Last updated June 11th, 2020
For your convenience, this Site or our Services may contain links to other websites. This Policy and procedures described here do not apply to those sites.
Application means the software program provided by the Company downloaded by You on any electronic device, named Vivid Vision
Account means a unique account created for You to access our Service or parts of our Service.
Country means the United States of America.
Device means any device that can access the Service such as a computer, a cellphone, tablet, or head-mounted display.
Distributor means any authorized agent who supplies the Service to businesses and consumers in accordance with a contract with the Company.
Personally Identifiable Information (“PII”) means any information relating to a natural person
Service refers to the websites and any Vivid Vision-branded software and applications
Third-party Applications means any services or content (including data, information, products or services) provided by a third-party that may be displayed, included or made available by the Service.
You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
We comply with the Data Protection Act no 2472/1999, Law no. 3471/2006 and the General Data Protection Regulation (EU) 2016/679 (also known as the “EU Privacy Laws”) when gathering, using, disclosing, or otherwise processing personal data about you. Vivid Vision is classified as a data controller or joint controller depending on how our Services are utilized. Our address is Vivid Vision, Inc. 424 Treat Avenue, Unit B San Francisco, CA 94110, USA.
What Type of Information Do We Collect?
We may collect, use, store, and/or transfer the following information to provide, improve, and protect our Services:
Contact Information - name, title, address, personal or clinic/practice address, email address, and/or phone number
User Information - username, password, purchase details, billing address and payment information, professional organization affiliation
Technical Information - your IP address, operating system, software platform, device ID, usage data and other technical information on the device you use to access our Services
Health Information - limited information regarding conditions affecting your vision
Marketing Information - marketing preferences, tracking pixels, browser type and similar information set by you regarding marketing collected from us using our Services
How We Use the Information We Collect
We use information to enhance and provide features, products, and functionality for our Services. These uses may include:
You have the ability to opt-in, opt-out, limit, review, or request we delete this information at any time by contacting us using the contact details at the end of this Policy.
User Information may be used for the creation of accounts and user profiles and to provide you the Service (both paid and unpaid)
Contact and Marketing Information may be used for communication with you about our application or the device(s) used to access our application; for communications or marketing regarding our Services; and/or for notifications about updates to our Services, promotional information about new or current products, and notification about acquisition, merger, or partnership with other entities
Contact, User, and Technical information may be used for the provision of customer service and support
Technical information may be used for data logging and crash reports to enhance the operation of our services and to ensure secure, reliable, and robust performance of our application
Health Information may be used for the creation and provision of better vision tests and personalized treatment plans related to your visual conditions
Any Information may be used for compliance with legal obligations
We may collect personally identifiable information such as a username and email address when you register an account for personal/home use. Clinics using Vivid Vision may be asked to provide name, email address, physical address, and payment information. In addition, clinics will create a unique username and account that is associated with a date of birth and information about the patient’s binocular vision status, such as the presence or absence of amblyopia and strabismus or other visual disorders. This information allows your clinician to create a treatment or testing plan unique to each patient.
Some of our Services may collect various types of anonymous and non-personally identifiable information, including device details and configuration, location data, head and/or body movements, IP address, and software logs and crash reports for all laptops, personal computers (PCs), mobile devices, and head mounted displays that access and use the software application. This information is important for optimizing our Services.
Visitors to the Vivid Vision Site interested in knowing if there is a clinic that offers our Services near them, or to be notified when such a clinic is available, have the option of providing their name, email address, and other contact information.
Visitors to the Vivid Vision Site interested in becoming a Vivid Vision provider have the option of providing the name and email address to Vivid Vision. If the request is from a territory in which we utilize the services of a Distributor, we may share contact information with a certified Distributor that services the requester’s area.
Visitors to the IHVT Site interested in becoming a participant in the I Heart VT program have the option of providing contact and payment information to enroll in the program. Vivid Vision may share contact information with a member’s affiliate professional organization for the purpose of providing credit for time spent during an educational event associated with the I Heart VT program.
