SUCCESS VISION EXPRESS

PRIVACY POLICY AND NOTICE OF PRIVACY PRACTICES

Effective Date: July 13th, 2026

IMPORTANT NOTICE

This document contains two related but distinct sections:

Part I — Website and General Privacy Policy explains how Success Vision Express collects, uses, and protects personal information through its websites, online services, customer-service communications, purchases, applications, and other general business activities.

Part II — HIPAA Notice of Privacy Practices explains how participating eye-care providers and covered health care entities may use and disclose protected health information and describes patients’ rights concerning that information.

Not all information collected by Success Vision Express is protected health information under HIPAA. Whether HIPAA applies depends on the organization receiving the information, the reason it was collected, and how it is maintained.

PART I

WEBSITE AND GENERAL PRIVACY POLICY

1. Scope of This Policy

This Website and General Privacy Policy applies to websites, online stores, forms, customer-service channels, and other services operated by Success Vision Express that link to this policy, including:

successvision.com
shop.successvision.com
Other Success Vision Express websites or online services that link to this policy

This section applies to ordinary personal information collected through activities such as:

Browsing our websites
Purchasing glasses, gift cards, or other products
Contacting Customer Service
Submitting an online form
Requesting information about a location or service
Applying for employment
Signing up to receive communications
Interacting with our advertisements or social-media pages

Medical records and protected health information maintained by a participating eye-care provider are addressed separately in Part II — HIPAA Notice of Privacy Practices.

2. Information We Collect

The information we collect depends on how you interact with us.

Information You Provide Directly

We may collect information that you voluntarily provide, including:

Name
Email address
Telephone number
Mailing, shipping, or billing address
Preferred Success Vision location
Order and transaction information
Gift-card purchaser and recipient information
Customer-service inquiries and correspondence
Information included in contact forms
Employment application and recruiting information
Communication preferences
Other information you choose to provide

Please do not submit medical records, detailed health information, Social Security numbers, financial account credentials, or other highly sensitive information through a general customer service or contact form unless the form specifically requests that information.

Information Collected Through Purchases

When you make a purchase, we may collect or receive:

Products or services purchased
Transaction amount
Date and location of purchase
Shipping or pickup information
Payment status
Refund or adjustment information
Limited payment-card information provided by our payment processor

Complete payment-card numbers may be collected and processed directly by third-party payment providers rather than stored by Success Vision Express.

Information Collected Automatically

When you use our websites, we or our service providers may automatically collect information such as:

Internet Protocol address
Browser type
Device type
Operating system
Pages viewed
Links selected
Referring website or advertisement
Dates and times of access
Approximate geographic area
Website performance and diagnostic information
Cookie and similar technology identifiers

Information Received From Other Sources

We may receive information from:

Payment processors
Shipping and fulfillment providers
Advertising and analytics providers
Social-media services
Recruiting or employment platforms
Affiliated Success Vision locations or organizations
Participating eye-care providers, when permitted by law
Other service providers supporting our operations

3. How We Use Personal Information

We may use personal information to:

Process and fulfill purchases
Provide gift cards and other requested products
Respond to questions, complaints, and customer-service requests
Communicate about orders, appointments, services, and locations
Verify or correct customer information
Process returns, refunds, or warranty claims
Operate and improve our websites and services
Measure website traffic and performance
Understand how customers use our services
Maintain the security of our websites, systems, and locations
Detect fraud, misuse, unauthorized access, or other security concerns
Conduct recruiting and employment activities
Maintain financial, tax, transaction, and business records
Comply with legal, regulatory, insurance, and contractual obligations
Establish, exercise, or defend legal rights
Protect our customers, employees, affiliated organizations, and the public
Perform other activities disclosed when the information is collected

4. Cookies, Analytics, and Similar Technologies

Our websites may use cookies, pixels, log files, tags, and similar technologies to:

Operate website features
Remember preferences
Maintain shopping-cart or session functionality
Analyze website usage
Diagnose technical problems
Measure the performance of advertising or communications
Improve website content and customer experience
Help prevent fraud or unauthorized use

We may use third-party analytics or advertising services, including Google Analytics or Google Ads.

These providers may collect information about your interactions with our websites. Their collection and use of information may also be governed by their own privacy policies.

Most browsers allow users to block or delete cookies. Blocking certain cookies may prevent portions of the website from functioning correctly.

5. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

Service Providers

We may disclose information to companies that perform services for us, including:

Website hosting
Cloud storage
Payment processing
Shipping and order fulfillment
Gift-card processing
Customer communications
Email and text-message delivery
Analytics
Advertising
Fraud prevention
Cybersecurity
Recruiting
Professional and technical support

These providers may use information only as permitted by their agreements with us and applicable law.

Success Vision Locations and Affiliated Organizations

We may disclose information to a Success Vision location, affiliated organization, or participating eye-care provider when reasonably necessary to:

Respond to your request
Process or service an order
Coordinate care or services
Resolve a customer-service matter
Comply with legal or operational requirements

Medical information is disclosed only as permitted by applicable health-privacy laws and the HIPAA portion of this notice.

Legal and Safety Purposes

We may disclose information:

To comply with a law, regulation, subpoena, court order, or governmental request
To investigate fraud, misuse, or a security incident
To protect the rights, safety, and property of Success Vision Express, our customers, employees, providers, or others
To enforce agreements or policies
To establish, exercise, or defend legal claims

Business Transactions

Information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable legal protections.

6. Sale and Sharing of Personal Information

Success Vision Express does not sell personal information in exchange for money.

Certain state privacy laws may define terms such as “sale,” “sharing,” or “targeted advertising” more broadly than an ordinary monetary sale. Our use of analytics or advertising technologies may be subject to those definitions depending on the services we use and the law applicable to the individual.

Where applicable state law provides greater privacy protections than federal law, we will comply with those requirements.

7. Communications

We may send communications concerning:

Orders and purchases
Appointments
Customer-service inquiries
Warranty or product matters
Services you requested
Important policy, security, or operational notices
Promotional offers, when permitted

Promotional emails will include an unsubscribe method where required. Unsubscribing from promotional communications does not prevent us from sending necessary transactional, service-related, or legally required communications.

Text-message programs may be governed by additional consent language and program terms provided when a person enrolls.

8. Information Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against:

Unauthorized access
Improper use
Loss
Alteration
Destruction
Unauthorized disclosure

No website, electronic transmission, or information-storage method is completely secure. We cannot guarantee that information will never be accessed, used, or disclosed improperly.

9. Data Retention

We retain personal information for as long as reasonably necessary to:

Complete the purpose for which it was collected
Provide requested products or services
Maintain appropriate transaction and business records
Meet legal, regulatory, tax, accounting, insurance, or contractual obligations
Resolve disputes
Prevent fraud
Maintain security
Enforce agreements

Retention periods vary according to the type of information and the purpose for which it is maintained.

Medical records and protected health information may be subject to separate legal retention requirements.

10. Children’s Privacy

Our general websites and online services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through our general website services.

A parent or legal guardian who believes a child has submitted personal information may contact us using the information at the end of this document.

This section does not prohibit a parent or guardian from providing information about a minor when obtaining lawful eye-care or optical services.

11. Employment Information

Information submitted through an employment application or recruiting process may be used to:

Evaluate qualifications
Communicate with an applicant
Conduct permitted background or reference checks
Make recruiting and employment decisions
Maintain legally required employment records

Employment information may be governed by additional notices or laws and is not ordinarily protected health information under HIPAA.

12. Third-Party Websites

Our websites may contain links to third-party websites, services, payment providers, social-media platforms, or other external resources.

Success Vision Express does not control and is not responsible for the privacy, security, availability, or content of third-party services. You should review their privacy policies before submitting information.

13. Your Privacy Choices and Requests

Depending on applicable law and the nature of the information, you may ask us to:

Provide information about personal information associated with you
Correct inaccurate personal information
Delete information we are not required or permitted to retain
Stop sending promotional communications
Review a concern about our information practices

We may need to verify your identity before fulfilling a request. We may deny or limit a request where permitted by law, including when information must be maintained for legal, security, fraud-prevention, transaction, medical-record, or operational purposes.

Requests concerning protected health information should be made according to the procedures described in Part II.

PART II

HIPAA NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, HOW YOU CAN OBTAIN ACCESS TO THIS INFORMATION, AND WHAT RIGHTS YOU HAVE CONCERNING IT.

Please review it carefully.

14. Who Is Covered by This Notice

This section applies to the participating health care providers and covered entities identified below:

[Insert complete legal names of covered providers or participating entities.]

