Privacy policy

Last updated: September 9, 2026

1. Who we are and how to contact us

Natura Eyes Contact is located at 202A-2400 boulevard Louis-XIV, Québec, QC G1C 5Y8, Canada. In this policy, “Natura Eyes Contact,” “we,” “us” and “our” refer to that business.

Business telephone: +1 418-720-1671.

This policy explains how we handle personal information through naturaeyescontact.com, our Shopify store, customer communications and the internal NaturaEyesContact publishing application used by authorized administrators of our Facebook Page.

For questions, access requests, corrections, deletion requests or privacy complaints, contact the person responsible for the protection of personal information at naturaeyescontact@gmail.com. You can also write to our business address above. Please indicate “Privacy request” in your message.

For NaturaEyesContact app data deletion instructions, see section 7 below.

2. Information we collect

The information we receive depends on how you interact with us:

• Contact and account information: your name, email address, telephone number, billing and delivery addresses, and information you provide when creating or using a customer account.
• Orders and payments: the items and options you select, order history, amounts, discounts, payment status, transaction references, delivery information and records relating to returns or disputes. Payment providers handle the payment credentials you submit at checkout. The payment information available to us depends on the payment method and provider.
• Customer communications: messages, reviews, photographs or other materials you choose to send us, and information needed to answer a question or resolve an issue.
• Website and device information: IP address, approximate location derived from that address, browser and device information, cookie identifiers, pages and products viewed, cart activity and interactions with our website, where collected by the services we use and permitted by your privacy choices and applicable law.
• Consent and preference records: marketing choices, cookie preferences and information needed to record and respond to privacy requests.
• Administrator and publishing information: the information described in section 6 when an authorized administrator connects or operates our internal publishing app.

Information comes from you, your interactions with our website, Shopify and the providers involved in payments, delivery, support and authorized integrations. Information marked as required during checkout is needed to process the order or provide the requested service. Optional information can be left blank.

Contact lens orders can include lens specifications or other information that may reveal something about your eyesight. Please provide only the information needed for your purchase or support request. We do not require an unrelated medical history, and our publishing app does not need customer prescriptions or health records.

3. Why we use information

We use information to process payments and orders, arrange delivery, maintain customer accounts, handle returns, respond to questions and communicate about purchases. We also use relevant records to help prevent fraud, protect our services, investigate technical problems and meet accounting, tax, product safety and other legal obligations.

Website activity and feedback help us understand how our store performs and improve its content and usability. Where we have the necessary consent or another permitted basis, we use contact details and preferences to send marketing communications or support advertising and its measurement.

We request consent when required. You may withdraw consent for optional processing, subject to legal or contractual limits that we will explain where relevant. Declining optional marketing does not prevent you from placing an order. Access to the information needed to fulfil an order remains necessary to complete that transaction.

For individuals covered by European or UK data protection law, the applicable basis may be steps requested before a purchase or performance of a contract, a legal obligation, consent, or a legitimate interest such as securing the store or responding to support requests where that interest is not overridden by your rights. We seek consent where those laws require it, including for relevant optional tracking.

4. Shopify, cookies and advertising choices

Shopify provides the platform on which our store operates. It processes information needed to run the storefront, checkout and related services. Some Shopify services, including services you choose to use directly, also involve processing under Shopify’s own policies. See the Shopify Consumer Privacy Policy and Shopify Cookie Policy.

Cookies and similar technologies can keep your cart working, remember preferences, support account access and help protect checkout. Optional technologies can support analytics, personalization and advertising. Where consent is required, optional collection depends on that consent. Use the cookie preferences or privacy controls displayed by our store to make or change your choices. Browser controls can also restrict cookies, although some store functions may then be affected.

Where Shopify Network Intelligence is enabled for our store, Shopify can combine information from interactions with our store and other merchants to provide enhanced services such as personalization, fraud prevention and advertising, subject to applicable choices and requirements. Shopify explains its processing and provides requests and advertising choices through its privacy portal.