Some of our Services use marketing information such as Google Analytics, Cookies, and similar technologies such as tracking pixels to improve them. Google Analytics provides an approximate location derived from the IP address that visited our website. Other anonymous data such as browser information, device information, operating system, and language are collected. Our websites may implement third-party software, such as reCAPTCHA, that collects your information for security purposes. We do not collect information such as gender, sex, or information related to personal finances. You can control cookies through your browser settings and other tools.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=en.
You can learn more about how to safeguard your data at: https://support.google.com/analytics/answer/6004245.
We use the Facebook Pixel from Facebook, Inc. 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland on our websites.
This allows visitor actions to be tracked after the user interacts with our Facebook advertisement. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous, however, this data is stored and processed by Facebook. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy/. You can prevent the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by visiting: https://www.facebook.com/settings?tab=ads.
What Information We Share
Vivid Vision takes your privacy seriously. We do not share your information with other third-party subprocessor applications or companies that have not been vetted by us, and will not send you marketing material without your consent. We do not sell your information.
Most visitors to our websites are not required to provide us with personal data. However, some components of our Services may require you to provide us with contact information. In these situations, if you choose to withhold this information, it may not be possible for us to provide access to certain parts of our website and for us to respond to your query. If you send us inquiries via the Vivid Vision Site or IHVT Site, your details from the inquiry form, including the contact details you provided there, will be stored in order to process the request. In the event that you are contacting us with the intent to purchase or use our Services, you may be connected with an authorized distributor in your area.
The Services may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to review the privacy policies of each website you visit or application you utilize.
We do not share information with third parties for their own direct marketing purposes. If we disclose any Protected Health Information (as that term is defined in 45 C.F.R. Part 160) to third parties, we will do so in accordance with the Health Insurance Portability and Accountability Act, as amended (“HIPAA”), the Health Information Technology for Economic and Clinical Health Act, as amended (“HITECH”), and any other applicable state and federal privacy and security laws, as they may be amended from time to time.
Patients looking for a clinic or eye care provider that offers Vivid Vision have the option of submitting contact information to a clinic through the Vivid Vision Site. Vivid Vision may share this information with the provider of your choice to help you schedule an appointment.
How We Protect Your Data
We have implemented measures intended to protect the privacy of users of our Services. These include encryption, pseudonymization, training, and other cybersecurity measures.
Our websites use secure socket layer (SSL) encryption for security and to protect the transmission of sensitive content, such as the requests you send to us. SSL encrypted connections display as "https://" and the lock symbol in your browser line. If SSL encryption is enabled, the data you submit to us cannot be read by third parties. All PII is contained behind a secure network and is only accessible by a limited number of individuals with access rights to such information.
Payment may be required to use our Services. Vivid Vision will never ask you for a credit card number by email. We only provide product information and articles. All online financial transactions are processed through a licensed third-party financial organization. These organizations include Chase Bank, Foxycart, Wix Payments, and Paypal. We encourage you to check the applicable privacy policies to determine how they will handle any personal information they collect from you.
We only collect and process personal data when we have a lawful basis. This includes consent (you have provided us with your consent to process data) and contract (processing of your data is necessary for the performance of a contract with you, for example providing Vivid Vision’s software application to you when your clinician activates a license for home use or other legitimate business interests in order to carry out any requests or orders made by you via our website). At any time, you can contact us to withdraw consent.
Vivid Vision has never been requested by a federal agency to disclose any of its customer's private information. Please note that in rare cases we may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.
How Long will Your Data Be Held?
For clinic notification (when a Vivid Vision clinic is available in your area) we will hold your contact information for at least 7 years. For contracted services, we will hold your data for at least 7 years in line with our own policies, business, and legal requirements.
Vivid Vision is committed to transparency regarding how your information is collected and shared. These third-party companies and individuals acting as our subprocessor help us to:
facilitate our Services
provide the Services on our behalf
perform Services-related services
Amazon Web Services, Inc.
Cloud service and infrastructure provider
Atlassian Pty Ltd
Cloud-based collaboration tool
Call and fax service
Cloud storage and file hosting
FoxyCart.com LLC / Foxy.io
Software code repository
Cloud service provider, email, and storage
Cloud-based customer relationship management
JN Projects Inc. dba HelloSign
Cloud-based electronic signature and document storage
Slack Technologies, Inc.
