Privacy policy

Service Name	Privacy Policy
Shopify	https://www.shopify.com/legal/privacy
Shop App	https://www.shopify.com/legal/privacy/consumers
Loox	https://loox.app/legal/privacy-policy-merchants
CWILL	https://www.parcelpanel.com/privacy-policy/
Gorgias	https://www.gorgias.com/legal/privacy
Seflnamed	https://www.selfnamed.com/en/policies/privacy-policy
Klaviyo	https://www.klaviyo.com/privacy
Google	https://policies.google.com/privacy
Google Fonts	https://developers.google.com/fonts/faq/privacy

 

3. How we use your information

We use your information for the following purposes:

• To fulfill your requests, including processing Product orders and responding to email inquiries;
• To support our core business operations, such as order fulfillment, internal process management, authentication, fraud prevention, and security functions;
• To communicate with you about our Products, updates, and promotional offers;
• To provide and maintain the functionality of our Sites and digital platforms;
• To improve and optimize our Sites and Products;
• To maintain your Eyrée account and any associated loyalty or rewards programs;
• To enhance our marketing efforts and promotional activities;
• To analyze usage patterns across our Sites, Products, and Communications for statistical and operational insights;
• To contact you when necessary;
• To resolve disputes, investigate issues, and enforce our terms and policies;
• To reconcile and validate data across internal systems to ensure accuracy and deliver personalized services;
• To diagnose technical issues, manage our servers, and improve the performance and reliability of our Sites and Products;
• To support or complete business transactions, including mergers, acquisitions, asset transfers, bankruptcy proceedings, or similar corporate events involving Smart Choice Commerce LLC.

4. How we disclose your information

We may disclose your information in the following circumstances:

• With your consent. We may disclose or make your information available with your consent, which may be provided in writing, online, through click‑through agreements, by accepting the terms on our Sites, orally, or through other means.
• With service providers and business partners. We may disclose or make your information available to Third‑Party entities that support our operations, including service providers, affiliates, business partners, payment processors, billing and customer service partners, auditors, legal advisors, marketing and advertising networks (including those providing ad‑measurement services), internet service providers, data analytics providers, and companies that help identify, debug, or repair issues affecting the functionality of our Sites. We may also disclose information in connection with financial products or services related to our business, as well as co‑branded Product offerings.
• In a business transfer. We may disclose or transfer your information as part of a business transaction, such as a merger, acquisition, joint venture, corporate reorganization, financing, or sale of company assets. In the event of insolvency, bankruptcy, or receivership, your information may be transferred as part of the company’s assets.
• In public forums. Some areas of our Sites may allow you to post content publicly. Any information you choose to submit in these public spaces may become publicly accessible.
• For legal process and protection. We may disclose or make your information available to comply with applicable laws, regulations, legal processes, or governmental requests, or when we believe in good faith that such disclosure is reasonably necessary to:
  • enforce or apply agreements or manage billing for the Sites;
  • protect our rights, interests, property, or safety, or those of others;
  • address claims, disputes, or litigation;
  • protect users and partners from fraudulent, abusive, unlawful, or improper use of our Sites;
  • support or verify the calculation of taxes, fees, or other obligations owed to governmental authorities.

5. How we secure your information

Although no system or online platform can guarantee absolute security, we take commercially reasonable measures to protect your information. These measures are designed to comply with applicable laws and regulations and are applied in a manner appropriate to the sensitivity of the information we process.

6. How long do we keep your information

We retain your information for as long as necessary to fulfill the purposes for which it was collected, to support our business operations, and to comply with applicable legal and regulatory requirements. When your information is no longer needed, we will dispose of it securely and in a manner appropriate to the sensitivity and nature of the data being deleted.

7. Links to third-party sites

Our Sites may include links to websites or applications owned or operated by Third‑Party entities. These links are provided for your convenience and informational purposes, but they operate independently from us and may have their own privacy policies or notices. This Privacy Policy does not govern the practices of those external websites or applications. We encourage you to review their privacy policies to understand how they collect, use, and protect your information.

