NOTICE OF PRIVACY PRACTICES

Effective Date: 2026-08-15.

We understand that you entrust your data to us. We value that trust. We are committed to maintaining your trust and protecting your privacy.

This Notice of Privacy Practice (“Notice”) covers how Nextmarvel Inc., and its affiliates (collectively “Company”) handle personal data that directly or indirectly relates to an identified or identifiable individual, whether you interact with us on our website or mobile application, through our products or services, or interact with us in any means. We may also link to third parties on our products and services. This Notice does not apply to how third parties define personal data or how they use it. We encourage you to read their privacy policies and know your privacy rights before interacting with them.

We keep this Notice under regular review and will place any updates on this web page. The date this Notice was last updated is stated at the beginning of our privacy practices. If we make any material changes to this Notice, we will notify you by posting a prominent notice on our website or by sending you an email notification. We encourage you to review this Notice periodically for any changes.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

I. Categories of Information We Collect and How We Collect

Your personal information will be retained only as long as necessary to carry out the purpose for which it was collected, as outlined in this Notice, unless a longer retention period is required or permitted by law. Personal information will be retained and disposed of in accordance with our Data Retention Policy and Schedule. We collect certain information from you and about you when you interact with us and our service. Information is collected directly from you, or through other means, as described below:

• Information You Provide Directly to Us. When you register online or place an order for any of our products or services, create an account, subscribe to our newsletter or marketing communications, contact customer service, participate in surveys or promotions, use our virtual try-on technologies, track, exchange, or return orders, refer a friend, or otherwise communicate or interact with us.
• Information We Collect through Data Collection Technologies. When you use or view our website or application, we automatically collect certain information through cookies, pixels, SDKs, and similar technologies, as well as through server logs and other technical tools. This may include log data (e.g., data and time of access, pages viewed, links clicked, search query content, and language used), device information (such as device model, operating system, browser, setting parameters, device configuration, device environment, mobile device identification code-OAID or Android ID-and other software or hardware charateristics information), usage information (e.g., how you navigate and interact with the site or application, and otherwise for general administrative, analytical, research optimization, and security puposes), and location information (e.g., IP address and, where enabled, more precise location data from your device).

You can learn more about our use of cookies and similar technologies, and how to manage your choices, in the Section IV of this Notice.

• Information From Other Sources. We may receive information about you from third parties, such as social media platforms if you interact with our social media pages, service providers (e.g., payment processors, shipping and logistics providers, customer support platform, and marketing and advertising partners), analytic companies, advertising networks and cooperatives that help us understand the performance of our marketing campaigns and how you interact with our advertisements on third-party services (e.g., through mobile advertising identifiers and similar identifiers) online databases and directories where permitted by applicable law, and your eyecare professional, in limited cases, where we receive prescription or other health-related information necessary to fulfill your order or provide related services.

We only receive information from such third parties where they are legally permitted to share it with us and, where required, that they have provided any necessary notices or obtained any required consent. The collection and use of your information by these third parties is governed by the privacy statement of the third party.

Depending on how you interact with us and our services, we may collect the following categories of personal information. Some of these categories may include personal information that is considered sensitive under certain data privacy laws, including health information, geolocation data, and personal information of a child. This includes:

