Privacy Policy

1. Information We Collect

• Account and contact information: your name, email address, phone number, and password (stored encrypted) when you register or sign in.
• Order information: items purchased, delivery address, payment evidence, and order history.
• Prescription information: eye prescription and details needed to fulfil lens orders, only when you provide them.
• Usage information: cookies, IP address, device and browser type, to keep the website working and secure.

2. Signing In with Social Accounts (Google, Facebook, LINE)

• When you sign in with Google, Facebook, or LINE, we receive basic profile information from that provider, including your display name, profile picture, and an account identifier.
• When you sign in with LINE, we request your email address in order to send receipts, confirm orders, and share news or promotions. If you do not grant access to your email, you can still use your account normally.
• We use social sign-in data only to create and identify your member account. We never post or act on your behalf on those social accounts.

3. How We Use Your Data

• Create and manage your member account and let you sign in.
• Process orders, deliver products, and issue receipts.
• Contact you about orders, eye-exam appointments, and after-sales service.
• Send news and promotions, only with your consent, which you can withdraw at any time.
• Maintain security, prevent fraud, and improve our services.

4. Disclosure to Third-Party Service Providers

• We share data only as necessary with service providers that help us operate, such as our membership and database provider (Supabase), payment providers, and delivery companies.
• We do not sell your personal data to third parties, and we require these providers to protect your data to appropriate standards.
• We may disclose data when required by law, or to protect rights and safety.

5. Cookies

We use essential cookies to maintain your sign-in state (session) and keep the website working correctly, as well as analytics cookies to improve our services. You can configure your browser to refuse cookies, but some features may not work fully.

6. Data Retention

We retain personal data only as long as necessary for the purposes above, or as required by law. When no longer needed, we delete or anonymise the data.

7. Your Rights under PDPA

• You have the right to access, obtain a copy of, correct, delete, restrict, or object to the processing of your personal data, as well as the right to withdraw consent at any time.
• To exercise these rights or ask questions about your data, please contact us using the details below.

8. Data Deletion

• You can request deletion of your account and personal data at any time by contacting us via the email or phone listed under “Contact Us” below, stating the email or account name you use.
• If you signed in with Google, Facebook, or LINE, we will also remove the data linked to that social account from our systems.
• We will complete the deletion within 30 days after verifying your identity, except for data we are legally required to retain, such as tax documents or receipts.

9. Data Security

We apply appropriate technical and organisational measures to protect your data, such as password encryption and encrypted connections (HTTPS), and we limit data access to relevant personnel only.

10. Changes to This Policy

We may update this policy from time to time. Changes take effect when published on this page, along with the last updated date.