8. Do Not Track

Our Sites may, at times, collect information about your online activities over time and across different sections of our digital platforms. When you use our Sites or interact with our Products or Communications, Third‑Party entities may also collect information about your online activities across various websites, online services, cloud platforms, and mobile applications.

Some browsers offer a “Do Not Track” feature, which is intended to signal to websites that you prefer not to be tracked across different online environments. At this time, our Sites do not adjust their operations in response to a “Do Not Track” or similar browser signal. However, our Sites do recognize a global privacy signal, as described in the Your choices section below.

9. Social media widgets and single sign-on services

Our Sites may use Third‑Party social media widgets, such as buttons or similar interactive features, provided by platforms including Facebook, Instagram, Pinterest, TikTok, Threads, X (formerly Twitter), and YouTube. These features may collect information about you, such as your IP address or the pages you visit on our Sites, and may place cookies or similar technologies on your device.

These widgets may be hosted directly by the Third‑Party platform or integrated into our Sites. Your interactions with these features are governed by the privacy policies of the respective social media providers that supply them.

10. Children

Our Sites are intended for use by adults, and we do not knowingly collect personal information from children under the age of 13. If you are a parent or legal guardian of a child under 13 and believe that your child may have provided personal information to us, please contact us so we can address the matter appropriately.

11. Your choices

Depending on your state of residence, you may have the following rights:

• Right to know / access / portability. You may request confirmation of whether we are processing your information, obtain details about such processing, and request a copy of your information, subject to applicable exceptions.
• Right to delete. You may request that Eyrée delete your information, subject to exceptions.
• Right to correct. You may request that Eyrée correct inaccurate information we maintain about you, subject to exceptions. Regardless of where you live, you may review and update your account information by logging into your online account or by contacting us directly.
• Limit the processing of sensitive personal information. If you are a California resident, you may request that Eyrée limit the processing of your sensitive personal information, subject to exceptions.
• Opt‑out of selling, sharing, or targeted advertising. Certain online tracking technologies we use may be considered a “sale,” “sharing,” or “targeted advertising” under applicable law. You may opt out by selecting the Your Privacy Choices link in the footer of our Sites. Because some activities may constitute “selling,” “sharing,” or targeted advertising outside of online tracking technologies, you may also submit a separate request through our Data Request page.
• You may additionally exercise your opt‑out rights through the Global Privacy Control (GPC) signal on supported browsers or extensions. If you enable GPC, it must be activated individually on each browser or extension you use. You can confirm that the signal is recognized by selecting Your Privacy Choices in the footer of our Sites.
• Right to appeal. You may appeal any denial of a request to access, delete, correct, or opt out. To exercise any of the above rights, please submit a request through our Data Request page.
• Additional health data rights. Residents of Nevada, Connecticut, or Washington may have additional rights regarding health data, including the right to access, delete, or appeal a denial of such requests. These rights may be exercised through our Health Data Request page.

Managing your preferences and account

• Opt‑out of promotional messaging. You may stop receiving promotional emails, special offers, or member‑exclusive updates by adjusting your email preferences in your Eyrée account or by contacting our support team. Please note that it may take several weeks for changes to take full effect.
• Opt‑out of texting. You may opt out of Eyrée text messages at any time by replying STOP to any message you receive from us. Message and data rates may apply.
• Opt‑out of push notifications. You may disable push notifications from Eyrée by adjusting the notification permissions on your device.
• Opt‑out of precise geolocation. Most browsers and mobile devices allow you to enable or disable precise geolocation through settings or pop‑up prompts. If you previously granted Eyrée access to precise geolocation data, you may revoke this permission at any time through your device or browser settings.
• Uninstall the mobile application. You may uninstall the Eyrée mobile application at any time using the standard uninstall process on your device or through your app marketplace. If you reinstall the application on the same device, the unique identifier associated with your device may allow us to reconnect your previous activity, as permitted by law.
• Removing content from public areas. If you have posted content in public areas of our Sites, you may request its removal by contacting us. Please note that historical copies may remain in our systems as permitted by law.
• Delete your Eyrée account. You may delete your Eyrée account at any time through the Eyrée mobile application. After submitting your request, we will send instructions to verify your identity and complete the deletion process. Please note that deleting your account may result in the loss of loyalty points or similar benefits, and Smart Choice Commerce LLC may retain certain information related to your purchase history as required by law.