Remote IT management service
The Rocket Science Group, LLC (MailChimp)
Cloud-based email and marketing services
Zoom Video Communications, Inc.
Video and web conferencing
We perform due diligence on each subprocessor to evaluate their privacy, security, and confidentiality practices and execute an agreement with them that implements their obligations.
You may have rights to access, update, rectify, port or erase certain personal information that we have about you or restrict or object to certain activities in which we engage with respect to your personal information. To submit a request with respect to these rights, please contact us at firstname.lastname@example.org and clearly describe your request.
We may in some cases transfer your personal data to service providers and business partners outside of the EEA. Some of these recipients may be located in countries for which the European Commission has issued adequacy decisions. In each case, the transfer is thereby recognized as providing an adequate level of data protection from a European data protection law perspective (GDPR Art. 45).
By entering into appropriate data transfer agreements based on Standard Contractual Clauses (2010/87/EU and/or 2004/915/EC) as referred to in GDPR Art. 46(5) or other adequate means, we have established that such recipients will provide an adequate level of data protection and that appropriate technical and organizational security measures are in place to protect personal data against accidental or unlawful destruction, loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of processing.
You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: https://edpb.europa.eu/about-edpb/board/members_en
The following is specific to individuals located in the European Economic Area (“EEA”), Switzerland, and the United Kingdom that provide Vivid Vision with Personal Data while providing services.
Pursuant to the Privacy Shield Frameworks, EU, UK, and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query to email@example.com. If requested to remove data, we will respond within a reasonable timeframe.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to firstname.lastname@example.org.
The Federal Trade Commission has jurisdiction over the Company’s compliance with the Privacy Shield.
In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Vivid Vision’s accountability for personal data that it receives in the United States under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Vivid Vision remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process personal data on its behalf do so in a manner inconsistent with the Principles, unless Vivid Vision proves that it is not responsible for the event giving rise to the damage.
You can ask for a copy of such appropriate data transfer agreements by contacting us using the contact details at the end of this Policy.
In compliance with the Privacy Shield Principles, Vivid Vision, Inc. commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield. European Union, United Kingdom, and Swiss individuals with Privacy Shield inquiries or complaints should first contact Vivid Vision at: email@example.com.
Vivid Vision has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/privacy-shield-complaints/for more information and to file a complaint. This service is provided free of charge to you.
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
California Online Privacy Protection Act (CalOPPA)
According to CalOPPA we agree to the following:
Users can visit our website anonymously
Users of our website or application are able to change their personal information by:
How does our site handle Do Not Track signals?
We honor Do Not Track signals and Do Not Track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
Do our websites allow third-party behavioral tracking?
We use the following tools to help us better understand web traffic and traffic patterns to better serve our customers:
Children's Online Privacy Protection Rule (COPPA)
When it comes to the collection of personal information from children under the age of 13 years old, the Children's Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States' consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children's privacy and safety online. We do not market to children under the age of 13 years old.
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe.
Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information. In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur, we will notify users via in-site notification within 7 business days.
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations. We collect your email address in order to:
Send information, respond to inquiries, and/or other requests or questions.
Market to our mailing list or continue to send emails to registered parties after the original transaction has occurred.
In accordance with CAN-SPAM, we agree to the following:
Not use false or misleading subjects or email addresses.
Identify the message as an advertisement in some reasonable way.
Include the physical address of our business or site headquarters.
Monitor third-party email marketing services for compliance, if one is used.
Honor opt-out/unsubscribe requests quickly.
Allow users to unsubscribe by using the link at the bottom of each email.
If at any time you would like to unsubscribe from receiving future emails, you can:
Follow the instructions at the bottom of each email
We will then remove you from ALL correspondence.
Modification, Review, and Contact
You can contact us at any time to:
Update, rectify, or request a portable copy of certain personal information that Vivid Vision has about you
Delete information that Vivid Vision has about you
If you have any additional questions about Vivid Vision’s collection, storage, or use of data, please contact us by:
Phone: (877) 877-0310
Fax: (888) 965-8846