Privacy policy

This Privacy Policy describes how buyfsa.com (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Because many of the products we sell are health-related, some information we collect may be considered consumer health data under certain state laws. How we collect, use and share that information is described in our Consumer Health Data Privacy Policy, which applies in addition to this Privacy Policy.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at support@buyfsa.com.

You can also write to us at: BuyFSA Inc., 1032 E Brandon Blvd, 1991, Brandon, FL 33511.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

  • Device information
    • Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
    • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels
    • Disclosure for a business purpose: shared with our processor Shopify and associated apps used to faciliate communications with visitors and customers
    • Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site
  • Order information
    • Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
    • Source of collection: collected from you.
    • Disclosure for a business purpose: shared with our processor Shopify and associated apps for the purposes of managing user communications and store operations.
    • Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers - which are not stored), email address, and phone number.
  • Customer support information
    • Purpose of collection: To facilitate visitor and customer communications and resolve support inquiries
    • Source of collection: User inputs on site forms or via email contact
    • Disclosure for a business purpose: Only to 3rd party communication apps that help facilitate customer and visitor interactions
    • Personal Information collected: Any user inputted data.
    • Purpose of collection: to provide customer support.
    • Source of collection: collected from you as you enter in contact information for support purposes.
    • Disclosure for a business purpose: Email service provider, chat provider.
    • Personal Information collected: Only user inputted information for customer support.
  • Health-related information
    • Purpose of collection: to provide the products and services you request, including processing, charging for and shipping orders, completing prescription eyewear orders, and completing or cancelling orders that require a Letter of Medical Necessity.
    • Source of collection: collected automatically when you browse the Site, collected from you when you place an order, and, for the Letter of Medical Necessity service, received from MD Integrations with your authorization.
    • Disclosure for a business purpose: shared with our processor Shopify and service providers that help us process and ship orders. Shared with advertising partners only if you consent. Letter of Medical Necessity status updates are never shared with advertising or marketing partners.
    • Personal Information collected: health-related products you view, search for or purchase; status updates about a Letter of Medical Necessity evaluation, such as whether it was completed and whether a letter was issued (we do not receive your evaluation answers, medical information or letter); and prescription details you provide for eyewear orders.


Minors

The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address above to request deletion.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:

  • We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
  • We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Behavioral Advertising

With your consent, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

  • With your consent, we use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
  • With your consent, we share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

 

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/.

Your choices. We ask for your consent through our cookie banner before using analytics and advertising cookies, pixels and similar technologies, and we work to make sure the tools on our Site follow your choice. You can opt out at any time on our Data Sharing Opt-Out page or by emailing support@buyfsa.com. Because some third-party tools may not respond to every privacy setting, you can also use your browser settings and the industry opt-out tools listed above.

Letter of Medical Necessity pages and orders. We do not use analytics or advertising technologies on our Letter of Medical Necessity pages, and we do not send information about Letter of Medical Necessity evaluations or orders to analytics or advertising partners.

Using Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers. We only service site visitors/customers in the United States.

Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. For more information on your right of erasure, please see the ‘Your rights’ section below.

Status updates about a Letter of Medical Necessity evaluation are deleted 180 days after the related order is fulfilled or cancelled.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We DO NOT engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

  • Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
  • Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.

Selling Personal Information

Our Site does not sell Personal Information, as defined by the California Consumer Privacy Act of 2018 (“CCPA”). 

Some state laws treat sharing information with advertising partners for targeted advertising as a "sale" or "sharing" of personal information. We ask for your consent before doing this, and you can opt out at any time on our Data Sharing Opt-Out page or by emailing support@buyfsa.com.

We do not sell consumer health data.

Your rights

GDPR

 

We do not serve customers or visitors outside of the United States. The use of the Site is for residents of the United States only.

 

CCPA

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above. 

If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at support@buyfsa.com.

All U.S. customers

We extend the following rights to all customers in the United States, regardless of where you live. You may ask us to:

  • Confirm whether we process your Personal Information.
  • Access your Personal Information and receive a copy in a portable format.
  • Correct inaccurate Personal Information.
  • Delete your Personal Information.
  • Opt out of the sale or sharing of your Personal Information, targeted advertising and profiling.
  • Withdraw any consent you have given us.

How to make a request. Email us at support@buyfsa.com and tell us which right you want to exercise. To opt out of data sharing for advertising, you can also use our Data Sharing Opt-Out page. We will verify your request by matching details you provide, such as your email address and an order number, with our records. You may use an authorized agent; we may ask the agent for proof of authorization.

Response time. We respond within 45 days. If we need more time, we will tell you why and may extend our response once by up to 45 additional days.

Appeals. If we decline your request, you may appeal by emailing support@buyfsa.com with "Appeal" in the subject line. We will respond in writing within 45 days and explain our decision. If we deny your appeal, you may contact the Attorney General of your state.

No discrimination. We will not deny you service, charge you a different price or provide a different level of service because you exercised your privacy rights.

Additional rights for consumer health data are described in our Consumer Health Data Privacy Policy.

 

Prescription Fulfillment and Third-Party Services

To provide comprehensive eyewear solutions, we have partnered with a third-party glasses company specializing in prescription intake and fulfillment services. When you choose to add prescription lenses to your eyewear purchase, we will share necessary personal information with our partner to facilitate this process.