• Customer Records Information. This may include identifier, contact information, financial information, commercial information, as well as your account password, items in your online shopping cart or saved for future purchase, registry information, product review information, address book entries, and other information about your profile or account.
• Identifiers. This may include your name, email address, phone number, postal address, online identifier, IP address, account login credentials, and other similar identifiers.
• Contact Information. This may include your shipping address, billing address, and recipient contact information (name and mobile phone number).
• Financial Information. This may include your bank account details, certain tax identification information where required by law (e.g., VAT/GST), or other third-party payment information required for payment, and transaction history. Depending on your jurisdiction, certain financial account details may be treated as sensitive information.
• Commercial Information. This may include details of the items you purchase, items you have altered or custom-made (e.g., measurements), your purchasing history or tendencies, and other commercial information related to your interactions with us.
• Internet or Other Electronic Network Activity Information. This may include browsing history, search history, information regarding a customer's interaction with an internet website application or advertisement, such as IP addresses, unique device identifiers, cookie identifiers, beacons, pixel tags, mobile advertising identifiers, device and browser settings and characteristics, and Internet service provider information.
• Geolocation Information. We will collect your approximate location derived from your IP address when you visit our website or use our service. We may also collect more precise geolocation information, whether using our mobile application or website, only if your device or browser is set to provide us with your location data.
• Inferences: We may generate inferences draw from any of the information described above to create a consumer profile, reflecting your preferences, interests, characteristics, likely purchasing tendencies, predispositions, or attitudes, and to help us understand and improve our products, services, and marketing. We do not use such inferences to make decisions that produce legal or similarly significant effects about you solely by automated means, unless we clearly inform you otherwise and, where required, obtain your consent.
• Biometric Information: When you use our virtual try-on technologies, we may process your face geometry your direct to assist you in visualizing how certain eyeglasses may look on your facial features. We use this information only to provide the virtual try-on functionality and related services, and we handle it in accordance with applicable biometric and data protection laws, including by limiting retention and access and, where required, obtaining your consent. We do not use this information to identify or verify your identity unless expressly stated at the point of collection.
• Prescription Information: When you order prescription eyewear or related products, we may collect prescription details and related measurements and lens specifications that you or your eyecare professional provides. We treat this information as sensitive and use it only as necessary to provide products and services to you, to comply with our legal obligations, or as otherwise permitted by law. In some cases, when we receive information from or on behalf of your eyecare professional or other health care provider, such information may be subject to additional laws and regulations, and we will handle it in accordance with those requirements where applicable. For instances, we, or our business associate, may receive the compensation (directly or indirectly) related to an exchange of your health information under the Health Insurance Portability and Accountability Act of 1996for the purposes of: (i) public health activities, (ii) research purposes (if the price charged reflects the cost of preparation and transmittal of the information), (iii) payment or compensation for your treatment, (iv) health care operations related to the sale, merger or consolidation of all or part of our business, (v) performance of services by a business associate on our behalf, (vi) providing you with a copy of your health information, or (vii) other reasons determined necessary or appropriate by applicable laws or regulations.
• Sensitive Personal Information. Certain of the personal information described above may be classified as “sensitive” or subject to enhanced protections under applicable laws. This may include, for instance, prescription and other health-related information, biometric information used for virtual try-on, precise geolocation data, and personal information about children, where applicable. We collect and use such information only for limited purposes that are permitted by law—for example, to provide requested services, to protect the security and integrity of our systems, or with your consent—and we apply additional safeguards and rights where required, such as the right to limit certain uses or disclosures of sensitive personal information.
• Children’s Privacy. Our website and online service does not target children under the age of 16 as its primary audience and does not direct to children under the age of 16 by all means of any applicable children’s online privacy regulations covered. When you upload your prescription, we will provide a option for parents of allowing the collection and use their children’s personal information, without agreeing to processing that information to other purpose and disclosing that information to third parties. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us immediately at support@ca.zeelool.com. If we become aware that we have collected personal data from children under the age of 16 without verification of parental consent, we will take steps to remove that information from our servers.

II. Why We Collect and Use Information

We may combine information collected from different sources. Below is a summary of the primary ways we collect and use the above categories of personal information.

• Purpose for Product and Service Fulfillment. We use your personal information to provide, operate, and support core products and services. This includes creating and account and managing the account preference; fulfilling, managing, and communicating with you about your purchase order for products or services; processing any of your transaction and ongoing payments and addressing your order inquiries and requests; providing customer service and alerting you to order status and shipping information; and delivering service-related communications (e.g., updates to our platform or changes to our terms and policies) to you.
• Purpose for Targeting and Analyzing Operations. We use your personal information to monitor, maintain, and improve the performance, capacity, and user experience of our services. This includes generating internal reports and analytic; researching, developing, and testing new features and services; understanding how users interact with our website and mobile application; and evaluating user trends, interests, and preferences to optimize our operations and user interfaces, in each case in accordance with applicable law and your choices.
• Purpose for Advertising and Marketing Campaigns. We use your personal information to acquire, engage, and retain customers through marketing, advertising, and personalization activities. This includes providing telemarketing communications and recurrting subscription, interactive feature and extension feature options on our website and mobile application to enhance customer service and customer protection; personalizing your experience with our products and services; recommending or screening products and services based on your shopping behavior and preferences; sending you with marketing communications and special offers about our products and services; and otherwise carrying out marketing initiatives in line with your privacy and marketing preferences and applicable law. We provide a loyalty rewards program as optional to provide you with discounts, bonus points, rewards certificates and/or other benefits that can be redeemed for marketing purchase at Company. However, customers may opt out at any time. Where required, we will obtain your consent or provide you with the opportunity to opt out of certain advertising or marketing use of your personal information.
• Purpose for Security and Compliance Management. We use your personal information to protect the security and integrity of our systems and to comply with our legal and regulatory obligations. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues; keeping appropriate records for compliance purpose; responding to lawful requests from public authorities; complying with applicable laws and regulations; and establishing, exercising, or defending legal claims, including but not limited to investigating and disclosing potential security incidents or other risks where required by law.

