Effective date: October 7, 2026
This Consumer Health Data Privacy Policy explains how buyFSA ("buyFSA," "we," "us," "our") collects, uses and shares consumer health data. It applies to information collected through buyfsa.com and related websites and services, and it supplements our Privacy Policy.
"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. This includes information that identifies you as seeking health care services and information that could be used to infer your health status.
Consumer health data we collect
-
Health-related shopping information: health-related products you view, search for, add to your cart or purchase.
-
Letter of Medical Necessity information: that you started our Letter of Medical Necessity process, and status updates about your evaluation, such as whether it was completed and whether a letter was issued. We do not receive your evaluation answers, your medical information or your letter.
-
Prescription eyewear information: prescription details you provide for prescription lens orders.
-
Customer support information: health information you choose to include in messages to our customer support team.
How we use consumer health data
We use consumer health data to:
- Provide the products and services you request, including processing, charging for and shipping your orders, completing prescription eyewear orders, and completing or cancelling orders that require a Letter of Medical Necessity.
- Respond to your customer support requests.
- Prevent fraud, secure our site and comply with the law.
With your separate consent only, we use health-related shopping information for analytics, personalized marketing and advertising. You can withdraw that consent at any time on our Data Sharing Opt-Out page or by emailing support@buyfsa.com.
Where we get consumer health data
- Directly from you, when you place orders, complete forms or contact customer support.
- Automatically from your device, when you browse our site.
- From MD Integrations, which sends us only status updates about your evaluation, with your authorization.
Consumer health data we share
- Order and product information, including health-related products you purchase.
- Prescription eyewear details.
- Customer support communications.
- Letter of Medical Necessity status updates, only with the service providers that host our order and payment systems, to complete or cancel your order. We never share them with advertising, marketing or other third parties.
Who we share consumer health data with
-
Service providers that process data only on our instructions and under contract: our e-commerce platform; payment processors; shipping, fulfillment and drop-ship partners; our prescription eyewear partner; customer support, email and SMS providers; and hosting and security providers.
-
MD Integrations and its affiliated clinicians, when you choose to start a Letter of Medical Necessity evaluation. We provide an order reference number so your evaluation can be linked to your order. You provide all other information directly to MD Integrations.
-
Analytics and advertising partners described in our Privacy Policy, only if you give separate consent.
-
Government authorities or others when required by law.
We do not share consumer health data with affiliates.
We do not sell consumer health data.
Your rights
You have the right to:
-
Confirm whether we collect, share or sell your consumer health data.
-
Access your consumer health data, including a list of all third parties and affiliates with whom we have shared or sold it, along with an email address or other way to contact each of them.
-
Withdraw consent to our collection or sharing of your consumer health data.
-
Delete your consumer health data. When we delete it, we also notify our service providers and any third parties with whom we shared it to delete it. Data stored in archives or backups is deleted within six months.
-
Correct inaccurate consumer health data.
How to exercise your rights. Email support@buyfsa.com and tell us which right you want to exercise. To opt out of data sharing for advertising, you can also use our Data Sharing Opt-Out page. We will verify your identity by matching details you provide, such as your email address and an order number, with our records.
Response time. We respond within 45 days. If reasonably necessary, we may extend this once by an additional 45 days, and we will tell you if we do.
Appeals. If we decline your request, you may appeal by emailing support@buyfsa.com with "Appeal" in the subject line within 60 days of our decision. We will respond in writing within 45 days and explain the reasons for our decision. If we deny your appeal, you may contact the Attorney General of your state to submit a complaint.
No discrimination. We will not treat you differently because you exercised any of these rights.
How we protect consumer health data
We limit access to consumer health data to employees and service providers who need it to provide the products and services you request, and we use reasonable administrative, technical and physical safeguards to protect it.
Geofencing
We do not use geofences around health care facilities to identify or track consumers, collect consumer health data, or send notifications, messages or advertisements.
Changes to this policy
We will post any changes here with a new effective date. If we make a material change, we will notify you and, where required, obtain your consent before applying the change to consumer health data we already have.
