Medical information
• Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application, or advertisement)
• Geolocation data
• Commercial information (records of personal property, products or services purchased, obtained, or considered; other purchasing or consuming histories or tendencies; or other commercial information)
• Education information
• Professional or employment-related information (including employment history)
• Biometric information (imagery of iris, imagery of retina, fingerprint, imagery of face, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted)
• Characteristics of protected classifications under applicable state law or federal law (sex/gender), age (40 and older)
• Inferences drawn from above information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

We collect Personal Information directly from residents of Oregon and from advertising networks, data analytics providers, and operating systems and platforms. We do not collect all categories of Personal Information from each source.

In addition to the purposes stated above in the Section “How Do We use Your Information” we currently collect and have collected and sold the above categories of Personal Information for the following business or commercial purposes:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
• Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes
• Debugging to identify and repair errors that impair existing intended functionality
• Short-term, transient use, including, but not limited to, non- personalized advertising shown as part of your current interaction with us, provided that your Personal Information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your individual consumer’s experience outside the current interaction with us, including, but not limited to, the contextual customization of ads shown as part of the same interaction
• Performing services including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services
• Providing advertising and marketing services, except for cross-context behavioral advertising, to you provided that, for the purpose of advertising and marketing, our service providers and/or contractors shall not combine the Personal Information of opted-out consumers that the service provider or contractor receives from us, or on our behalf with Personal Information that the service provider or contractor receives from, or on behalf of, another person or persons or collects from its own interaction with you
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us
• Advancing our commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction

Sale, Sharing, and Disclosure of Personal Information

The following table identifies the categories of Personal Information that we sold or shared to third parties in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the categories of third parties to whom we sold or shared Personal Information:

We sold or shared Personal Information to third parties for the following business or commercial purposes:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
• Advancing our commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction

The following table identifies the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the categories of recipients to whom we disclosed Personal Information.

We disclosed Personal Information for the following business or commercial purposes:

• Performing services including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services

We do not knowingly collect, sell, or share the Personal Information of consumers under 16 years of age. We do not use Sensitive Personal Information for purposes other than those the OCPA and its regulations allow for.

Retention of Personal Information

We retain your Personal Information for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the service you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us.

Your Rights

Generally, Oregon consumers have the following rights:

• The right to access personal data that has been collected about them and confirmation of the categories of personal data that have been processed by a controller;
• The right to know a list of the specific third parties that have received their personal data or any personal data from a controller;
• The right to correct inaccuracies in their personal data;
• The right to request their personal data to be deleted;
• The right to obtain a copy of their personal data; and
• The right to say “no” to (opt-out of) a controller doing certain things with their personal data.

How to Submit a Request to Exercise Your Rights

To exercise your rights, please submit a request through our interactive webform available here or by emailing us at privacyoffice@luxotticaretail.com. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting a request on behalf of another individual, please use the same contact methods described above. If we refuse to take action regarding your request, you may appeal our decision through our interactive webform available here or by emailing us at privacyoffice@luxotticaretail.com.

If you would like to opt out of targeted advertising, you may alter your cookie preferences here by toggling off the three cookie options in the cookie manager tool.

Our Process for Verifying a Request to Exercise Your Rights

We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the resident of Oregon on whose behalf you are making such request.

We will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable.

For requests to access categories of Personal Information and for requests to delete or correct Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonable degree of certainty” by verifying at least two data points that you previously provided to us and which we have determined to be reliable for the purpose of verifying identities.

For requests to access specific pieces of Personal Information or for requests to delete or correct Personal Information that is sensitive and poses a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonably high degree of certainty” by verifying at least three pieces of Personal Information you previously provided to us and which we have determined to be reliable for the purpose of verifying identities. In addition, you must submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.

Right to Opt Out of Sale or Sharing of Personal Information

If you are a resident of Oregon, you have the right to direct us to stop selling or sharing your Personal Information.You may submit a request to opt out of sales or sharing through our interactive webform available by clicking on this link: Do Not Sell or Share My Personal Information. You also may submit a request by calling us a 1-800-786-4527 If you have enabled privacy controls on your browser (such as a plugin), we 1-800-786-4527will also treat that as a valid request to opt out. To opt out of our use of third-party advertising Cookies, please see the section “How You Can Opt Out of Cookies” above.