We will not discriminate against you for exercising your right under the applicable data privacy law.

We will not use your personal information for purposes that are materially different, unrelated, or incompatible with those described in this Notice without providing you with notice and, where required, obtaining your consent.

III. Who We Share You Information With

We may share your personal information that we collect with the following categories of recipients:

• Within Our Group and Affiliates. We may share your personal information with our parent company, subsidiaries, and affiliated entities under common ownership or control (collectively, the “Nextmarvel Group'”). This may include sharing information between our brands, websites, and mobile applications to operate our services, provide you with a consistent experience across platforms, and for internal administrative and business purposes. Information that you choose to post or share on our publicly accessible pages (e.g., our social media pages or public forums) may be visible to other users and the public, and may also be collected by the social media platforms themselves in accordance with their own privacy notice.
• Our Service Providers. We engage service providers to perform services in connection with the operation of our business. We may share personal information with third-party service providers to the extent necessary for them to provide services to you or us that are aligned with the purposes outlined above. These service providers are contractually required to use the personal information we share with them only to provide services to us and to protect the information in accordance with applicable data protection laws.
• Our Business Partners. We may share personal information except for your phone number, prescription information, or biometric information with selected business partners in connection with their own marketing purposes and joint marketing activities, which we encourage you to review. Where required by law, we will obtain your consent before sharing information with such partners or give you an opportunity to opt out of this sharing.
• Third-Party Advertising and Analytic Partners. We do not sell your personal information for valuable considerations, but we may allow certain third parties to collect or receive personal information through cookies and similar technologies for advertising and analytic purposes, which may be considered a sale or sharing under applicable law. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website. If you interact with social media features on our platforms, those social media companies may collect information about you and may use and share such information in accordance with their own policies, including by sharing such information with us or the general public.
• Successors to All or Part of Our Business. We may share your personal information with third parties in connection with any actual or potential corporate transaction, such as a merger, acquisition, reorganization, joint venture, sale of assets, or insolvency or bankruptcy event. If we are acquired by or merged with another company, or if substantially all of our assets are transferred to a third party, your personal information may be transferred to that successor entity. In such cases, we will take steps to ensure that any successor will continue to handle your personal information in a manner that is consistent with this Notice or will provide you with notice of any material changes.
• Law Enforcement, Regulators, and Other Legal Disclosures. We may disclose personal information if we believe in good faith that: (i) the law or legal process requires it; (ii) we have received a valid administrative request from a law enforcement agency; or (iii) such release is necessary or appropriate (in our sole discretion) to protect the rights, property, or safety of Company, or any of our respective affiliates, service providers, customers, or (iv) as Nextmarvel deems necessary to resolve disputes, troubleshoot problems, prevent fraud and otherwise enforce our Terms of Service.

IV. Our Use of Information Technologies

The following section describes technologies we use when you interact with us to deliver, secure, monitor, and improve our product and service. Approved third parties may also place cookies on your web or mobile browser when you use our online service. You can manage your cookie and tracking preferences at any time by using our Cookies Preferences tool (available via the link at the bottom of our website) and, where applicable, by updating your privacy settings in our mobile application. In jurisdictions where required by law (e.g., the United Kingdom, Germany, and France), we will obtain your consent before using non-essential cookies or similar technologies, and you may withdraw your consent at any time through these tools.

