Privacy Policy for smart-specs.com
We maintain an unwavering dedication to protecting and preserving all personal data provided by our website visitors and service users, implementing robust and comprehensive security measures throughout our services and operations.
This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. In this role, we are responsible for establishing and enforcing strict protocols for data collection, processing, and security measures.
We may process usage data (“usage data”), which comprehensively includes browser type, operating system, page views, navigation paths, timing and frequency of visits, device information, and interaction patterns. This information is collected through automated logging systems, cookies, and analytics tools and may include session duration, features accessed, and technical performance metrics. The source of this data is our analytics software and server logs. We process this information for several important purposes, including improving website performance, enhancing user experience, analyzing trends, and optimizing content delivery, which enables us to provide better services, personalize user experience, and maintain system security. The legal basis for this processing is our legitimate interests in monitoring and improving our website and services.
We may process account data (“account data”), which comprehensively includes name, email address, telephone number, billing address, and account settings preferences. This information is collected through registration forms, account creation processes, and direct user input and may include communication preferences, subscription status, and account history. The source of this data is the user’s direct input during account creation and management. We process this information for account administration, service provision, communication, billing purposes, and security verification, which enables us to manage user accounts effectively, provide requested services, and maintain account security. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
We may process profile data (“profile data”), which comprehensively includes biographical information, professional details, preferences, interests, and profile pictures. This information is collected through profile creation forms, preference settings, and user submissions and may include professional qualifications, experience, and areas of interest. The source of this data is your direct input and profile customization. We process this information for personalizing user experience, enabling community features, matching services, and content recommendations, which enables us to provide relevant content, facilitate connections, and enhance service delivery. The legal basis for this processing is our legitimate interests in operating and improving our services.
Your Rights:
Right to Access: You have the right to obtain confirmation about whether we process your personal data and to receive a copy of that data in a structured format. This includes the ability to view all personal data we hold about you, understand how we use it, and know who we share it with. To exercise this right, you can submit a formal request through our dedicated data access portal or contact our privacy team directly. We will respond within 30 days and may require government-issued identification, proof of address, and account verification to verify your identity.
Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected. This includes the ability to update your personal information, correct errors in your data, and modify incomplete records. To exercise this right, you can access your account settings or submit a correction request through our support system. We will respond within 15 days and may require account verification, supporting documentation, and specific details about the information to be corrected.
Right to Erasure: You have the right to request the deletion of your personal data when there is no compelling reason for its continued processing. This includes the ability to delete your account, remove specific data points, and withdraw previous consent. To exercise this right, you can use our account deletion tool or submit a formal erasure request. We will respond within 30 days and may require password confirmation, identity verification, and explicit confirmation of deletion request.
Right to Restrict Processing: You have the right to limit the ways in which we use your personal data when you have concerns about its accuracy or our processing methods. This includes the ability to temporarily pause data processing, limit processing to specific purposes, and contest the accuracy of your data. To exercise this right, you can submit a processing restriction request through our privacy portal. We will respond within 20 days and may require account ownership proof, specific processing concerns, and desired restriction scope.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and transmit it to another service provider. This includes the ability to download your data, transfer information between services, and receive data in a machine-readable format. To exercise this right, you can use our data export tool or submit a portability request. We will respond within 30 days and may require account verification, specific data scope requirements, and preferred format specifications.Data Processing and Security Measures
We process Service Data which includes user account details, profile information, and service preferences. This processing involves automated collection and analysis, enabling us to provide personalized eyewear recommendations and virtual try-on services. For example, in the context of smart eyewear, this includes facial measurements, style preferences, and prescription details. The legal basis for this processing is contractual necessity and legitimate interests, specifically to provide our core services and improve user experience.
We process Technical Data which includes device information, IP addresses, browser type, and usage patterns. This processing involves automated logging and analysis, enabling us to optimize website performance and ensure security. For example, this includes tracking device compatibility for AR features and monitoring system performance. The legal basis for this processing is legitimate interests, specifically to maintain service quality and security.
We process Communication Data which includes customer service interactions, feedback submissions, and marketing preferences. This processing involves record-keeping and analysis, enabling us to provide customer support and improve our services. For example, this includes chat logs, support tickets, and email correspondence. The legal basis for this processing is consent and legitimate interests, specifically to maintain communication records and enhance customer service.
We process Transaction Data which includes purchase history, payment information, and shipping details. This processing involves secure payment processing and order fulfillment, enabling us to complete transactions and maintain accurate records. For example, this includes frame purchases, lens upgrades, and warranty claims. The legal basis for this processing is contractual necessity and legal obligations, specifically to fulfill orders and comply with tax regulations.