Depending on the advertising tools enabled and the law where you live, disclosure of identifiers or browsing activity for advertising may be treated as a “sale,” “sharing” or targeted advertising even when no money is paid for the information. You can exercise applicable opt-out rights through the privacy controls offered on our store or by contacting us. Shopify’s controls govern Shopify’s processing; other services may have their own controls.

Our internal Facebook publishing app is used to manage our Page’s content. Authorizing that app is a separate activity from shopping on this website and does not authorize access to customer order records.

5. Who receives information

Access within our business is limited to people who need information for their duties, such as order fulfilment, customer support, accounting or technical administration. We disclose relevant information to providers involved in those functions, including Shopify, payment providers, delivery services, email and support services, and hosting or technical support providers.

Where enabled and permitted, analytics and advertising providers receive the information needed for those services, subject to the choices and requirements described above. Information you ask us to publish, such as a product review, can be visible to other people. Please avoid including private information about yourself or others in a public submission.

Meta receives information involved in authorized Facebook publishing, as explained below. Meta, Shopify and other providers may also process information for their own purposes under their applicable policies when you use their services directly.

We may disclose information when legally required, to address fraud or security incidents, or to establish, exercise or defend legal rights. If our business is transferred or reorganized, information may be disclosed to the parties involved only as permitted by law and with appropriate protection for that transaction. We also disclose information when you specifically request or authorize it.

6. The NaturaEyesContact Facebook publishing app

The NaturaEyesContact app is an internal tool for authorized administrators to upload, publish or schedule product videos and captions on the Natura Eyes Contact Canada Facebook Page. Customers do not need to connect a Facebook account to this app to shop with us.

Depending on the permissions granted and the operation performed, we process:

• Administrator and business-account identifiers, names and authorization information made available by Meta to establish which Page an administrator may manage.
• Access tokens, granted permissions, Page identifiers and Page names needed to maintain and use the authorized connection.
• Product media, captions, links and publication or scheduling instructions supplied for the campaign.
• Upload and post identifiers, publication times, processing results, visibility or delivery status, error information and other records needed to verify and troubleshoot an operation.
• Authorized Page content, basic Page information and available aggregate counts when used to check publications or assess campaign activity.

We use this information to verify authorization, operate the requested publishing functions, prevent duplicate operations, confirm results and resolve problems. We share the relevant media and instructions with Meta and use technical providers where needed to host media or maintain the tool. Access to connection credentials is restricted to authorized operators who need it.

This publishing workflow does not retrieve private messages or friends lists, and does not create individual profiles of people who watch a video. We do not sell the Meta information handled by the app or use it for unrelated advertising profiles. Connecting the Page does not give the app permission to publish unrelated content or manage unrelated businesses.

At the date of this policy, the active integration is Facebook. If we activate Instagram or introduce materially different processing, we will update the relevant information and obtain any required authorization before that processing begins.

7. NaturaEyesContact app — User data deletion instructions

You can request deletion of personal information held by the NaturaEyesContact app by emailing naturaeyescontact@gmail.com with the subject “NaturaEyesContact app data deletion.” This request is handled by the person responsible for the protection of personal information at Natura Eyes Contact.

In your request:

• Provide a contact address where we can reply.
• Identify the account or information concerned and describe what you would like us to delete. Include the Facebook Page URL or identifier, if known, and your relationship to that Page where relevant.
• Do not send passwords or access tokens.

We may request information reasonably necessary to verify your identity or, when a request concerns management of a Page or business connection, your authority to act for it. We will review the information held by our app and remove personal information and credentials that are no longer needed and are eligible for deletion. Working copies and relevant backups are included in that review. We will explain any record that must be retained for a specific legal reason and respond within the period required by applicable law, including notice of any permitted extension.

Removing the app’s access: an authorized administrator can also revoke access using Meta’s applicable business-integration or connected-app controls. Locate the NaturaEyesContact integration associated with the account or business that authorized it and use the available removal controls. The controls depend on the connection and the administrator’s permissions. Contact us if you need help identifying it.

