Privacy Policy

Privacy Policy
Last Modified: November 12, 2025

Introduction

This Privacy Policy (“Policy”) describes how S. Rays, Inc. d/b/a Shady Rays and its subsidiaries and affiliates (collectively, “Shady Rays”, “we”, “us”, or “our”) collect, use, store, and share your information when (1) you access and/or use our websites, mobile applications, or other digital properties we own and operate, including www.shadyrays.com, protect.shadyrays.com, and returns.shadyrays.com (“Websites”); (2) you purchase and use our products and services (“Products”); (3) you visit one of our physical store locations; (4) you communicate with us in any manner, including by email, direct messaging, telephone, and/or in person; and (4) we interact with certain third parties, including our service providers.

Please note the following sections that include important disclosures related to your information:

What Type Of Information Do We Collect From And About You?

We may collect the following information from and about you:

  • Basic Identifying Information. Information such as your full id, e-mail address, phone number, mailing address, account id, userid, and other similar identifiers.
  • Device Identifier and other Unique Identifiers. Information such as your device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, and other unique identifiers.
  • Internet or Other Network Activity. Information such as your browsing or search history on our Websites, information regarding your interactions with our Websites and Products, email communications, and advertisements.
  • Commercial Information. Information such as the Websites you have used, the Products you have purchased, the stores you have visited, and conversations you’ve had with us.
  • Audio and Visual Information. We may from time to time have recordings of your voice (such as when we record customer service calls for quality assurance) and may have visual records of when you enter our stores via security surveillance footage. We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
  • Inferences. Information such as inferences drawn from or created based on the information identified above.

How Do We Collect Your Information?

We collect your information:

  • Directly From You. When you provide it directly to us, such as when you make a purchase on our Websites or in our stores, contact us, respond to a survey, RSVP for an event, interact with us in our store, participate in sweepstakes, contests, or other similar campaigns or promotions, apply for a job, or sign-up to receive communications from us.
  • Using Online Tracking Technologies and Other Automatic Collection Technologies. Via certain online tracking technologies such as pixels, web beacons, and cookies when you visit our Websites, open or click on emails we send you, or interact with our advertisements. To learn more about these technologies, see our Cookie Policy.
  • Using In-Store and Offline Technologies. We collect information from and about you when we record customer service calls, maintain a transcript of calls for quality assurance purposes, use security cameras in our physical stores for safety, security, and loss prevention purposes, and use other related technologies.
  • From Social Media Platforms and Networks. If you interact with Shady Rays on social media or use features, such as plugins, widgets, or other tools made available by social media platforms or networks (e.g., Instagram, Facebook, X, Google, YouTube) in connection with our Websites, we collect information that you disclose to us, or that the social media platforms disclose to us.
  • From Other Third Parties. We collect information from and about you from third-party service providers and partners, including data analytics providers, marketing or advertising service providers, fraud prevention service providers, vendors that provide services on our behalf (e.g., payment processors, shipping, etc.), and analytics providers. We may also collect your information from publicly available sources.

Automatic data collection technologies

We use a variety of tools, including cookies and third party tools that automatically collect information and is processed for a variety of purposes, including to personalize your experience, deliver relevant ads, understand users’ behavior on our Websites, enable Website functionality, and analyze Website performance. More information about these technologies can be found in our Cookie Policy.

How Do We Use Your Information?

We use your information for a variety of purposes, including:

  • Providing Our Products And Websites To You. We may use your information to provide our Websites and Products to you, fulfill your orders, complete transactions with you, process your payments, send you notifications regarding your purchases, returns, repair requests, Product delivery, protection plan / warranty submittals, exchanges, and other communications you may have with us, and otherwise manage your transactions.
    Communicating With You. We may use your information to communicate with you, respond to and/or follow-up on your requests, inquiries, issues, or feedback, and to provide you with customer service.
  • Analytics and Personalization. We use your information to conduct research and analytics, including to improve our Products, our stores, to understand how you use our Websites, to engage in marketing campaigns, to personalize your experience, to customize our marketing and advertising we show you, and to better understand your needs and the needs of our customers and partners. This may include the use of third-party tools from time to time, including session replay tools.
  • Security and Fraud Prevention. We use your information to detect, investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including fraudulent transactions, attempts to violate our policies and terms, security incidents, and harm to the rights, property, or safety of us and our customers, employees, and other stakeholders.
  • Legal Obligations. We may use your information to comply with our legal and regulatory obligations, investigate a claim or potential claim, establish or protect our legal rights, or defend against a legal claim.
  • Perform Business Functions. We may use your information to support our core business functions, including to maintain records, process management, loss and fraud prevention, collect amounts owing, and to provide and maintain functionality of the Websites. We may also use your information during a merger, acquisition, due diligence exercise, bankruptcy, or other legal proceeding or process where your information is necessary for that transaction.

