Section 01

Who We Are

Section 02

Information We Collect

We collect the following categories of personal information when you visit our site or create an account.

Information You Provide Directly

• Name and contact information (first and last name, email address, phone number, mailing address)
• Account login credentials (username and password for your customer account)
• Order and transaction details (billing address, shipping address, products purchased)

Information Collected Automatically

• Browsing and usage data (pages visited, links clicked, time spent on pages)
• Device and technical information (IP address, browser type, operating system)
• Cookies and similar tracking technologies (see Section 6 for details)
• Referring URLs and search terms used to find our site

Analytics Data

We use analytics tools such as Google Analytics to understand how visitors use our site. This data is aggregated and used to improve our services.

Section 03

How We Use Your Information

• To process and fulfill your orders and transactions
• To create and manage your customer account
• To communicate with you about your orders, account, or customer service inquiries
• To send you promotional emails or newsletters (only with your consent, where required by law)
• To improve and personalize your experience on our site
• To analyze site traffic and usage trends
• To detect, prevent, and respond to fraud or security incidents
• To comply with applicable legal obligations

Section 04

Legal Bases for Processing

If you are located in a jurisdiction that requires a legal basis for processing personal data (such as the European Economic Area or the United Kingdom), we process your data under the following bases:

• Performance of a contract — To process your orders and provide our services
• Legitimate interests — To improve our site, prevent fraud, and send relevant communications
• Legal obligation — To comply with applicable laws and regulations
• Consent — For optional marketing communications, where required

Section 05

Sharing of Your Information

ESL Vision does not sell your personal information to third parties.

We may share your information with trusted service providers who assist us in operating our site and fulfilling orders, including:

• BigCommerce (e-commerce platform)
• Payment processors (e.g., Stripe, PayPal)
• Shipping and fulfillment carriers
• Email marketing platforms (if applicable)
• Analytics providers (e.g., Google Analytics)

These service providers are contractually obligated to protect your information and may only use it to perform services on our behalf. We may also disclose information when required by law, court order, or government authority, or to protect the rights, property, or safety of ESL Vision, our customers, or others.

Section 06

Cookies and Tracking Technologies

Our site uses cookies and similar technologies to enhance your experience. Cookies are small text files stored on your device. We use:

• Essential cookies — Necessary for the site to function (e.g., shopping cart, login session)
• Analytics cookies — To understand how visitors use our site (e.g., Google Analytics)
• Preference cookies — To remember your settings and preferences

You can control or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the site.

Section 07

Your Privacy Rights

Utah Residents — Utah Consumer Privacy Act (UCPA)

As a Utah-based company, we comply with the Utah Consumer Privacy Act (UCPA), effective December 31, 2023. Utah residents have the right to:

• Know what personal data we collect and how it is used
• Access a copy of the personal data we hold about you
• Request deletion of your personal data (subject to certain exceptions)
• Opt out of the sale of personal data (note: we do not sell personal data)
• Non-discrimination for exercising your privacy rights

California Residents — CCPA / CPRA

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of your personal information. We do not sell or share personal information as defined under California law. We will respond to verified requests within 45 days as required.

EEA, UK & International Users

If you are accessing our site from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. EEA and UK users may have additional rights under the GDPR or UK GDPR, including rights of access, rectification, erasure, restriction of processing, and data portability.

How to Exercise Your Rights

To submit a privacy request, please contact us at info@eslvision.com or by mail at our Salt Lake City address. We will respond within a reasonable timeframe, and within the legally required period where applicable.

Your rights at a glance

Section 08

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Customer account data is retained while your account is active and for a reasonable period thereafter. Transaction records may be retained for up to seven (7) years for legal and tax compliance purposes.

Section 09

Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our site is hosted on BigCommerce, which employs industry-standard security practices including SSL/TLS encryption.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Section 10

Children's Privacy

Our site is not directed to children under the age of 13 (or 16 where required by applicable law). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can take appropriate action.

Section 11

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

Section 12

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the Effective Date at the top of this page. We encourage you to review this policy periodically. Your continued use of the site after any changes constitutes your acceptance of the updated policy.

This Privacy Policy was prepared for ESL Vision, LLC and is intended to comply with applicable U.S. federal and state privacy laws including the Utah Consumer Privacy Act (UCPA), California Consumer Privacy Act (CCPA/CPRA), and relevant provisions of the GDPR for international visitors. This document does not constitute legal advice. ESL Vision recommends consulting a qualified attorney to ensure ongoing compliance.