Please see Parts 1-3, above, for a description of the personal information held by us, a general account of its use, and what personal information we make available to related organizations. Subject to exceptions set out in privacy legislation, residents of Canada may request to view, update, or correct their personal information by contacting our privacy officer at the information provided in the ”CONTACT” section below. In order to protect your privacy, we will take steps to verify your identity before granting you access to the information or enabling you to make corrections. Please keep in mind that certain information may be subject to exceptions if, for example, the information is protected by solicitor-client privilege, part of a formal dispute resolution process, about another individual that would reveal their personal information or confidential commercial information, or would be prohibitively expensive to provide. In some instances, you may have consented to the collection of your personal information. Subject to legal and contractual requirements and reasonable notice, you may withdraw your consent at any time; however, without your consent, we may not be able to provide you with our services or products if your personal information is necessary for us to be able to provide them.

To opt out of our email marketing or to unsubscribe from our email newsletters, you can contact our customer service department using the information in the “CONTACT” section below, or you can use the link provided at the bottom of each marketing message or newsletter. If you choose to opt out, you will continue to receive all email communications related to our transactions with you.

If you would like to update your mailing information or want your name and address removed from our direct mailing list, you can contact our customer service department using the information in the “CONTACT” section below.

You can control the tools on your mobile devices. For example, you can turn on and off the GPS locator or push notification on your phone. Please consult your mobile device’s user guide for instructions on clearing cookies, enabling and disabling location services, and disabling push notifications.

When you make a purchase, you can choose to save your information to obtain a faster checkout for purchases and/or you can choose to receive emails or texts, which provide you with information regarding our other products and services. We obtain your consent before contacting you with certain non-emergency, automated, autodialed, prerecorded, or other telemarketing phone calls or text messages. You are not required to grant consent to telemarketing calls or texts as a condition of buying any goods or services. Also, you may revoke your consent at any time at the contact information listed at the end of this policy. Message and data rates may apply. We will retain your personal information for the period necessarily to fulfill the purposes of your personal information collection, unless a longer retention period is required or permitted by law.

We understand the importance of protecting children’s privacy, especially in an online environment. Our Platforms are not intentionally designed for or directed at children less than 16 years of age. We do not knowingly collect personal information from children under the age of 16 without the consent of the child’s parent or guardian. We encourage parents and guardians to provide adequate protection measures to prevent minors from providing information unwillingly on the internet. If we are aware of any personal information relating to children that we have collected, we will take steps to securely remove it from our systems.

You may request to view, update, or correct your Personally Identifiably Information by contacting our privacy office at the information provided in the “CONTACT” section below. In order to protect your privacy, we will take steps to verify your identity before granting you access to the information or enabling you to make corrections.

We maintain reasonable and appropriate safeguards to help protect your personal information from loss and from unauthorized acquisition. We monitor activity on our Platforms to prevent any unauthorized disclosure of information. In addition, we utilize a licensed system for credit card authorization and fraud detection. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no consensus among industry participants as to what “Do Not Track” means in this context. Like many online services, we currently do not alter our practices when we receive a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” you can visit All About DNT, but we are not responsible for the completeness or accuracy of this third-party information.

Some information about your use of the service and certain third-party services may be collected by us or by third parties using tracking technologies across time and services and used by us and third parties for purposes such as to associate different devices you use and deliver relevant ads and/or other content to you on the service and certain third-party services.

We are committed to ensuring this Policy is accessible to individuals with disabilities. To request this Policy in an alternative format, please reach out to us at the Contact information provided below.

If you have questions or wish to contact us about this Policy, please direct inquiries to:

Privacy Officer

Luxottica Retail North America, Inc.

4000 Luxottica Place

Mason, Ohio 45040

Phone: 1-800-776-4085

Email: privacyoffice@luxotticaretail.com