Consumer Health Data Privacy Policy

Effective Date: October 26, 2026. This Consumer Health Data Privacy Policy (“Policy”) is required under Washington State's My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (NRS 603A.400–603A.550), and describes specifically how Illusion Eyewear collects, uses, shares, and protects “consumer health data” as that term is defined under those laws. This Policy is separate and distinct from our general Privacy Policy, as required by Washington law, and contains no marketing or promotional content.

“Consumer health data” under these laws means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status, including information related to vision. It is a broader category than “protected health information” under HIPAA, and applies to businesses regardless of whether HIPAA applies to them.

1. Categories of Consumer Health Data We Collect

We collect the following categories of consumer health data in connection with prescription eyewear orders:

Your eyeglass prescription;
Your pupillary distance (PD);
If you elect our doctor-verification option, your eye doctor's office name and phone number, together with your name, phone number, and date of birth, used to contact your doctor's office on your behalf.

We do not collect consumer health data for any purpose other than fulfilling a prescription eyewear order you have requested.

2. Purpose of Collection and Use

We collect and use the consumer health data described in Section 1 solely to:

Fulfill your order by submitting your prescription and PD to our optical lab, which manufactures your lenses;
Verify your prescription with your doctor's office, where you have elected that option;
Respond to your customer service inquiries related to your order, return, or warranty claim.

We do not use consumer health data for marketing, advertising, or profiling purposes, and we do not use it to make any inference about your health beyond what you have directly provided for the purpose of fulfilling your order.

3. Sources of Consumer Health Data

Directly from you, when you upload or manually enter your prescription and PD;
From your doctor's office, if you elect our doctor-verification option and authorize us to contact them on your behalf.

4. Sharing of Consumer Health Data

We share consumer health data with the following categories of third parties, solely for the purposes described in Section 2:

Our optical lab, which receives your prescription and PD directly to manufacture your lenses.

We do not sell consumer health data. We do not share consumer health data with our frame suppliers, marketing service providers, or any advertising or analytics provider. We do not share consumer health data with any third party for that third party's own independent purposes.

5. Consent

We obtain your affirmative, opt-in consent before collecting consumer health data described in Section 1, separate from your acceptance of our Terms of Service or general Privacy Policy. This consent is obtained through a dedicated checkbox at checkout, presented separately from the general prescription-accuracy certification, before you submit your prescription, PD, or doctor-verification information. [Developer to confirm this dedicated consent checkbox is implemented as its own distinct, unchecked affirmative action at checkout, separate from the accuracy-certification checkbox described in our Checkout & Prescription-Verification Language, consistent with this Section 5.]

We do not sell consumer health data, and accordingly do not obtain (or need) the separate written sale-authorization that Washington and Nevada law would otherwise require before any such sale.

6. Geofencing

We do not use geofencing technology to establish a virtual boundary around any healthcare facility for the purpose of identifying, tracking, collecting data from, or sending notifications to consumers, as prohibited under Washington and Nevada law.

7. Data Security

We apply the encryption, access control, and audit-logging safeguards described in our Secure Database Requirements Memorandum to all consumer health data described in this Policy.

8. Data Retention

We retain consumer health data only as long as necessary to fulfill your order, the applicable warranty period, and any legal or accounting recordkeeping requirement described in our general Privacy Policy, after which it is securely deleted.

9. Your Rights

Subject to verification of your identity, you have the right to:

Confirm and access: confirm whether we are collecting, sharing, or selling your consumer health data, and access that data, including a list of the third parties (identified in Section 4) that have received it and how to contact them.
Delete: request deletion of your consumer health data. Upon a verified deletion request, we will delete your consumer health data from our own systems and instruct our optical lab to do the same, except where retention is required by law (for example, tax or accounting recordkeeping).
Withdraw consent: withdraw consent to our collection or sharing of your consumer health data at any time. If you withdraw consent before your order is complete, we may be unable to fulfill your prescription eyewear order.

You will not receive discriminatory treatment for exercising these rights, though withdrawing consent or requesting deletion before an order is fulfilled may prevent us from completing that order.

10. How to Exercise Your Rights

To exercise any right described in this Policy, contact us at support@illusioneyewear.online. We will respond without undue delay, and in any event within forty-five (45) days of a verified request, with one possible additional forty-five (45) day extension where reasonably necessary; we will notify you if an extension applies. You may submit a request free of charge up to twice per year. If we decline to act on your request, we will explain why and how you may appeal that decision by replying to our response; if your appeal is denied, Washington residents may contact the Washington Attorney General, and Nevada residents may contact the Nevada Attorney General.

11. Changes to This Policy

If we begin collecting or sharing new categories of consumer health data, or use existing consumer health data for a new purpose, we will update this Policy and obtain your new, affirmative consent before doing so, consistent with Section 5.

12. Contact

Questions about this Policy, or requests regarding your consumer health data, may be directed to support@illusioneyewear.online.

Accessibility of This Policy

This Policy is available in an accessible format on request. If you use a screen reader, require large print, or have difficulty accessing this Policy for any reason, contact us at support@illusioneyewear.online or 703-597-0660 and we will provide it in a format you can use, at no cost. This does not affect any right described in this Policy, and you will not be treated differently for making such a request.