This notice may also apply to members of their workforces and to health care professionals who are permitted to use or disclose protected health information through an organized health care arrangement, where applicable.

Success Vision Express optical retail operations may work with or be located next to affiliated or independently operated eye-care providers. The exact entity maintaining a patient’s medical record may depend on the location and provider furnishing care.

Questions about which entity maintains your medical record should be directed to the office where you received care.

15. Our Responsibilities

We are required by law to:

Maintain the privacy and security of your protected health information
Provide you with this Notice of Privacy Practices
Explain our legal duties and privacy practices
Follow the terms of the notice currently in effect
Notify you promptly if a breach occurs that may have compromised the privacy or security of your protected health information

We will not use or disclose your protected health information except as described in this notice or as otherwise permitted or required by law.

If you give us written authorization to use or disclose information, you may revoke that authorization in writing at any time. Revocation will not affect actions already taken in reliance on the authorization.

16. How We May Use and Disclose Protected Health Information

Treatment

We may use or disclose protected health information to provide, coordinate, or manage your care. Examples include:

Scheduling appointments
Examining or testing your eyes
Documenting medical history
Writing or verifying prescriptions
Ordering glasses, contact lenses, medications, or medical devices
Referring you to another provider
Consulting with another health care professional
Obtaining information from another provider involved in your care
Coordinating treatment with an optical location, laboratory, pharmacy, specialist, or other provider

Payment

We may use or disclose protected health information to bill for services and obtain payment. Examples include:

Verifying insurance eligibility or benefits
Obtaining prior authorization
Preparing and submitting claims
Responding to requests from a health plan
Collecting deductibles, copayments, coinsurance, or unpaid balances
Reviewing whether a service is covered
Coordinating benefits with another payer

Health Care Operations

We may use or disclose protected health information to operate and improve our health care activities. Examples include:

Quality assessment and improvement
Training and supervision
Credentialing and licensing
Auditing and compliance
Business planning
Customer service
Reviewing provider performance
Conducting legal or risk-management activities
Maintaining and securing records
Evaluating services and outcomes
Participating in managed-care arrangements

17. Other Uses and Disclosures Permitted or Required Without Written Authorization

We may use or disclose protected health information without written authorization where permitted or required by law, including for:

Public Health and Safety

Reporting certain diseases or conditions
Preventing or controlling disease
Reporting adverse events involving drugs or medical devices
Reporting suspected abuse, neglect, or domestic violence
Preventing or reducing a serious and imminent threat to health or safety

Health Oversight

Audits
Investigations
Inspections
Licensing actions
Government benefit-program oversight
Civil-rights or regulatory investigations

Legal Proceedings

Responding to a lawful court or administrative order
Responding to certain subpoenas or discovery requests
Defending or pursuing legal claims

Law Enforcement

Responding to certain lawful law-enforcement requests
Reporting suspected crimes occurring on our premises
Locating a suspect, fugitive, missing person, or victim where legally permitted
Reporting certain wounds, injuries, or deaths as required by law

Coroners, Medical Examiners, and Funeral Directors

We may disclose information as necessary to identify a deceased person, determine a cause of death, or assist with lawful funeral responsibilities.

Organ and Tissue Donation

We may disclose information to organizations involved in organ, eye, or tissue donation and transplantation.

Workers’ Compensation

We may disclose information as authorized by and necessary to comply with workers’ compensation laws.

Research

We may use or disclose information for approved research when legal requirements and privacy protections are satisfied.

Specialized Government Functions

We may disclose information for certain lawful military, national-security, intelligence, protective-service, correctional-institution, or government-benefit purposes.

Required by Law

We may use or disclose information whenever another law requires us to do so.

18. Business Associates

We may disclose protected health information to business associates that perform services for us, such as:

Billing
Claims processing
Information technology
Data hosting
Record storage
Legal services
Accounting
Auditing
Consulting
Communications
Practice-management support

Business associates are required by law and contract to appropriately safeguard protected health information.

19. People Involved in Your Care

Unless you object, we may disclose information relevant to your care or payment to:

A family member
A friend
A caregiver
Another person you identify as being involved in your care

We may also make reasonable disclosures when you are incapacitated, unavailable, or during an emergency, when we determine that the disclosure is in your best interest and is permitted by law.