• Automated Technologies We Used.
• Cookies, Pixels, Tags, SDKs. We use first-party (herein reference as to the cookies set by the website owner) and third-party cookies (herein reference as to the cookies set by the parties other than website owner) and similar technologies (e.g., pixels, tags, and SDKs) to enable core site and application functionality (e.g., keeping you logged in, remembering items in your shopping cart, and processing your orders); to measure and analyze the use and performance of our services; to personalize content and recommendations; and to deliver and to measure the effectiveness of advertising and marketing campaigns. These technologies may allow us and our partners to recognize your browser or device over time and across different websites and applications. Some of these technologies are strictly necessary for our services to function and are always active. Other technologies—such as certain analytic, personalization, and advertising tools—are used only with your consent or where permitted by applicable law. You can manage your preferences for non-essential cookies and similar technologies at any time by visiting our Cookies Preferences tool.

Third parties that provide cookies, pixels, tags, or SDKs on our services may collect personal information about your online activities over time and across different websites and services, in accordance with their own privacy notices.

• GPC and Other Universal Opt-Out Preference Signal. Where required by applicable law, if your browser or device sends a Global Privacy Control or similar opt-out preference signal, we will treat that signal as a request to opt out of certain tracking and, where applicable, as a request to opt out of the “sale” or “sharing” of personal information or interest-based or interest-targeted advertising that we conduct through cookies and similar technologies. This opt-out will apply to the specific browser or device that sends the signal. You may still visit our Cookies Preferences tool or other settings to further customize your choices. For users in jurisdictions where GPC or similar signals are not yet legally required, we may still treat such signals as an expression of your preferences, but our response may vary depending on applicable law and our technical capabilities.
• Website Optimization Services. We use website optimization and analytic services (e.g., tools that provide aggregated statistics on site usage, A/B testing, or performance monitoring) to help us understand how our services are used, diagnose technical issues, and improve user experience. These services may use cookies, logs, SDKs, and other technologies to collect information about your use of our services, which may then be aggregated and reported to us. In jurisdictions where required by law, we will not enable non-essential analytic or optimization cookies or similar technologies unless and until you have provided your consent through our cookie banner or Cookies Preferences tool. You may withdraw your consent at any time by updating your choices in that tool.
• Other Information Technologies We Used.
• Interest-based or Interest-targeted Advertising. We work with advertising partners to provide you with advertisements that are more relevant to your interests, both on our services and on third-party websites and applications. These partners may use cookies, pixels, SDKs, and other technologies to collect information about your online activities over time and across different websites and applications; to build or refine interest segments or audiences; measure the effectiveness of our advertisements; and to show you advertisements tailored to your interests, demographics, or likely preferences. In some jurisdictions (for example, California), these practices may be considered a “sale” or “sharing” of personal information or “targeted advertising” under applicable privacy laws. Where required, we will provide you with clear mechanisms to opt out of such activities, including through our “Do Not Sell or Share My Personal Information” or similar links and by honoring GPC or comparable opt-out preference signals, as well as through our Cookies Preferences tool. In jurisdictions that require consent for advertising cookies and similar technologies (e.g., the UK, Germany, and France), we will obtain your consent before enabling such technologies.
• Social Networks and Tech Advertising Programs. We may participate in social media and technology advertising programs, such as displaying our advertisements to you when you visit social media platforms or other sites and application; using social media tools (e.g., “Like” or “Share” buttons, social login, or embedded content); and creating “custom audiences” or “lookalike audiences” so that our advertisements can be shown to users on third-party platforms who are likely to be interested in our products and services. These programs may involve the sharing or matching of identifiers (e.g., hashed email addresses or device identifiers) with social media or other technology partners, so that they can show our advertisements to you or to people with similar interests. Depending on the laws of your jurisdiction, this activity may be treated as a sale, sharing, or targeted advertising of your personal information. Where required by applicable law, we will seek your consent before engaging in these activities or provide you with the ability to opt out of them, including through our Cookies Preferences tool, our “Do Not Sell or Share My Personal Information” or similar links, and any settings made available by the relevant social media or technology partner. You can also manage your advertising preferences directly through the settings offered by the relevant social network or advertising platform.
• Mobile Application. When you use our mobile applications, we may use SDKs and other technologies to collect information similar to what we collect on our website (e.g., usage data, device identifiers, and in-app activity). In addition, with your permission, our mobile applications may access certain features or information from your device, such as your camera or photo library (e.g., to enable virtual try-on or to upload photos) and push notifications (e.g., about orders, promotions, or updates). Access to these features is controlled by your device operating system and application settings. You may change your permissions at any time through your device settings (e.g., by disabling location services or camera access for the application). Where required by law, we will obtain your consent before accessing these features or processing related information, and we will use such information only for the purposes that we have disclosed to you.

