Privacy Policy - Open Eye World

1. Introduction

At OpenEyeWorld.com (“we”, “us”, “our”), we respect your right to privacy and are committed to safeguarding the personal data we collect about visitors, users, and customers. We maintain a strong commitment to ensuring that your personal information is properly managed in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy explains how we collect, use, disclose, and protect your personal data, and outlines your rights and choices regarding your personal information.

2. Scope of This Policy & Role as Data Controller

This Privacy Policy applies to personal data processed in connection with your use of our website (openeyeworld.com), and any services, features, and content offered through it. We operate as the data controller for all personal data collected, meaning we determine the purposes and means of processing your personal data.

3. Categories of Personal Data We Process

We collect and process the following categories of personal data:

(a) Usage Data:
Includes details of your visits and interactions with openeyeworld.com, such as browser type and version, IP address, geographic location, referring website, pages visited, time spent, and navigation paths.

(b) Account Data:
Includes personal identifiers such as full name, mailing address, email address, telephone number, and any other details you submit when registering an account or completing a form on our site.

(c) Profile Data:
Includes preferences, purchase history, interests, behavioral activity on the website, and any personalized features or settings you configure.

(d) Communication Data:
Includes records of communications with us, such as inquiries, feedback, support requests, chat transcripts, messaging history, and complaint records.

(e) Technical Data:
Includes information about devices used to access the site such as device model, operating system, screen resolution, and system language.

(f) Transaction Data:
Includes payment-related details, billing addresses, delivery information, purchase timestamps, and transactional correspondence.

(g) Preference Data:
Includes marketing preferences, consents provided for communication (e.g., opt-ins to newsletters), and indicated interests for products or content.

4. Legal Bases for Processing

We rely on one or more of the following legal bases for processing your personal data in accordance with the GDPR and CCPA principles:

– Performance of a Contract: When processing is necessary to fulfill obligations under a contract with you or to take steps upon your request before entering into such a contract.
– Consent: With your clear and affirmative consent, such as accepting marketing communications or non-essential cookies.
– Legitimate Interests: Where processing is necessary for our legitimate business interests, such as IT security, fraud prevention, and improving our services, provided such interests are not overridden by your data protection rights.
– Legal Obligation: To comply with legal obligations, regulatory requirements, or to respond to lawful requests from competent authorities.

5. Your Rights

Subject to applicable data protection laws, you have the following rights:

– Right of Access: To obtain confirmation of whether your personal data is processed, and to access that information.
– Right to Rectification: To request correction or update of inaccurate, incomplete, or outdated information.
– Right to Erasure (“Right to be Forgotten”): To request deletion of your personal data, subject to certain exceptions.
– Right to Restrict Processing: To limit the way your data is processed in certain circumstances.
– Right to Data Portability: To receive personal data you have provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another controller without hindrance.
– Right to Object: To object at any time to the processing of your data when processing is based on legitimate interest or for direct marketing purposes.

To exercise any of the above rights, please contact us using the contact details provided in Section 13.

6. Security Measures

We implement and maintain appropriate technical and organizational safeguards to protect your personal data from unauthorized access, accidental loss, unlawful disclosure, or corruption. These measures include, but are not limited to:

– AES256 encryption of privileged communications and sensitive data
– Secure firewalls and continuous monitoring
– Multi-factor authentication and strict access control practices
– Regular data backups in secure environments
– Staff training in data protection protocols and security awareness

7. International Transfers

Your personal data may be transferred to, and processed in, countries outside the European Economic Area (EEA) or California, depending on your location and service use. In such cases, we comply with applicable laws governing international data transfers:

– Utilizing European Commission-approved Standard Contractual Clauses (SCCs) for data transfers
– Assessing adequacy decisions by the European Commission
– Implementing supplementary technical and contractual safeguards

8. Data Retention

We retain your personal data only as long as necessary for the fulfilment of the purposes outlined in this Privacy Policy, or as legally required. Specific retention periods include:

– Usage, Technical, and Analytical Data: Up to 24 months from date of collection
– Account and Profile Data: Retained for the lifetime of your account plus 12 months after account closure
– Communication Data: Retained for 36 months following the final communication
– Transaction Data: Retained for 7 years for compliance with financial and tax regulations
– Preference Data: Retained until opt-out or withdrawal of consent

Data may be anonymized for statistical analysis beyond these periods.

9. Cookie Policy

We use cookies and similar tracking technologies to enhance the user experience and collect information about how openeyeworld.com is used. Categories of cookies include:

– Essential Cookies: Needed for site functionality, account logins, and secure areas.
– Functional Cookies: Remember your preferences and settings to improve usability.
– Analytics Cookies: Analyze site traffic, click behavior, and engagement to optimize content.
– Performance Cookies: Assess the performance and responsiveness of features and tools.

10. Cookie Management & Compliance

We provide a cookie banner and management tool that allows you to accept or reject non-essential cookies in accordance with GDPR and CCPA requirements. You can change your cookie preferences at any time through your browser settings or via the cookie preference center on openeyeworld.com.

Website visitors from the EU and California will be offered transparent cookie disclosures and granular opt-in controls as per regulatory requirements.

11. Children’s Privacy

We do not knowingly collect or process personal data from children under the age of 13. If you believe that we have inadvertently collected personal information from a minor without appropriate parental consent, please contact us to investigate and remove the data as appropriate.

12. Updates to This Policy

We reserve the right to amend or update this Privacy Policy at any time to reflect changes in technology, data protection law, or our practices. Users will be notified through prominent website notices or via email communication where legally required. Continued use of openeyeworld.com constitutes acceptance of revised policy terms.

13. Contacting Us

For any questions regarding this Privacy Policy, or to exercise your data protection rights, please reach out to us at:

Email: [email protected]
Website: https://www.openeyeworld.com

We are committed to maintaining transparency and accountability in how your data is handled and welcome your feedback on any aspect of this policy.

Your trust is important to us. By using openeyeworld.com, you confirm that you have read and understood this Privacy Policy. For privacy-related concerns, contact us at any time, and our team will provide timely assistance in accordance with applicable privacy laws.