Effective October 23, 2026.
OPTI SHACK INC, doing business as Lenshaus ("Lenshaus," "we," "us") wrote this notice for consumers in Washington, Nevada, and Connecticut, and for any other customer who wants the same explanation. Washington's My Health My Data Act, Nevada's consumer health data law (SB 370), and Connecticut's consumer health data rules call for a separate notice of this kind. This page is that notice. It does not say that Lenshaus already satisfies those laws. Lenshaus does not claim HIPAA compliance.
Lenshaus does not bill any health insurance, Medicare, Medicaid, or vision plan.
Consumer health data we collect
When you order prescription lenses, we collect information about your vision correction and the measurements needed to make the lenses. We treat the following as consumer health data when it is linked to you or to your order:
- An eyeglass prescription file you upload. The file can be a JPEG, PNG, WebP, HEIC, HEIF, or PDF, up to 10 MB.
- The values read from that file, or that you type: sphere, cylinder, axis, reading addition (ADD), and prism for each eye.
- The prescriber name and the expiration date, when they are visible on the file or you provide them.
- Pupillary distance, as one number or as separate right and left numbers. It may come from the prescription, from a number you type, or from photos you submit in the measurement tool.
- Fitting-height photos and the measurements taken from them, when you use the measurement tool.
- Notes the reading keeps about that prescription, including which fields were missing and whether you still need to confirm the values.
Frame photos are photographs of your frames. The front view is the one we ask for. Side and top views are optional. They are not a prescription. We describe them here because they are collected on the same order, stored with it, and may include your hands or your face if you leave them in the picture. The handling below is what the site does with those photos today.
Why we collect it
- To make the lenses you asked for, using the powers and measurements you provide.
- To show you the values from an uploaded file and ask you to confirm them before checkout.
- To let the lab check the frames and the prescription before and during production, including a remake.
- To answer a support question about that order.
- To show a preview of lens color on a photo of your frame, if you upload one.
We do not use this information to bill an insurer. We do not sell it, and we do not share it for targeted advertising.
Where it comes from
You provide it. You upload a file, type the values, enter a pupillary distance, or submit measurement photos. When you upload a prescription file, our server sends that file to a reading service and receives the values back. We do not buy this information from data brokers, and we do not receive it from a health plan.
Who receives it
These are the categories of recipients that can receive consumer health data, or the frame photos collected with it:
- Lenshaus staff who need it to make or support the order. They can view the saved prescription and frame photos in the order tools.
- The lab that manufactures the lenses. When review email is turned on, a summary of the prescription and the frame photos can be emailed to the lab and to Lenshaus support. That summary includes the powers, pupillary distance, prescriber name, and expiration date when we have them.
- OpenAI, for prescription reading. Our server sends the file you upload to the OpenAI API so it can read the values. The request tells OpenAI not to store that upload for later retrieval. A PDF is sent with the file name you gave it. Lenshaus does not write the image or PDF into the order database. OpenAI returns the values to our server.
- OpenAI, for a frame-photo preview. If you use the lens preview, the frame photo is sent to OpenAI's image service. OpenAI does not use API data for training, keeps no application state for image edits, and may keep abuse-monitoring logs for up to 30 days.
- The order database. Prescription values are stored on the order record in a private Postgres database. The application connects with the Neon serverless driver. Frame photos are stored as private image data in a separate table. The order stores an id for each photo, not a public link. Measurement photos and the measurements taken from them are stored in their own tables.
- Vercel, which hosts this website and runs the upload request.
- Resend, the email service, when a lab review email is sent.
- Shopify, for checkout and the store order. Shopify receives that the order is a prescription or non-prescription order, a Lenshaus configuration id, and the lens options you bought. Shopify does not receive the prescription numbers, the prescription image, the prescriber name, pupillary distance, prism, or frame photos.
A link you create with "Save my lenses and finish later" stores lens choices only. It does not include your prescription, pupillary distance, photos, or contact details. Vercel Web Analytics may receive the address of a page you visit. It does not receive the prescription file or the prescription values. The application log for a successful prescription read records the file type, the file size, a confidence score, how many fields were missing, and how long the read took. That log line does not record the prescription numbers or the image.
How long we keep it
The prescription image or PDF is used for that reading request. Lenshaus does not save the file in its database. Your browser can show a preview during the visit. Refreshing the page does not reload the file from Lenshaus, because the file was not stored. The values from the file are stored, once they are saved on the order.
Prescription values, any prescriber name and expiration date we stored, and pupillary distance stay on the order record. Frame photos stay in the database with the order. Measurement photos and the measurements taken from them stay until that measurement is reset or we delete them.
The site does not run a job that deletes unpaid orders, prescription values, or these images after a set number of days. Your browser keeps a local copy of the current order's frame photos and stops using that copy after 7 days. That local limit does not delete the copy in our database.
We keep the order record so we can make the lenses, handle remakes and support, and meet legal duties. There is no fixed public retention period in the current site. You can ask us to delete the consumer health data. We may deny or limit deletion when we need the information to finish an order you asked us to make, to document a transaction, to prevent fraud, or to comply with law. We will tell you if we do.
Your choices
You can upload a prescription, type the values, or choose to send the prescription later. You can order lenses that do not need a prescription. Side and top frame photos are optional. You can continue without a front frame photo by choosing to send the frame later. The measurement tool is separate from the prescription upload.
Checkout stays blocked while a prescription we read still needs your confirmation. A separate pair of checkboxes, one for collection and one for sharing, exists in the prescription step and the frame-photo step, but it is turned off. Those checkboxes do not appear unless Lenshaus enables them. Until then, you provide this information by uploading it, typing it, or submitting measurement photos for the order you requested.
You can withdraw permission to keep using consumer health data by contacting us and asking us to stop. If an order is already being made, we may need to finish that order or keep a record the law requires. We will tell you what we can delete and what we still need.
Access, deletion, and appeals
Email support@lenshaususa.com, call 954-744-9461, or write OPTI SHACK INC, doing business as Lenshaus at 2127 W 76th St, Hialeah, FL 33016. Online only, no walk-ins.
You can ask us to:
- Confirm whether we collect, share, or sell your consumer health data.
- Provide access to it.
- Delete it.
- Withdraw consent to collect or share it.
- Appeal a decision on one of these requests.
There is no separate online form for these requests today. Include the name and email on the order, and say which request you are making. We may need to confirm that the request is yours before we act. We will respond within the time required by applicable law.
If we deny a request, reply to that decision or email the same address with "Appeal" in the subject. We will review the appeal. If we deny the appeal, you can contact the Washington State Attorney General, the Nevada Attorney General, or the Connecticut Attorney General, as applicable to where you live. The appeal response will include how to reach the relevant office.
Changes
Later changes will be posted at this same address.
Contact
Questions about this notice: support@lenshaususa.com, 954-744-9461, or OPTI SHACK INC, doing business as Lenshaus, 2127 W 76th St, Hialeah, FL 33016. The general Privacy Policy covers other personal information.