PRIVACY POLICY

Last Updated: September 2, 2026

Rise Nano Optics, Inc. (“Rise Nano Optics,” “Rise,” “we,” “us,” or “our”) operates this website and related online services, including our business-to-business ecommerce services for eye care professionals (“ECPs”), optical laboratories and other authorized business customers (collectively, the “Services”).

Our Services are powered in part by Shopify, which provides the ecommerce platform that enables us to offer products and services online.

This Privacy Policy describes how we collect, use, disclose and otherwise process personal information when you visit or use our website, create or maintain a business account, purchase products or services, submit orders for prescription eyewear, communicate with us, or otherwise interact with the Services.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understand the practices described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be linked to an individual. Personal information generally does not include information that has been anonymized or de-identified so that it cannot reasonably be linked to an individual.

Depending on how you interact with the Services, we may collect or process the following categories of information:

Contact information, including name, business address, billing address, shipping address, telephone number and email address.

Professional and business information, including business or practice name, optical laboratory, professional role or title, account affiliation, business contact information and, where appropriate, professional credentials or licensing information.

Account information, including username, password, account preferences, settings, permissions and other information associated with your Rise account.

Transaction and order information, including products and services ordered, order history, shipping and fulfillment information, returns, remakes, credits, payment status and other information associated with transactions conducted through the Services.

Payment information, including payment method, payment confirmation, billing information and other information required to process transactions. Payment information may be collected and processed directly by Shopify or our payment service providers.

Prescription eyewear order information. When an authorized ECP, optical laboratory or other business customer submits an order for prescription eyewear, we may receive information necessary to manufacture, process, fulfill or support the order. Depending on the ordering process, this may include prescription parameters, lens specifications, frame information, measurements, order identifiers and limited patient or end-customer information provided by the ordering ECP or laboratory.

We ask our business customers to provide only the information reasonably necessary for us to process and fulfill an order and not to submit medical histories, diagnoses or other health information that is unnecessary for fulfillment of the order.

Communications with us, including information you provide when contacting us for customer service, technical support, product information, partnership inquiries, sales inquiries, regulatory inquiries or other business purposes.

Device and technical information, including information about your device, browser, network connection, IP address and other online identifiers.

Usage information, including information about how and when you access, interact with and navigate the Services.

Marketing and preference information, including your communications preferences and information regarding your interaction with marketing communications where permitted by law.

Information Relating to Prescription Eyewear Orders

Certain Services may enable authorized ECPs, optical laboratories or other business customers to submit orders for prescription eyewear on behalf of their patients or customers.

The ECP or laboratory submitting an order is responsible for determining what information is appropriate and lawful to provide to Rise and for obtaining any authorization, consent or other legal basis required for providing that information.

Rise uses information submitted with prescription eyewear orders for purposes such as processing and fulfilling orders, coordinating with authorized laboratories and service providers, providing customer service, handling remakes or corrections, maintaining required business and quality records, and complying with applicable legal and regulatory requirements.

Rise does not intend its general website or ecommerce platform to serve as a repository for patient medical records. ECPs and laboratories should not submit diagnoses, clinical notes, medical histories or other patient health information unless specifically requested by Rise through an authorized process and necessary for the applicable transaction.

Sources of Personal Information

We may collect personal information:

• Directly from you, including when you visit or use the Services, establish a business account, place an order, contact us, request information, subscribe to communications or otherwise provide information to us.
• From ECPs, optical laboratories and other business customers, including information provided in connection with prescription eyewear orders or other transactions.
• Automatically through the Services, including through cookies, pixels and similar technologies.
• From Shopify and our service providers, when they provide ecommerce, payment, fulfillment, analytics, hosting, customer support or other services on our behalf.
• From business partners and other third parties, where permitted by applicable law.

How We Use Personal Information

Depending on how you interact with Rise, we may use personal information for the following purposes:

Providing our Services and fulfilling orders. We use information to establish and manage accounts; verify business customers; process transactions; fulfill orders for products, supplies and prescription eyewear; coordinate manufacturing and laboratory services; arrange shipping; process payments, returns, remakes and credits; provide order status information; and otherwise perform our contractual obligations.

