Consumer Health Data Privacy Policy

STAAR SURGICAL CONSUMER HEALTH DATA PRIVACY POLICY

Last Updated: October 30, 2026

INTRODUCTION

STAAR Surgical Company and our global subsidiaries and affiliates (collectively, “STAAR,” “we,” “us,” and “our”) are committed to respecting your privacy. This Consumer Health Data Privacy Policy supplements the STAAR Surgical Privacy Policy and applies to personal data defined as “consumer health data” subject to the Washington State My Health My Data Act. 

CONSUMER HEALTH DATA COLLECTED

Consumer health data means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status. The consumer health data we collect depends on the context of your interaction with us. Examples of consumer health data we may collect in the course of providing our services include information about an individual’s:

• health conditions, treatment, diseases, or diagnoses (e.g., vision disorders);

• medical interventions;

• use or purchase of medications or prescribed medications;

• measurements of health information (e.g., eye measurements);

• diagnoses or diagnostic testing, treatment, or medication; or

• information that could identify an individual seeking health care services or information. 

SOURCES OF CONSUMER HEALTH DATA

We collect consumer health data from the following sources:

• directly from you when you interact with us or use our services;

• automatically through cookies and other tracking technologies that reveal your interest in our services; or

• from third parties such as healthcare providers who provide health data to us pursuant to your authorization.

PURPOSES FOR COLLECTION AND USE

Our collection of consumer health data is necessary for the provision of our services. In addition, we may use consumer health data to compile analytics, improve our services, comply with legal and regulatory obligations, for any other purpose with your consent, or otherwise as described in the STAAR Surgical Privacy Policy.

DISCLOSURE OF CONSUMER HEALTH DATA

In addition to sharing consumer health data with our service providers, we may share consumer health data with the following third parties:

• Our affiliates listed in Annex I below.

• Certain third parties with your consent or at your direction. These parties may include healthcare providers.

• Other third parties to protect our rights, defend or pursue a legal claim, or investigate or prosecute illegal activities.

• Government or judicial authorities or agencies to comply with a subpoena, court order, governmental inquiry, legal process, legal obligation, or to protect the rights, property, or safety of other users or the public, including mandatory disclosures to public health authorities or adverse event reporting to regulatory agencies.

We may also share consumer health data with a successor entity or purchaser upon a merger, consolidation, or other corporate reorganization in which we participate, or pursuant to a financing arrangement. 

YOUR RIGHTS

Washington residents have the following rights with respect to their consumer health data, subject to certain exceptions:

• the right to confirm whether we process your consumer health data, and to access and receive a copy of your consumer health data;

• the right to a list of all third parties and affiliates with whom we have shared or sold your consumer health data and an email address or other online mechanism that you can use to contact each third party;

• the right to delete your consumer health data; and

• the right to withdraw consent to the collection, sharing, or selling of consumer health data.

You can submit a request to exercise these rights using any of the mechanisms listed in the “Contact Information” section below. Depending on the type of request, we may need to verify your request before we can fulfill it. Please note that certain exceptions may apply to these rights (e.g., we may be unable to honor a request to delete if it conflicts with a legal obligation to retain data). Finally, please review the STAAR Surgical Privacy Policy for additional rights and choices you may have with respect to your personal data more generally.

You have the right to appeal any decisions we make in response to a rights request. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

 

CHANGES TO THIS POLICY

We may revise this policy from time to time. When we make changes to this policy, we will post the updated version on our website and indicate the date the policy was last updated. We encourage you to review this policy periodically to check for any updates.

CONTACT INFORMATION

If you have questions or concerns regarding this policy or wish to exercise your privacy rights, please contact us at:

STAAR Surgical Company

25510 Commercentre Drive, Ste. 200, Lake Forest, California 92630, USA

Phone: 1.626.303.7902

Email: [email protected]

SUPPLEMENT TO CONSUMER HEALTH DATA PRIVACY POLICY FOR NEVADA CONSUMERS

This supplement to our Consumer Health Data Privacy Policy applies to Nevada residents for purposes of providing additional disclosures required by Nevada’s consumer health data privacy law (Nevada Senate Bill 370).

The foregoing consumer health data disclosures and rights also apply to Nevada residents. In addition, Nevada residents also have the right to review and amend any consumer health data we maintain about them. Nevada residents can escalate unsuccessful appeals of consumer rights requests to the Nevada attorney general at https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/. Third parties may collect consumer health data over time and across different websites when you use our websites.

ANNEX I: LIST OF RELEVANT STAAR ENTITIES

1. STAAR Surgical Company (Delaware, United States)
2. STAAR Surgical AG (Nidau, Switzerland)