Once Meta applies a revocation, the app can no longer make authorized calls through that revoked connection. To request deletion of information the app already holds, also send the email request described above.

Published and scheduled content: removing access or deleting records held by our app does not by itself cancel a post already scheduled with Meta or delete a published Page post. Those items must be managed separately by an authorized Page administrator using Meta’s controls, or addressed in a specific request to us. Deleting app-held information does not delete your Facebook account. Meta’s handling of information within its services is governed by its own Privacy Policy.

For a request about a store purchase or customer account, use the same email address with the subject “Store privacy request” and enough information to locate the relevant account or order. The rights and retention criteria elsewhere in this policy apply.

8. Storage, transfers and security

Our store information is processed through Shopify and the providers involved in the services you use. Publishing records and credentials are held on systems used by our authorized technical operators; campaign media is also hosted on a web server so that Meta can retrieve it for publishing.

Personal information may be processed outside your province, including outside Québec, or outside your country, including in Canada, the United States or other countries where relevant providers operate. Information processed in another jurisdiction can be subject to that jurisdiction’s laws and lawful access requests. Where applicable law requires an assessment or a particular transfer safeguard, that requirement must be met before the transfer. You may contact us for information about relevant transfers and safeguards.

We use safeguards appropriate to the information and the service, including controls over authorized access and HTTPS connections to the store and Meta API. No online service can eliminate every security risk. Please use secure account credentials and avoid sending payment credentials, passwords or unnecessary sensitive information by email.

9. How long we keep information

Retention depends on the purpose and any legal requirements:

• Order, payment, delivery and return records are kept for the transaction and any applicable accounting, tax, dispute or product safety obligations.
• Account and support information is kept while needed to provide the service, resolve the issue or meet a related legal obligation.
• Marketing preferences and suppression records are kept as needed to honour your choices and document consent or an opt-out.
• App credentials are kept while required for an authorized connection. When the connection is ended, credentials that are no longer needed are to be removed, along with app-held personal information eligible for deletion.
• Publication and technical records are kept while needed to verify campaign activity, resolve errors or meet a specific legal obligation. Working copies and backups are included when assessing a deletion request.

When information is no longer required, we delete it or, where permitted, make it anonymous so that it can no longer identify someone. A legal preservation obligation may require a limited record to be retained for longer. We can explain the criteria applicable to your information when you contact us.

10. Your rights and choices

Depending on the law that applies to you, you may request access to your information, correction of inaccurate information, deletion, a portable copy, withdrawal of consent, or restrictions on or an objection to certain processing. Additional rights concerning targeted advertising, sale or sharing, an authorized representative or an appeal may apply in your jurisdiction. These rights are subject to applicable conditions and exceptions.

To make a request, email naturaeyescontact@gmail.com and describe what you would like us to do. We may ask for information reasonably needed to verify your identity or a representative’s authority. Please do not provide an identity document unless we explain why it is needed and how to submit it appropriately.

We will respond within the applicable legal period and explain any refusal or permitted extension. We will not penalize you for exercising a privacy right. If a concern remains unresolved, you may contact the competent privacy authority, such as the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada, where applicable, or the authority in your jurisdiction.

For promotional emails, use the unsubscribe link or contact us. We will process an unsubscribe request without delay and within the time allowed by law. Necessary order, service or safety communications may still be sent.

11. Children

Our store and internal publishing app are intended for adults. We do not knowingly collect personal information from children below the age at which valid consent can be given without a parent or guardian under applicable law. If you believe a child has provided information without the necessary authorization, contact us so that we can assess and address it.

12. Changes to this policy

We may update this policy when our services, practices or applicable requirements change. The date at the top identifies the latest version. We will provide additional notice and obtain renewed consent where required before using information for a materially different purpose. A policy update does not by itself replace any consent required by law.