Effective Date: April 20, 2026

Xiocis is committed to protecting the privacy and safety of patients and website visitors. This Privacy Policy explains how we collect, use, and protect personal information obtained through our website, communication systems, and in the provision of ophthalmology and eye care services.

Information We Collect

We may collect your personal information when you interact with our website, contact our customer service, fill out patient forms, or communicate with us by phone, email, or text message. The information we may collect includes, but is not limited to:

• Name

• Phone number

• Email address

• Mailing address

• Basic health information related to your medical visit

• Any information you voluntarily provide when contacting us

We may also collect limited technical information from website visitors, such as browser type, device type, IP address, and general website usage data. This information helps us improve the functionality and performance of the website.

How We Use Your Information

The information we collect may be used for the following purposes:

• Scheduling, confirming, and managing appointments

• Providing optical products and ophthalmology consultation services

• Communicating with patients regarding eyeglass orders or service matters.

• Respond to inquiries or provide customer support

• Process payments and insurance claims where applicable

• Improve our services, patient experience, and website functionality

• Comply with applicable legal, healthcare, and regulatory requirements

SMS Communications

If you provide your mobile number to Xiocis, you may receive SMS messages related to your care or services. These messages may include:

• Notifications of updated eyeglasses orders

• Follow-up communications regarding your inquiry

• Important office notices

SMS and data charges may vary depending on your mobile carrier. You can reply “STOP” at any time to opt out of receiving SMS messages. If you have any questions, please contact our customer service directly. We will not share your SMS permission information with third parties or affiliates for marketing purposes.

Information Sharing

Xiocis will not sell, rent, or trade personal information to third parties. We will only share information as necessary to operate our business and provide services. This may include sharing information with trusted service providers such as:

• Electronic health record providers

• Payment processing providers

• Technology providers that support our website or communication systems

• These service providers are required to take appropriate security measures to protect personal information.

Healthcare Privacy

As a healthcare provider, Xiocis complies with all applicable privacy and security regulations. We process patient health information in accordance with our Privacy Practice Notice, which is provided to patients during their visits.

Data Security

We employ reasonable administrative, technical, and physical security measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. While we take appropriate measures to protect personal information, no system can guarantee absolute security.

Cookies and Tracking Technologies

We may use cookies, web beacons, and similar technologies to enhance website functionality, analyze usage patterns, and improve the patient experience. These technologies help us understand how visitors interact with the website and identify areas for improvement. You can manage or disable cookies through your browser settings; however, disabling cookies may prevent some website functions from working properly.

Data Retention

We retain personal and health information only for the time necessary to provide services, fulfill legal and regulatory obligations, and support business operations. When this information is no longer needed, we will securely delete, destroy, or anonymize it in accordance with applicable laws and industry best practices.

Third-Party Websites

Our website may contain links to external websites. Xiocis is not responsible for the privacy practices or content of third-party websites. We recommend that users carefully read the privacy policies of any external website before visiting it.

Changes to this Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with the updated effective date.

User Rights

Patients and website users have certain rights regarding their personal information, including:

• You can request access to the personal or health information we hold about you.

• You have the right to request correction of any inaccurate or incomplete information.

• To the extent permitted by law, you can request that we delete or restrict the processing of your information.

• You can opt out of marketing emails, text messages, or other non-essential communications at any time.

• You can ask us how we use your information, or file a complaint if you believe your privacy has been violated.

To exercise any of the above rights, please contact us.

Contact Information

If you have any questions about this Privacy Policy or how your information is processed, please contact:

Email: veil@xiocis.com