Our Sites may contain links to other websites or applications that we do not own or control. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies to understand how your information may be collected and used.

V. Safeguarding Information

We have implemented procedural, technical, and administrative measures to safeguard the personal information we have collected about you. For your protection, we have taken commercially reasonable steps to safeguard our site against potential threats, including implementing technical, administrative, and organizational measures to protect against data breaches, misuse, disclosure, alteration, or unauthorized access to your personal information. These measures may include data encryption, access controls, and regular security audits.

Please be aware that you play an important part in protecting your information. No security safeguards or standards are guaranteed to provide 100% security. We highly encourage you to take appropriate steps to help protect your account and personal information, including but not limited to using complex passwords, not sharing your password with others, enabling security locks on your devices, and logging off website sessions when you finish using our website.

While we do our best to protect your information in our possession, transmission of information through the Internet may not always be perfect, and we are unable to guarantee the absolute security of your information in all circumstances.

VI. Managing Your Preference

This section details how you may exercise your preferences regarding any personal information that may be collected about you or your communication preferences. In addition to these choices, you may have legal rights under applicable data protection laws (e.g., in the United States, Canada, the United Kingdom, Germany, and France). Those rights are described in the “Your Privacy Rights” section below, and you can exercise them as set out there.

• How to Exercise Your Preference. You can manage many of your preferences directly using the tools described in this section. In addition, you may contact us at support@ca.zeelool.com if you would like us to help you update your information or preferences. We may request additional information from you to verify your identity (or, where applicable, to verify your authority to act on behalf of another individual) before responding to your request. We will respond in accordance with applicable law.
• Update Account and Online Profile. If you have an online account with us, you can review and update certain personal information and preferences directly by logging into your account and visiting your account settings or profile page. Please note that, for security and fraud-prevention reasons, and to comply with our legal obligations, we may need to retain certain information even after you update or delete it in your account, as permitted or required by applicable law.
• Contact Customer Service / Helpdesk. You can also contact us to request changes to your preferences by using our customer service channels (e.g., by email, phone, or online chat, as listed in the “Contact Us” section below). When you contact us, we may need to verify your identity before implementing your request, particularly for requests that relate to access, deletion, or other privacy rights described in the “Your Privacy Rights” section.
• Opt out of Mobile Marketing Campaigns. If you receive SMS or other mobile messages from us that constitute marketing communications, you can opt out at any time by following the instructions in the message (e.g., by replying “STOP” or as otherwise indicated). We will process your opt-out request as soon as reasonably practicable. Even after you opt out of marketing messages, we may still send you transaction or service communications, such as messages about your orders, deliveries, or account. Standard message and data rates may apply, and you should check with your mobile provider for details.
• Unsubscribe from Specific Communications (e.g., email and other electronic communications). You can opt out of receiving marketing emails from us at any time by clicking on the “unsubscribe” link included in those emails or by adjusting your email preferences in your account settings, where available. Unsubscribing from a particular type of communication (e.g., promotions) will not necessarily unsubscribe you from all communications (e.g., order confirmations, account alerts, or service announcements), which we may continue to send where permitted by law. We will process your unsubscribe request as soon as reasonably practicable, but please allow a short period of time for your preferences to be fully updated across our system.
