Legal
Privacy Policy
Last updated: October 19, 2026
This policy explains how CBCGLASSES handles personal information through our storefront, account, AI assistant and customer support. It covers both account holders and guest shoppers. It should be read with our Cookie Policy and the notices shown when you use a feature.
Who Operates CBCGLASSES
CBCGLASSES is operated by Lightarc Sci & Tech Inc. You can contact us about the personal information described in this policy using the addresses below or the privacy email in the Contact section.
- Company street address
- 5900 Balcones Dr STE 100, Austin, TX 78731, USA
- Mailing address
- 1095 E Maple Road, Troy, MI 48083, USA
Information We Collect
You provide information such as your name, email, phone number, shipping and billing addresses, order details, prescription values, product choices and support messages. We also receive payment status, delivery updates and technical information needed to operate and secure the service. The information collected depends on the features you use.
You can shop without creating an account. Guest checkout still creates order, contact, payment-reference and delivery records so that we can fulfil the order and provide support. Guest baskets, wishlists and selection drafts may remain in your browser; closing the browser does not necessarily erase them. Account features can additionally save addresses, prescriptions and payment-method references that you choose to keep.
How We Use Information
We use information to provide the services you request: authentication and verification codes, baskets, lens configuration, payment, delivery and after-sales support. We also use relevant technical records for security and troubleshooting, and retain records required by applicable law. Depending on the activity and applicable law, processing relies on performing our contract with you, legal obligations, legitimate interests in operating a secure service, or consent, including for optional visit analytics.
Fields marked as required are needed for the relevant service. Without an email address we cannot send a verification code; without sufficient delivery or prescription details we may be unable to fulfil that type of order. Marketing and optional analytics choices are not conditions for purchasing. Provide accurate information and only details needed for your request.
Prescriptions and the AI Assistant
Prescription information can reveal health-related details. We use the values you provide to configure and fulfil your lenses and, when you request it, save a prescription to your account. Only upload information you are entitled to share. Avoid unrelated medical records, identity documents or information about other people.
When you use the assistant, your messages, relevant conversation context and uploaded images are sent to the configured AI service to interpret prescriptions, discuss needs or recommend products. Uploaded images are resized for processing; this AI upload flow does not publish them to the WordPress media library. Check recognised prescription values and recommendations before ordering.
Temporary image processing does not mean that all related data is immediately erased: extracted values, conversation text and selected configurations may remain in browser storage, server sessions, account history or orders. Starting a new chat or clearing local history is not a request to delete all server records. Processing by the AI provider is subject to its own arrangements; we do not promise zero retention by third parties.
Payment Information
Card details entered in Stripe's payment fields are handled by Stripe, rather than stored as full card numbers or security codes in our shop database. Our checkout sends relevant billing/contact details and transaction information, and receives payment status and references for order processing.
If you choose to save a payment method to your account, we use a provider reference and limited display details such as card brand, last digits and expiry. Removing a saved method does not erase past transaction records. Stripe Link, if offered, is a separate service with its own account and preferences; our save-card option is not the same as signing up for Link.
Reviews and Review Images
Reviews are intended for publication. Review text, rating, date, displayed author identity/avatar and attached images may appear publicly after moderation. Unlike images supplied for AI processing, review images are stored for publication. Do not include email addresses, prescriptions, addresses or other private information in review text or photos. Contact us if you need a published review reviewed or removed.
Service Emails and Marketing
Verification, order and support emails are service communications, separate from optional promotional emails. If you opt into marketing, we record that choice. You can unsubscribe using the message's unsubscribe option or contact us. Withdrawing marketing consent does not stop necessary messages about an existing order or account.
Cookies
If you enable visit analytics, we record visited pages, referrers, visit times and duration, IP address, browser/device information, screen dimensions and timezone. A browser identifier distinguishes visits, and signed-in visits may be associated with your account. With no choice or a refusal, this optional visit reporting is off. Essential hosting and security logs may still be processed to run and protect the service.
Necessary cookies support login, baskets and checkout. Other browser storage supports requested features such as wishlists and AI conversation continuity. Optional visit analytics uses a separate choice, which you can change below. Details and storage lifetimes are in our Cookie Policy.
Service Providers and Other Recipients
Relevant information is passed to providers supporting hosting and databases, transactional email, AI processing, payments, manufacturing, shipping and customer support as needed for those functions. For example, carriers need delivery details, and lens fulfilment needs the ordered configuration and relevant prescription values. We may also disclose information when required by law or necessary to address fraud, security incidents or legal claims. Our visitor analytics is a first-party service, not an advertising network.
Where Information Is Processed
Our infrastructure includes hosting in the United States. Service providers may process information in other countries, whose privacy rules can differ from those where you live. Contact us for information about the recipients, processing locations and safeguards relevant to your request.
Security
Access controls, protected authentication sessions and encrypted connections are used to reduce unauthorised access. No internet service can guarantee absolute security. Protect your login credentials, sign out on shared devices, and avoid leaving prescription or conversation drafts in a shared browser.
How Long Information Is Kept
Retention depends on the purpose: account data supports your requested account features; order, prescription and payment-reference records support fulfilment, returns, disputes and applicable recordkeeping obligations; operational records support troubleshooting and security. Analytics records are subject to the server's configured retention and cleanup process. Browser storage has separate lifetimes explained in the Cookie Policy. The 180-day cookie-choice lifetime is not a promise that all personal data is deleted after 180 days.
Clearing cookies or local storage removes browser copies, not account records, orders, published reviews or records already received by the server. Backups and records that must be retained may not disappear immediately. Contact us to request deletion or ask which records can be removed; we will assess the request and any applicable retention requirements.
Your Privacy Choices and Rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your information, object to certain processing, or withdraw consent for future processing. You may also contact the relevant data protection authority. Withdrawal does not undo processing already carried out. Some order, payment, fraud-prevention or legal records may need to be retained despite a deletion request.
For a privacy request, describe the information or feature concerned and the account email or order reference needed to locate it. We may ask for proportionate verification before disclosing or changing records. Do not email passwords, full payment-card numbers or security codes.
Contact and Policy Updates
For privacy questions, correction or deletion requests, or to withdraw marketing consent, email service@cbcglasses.com.
We may update this policy as features or data handling change. The date above identifies the current text. Where required, material changes will be brought to your attention or a new consent choice requested.