12. AI notice

Consent to AI technology

Certain Eyrée services or features may be supported by Third‑Party vendors that use artificial intelligence technology. When you use an Eyrée feature powered by AI, the AI vendor(s) may record, analyze, or process information in real time and may use or disclose that information for their own purposes, including improving or training their AI models.

By using any feature supported by AI, you consent to the collection, use, analysis, and disclosure of Personal Information as described in this notice.

If you do not consent, please refrain from using the applicable feature.

Artificial intelligence notice

If you are a candidate for employment or an employee, Eyrée may use AI‑enabled tools, including automated or algorithmic systems, in connection with certain employment‑related processes, assessments, or evaluations. These tools may be used for purposes such as recruitment, screening, hiring, promotion, discipline, performance evaluation, or selection for training or advancement, as permitted by law.

Nature of the AI systems used

Eyrée may use one or more AI‑enabled systems that rely on machine learning, statistical modeling, data analytics, or other artificial intelligence methods. These systems may be used as one factor among others in employment‑related decisions.

Where applicable, the AI systems may include, but are not limited to:

• Product or system name: LinkedIn Recruiter
  • Vendor: LinkedIn
• Product or system name: Indeed AI for Recruiting
  • Vendor: Indeed
• Product or system name: hireEZ for Sourcing/Recruiting
  • Vendor: HireEZ

These tools are intended to assist—not replace—human decision‑making. Eyrée may use additional AI systems as needed.

All AI‑enabled systems are subject to Eyrée’s internal Artificial Intelligence / Machine Learning policies.

Employment decisions and job‑related criteria assessed

Depending on the role and jurisdiction, AI‑enabled tools may assist in evaluating job‑related qualifications or characteristics, including:

• Skills, experience, education, and work history
• Training, certifications, or licenses
• Job‑related competencies or performance indicators
• Responses to job‑related screening questions or assessments
• Other lawful, job‑related criteria relevant to the position

AI systems may be used in connection with any position at Eyrée.

Data collected and sources of data

In connection with AI‑enabled systems, Eyrée may collect, use, or process job‑related information, including:

• Information provided directly or indirectly by candidates or employees (e.g., resumes, applications, employment history, education, skills, qualifications);
• Other employment‑related information permitted by law.

Data may also be obtained from:

• Third‑Party service providers supporting employment‑related processes, where permitted by law.

Data retention

Information collected or processed through AI‑enabled employment tools is retained only as long as reasonably necessary to support employment‑related decisions or to comply with legal, regulatory, or recordkeeping obligations. All such information is handled in accordance with Eyrée’s data retention and information governance practices.

Requests for additional information, alternatives, or accommodations

Where required by law, candidates and employees may request reasonable accommodations related to Eyrée’s use of AI in employment decisions.

Requests or questions may be directed to our support team through the contact methods provided on our Sites.

If a written request is received, Eyrée will respond within the timeframe required by applicable law.

Limits on disclosure

In certain circumstances, Eyrée may be unable to disclose specific information if doing so would violate local, state, or federal law or interfere with a law enforcement investigation.

Illinois‑specific notice and statutory disclosure

Illinois law provides the following regarding the use of artificial intelligence in employment decisions:

775 ILCS 5/2‑102(L) – Use of Artificial Intelligence

1. It is a violation for an employer to use artificial intelligence in recruitment, hiring, promotion, renewal of employment, training selection, discharge, discipline, tenure, or other terms or conditions of employment if the AI results in discrimination based on protected classes, or if zip codes are used as a proxy for protected classes.
2. It is a violation for an employer to fail to provide notice to an employee that artificial intelligence is being used for these purposes. The Department may adopt rules governing notice requirements, timing, and methods of providing notice.

13. California privacy notice

California Consumer Privacy Act

Rights. If you are a California resident, you have the right to submit requests to know/access, delete, correct, opt out of the sale or sharing of your personal information, and to limit the processing of your sensitive personal information. To exercise these rights, please refer to the Your choices section. You have the right to exercise these rights without being discriminated against.

Notice of collection. Below is a list of the categories of personal information Eyrée has collected about California residents in the 12 months preceding the date this Privacy Policy was last updated. For each category, this includes:

1. the categories of sources from which the information was collected;
2. the business or commercial purposes for collecting, selling, or sharing the information;
3. the categories of Third‑Party entities with whom we share the information.

• Identifiers (includes sensitive personal information). Information such as your name, signature, alias, postal address, telephone number, unique personal identifier, online identifier, IP address, account log‑in, email address, account name, and driver’s license number. Sensitive personal information in this category includes your social security number, driver’s license number, and state identification number.
• Personal characteristics (includes sensitive information). Information such as your age, race, ethnicity, gender expression, and gender identity. Sensitive personal information in this category includes information about your race.
• Financial information (includes sensitive information). Information such as your Eyrée account name and log‑in information, bank account number and access code, and credit or debit card number and access code. Sensitive personal information includes your account log‑in and password, bank account number and access code, and credit or debit card number and access code.
• Internet or other electronic network activity information. Information described earlier in this Privacy Policy, including browsing behavior, interactions with our Sites, and related activity.
• Biometric information. Information such as facial geometry or hand geometry collected through virtual try‑on or similar features.
• Commercial information. Records of Products you viewed, considered, or purchased.
• Geolocation information. Information such as your zip code or general location.
• Audio, electronic, visual, thermal, and related information. Information such as photographs, video recordings, recorded messages, and, where appropriate, temperature‑related data.
• Inferences. Insights or assumptions drawn from the categories of information listed above.

How do we collect this information:

• Identifiers*. We collect this category of information from you directly or automatically from your device(s). We may collect this information from Third Parties such as financial institutions, payment processors, and social networks.
• Personal characteristics*. We collect this category of information from you directly. We may also collect this information from Third Parties, such as social networks.
• Financial information*. We collect this information directly from you and, in some cases, our third-party service providers.
• Internet or other electronic activity information. We collect this category of information from you or your device(s) when you provide it to us or interact with us online (such as through our Site, as defined above, or our social media). We also collect this information from third parties such as online advertising networks, online data aggregators, and social networks.
• Commercial information. We collect this category of information from you directly, from Third Parties, or automatically from your device(s).
• Biometric information*. We collect this category of information from you directly.
• Geolocation information. We collect this category of information from you or your device(s) when you provide it to us or interact with us online (such as through our Site, as defined above, or our social media).
• Audio, electronic, visual, thermal, and related information. We collect this category of information from you or your device(s) when you provide it to us or interact with us online (such as through our Site, as defined above, or our social media) or offline (such as through a retail location or over the phone).
• Inferences. We draw inferences about you from the information we collect from you or your device(s) when you provide it to us or interact with us online (such as through our Site, as defined above, or our social media) or offline (such as through a retail location or over the phone). We also draw inferences about you from the information we collect from third parties such as financial institutions, payment processors, and social networks.

Does this include sensitive personal information?

Yes. * Denotes which categories may include sensitive personal information. The sensitive information we may collect includes your social security number, driver’s license number, state identification number, account information, financial account information, race, and ethnic origin.

Is the information “sold” or “shared”?

Yes. We make available your IP address and other persistent online identifiers to our advertising partners. In some instances, this transaction may constitute a “sale” or “sharing” of your personal information under California law.

What is our business purpose for collecting your information?

See How we use your information above.

Who do we disclose this information to?

See How we use your information above.

How long do we keep this information?

We keep the information identified above for so long as is reasonably necessary and proportionate to the original purpose for which we collected the information. We base our criteria for determining appropriate retention periods on regulatory and legal requirements, contractual requirements, business needs, and the expectations of you.

Collection of sensitive personal information

Several categories of personal information described in What information do we collect about you? may include sensitive personal information, such as:

• Basic identifying information. This may include sensitive personal information such as your social security number, driver’s license number, or state identification number, where applicable.
• Demographic information.  Information such as race, ethnicity, gender expression, gender identity, and sexual orientation may be considered sensitive personal information.
• Financial information. Information such as your account login and password, bank account number and access code, and credit or debit card number and access code, may be considered sensitive personal information.
• Biometric information. Information such as facial geometry collected through virtual try‑on or similar tools may be considered sensitive personal information.

Notice of disclosure for a business purpose

To learn more about the categories of personal information we disclose for a business purpose, and the categories of Third‑Party entities with whom such information is shared, please refer to How do we disclose your information?

Notice of sale and sharing

We “sell” and “share” personal information through certain Third‑Party tools used on our Sites and offline, including analytics and advertising technologies. This may include sharing online identifiers and other persistent identifiers with advertising, analytics, and marketing partners, which may be considered a “sale” or “sharing” under California law.

We do not knowingly sell or share the personal information or sensitive personal information of any California resident who is 16 years old or younger.

Notice of use of sensitive personal information

In certain circumstances, we may process sensitive personal information to derive characteristics about you. You have the right to opt out of such processing. For details on how to exercise this right, please see Your choices.

Notice of financial incentive

This Notice of Financial Incentive explains to California residents the material terms of any financial incentives or price/service differences offered by Eyrée, so that individuals can make informed decisions about participation. Eyrée may offer programs that qualify as “financial incentives” under California law.

Financial discounts

From time to time, Eyrée may offer discounts on Products in exchange for providing personal information (e.g., an email address). You may opt in by providing the requested information. You may opt out at any time by requesting deletion of that information; however, if you have already received the financial benefit, you may not be able to retroactively opt out of the incentive.

These price differences are reasonably related to the value of your personal information, based on internal data and good‑faith estimates.

Eyrée Rewards

Eyrée Rewards is a voluntary loyalty program. By joining, members may receive:

• Points earned per $1 spent: Standard members earn 1 point per $1 spent. Enhanced tiers may earn additional points per dollar.
• Redeemable points: Points may be redeemed at various thresholds for discounts on Products. Points may not expire for certain membership tiers.
• Exclusive offers: Access to member‑only promotions and bonus point opportunities.
• Birthday benefits: A complimentary birthday gift and bonus points during your birthday month. Higher‑tier members may receive additional birthday rewards.

Program rules and restrictions apply.

Linked accounts

Members may have the option to link their Eyrée Rewards account with select retail partners to earn points on qualifying purchases. Some benefits—such as bonus points, birthday gifts, or certain promotions—may not be available through partner locations.

Program data use

To provide these incentives, we use personal information such as your name, phone number, email address, purchase history, and birthdate to identify you as a member and deliver personalized experiences and offers. These incentives are reasonably related to the value of the data you provide.

Program costs

Smart Choice Commerce LLC invests in the Eyrée Rewards program to offer a more personalized and valuable experience. Expenses may include point earnings, bonus point events, discounts, birthday rewards, and exclusive member offers. The cost varies depending on your engagement with the program.

Opting out

You may opt out of the Eyrée Rewards program at any time by contacting us through the methods listed in Your choices.

California’s “Shine the Light” law

If you are a California resident and a customer of Eyrée, you may request—once per calendar year—information about personal data we shared with Third‑Party entities for their direct marketing purposes. To request this information, please contact us with “Request for California Privacy Information” in the subject line and body of your message.

California’s “Eraser Button” law

If you are a California resident under 18 and a registered user of the Site, you may request the removal of content or information you have posted. Removal may not be complete if the content has been reposted or stored by others. To request removal, please contact us through the methods provided in our support section.

14. Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, Nebraska, Tennessee, Minnesota, Maryland, New Jersey, Rhode Island, Indiana, and Kentucky privacy notice

Notice of collection

To learn more about the categories of personal data—including sensitive personal data—we collect and how we use it, please refer to What information do we collect about you? and How do we use your information? To learn more about the categories of personal data we share with Third‑Party entities, and the parties with whom we may share such data, please see How we disclose your information.

Notice of sale and targeted advertising

We “sell” personal data and engage in targeted advertising through certain Third‑Party tools used on our Sites and offline, including analytics, marketing, and advertising technologies. This includes making available certain personal data and online identifiers to Third‑Party advertising, analytics, and marketing partners, which may be considered a “sale” of personal data or the use of personal data for targeted advertising under applicable state laws.