How Do We Disclose Your Information?

We may disclose your information:

  • With Your Consent. This may be obtained in writing; online, through “click-through” agreements; when you accept the terms & conditions on our Websites; orally, either in person or on the phone; or by other means.
  • In A Business Transfer. We may disclose or share your information as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, due diligence process relating to the same, or sale of company assets or stock, or in the unlikely event of insolvency, bankruptcy, or receivership, in which such information could be transferred to third parties as part of the transaction.
  • To Affiliated Third Parties. We may disclose your information with certain third parties that are affiliated with us, such as parent and subsidiary companies.
    To Non-Affiliated Third Parties. We may disclose your information to non-affiliated third parties, such as our service providers, to support our core business functions and internal operations, such as fulfilling orders, delivering packages, complying with your request to ship Products, send postal mail, e-mails, and text messages, analyze customer data, provide marketing and advertising, administering the Websites, processing payments, investigating fraud, conducting surveys, and providing customer service.
    To Social Media Platforms And Networks. Some of our Websites have features such as plugins, widgets, and/or other tools made available by social media platforms and networks that may result in information being disclosed by us.
  • For Legal Process And Protection. We may disclose your information to satisfy any law, regulation, legal process, governmental request, or where we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to: (1) enforce or apply agreements or bill and collect for Products; (2) protect our interests, property, or safety of others; (3) in connection with claims, disputes, or litigation; and (4) to protect our Websites.

Links To Third Party Sites

Our Websites may contain links to third party websites and services. Please note that these links are provided for your convenience and information, and the websites and services may operate independently from us and have their own privacy policies or notices, which we strongly suggest you review.

Shopify

Our online store is hosted on Shopify Inc (https://www.shopify.com). Your information is stored through Shopify’s data storage, databases and the general Shopify application. If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, please read Shopify’s Privacy Statement here.

How Do We Protect Your Information?

Although no system can guarantee the complete security of your information, we take all commercially reasonable steps to ensure your information is protected in alignment with all applicable laws and regulations, as appropriate to the sensitivity of your information.

How Long Do We Keep Your Information?

We keep your information for as long as necessary in accordance with the purpose for which it was collected, our business needs, and our legal and regulatory obligations. If we dispose of your information, we will do so in a way that is secure and appropriate to nature of the information subject to disposal.

Your Choices

Account

You may access, update, or remove certain information that you have provided to us through your account by visiting your account settings or sending an email to the email address to team@shadyrays.com. We may require additional information from you to allow us to confirm your identity. You may also request a copy of your purchase history at any time by sending an e-mail to team@shadyrays.com.

Communications
  • Opt-Out Of Promotional Messaging. If you would like to stop receiving our promotional messages, special offers, or other related communications, you can opt-out by following the direction in the communication to opt-out or by sending an e-mail to notices@shadyrays.com.
  • Opt-Out Of Texting. If you’ve signed up to receive SMS communications from Shady Rays, you may opt-out of future communications by following the opt-out procedure set forth in the latest SMS message you received.
Automatic Data Collection Technologies

The following disclosures relate to your choices in connection with cookies and other tracking technologies:

Please be aware that if you disable or remove tracking technologies, some parts of the Service may not function correctly. If you disable or refuse cookies, some parts of this website may then be inaccessible or not function properly.

Analytics and Interest-Based Advertising

Google provides tools to allow you to opt out of the use of certain information collected by Google Analytics at https://tools.google.com/dlpage/gaoptout and by Google Analytics for Display Advertising or the Google Display Network at https://www.google.com/settings/ads/onweb/.