20. Appointment Reminders and Health-Related Communications

We may use your contact information to:

Remind you of appointments
Notify you that it may be time for routine care
Communicate about test results, prescriptions, orders, or follow-up care
Inform you about treatment alternatives
Tell you about health-related products, benefits, or services that may be of interest

Communications may be made by telephone, voicemail, mail, email, text message, or another method permitted by law and selected or accepted by you.

You may request a reasonable alternative communication method as described below.

21. Uses and Disclosures Requiring Written Authorization

We will obtain written authorization for uses and disclosures not otherwise permitted or required by law.

Written authorization is generally required for:

Most uses and disclosures of psychotherapy notes, if we maintain them
Most uses and disclosures for marketing purposes, subject to legal exceptions
A sale of protected health information, subject to legal exceptions
Other uses or disclosures not described in this notice

We do not condition treatment on your signing an authorization except where permitted by law.

You may revoke an authorization in writing, except to the extent we have already acted in reliance on it.

22. Substance Use Disorder Records

To the extent we receive or maintain records protected by federal substance use disorder confidentiality law, those records may receive protections in addition to HIPAA.

Such records may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against an individual unless specifically authorized by the individual or permitted by a court order or other applicable law.

[Counsel should approve the final wording and determine whether additional Part 2 language applies to the covered entities.]

23. Your Rights Concerning Protected Health Information

You have the following rights, subject to limitations permitted by law.

Obtain an Electronic or Paper Copy

You may ask to inspect or obtain an electronic or paper copy of protected health information maintained in a designated record set.

We will generally respond within the period required by law. We may charge a reasonable, cost-based fee where permitted.

In limited circumstances, we may deny access. If access is denied, we will provide an explanation and tell you whether the denial may be reviewed.

Request a Correction

You may ask us to correct protected health information that you believe is inaccurate or incomplete.

We may deny the request in certain circumstances, but we will explain the reason in writing. You may submit a statement of disagreement as permitted by law.

Request Confidential Communications

You may ask us to contact you in a specific way or at a particular location.

For example, you may ask us to call a work telephone number instead of a home number or to mail information to a different address.

We will accommodate reasonable requests as required by law.

Request Restrictions

You may ask us not to use or disclose certain information for treatment, payment, or health care operations.

We are not required to agree to most requested restrictions.

However, when you pay in full out of pocket for a health care item or service, you may ask us not to disclose information about that item or service to your health plan for payment or health care operations. We will honor that request when required by law.

Obtain an Accounting of Disclosures

You may request a list of certain disclosures made during the period permitted by law.

The accounting will not include every disclosure. For example, it generally will not include disclosures for treatment, payment, health care operations, disclosures authorized by you, and certain other disclosures excluded by law.

One accounting within 12 months will be provided without charge. We may charge a reasonable fee for additional requests.

Obtain a Copy of This Notice

You may request a paper copy of this notice at any time, even if you previously agreed to receive it electronically.

Choose Someone to Act for You

A legally authorized personal representative may exercise your rights and make choices about your protected health information.

We may require documentation establishing that person’s legal authority.

Receive Notification of Certain Breaches

You have the right to be notified following a breach of unsecured protected health information when notification is required by law.

24. Our Choices and Your Choices

In certain situations, you may tell us your preferences concerning whether we:

Share information with family members, friends, or caregivers
Include information in a facility directory, if applicable
Contact you for fundraising purposes, if applicable

When you are unable to express a preference, such as during an emergency, we may disclose information if we determine that doing so is in your best interest and is permitted by law.

We may also disclose information when necessary to reduce a serious and imminent threat to health or safety.

25. Complaints Concerning Protected Health Information

You may complain if you believe your health-information privacy rights have been violated.

You may submit a complaint to:

Success Vision Express

To help us investigate and direct your complaint, please identify:

The office or location involved
The approximate date
The information or conduct involved
The resolution you are requesting, if any

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. Information is available at www.hhs.gov/ocr.

We will not retaliate against you for filing a complaint.

26. Changes to the HIPAA Notice

We reserve the right to change this Notice of Privacy Practices as permitted by law.

A revised notice may apply to protected health information we already maintain and to information received or created in the future.

If we make a material change, we will:

Post the revised notice at locations where required
Make copies available upon request
Post the revised notice on our website
Take any additional steps required by law

PART III

GENERAL CONTACT INFORMATION

27. Website and General Privacy Questions

Questions or requests concerning the website, online purchases, contact forms, cookies, customer communications, or other non-HIPAA personal information may be submitted to: