California Privacy Notice

Scope

This Notice supplements our Privacy Policy and applies solely to California residents ("consumers") under the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA").

Notice at Collection

At or before the point of collection, we inform California consumers of the categories of personal information collected, the purposes for which it is used, whether it is sold or shared (it is not), and the retention period for each category. This Notice, together with the summary shown on the pages where information is collected (checkout, account creation, contact forms), serves as our Notice at Collection.

1. Categories of Personal Information We Collect

In the past 12 months, we have collected the following CCPA categories:

• Identifiers — name, email, phone, address, IP address, account ID.
• Customer records — billing/shipping address, payment metadata.
• Commercial information — products purchased, order history.
• Internet/network activity — browsing on our site, cookies, analytics.
• Geolocation — approximate location derived from IP.
• Sensitive personal information — account login credentials; and, where you provide them, eyeglass prescription and optical measurements (which may qualify as health-related information).
• Inferences — preferences drawn from your interactions.

2. Sources

• Directly from you (forms, account, checkout, customer service).
• Automatically from your device (cookies, analytics).
• From service providers (payment processors, shipping carriers).

3. Business Purposes for Collection

• Order fulfillment, shipping, returns, and customer service.
• Custom fitting of optical products to your prescription.
• Website security, fraud prevention, and analytics.
• Marketing (with consent) and legal compliance.

4. Categories Disclosed for a Business Purpose

We disclose identifiers, customer records, commercial information, and internet activity to service providers (payment, shipping, hosting, analytics, email) strictly to perform services on our behalf, under written contracts limiting their use.

5. No Sale or Sharing of Personal Information

Soter Sight does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We do not knowingly sell or share the personal information of consumers under 16.

6. Use of Sensitive Personal Information

We use sensitive personal information (login credentials and optical/prescription data) only for the purposes permitted under CCPA §7027, including providing the goods you requested, ensuring security and integrity, and short-term transactional use. We do not use sensitive personal information to infer characteristics about you.

7. Retention

Each category is retained for the period necessary to fulfill the business purpose, comply with legal obligations (typically up to 7 years for financial records), and support warranty/reorders for optical products.

8. Your California Rights

• Right to know what personal information we collect, use, disclose.
• Right to access a copy of the personal information we hold.
• Right to correct inaccurate personal information.
• Right to delete personal information, subject to exceptions.
• Right to opt out of sale/sharing (not applicable — we do neither).
• Right to limit use of sensitive personal information.
• Right to non-discrimination for exercising your rights.

9. How to Exercise Your Rights

Submit a verifiable consumer request by email:

privacy@sotersight.com

We will verify your identity using information reasonably associated with your account or purchase. Authorized agents may submit requests on your behalf with written authorization. We respond within 45 days (extendable once by 45 days with notice).

We honor the Global Privacy Control (GPC) as a valid opt-out preference signal where required by California law.

If we deny your request, you may appeal by replying to our written response. We will provide a decision on the appeal within a reasonable time and, if the appeal is denied, inform you how to contact the California Attorney General.

10. Shine the Light (Cal. Civ. Code §1798.83)

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing.

11. Non-Discrimination

We will not deny goods or services, charge different prices, or provide a different level or quality of service because you exercised your CCPA/CPRA rights.

12. Contact

Soter Sight
Email: privacy@sotersight.com