The companies we work with to provide you with targeted ads are required by us to give you the choice to opt out of receiving targeted ads. Most of these companies are participants of the Digital Advertising Alliance (“DAA”) and/or the Network Advertising Initiative (“NAI”). To learn more about the targeted ads provided by these companies, and how to opt out of receiving certain targeted ads from them, please visit: (i) for website targeted ads from DAA participants, https://www.aboutads.info/choices; (ii) for app targeted ads from DAA participants, https://www.aboutads.info/appchoices; and (iii) for targeted ads from NAI participants, https://www.networkadvertising.org/choices/". Opting out only means that the selected participants should no longer deliver certain targeted ads to you, but does not mean you will no longer receive any targeted content and/or ads (e.g., in connection with the participants’ other customers or from other technology services).

Google Ads: Users can opt out of cookies used by Google for advertising. Each site where the privacy policy is posted must provide users with at least one of the following two options for opting out:

  • Opting out of Google advertising cookies: Users can opt out of Google's use of cookies for advertising, including DoubleClick cookies, by visiting Google's Ads Settings page.
  • Opting out of cookies from all participating advertisers: Users can opt out of third-party advertising cookies from a wide range of advertising services, including Google, by visiting the Network Advertising Initiative's Opt-Out page.

California Privacy Notice

California Consumer Privacy Act

Your Rights

You may submit the following requests to either 213-817-5193 or email at notices@shadyrays.com. We will take appropriate steps to verify your request, as permitted under applicable law. You may also have the ability to submit a request via an authorized agent, if permitted by law. We will respond to your requests consistent with our legal requirements.

  • Right of Access: You have a right to request that we disclose to you the categories and in some cases specific personal information we have collected about you, including information about from where we collected your information and how it has been disclosed, sold, or shared.
  • Right to Delete. You have a right to request deletion your personal information, subject to certain exceptions.
  • Right to Correct. You have a right to ask that we correct the personal information we have about you, subject to certain exceptions.
  • Right to Opt-Out of the Sale or Sharing of Your Personal Information. You have a right to opt-out of the sale or sharing of your personal information. To exercise this request, you can submit an e-mail above or visit Do Not Sell or Share My Personal Information.
  • Right to Non-Discrimination. You have a right to exercise the above rights without being discriminated against.

To exercise any of these rights, please see the section Exercising Legal Right Requests below.

Notice of Collection

Notice of Disclosure for a Business Purpose

To learn more about the categories personal information we have disclosed for a business purpose, and the categories of third parties with whom we’ve disclosed such information, please see How Do We Disclose Your Information? above.

Notice Of Sale and Sharing

We “sell” and “share” your personal information through the use of digital advertising through our Sites. Specifically, we make available certain of your online identifiers and other persistent online identifiers with advertising, marketing, and other partners that may be considered a “sale” or “sharing” of your personal information. We don’t sell or share the personal information or sensitive personal information of any California resident who is 16 years or younger. To learn more, please see Do Not Sell or Share My Personal Information.

Notice of Use of Sensitive Personal Information

We do not use California resident sensitive personal information for any purpose other than is permissible under the CCPA. Specifically, we do not use sensitive personal information of California residents to derive characteristics about California residents.

Notice of Financial Incentive

From time to time, Shady Rays may provide a variety of discounts in exchange for personal information. For example, Shady Rays may offer a discount of 20% off an initial order in exchange for providing an email address and mobile telephone number. Shady Rays uses the email addresses and telephone numbers provided in exchange for the discount to provide marketing of Shady Rays’ services for ongoing purchases, and for other internal statistical purposes.

When you participate in our referral program, we may provide (a) a $20 discount coupon to an individual who is referred to our website and completes a purchase, and (b) a $20 reward to the referring customer. We collect personal information such as ids, email addresses, and purchase history in order to operate this referral program, track eligibility, and deliver rewards. Participation is voluntary, and you may withdraw at any time by contacting us, but you may no longer be eligible for rewards if you withdraw.

Our discount program and referral program are based upon our reasonable but sole determination of the estimated value of the personal information of California residents provided, which takes into consideration, without limitation, estimates regarding the anticipated revenue generated from such information, the anticipated expenses which might be incurred in the collection, storage, and use of such information in the operation of our business, and other relevant factors related to the estimated value of such information to our business, as permitted under applicable law.

By providing your email address you opt-in to our financial incentive program. If you wish to opt-out of the incentive, do not submit the personal information or send an e-mail to notices@shadyrays.com.