Operating our ECP and laboratory relationships. We may use information to administer authorized laboratory, ECP, distributor and other commercial relationships; provide product and technical information; conduct training; provide sales support; and manage our business relationships.

Quality, regulatory and product support. We may use information where reasonably necessary for quality assurance, traceability, complaint handling, product support, corrective actions, regulatory compliance, recordkeeping and other obligations applicable to our products and operations.

Improving the Services. We may use information to understand how our website and Services are used, improve functionality and customer experience, develop products and services and optimize our business operations.

Marketing and advertising. Subject to applicable law and your choices, we may use personal information to provide marketing, advertising and promotional communications regarding Rise products, services, educational programs, events and other information that may be relevant to ECPs, laboratories and other business customers.

Security and fraud prevention. We may use information to authenticate users, secure accounts and transactions, detect and investigate fraudulent, illegal or malicious activity and protect Rise, our customers and others.

Communicating with you. We use information to respond to inquiries, provide customer and technical support, communicate about orders and accounts and maintain our business relationships.

Legal and regulatory purposes. We may use information to comply with applicable laws, regulations, legal processes and governmental requests; establish, exercise or defend legal claims; enforce our agreements and policies; and protect our rights and the rights of others.

How We Disclose Personal Information

We may disclose personal information where reasonably necessary for legitimate business purposes, including:

Shopify. Our ecommerce Services are powered by Shopify, which processes information to provide and improve its platform and related services.

Service providers. We may provide information to companies that perform services on our behalf, such as payment processing, information technology, website hosting, data analytics, customer support, cloud storage, shipping and fulfillment.

Optical laboratories, manufacturers and fulfillment partners. Information necessary to manufacture, process, inspect, fulfill or deliver products or prescription eyewear may be provided to authorized laboratories, manufacturers and other service providers involved in fulfilling an order.

Business and marketing partners. Where permitted by law, we may work with providers that assist us with marketing, analytics and advertising. These activities may involve cookies or similar technologies and are subject to the privacy choices described below.

Affiliates. We may disclose information within the Rise Nano Optics corporate group where reasonably necessary for business operations, administration, regulatory compliance and provision of the Services.

At your direction. We may disclose information when you direct or authorize us to do so.

Business transactions and legal requirements. Information may be disclosed in connection with a financing, merger, acquisition, reorganization, sale of assets, bankruptcy or similar corporate transaction, or when required to comply with applicable law, legal process or governmental requests, enforce our agreements, or protect our rights or the rights of others.

We do not disclose patient prescription information submitted in connection with prescription eyewear orders for unrelated third-party advertising purposes.

Relationship With Shopify

The Services are hosted in part by Shopify, which collects and processes personal information regarding access to and use of the Services in order to provide and improve Shopify's services.

Information submitted through the Services may be transmitted to Shopify and other service providers located in countries other than the country in which you reside.

Shopify may also provide features that use information regarding interactions with our store, Shopify and other merchants. In circumstances in which Shopify independently determines the purposes and means of processing personal information, Shopify is responsible for its processing of that information.

You can learn more about Shopify's privacy practices through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels and similar technologies to operate the website, remember preferences, understand how visitors use the Services, measure website performance, provide relevant marketing and help protect against fraud and misuse.

Depending on where you reside, certain cookies and similar technologies may be used only with your consent or may be subject to your right to opt out.

Where required, our website provides tools that allow you to manage applicable cookie and data-sharing preferences.

Targeted Advertising and Sale or Sharing of Personal Information

Depending on applicable law, certain uses of cookies, advertising technologies or information provided to advertising or marketing partners may be considered a “sale,” “sharing,” or processing for “targeted advertising,” even where no money is exchanged for personal information.

Residents of jurisdictions providing these rights may opt out through the Data Sharing Opt-Out link provided on our website.

Where required by applicable law, we also recognize applicable browser-based opt-out preference signals, including the Global Privacy Control (“GPC”).

Third-Party Websites and Services

The Services may contain links to websites, social media services or other online platforms operated by third parties. If you follow a link to a third-party service, that third party's privacy practices will apply to information you provide to it.

Rise is not responsible for the privacy, security or content practices of third-party websites or services that we do not control.