We process Preference Data which includes style choices, saved items, and browsing history. This processing involves preference tracking and analysis, enabling us to provide personalized recommendations and improve user experience. For example, this includes favorite frame styles, lens preferences, and shopping cart contents. The legal basis for this processing is legitimate interests and consent, specifically to enhance user experience and provide relevant suggestions.
Security Measures
Our comprehensive encryption protocols ensure end-to-end protection of your data, incorporating industry-standard algorithms and regular security updates to maintain data integrity. This includes regular security assessments and penetration testing by qualified professionals.
We implement multi-layered security infrastructure, including advanced firewalls and intrusion detection systems that continuously monitor for and prevent unauthorized access attempts. This infrastructure undergoes regular updates and enhancements.
Access to personal data is strictly controlled through role-based permissions, multi-factor authentication, and detailed access logs. We maintain comprehensive audit trails of all data access and modifications.
Our continuous monitoring systems provide real-time threat detection and automated response protocols, ensuring immediate action against potential security threats.
We maintain comprehensive backup procedures with encrypted offsite storage and regular recovery testing, ensuring data availability and integrity.
All staff undergo regular security awareness training and must comply with detailed data protection protocols, including specific training for handling sensitive data.
International Transfers
We may transfer your personal data to countries outside your jurisdiction. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses, Binding Corporate Rules, and approved certification mechanisms. Each international transfer is conducted under strict protocols that ensure:
– Adequate data protection standards
– Compliant processing procedures
– Enforceable data subject rights
– Effective legal remedies
International transfers are protected by EU Standard Contractual Clauses, Privacy Shield Framework, and ISO 27001 certification, ensuring compliance with GDPR and other relevant regulations. We implement additional measures including:
– Regular compliance audits
– Data protection impact assessments
– Documented transfer mechanisms
– Continuous monitoring procedures
Regarding international transfers, you maintain specific rights including:
– Right to information about transfers
– Right to object to transfers
– Right to withdraw consent
– Right to data protection guarantees
Data Retention
We maintain specific retention periods for different data categories:
Account Information: 7 years from account closure to comply with legal requirements and handle potential disputes
Usage Data: 2 years to analyze long-term usage patterns and improve services
Transaction Records: 10 years to comply with tax and accounting regulations
Communication History: 3 years to maintain service quality and handle ongoing customer relations
Technical Logs: 1 year for security monitoring and system optimization
These retention periods are determined by:
– Legal requirements
– Business purposes
– Technical necessities
– User preferences
Special circumstances affecting retention:
– Legal obligations
– Dispute resolution
– Security investigationsCookie Policy for smart-specs.com
Essential cookies serve fundamental functions for our website operations. These cookies process authentication tokens, security parameters, and session data to maintain basic site functionality. In our context, these cookies enable secure user login, manage shopping cart sessions, and ensure secure transactions during prescription eyewear purchases.
Functional cookies enhance your browsing experience by remembering your preferences. They enable personalized lens recommendations, frame size preferences, and virtual try-on settings. These cookies store your preferred language, region-specific content, and user interface customizations to provide a seamless shopping experience for eyewear.
Analytics cookies help us understand how visitors interact with our website. They collect information about how users navigate through our frame collections, which lens options are most viewed, and how long customers spend using our virtual try-on feature. This data helps us improve our product offerings and user experience.
Performance cookies assess and optimize our website’s technical performance. They monitor loading times of 3D frame renders, identify any issues with virtual try-on functionality, and ensure smooth content delivery across our product catalog. These cookies are crucial for maintaining optimal site speed and functionality.
Cookie Management
You can control your cookie preferences through your browser settings, our cookie consent banner, or your account privacy preferences. We provide granular control over non-essential cookies while maintaining necessary functionality for core features.
GDPR Compliance
For EU residents, we implement strict data protection measures including explicit consent mechanisms for all non-essential cookies. We limit data collection to necessary information for eyewear prescriptions and purchases, maintain transparent processing practices, and strictly adhere to storage limitations.
CCPA Compliance
California residents are entitled to comprehensive rights regarding their personal information. This includes knowing what prescription and measurement data we collect, requesting deletion of stored information, opting out of data sharing, and accessing collected information without discrimination.
COPPA Compliance
For users under 13, we require parental consent before collecting any personal information. This includes strict age verification procedures, limited data collection for prescription eyewear, and special protection measures for young users’ information. Parents maintain complete access rights to their children’s data.
Updates and Changes
We regularly review and update our privacy policies to maintain compliance with evolving regulations. Users receive notifications of significant changes, and we maintain clear documentation of updates while continuously monitoring compliance requirements.
Contact Information
For privacy-related inquiries:
Primary Contact: [email protected]
Response Time: Within 48 hours
Verification Required: For data-related requests
Available Support: Privacy concerns, data requests, rights exercise
This policy was created specifically for smart-specs.com and covers all associated services within the eyewear industry.