If you wish to withdraw from the incentive program, you may submit such a request by sending an e-mail to notices@shadyrays.com before completing your order.

Minors Under 16 – California Residents

We do not knowingly sell or share the personal information of California residents under 16 years of age. If we learn that a California resident aged 13 to 16 has provided personal information, we will not sell or share that information unless the individual has affirmatively authorized (opted-in). For children under 13, we require verifiable parental consent before any sale or sharing.

California's "Shine the Light" law

Shady Rays does not share California resident personal information with third parties for the third parties’ direct marketing purposes. You may request more information about this process by sending an e-mail to notices@shadyrays.com with “Shine the Light Request” in the subject line and in the body of your message. We will provide the requested information to you via an email response.

Prop65 Notice

WARNING: This product contains chemicals known to the State of California to cause cancer and birth defects or other reproductive harm.

Texas Privacy Notice

Notice of Collection

To learn more about the categories of personal information we collect about you and how we use it, please see What Type of Information We Collect From and About You? and How Do We Use Your Information? sections above. To learn more about the categories of third parties with whom we may share your personal information, please see the How Do We Disclose Your Information? section above.

Your Rights

You may submit the following requests to either 213-817-5193 or email at notices@shadyrays.com. We will take appropriate steps to verify your request, as permitted under applicable law. You may also have the ability to submit a request via an authorized agent, if permitted by law. We will respond to your requests consistent with our legal requirements.

  • Right to Know and Access. You have a right to request that we disclose what personal information we’ve collected about you.
  • Right to Delete. You have a right to request that we delete your personal information.
  • Right to Correct. You have a right to ask that we correct the personal information it has about you, subject to certain exceptions.
  • Right to Opt-Out. You have a right to opt-out of the sale or use of your personal information for targeted advertising or profiling.
  • Right to Non-Discrimination. You have a right not to be discriminated against for the exercise of your rights described herein.

Nevada Residents

Sale of Personal Information

If you are a Nevada resident, you have the right to submit a request directing us not to make any sale of your personal information. We do not sell your personal information under Nevada law. However, to request email confirmation that we will not sell your personal information in the future, please send an email to notices@shadyrays.com.

Health Data Privacy Notice

You have certain rights over how we process your health data under Nevada law. For the purpose of this section, “health data” refers to information that is linked or reasonably capable of being linked to you and that is used to identify any past, present, or future health status of you. This may include any health condition or treatment.

What categories of health data do we collect from you, and why do we collect it? When you provide your prescription for prescription lenses, we collect information concerning your eyes, including physical attributes related to distance as well as prescription strength prescribed by your eye doctor. The purpose of this collection is to provide you with prescription lenses suitable for your newly purchased glasses.

Who do we collect your health data from, and how do we collect it? We collect your health data when you directly engage with us through our Websites and provide such information to us.

How do we use your health data? We use your health data to fulfill you order for prescription lenses.

Do we share your health data, and with whom? We only share information with third parties that are used to fulfill your order and not for any other marketing purposes.

How will you notify me of any material changes to this notice? See Changes to our Privacy Policy above.

Will any third parties track my health data across other websites? No.

What rights do you have with respect to your health data and how do you exercise your rights? You have a right to submit a request for access, deletion, and appeal. You may submit these requests to notices@shadyrays.com.

Washington Health Privacy Notices

If you are a Washington resident, the following disclosures are provided to you pursuant to the Washington MY Health MY Data Act. For the purpose of this section, the phrase “health data” means information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. Physical health status can include individual health conditions or treatment.

What categories of health data do we collect from you, and why do we collect it? When you provide your prescription for prescription lenses, we collect information concerning your eyes, including physical attributes related to distance as well as prescription strength prescribed by your eye doctor. The purpose of this collection is to provide you with prescription lenses suitable for your newly purchased glasses.

Who do we collect your health data from, and how do we collect it? We collect your health data when you directly engage with us through our Websites and provide such information to us.

How do we use your health data? We use your health data to fulfill your order for prescription lenses.

Do we share your health data? No.

What rights do you have with respect to your health data and how do you exercise your rights? You have a right to submit a request for access, deletion, and appeal. You may submit these requests to notices@shadyrays.com.

Connecticut Privacy Notice

If you are a Connecticut resident, the following disclosures are provided to you pursuant to the Connecticut Data Privacy Act. For the purpose of this section, the phrase “health data” means any personal information that we use to identify your physical or mental health condition or diagnosis, which can include skin condition.