Rights

Depending on your state of residence, you may have the right to:

• access or know the personal data we process about you;
• delete your personal data;
• correct inaccuracies in your personal data;
• opt out of the sale of your personal data;
• opt out of the processing of your personal data for targeted advertising purposes.

If you live in Oregon or Minnesota, you may request a list of specific Third‑Party entities to whom Eyrée has disclosed your personal data. If you live in Maryland, you may request a list of categories of Third‑Party entities to whom Eyrée has disclosed your personal data.

You also have the right to appeal a denial of any such request. To learn more about exercising these rights, please see Your choices.

Colorado bona fide loyalty program disclosure

There are no categories of personal data or sensitive personal data collected through the Eyrée Rewards program that are sold or processed for targeted advertising.

Certain categories of personal data and sensitive personal data collected through the Eyrée Rewards program—such as your name, phone number, email address, and purchase history—may be shared with Third‑Party partners as necessary to operate the program.

If you submit a request to delete your personal data under Colorado law, please note that deleting certain data may affect your ability to participate in the loyalty program, as this information is required to provide program benefits.

15. Nevada privacy notice

Sale of personal information

If you are a Nevada resident, you have the right to request that we refrain from selling your personal information. Eyrée does not sell personal information as defined under Nevada law. If you would like written confirmation that we do not sell your personal information, you may contact us with “Nevada Opt‑Out of Sale” in the subject line and body of your message. We will respond by email with the requested confirmation.

Health data privacy notice

Under Nevada law, you have specific rights regarding how we process your health data. For purposes of this section, “health data” refers to information linked or reasonably linkable to you that identifies any past, present, or future health status, including health conditions or treatments.

• What categories of health data do we collect, and why? When you engage with our virtual try‑on or diagnostic features, we may collect information related to your skin or hair conditions, treatments, and preferences. This information is used to provide personalized Product recommendations and related services.
• How do we collect your health data? We collect health data directly from you when you use these features on our Sites.
• How do we use your health data? We use this information to determine appropriate Product recommendations, suggest potential treatment paths, and support related functionality.
• Do we share your health data, and with whom? Yes. We share your health data with Adobe Analytics, which provides analytic services that support these features.
• How will you notify me of material changes to this notice? Any material updates will be communicated as described in the Changes to this policy section of this Privacy Policy.
• Will third parties track my health data across other websites? No. Other than Adobe Analytics, no Third‑Party entities collect your health data over time or across different websites or online services when you use our Sites.

Your Nevada health data rights

Nevada residents have the right to request access, deletion, and appeal regarding their health data. To exercise these rights, please refer to the Your choices section above.

16. Washington health privacy notice

If you are a Washington resident, the following disclosures are provided pursuant to the Washington My Health My Data Act. For purposes of this section, “health data” refers to information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. This may include individual health conditions or treatments.

• What categories of health data do we collect, and why? When you use our virtual try‑on or diagnostic features, we may collect information related to your skin and hair conditions, treatments, and preferences. This information is collected to provide personalized Product recommendations and services associated with these features.
• How do we collect your health data? We collect health data directly from you when you engage with these features on our Sites.
• How do we use your health data? We use your health data to determine appropriate Product recommendations, suggest potential treatment paths for skin or hair, and support related functionality.
• Do we share your health data? Yes. We share your health data with Adobe Analytics, which provides analytic services that support these features.
• What rights do you have concerning your health data? Washington residents have the right to request access, deletion, and appeal regarding their health data. To exercise these rights, please refer to the Your choices section above.

 17. Changes

Eyrée may update this Privacy Policy from time to time. When changes are made, we will provide notice as required under applicable law, which may include posting an update on our Sites or sending you a communication regarding the revised policy.

18. Contacting us

If you have any questions regarding this Privacy Policy, please contact us at privacyrequests@eyree.com.

19. Accessibility

If you require a copy of this Privacy Policy in an alternative format, please contact us. Consumers with disabilities may also reach our Guest Services team at (866) 983‑8582 to obtain this policy in an accessible format.