Children's Privacy

The Services are intended for businesses and professionals and are not directed to children.

We do not knowingly collect personal information directly from children through the Services. If we learn that a child has provided personal information directly to us without appropriate authorization, we will take reasonable steps to delete it as required by applicable law.

Nothing in this section prevents an authorized ECP or laboratory from providing limited information necessary to fulfill a legitimate prescription eyewear order for a minor patient where the ECP or laboratory is authorized to do so.

Security

We use reasonable administrative, technical and organizational safeguards designed to protect personal information.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Users are responsible for protecting their account credentials and should not share passwords or other access credentials with unauthorized persons.

ECPs, laboratories and other business customers should use designated secure ordering processes when transmitting prescription or other sensitive information and should not transmit sensitive information through ordinary email or general website contact forms unless specifically instructed to do so.

Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to provide Services, fulfill orders, maintain business and customer relationships, comply with legal and regulatory obligations, maintain appropriate quality and traceability records, resolve disputes and enforce our agreements.

Retention periods may vary depending on the type of information, the nature of the transaction and applicable legal or regulatory requirements.

Your Privacy Rights and Choices

Depending on where you reside and subject to applicable law, you may have rights concerning your personal information, including:

• Access / Right to Know. You may have the right to request information about personal information we maintain about you and how we process it.
• Correction. You may have the right to request correction of inaccurate personal information.
• Deletion. You may have the right to request deletion of certain personal information.
• Portability. You may have the right to receive certain personal information in a portable format.
• Opt Out of Sale, Sharing or Targeted Advertising. You may have the right to opt out of certain uses or disclosures of personal information for targeted advertising or activities legally defined as sale or sharing.
• Restriction or Objection. In certain jurisdictions, you may have the right to restrict or object to particular processing activities.
• Withdrawal of Consent. Where we rely on consent, you may have the right to withdraw that consent.
• Appeal. Depending on applicable law, you may have the right to appeal our decision regarding a privacy request.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

We may need to verify your identity before processing certain requests. Where permitted by law, an authorized agent may submit a request on your behalf.

Marketing Communications

You may unsubscribe from promotional email communications at any time using the unsubscribe link included in our marketing emails.

Even if you opt out of promotional communications, we may continue to send non-promotional communications necessary to administer your account, fulfill orders, provide product or regulatory information, respond to inquiries or maintain our business relationship.

European Economic Area, United Kingdom and Switzerland

If you are located in the European Economic Area (“EEA”), United Kingdom or Switzerland, applicable data protection law may require us to identify a lawful basis for processing your personal information.

Depending on the processing activity, we may process personal information because:

• it is necessary to perform a contract with you or take steps at your request before entering into a contract;
• processing is necessary to comply with a legal obligation;
• processing is necessary for our legitimate interests or those of a third party, where those interests are not overridden by your rights and interests; or
• you have provided consent where consent is required.

Our legitimate interests may include operating and improving our Services, administering business relationships, securing our systems, preventing fraud, providing customer service, supporting our products and conducting appropriate business-to-business marketing.

Where processing is based on consent, you may withdraw your consent at any time, without affecting processing conducted before withdrawal.

International Transfers

Rise Nano Optics, Inc. is located in the United States, and our service providers, affiliates and business partners may operate in the United States and other countries.

As a result, personal information may be transferred to, stored in or processed in countries outside your country of residence.

Where applicable law requires safeguards for international transfers, we use recognized legal mechanisms such as adequacy decisions, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum or other legally recognized transfer mechanisms, as appropriate.

Complaints

If you have concerns about how Rise processes your personal information, please contact us using the information below.

Depending on where you reside, you may also have the right to lodge a complaint with or contact the data protection or privacy authority responsible for your jurisdiction.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our Services, business practices, technology, legal requirements or other operational considerations.

When we update this Privacy Policy, we will post the revised version on this website and update the “Last Updated” date. We will provide additional notice where required by applicable law.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, or would like to exercise an applicable privacy right, please contact:

Rise Nano Optics, Inc.
371 Bel Marin Keys Blvd.
Suite 130, PMB 16943166
Novato, CA 94949
United States

Email: privacy@risenanooptics.com