What categories of health data do we collect from you, and why do we collect it? When you provide your prescription for prescription lenses, we collect information concerning your eyes, including physical attributes related to distance as well as prescription strength prescribed by your eye doctor. The purpose of this collection is to provide you with prescription lenses suitable for your newly purchased glasses.

Who do we collect your health data from, and how do we collect it? We collect your health data when you directly engage with us through our Websites and provide such information to us.

How do we use your health data? We use your health data to fulfill you order for prescription lenses.

Do we share your health data, and with whom? We only share information with third parties that are used to fulfill your order and not for any other marketing purposes.

What rights do I have concerning my health data? You may submit these requests to notices@shadyrays.com:

  • Access. Confirm whether we process your health data and access such data.
  • Correction. Correct inaccuracies in your health data.
  • Deletion. Delete your health data.
  • Copy of Health Data. Request a copy of your health data in a portable and where feasible readily usable format that would allow you to transmit the data to another entity.
  • Appeal. Appeal any refusal by us to take action on any of the above requests. Such appeals must be submitted within 30 days from the date of refusal.

Non-US Privacy Notice

Role and Data Controller Contact Details

Certain foreign data privacy laws, including the European Union’s General Data Protection Regulation, distinguish between organizations that process personal information for their own purposes (known as “controllers”) and organizations that process personal information on behalf of other organizations (known as “processors”).

We act as a controller with respect to personal information collected from you as you engage with our Websites and Products. If you have questions with respect to our processing of your information as a controller, you can contact us at notices@shadyrays.com.

Lawful Basis for Processing

Certain non-US privacy laws require a “lawful basis” for processing personal information. Our lawful bases include the following:

  • To fulfill contractual obligations with you. When you use our Websites, purchase our Products, or otherwise engage with us, we process your personal data to engage in contractual obligations with you.
  • To pursue our legitimate interests. Our legitimate interests include, among others, understanding how our Websites and Products are functioning, improving our Websites and Products, developing new Websites and Products, preventing fraud, and otherwise performing business functions. Where we rely on a legitimate interest to process personal information, we carry out a balancing test to weigh the legitimate interest against your right to protection of your personal information; however, our processing of your personal information will never override your fundamental rights and freedoms, and you can always exercise your right to object to such processing.
  • Consent. In certain situations where you provide us with consent, we may process your personal information.
  • To comply with law. In limited circumstances, we may process personal information in order to comply with legal obligations. To the extent we have received such information from third parties with whom we have agreed to certain contractual requirements or obligations (e.g., standard contractual clauses), we will use our reasonable efforts to dispute the disclosure of personal information, unless legally required to do so.
Onward Transfer

If you choose to provide us with your information, you consent to the transfer and storage of that information on our servers located in the United States. The information we collect is subject to state and federal law in the United States. If you are accessing our websites from outside the United States, please be advised that you are transferring your personal information to us in the United States where data protection and privacy laws may be different or less stringent than the laws of your country.

Your Data Subject Rights

You have the right to:

  • Access, rectify, or erase any personal information we process about you;
  • Data portability – that is, asking us to transfer your personal information to any third party of your choice;
  • Restrict or object to our processing of your personal information; and
  • Where applicable, withdraw your consent at any time for any processing of your personal information.

To exercise your rights, please send an e-mail to notices@shadyrays.com.

Complaints

If you have a complaint about our use of your personal information or our response to your request(s) regarding your personal information, you may submit a complaint to the Data Protection Supervisory Authority in your jurisdiction. We would, however, appreciate the opportunity to address your concerns before you approach a data protection regulator and welcome you to first direct an inquiry to us.

In addition to our contact details set out above, you can also contact our Designated Individual Overseeing Compliance of this Privacy Policy by emailing notices@shadyrays.com.

Children

Our Websites and Products are not intended for children under the age of 13. This includes any links to other websites that we provide for our convenience. We don’t knowingly collect the information of children under 13 for any reason.

Changes

We may change this Policy from time to time. Any and all changes will be reflected on this page, and where appropriate provided in person or by another electronic method. The effective date will be stated at the top of this Policy. You should regularly check this page for any changes to this Policy.

Contact Us

team@shadyrays.com