Information Shared:

  • Full name
  • Shipping address
  • Email address
  • Phone number
  • Prescription details (as provided by you)

Purpose of Sharing:

  • To process and fulfill your prescription lens order
  • To communicate with you regarding your prescription order status

Our third-party partner is contractually obligated to use your information solely for the purposes of processing and fulfilling your prescription eyewear order. They are required to implement appropriate security measures to protect your personal data and are prohibited from using your information for any other purposes.

Your Rights:

You have the right to access, correct, or request deletion of your personal information shared with our third-party partner. To exercise these rights, please contact us at support@buyfsa.com.

Letter of Medical Necessity Service

Some products may be eligible for purchase with FSA or HSA funds with a Letter of Medical Necessity. We offer access to Letter of Medical Necessity evaluations through MD Integrations and its affiliated, independent licensed clinicians.

Your evaluation takes place on MD Integrations' platform, which is embedded on our Site. buyFSA does not receive, see or store your evaluation answers, your medical information or your letter. MD Integrations' handling of your information is governed by its own privacy policy, notice of privacy practices and telehealth consent, which are presented to you before your evaluation.

With your authorization, MD Integrations sends us only status updates about your evaluation, such as whether it has been completed and whether a letter was issued, so that we can complete or cancel your order. We use this information only to process, charge for and ship your order. We do not use it for marketing or advertising, and we do not share it with analytics or advertising partners.

There is no fee for the evaluation. Clinicians make their own independent medical decisions, and a letter may not be issued. If a letter is not issued, your order will be cancelled and you will not be charged.

Third-Party Health Services and Referral Links

Our Site links to products and services offered by other companies, including telehealth, lab testing and mental health services such as Shed, Quest, Labcorp and Talkspace. Some of these are affiliate or referral links, which means we may earn a commission if you sign up or make a purchase.

When you click one of these links, you leave the Site. The link tells the partner only that you came from buyFSA and which of our campaigns or placements the link appeared in, so the partner can credit the referral. We do not include your name, email address, account details, order history, health-related shopping information or anything else that identifies you, and we do not share your consumer health data with these partners.

Once you leave the Site, the partner's own terms and privacy policy govern any information you give them and how they use it. Please review them before signing up.

Partners may report to us, directly or through an affiliate network, that a referral resulted in a sign-up or purchase so that we can be paid. We set up our referral links so that these reports are not linked to you or your buyFSA account. We do not send information about your clicks on these links, or the reports partners send us, to advertising partners.

 

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.


Cookies Necessary for the Functioning of the Store

Name Function Duration
_ab Used in connection with access to admin. 2y
_secure_session_id Used in connection with navigation through a storefront. 24h
_shopify_country Used in connection with checkout. session
_shopify_m Used for managing customer privacy settings. 1y
_shopify_tm Used for managing customer privacy settings. 30min
_shopify_tw Used for managing customer privacy settings. 2w
_storefront_u Used to facilitate updating customer account information. 1min
_tracking_consent Tracking preferences. 1y
c Used in connection with checkout. 1y
cart Used in connection with shopping cart. 2w
cart_currency Used in connection with shopping cart. 2w
cart_sig Used in connection with checkout. 2w
cart_ts Used in connection with checkout. 2w
cart_ver Used in connection with shopping cart. 2w
checkout Used in connection with checkout. 4w
checkout_token Used in connection with checkout. 1y
dynamic_checkout_shown_on_cart Used in connection with checkout. 30min
hide_shopify_pay_for_checkout Used in connection with checkout. session
keep_alive Used in connection with buyer localization. 2w
master_device_id Used in connection with merchant login. 2y
previous_step Used in connection with checkout. 1y
remember_me Used in connection with checkout. 1y
secure_customer_sig Used in connection with customer login. 20y
shopify_pay Used in connection with checkout. 1y
shopify_pay_redirect Used in connection with checkout. 30 minutes, 3w or 1y depending on value
storefront_digest Used in connection with customer login. 2y
tracked_start_checkout Used in connection with checkout. 1y
checkout_one_experiment Used in connection with checkout. session

Reporting and Analytics

Name Function Duration
_landing_page Track landing pages. 2w
_orig_referrer Track landing pages. 2w
_s Shopify analytics. 30min
_shopify_d Shopify analytics. session
_shopify_s Shopify analytics. 30min
_shopify_sa_p Shopify analytics relating to marketing & referrals. 30min
_shopify_sa_t Shopify analytics relating to marketing & referrals. 30min
_shopify_y Shopify analytics. 1y
_y Shopify analytics. 1y
_shopify_evids Shopify analytics. session
_shopify_ga Shopify and Google Analytics. session


The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Additionally, blocking cookies in your browser may not stop all sharing with our advertising partners, such as information sent from our servers. To withdraw your consent, use our Data Sharing Opt-Out page or email support@buyfsa.com. To opt out of certain uses of your information by these partners directly, please follow the instructions in the “Behavioral Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

This does not apply to Global Privacy Control (GPC). We treat a GPC signal from your browser as a request to opt out of the sale and sharing of your Personal Information and targeted advertising for that browser.

Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Complaints

As noted above, if you would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact” above.

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant state data protection authority. You can contact your local data protection authority, or our supervisory authority by searching for your state's authority and filing a complaint.

Last updated: 10/14/2026