• Technology-enabled Collection and Use Preferences. You can also manage how we and our partners use cookies, pixels, SDKs, and similar technologies for analytic, personalization, and advertising in several ways: (i) Cookies Preferences Tool. You can use our Cookies Preferences link (available at the bottom of our website) to accept or reject different categories of cookies and similar technologies that are not strictly necessary. Your preferences are typically stored on the specific browser and device you use when you set them; if you use multiple browsers or devices, you will need to set your preferences on each one; (ii) Browser and Device Settings. Most browsers allow you to block or delete cookies or to receive alerts before they are placed. Your device operating system may also provide options to limit ad tracking, reset advertising identifiers, or control access to certain device features (e.g., location services or camera access). If you block or delete cookies, some parts of our services may not function properly; (iii) GPC and Other Opt-Out Signals. Where required by applicable law, if your browser or device sends a GPC or similar opt-out preference signal, we will treat that signal as a request to opt out of certain tracking and, where applicable, to opt out of the “sale” or “sharing” of your personal information or of interest-based or interest-targeted advertising conducted through cookies and similar technologies. This opt-out will generally apply only to the browser or device that sends the signal, and you may still adjust your settings through our Cookies Preferences tool; (iv) Mobile Application Settings. Within our mobile apps, you may be able to adjust settings related to push notifications, in-app advertising, permissions for location access, and use of the device camera or photo library (e.g., for virtual try-on features). You can change these permissions at any time in your device settings. Where required by law, we will obtain your consent before accessing these features or processing related information. Please note that even if you opt out of interest-based or interest-targeted advertising, you may still see ads from us; they just may be less tailored to your interests.
• Your State Data Protection Rights. We would like to make sure you are fully aware of all of your data protection rights. Depending on your state or country of residence and subject to applicable law, you may have some or all of the following rights. We sill respond to your requests in accordance with the laws that apply to you.
• Right to Data Portability: You may request to transfer your personal information we have collected about you to another organization, or directly to you.
• Right to Deletion: You may request deletion of applicable personal information we have collected about you. Upon verification of your request, we will notify third parties to whom we have shared your personal information to delete your information as well.
• Right to Rectification: You may request rectify inaccurate or incomplete personal information we have collected about you.
• Right to Know: You may request access to your personal information we have collected about you during the previous 12 months, including: categories of personal information we collected about you; categories of sources from which we collected the personal information; business or commercial purpose(s) for collecting your personal information; specific pieces of personal information we collected; categories of third parties to whom the business discloses personal information. You may request access to your personal information we have sold or shared about you during the previous 12 months, including: business or commercial purpose(s) for selling your personal information; categories of third parties with whom we share the personal information; categories of personal information we have sold and categories of third parties to whom the information was sold; categories of personal information we dis closed about you from a business purpose.
• Right to Opt-out: You may request to opt out of the sale or sharing of any personal information we have collected about you, including interest-based or interest-targeted advertising and retargeting. You may request to opt out of the profiling of any personal information we have collected about you in furtherance of automated decisions that produce legal or similarly significant decisions, as those terms are defined under applicable privacy legislation. You may request to opt out of the disclosure of sensitive personal information we have collected about you for any purpose other than the designated purpose defined in the legislation to third parties.
• Right to No Retaliation: You will never receive discriminatory or retaliatory treatment by us for the exercise of your privacy rights.
• Right to Lodge a Compliant: Residents of the European Economic Area and the United Kingdom may lodge a complaint with their local data protection authority or relevant regulator and, where applicable, to seek the judicial remedy.

VII. International Transfers of Personal Information

The personal information we collect may be transferred to, stored, and processed in countries outside of your country of residence, including the United States, Japan, and China, where our servers are located or where our service providers maintain facilities. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal information from the European Economic Area and the United Kingdom to countries that have not been recognized as providing an adequate level of data protection, we use appropriate safeguards, including but not limited to SCCs, BCRs or other lawful transfer mechanisms, or we rely on your explicit consent where appropriate. You may contact us for more information about the safeguards we use for such transfers.

VIII. Contact Us

If you have any questions about this Notice, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at:

EMAIL - support@ca.zeelool.com

PHONE - +1-604-332-7588

ADDRESS - 840 North Lenola Road, Moorestown, New Jersey 08057, United States.

We have appointed a Data Protection Officer to ensure that we continuously process your data in an open, accurate, and legal manner. You can contact us at support@ca.zeelool.com.