Privacy Policy
Last updated: 12 August 2026
In short: we collect the details eyecare practitioners give us when enquiring about our lenses, we use them to respond and to supply lenses, and we do not sell your personal information. Our site sets a small number of cookies, described in section 5.
- Who we are
- Information we collect
- How we use your information
- How we share your information
- Cookies and tracking
- How long we keep information
- Security
- Your California privacy rights
- Children’s privacy
- Links to other websites
- Changes to this policy
- Contact us
1. Who we are
Aurora GP Lab Inc. (“Aurora GP Lab”, “we”, “us” or “our”) designs and manufactures orthokeratology and specialty gas permeable contact lenses, and provides the lens design software used to order them. We are incorporated in California, United States.
This policy explains what we do with personal information collected through auroragpl.com (the “Site”). It does not cover our lens design platform, which is governed separately under your practice’s agreement with us.
Our customers are eyecare practitioners and their practices. We do not collect information directly from patients through this Site.
2. Information we collect
Information you give us
When you complete the enquiry form on our contact page, we collect:
| Category | What this includes | Required |
|---|---|---|
| Identifiers | First and last name, email address, phone number | Yes |
| Practice details | Practice name, street address, city, state or province | Yes |
| Professional licensing | License number and the state that issued it | Optional |
| Marketing source | How you heard about us | Yes |
We also receive information you send us directly by email, by telephone, or when booking a demonstration through our online booking page.
Information collected automatically
When you visit the Site, our hosting provider records standard technical information including your IP address, browser type and version, operating system, the pages you view, and the date, time and duration of your visit. This is used to keep the Site running and secure, and to understand traffic in aggregate.
Information we do not collect
We do not collect patient health information through this Site. We do not run advertising trackers, and we do not use Google Analytics, Facebook Pixel or similar profiling tools on this Site.
3. How we use your information
- To respond to your enquiry — contacting you to arrange a demonstration, answer questions, or discuss your practice’s requirements.
- To set up and service your account — creating your access to our lens design platform and supplying the lenses you order.
- To verify professional status — where you provide licensing details, to confirm we are supplying a qualified eyecare practitioner. This is why we ask.
- To operate and secure the Site — including preventing fraudulent or abusive submissions.
- To improve what we offer — understanding which enquiries come from where, in aggregate.
- To meet legal and regulatory obligations — including record-keeping obligations that apply to medical device suppliers.
We will only send you marketing communications where you have asked for them or where we are otherwise permitted to do so, and every such message will include a way to opt out.
4. How we share your information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
We share information with the service providers who operate parts of our business on our behalf. Each is bound to use it only for the services they provide to us:
| Provider | Purpose |
|---|---|
| GoDaddy | Website hosting and infrastructure |
| Microsoft (Microsoft 365 and Microsoft Bookings) | Delivering enquiry notifications to our team and scheduling demonstrations |
| Google (Google Fonts) | Serving the typefaces used on the Site; your IP address is disclosed to Google when fonts load |
| Google (Search Console) | Aggregated, non-identifying data about how the Site performs in search results |
We may also disclose information where we are required to by law, in response to valid requests from public authorities, to protect our rights or the safety of others, or in connection with a merger, acquisition or sale of assets — in which case we will give notice before your information becomes subject to a different policy.
5. Cookies and tracking
Cookies are small files stored on your device. The Site uses a limited set:
| Cookie | Set by | Purpose |
|---|---|---|
| _tccl_visitor, _tccl_visit | GoDaddy | Measuring site traffic and distinguishing return visits |
| dps_site_id, _scc_session | GoDaddy | Hosting platform operation and session handling |
| wp-settings-* | WordPress | Remembering display preferences — set only for logged-in administrators |
We do not use advertising or profiling cookies. You can set your browser to refuse cookies or to alert you when one is set; if you refuse them, some parts of the Site may not work correctly.
The Site loads typefaces from Google Fonts. This means your IP address is disclosed to Google when a page loads, and is subject to Google’s own privacy policy.
We do not currently respond to browser “Do Not Track” signals, because no common standard for them has been established. We do honour Global Privacy Control signals as an opt-out request where applicable.
6. How long we keep information
Enquiry form submissions are retained for 24 months from your last contact with us, unless you become a customer — in which case we keep records for the duration of the relationship and for 7 years afterwards, to meet accounting and medical device record-keeping obligations. Technical logs are kept for a shorter period, typically no more than 12 months.
You can ask us to delete your information sooner. See section 8.
7. Security
We use commercially reasonable measures to protect your information, including encrypted connections (HTTPS) across the Site, access controls limiting who on our team can view enquiries, and authenticated email delivery. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
8. Your California privacy rights
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the following rights.
Your rights
- Right to know — what personal information we have collected about you, where it came from, why we collected it, and who we shared it with.
- Right to delete — to ask us to delete personal information we hold about you, subject to exceptions where we must retain it by law.
- Right to correct — to ask us to fix inaccurate personal information.
- Right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of. If that ever changes we will update this policy and provide a clear opt-out.
- Right to limit use of sensitive personal information — we do not use or disclose sensitive personal information beyond the purposes permitted under the CCPA.
- Right to non-discrimination — we will not deny you service, charge you a different price, or give you a lesser standard of service for exercising any of these rights.
Categories collected in the last 12 months
We have collected identifiers (name, email, phone, postal address), professional or employment-related information (practice name, license number and issuing state), and internet or network activity (IP address, browsing information). We collected these from you directly and automatically from your device. We disclosed them for a business purpose only to the service providers listed in section 4. We have not sold or shared any personal information.
How to exercise your rights
Email privacy@doctorsowndesign.com with the subject line “Privacy Request”. We will verify your identity by asking you to confirm details we already hold, and will respond within 45 days, extending once by a further 45 days where necessary and telling you if we do.
An authorised agent may make a request on your behalf with written permission from you; we may still contact you directly to confirm.
Shine the Light. California Civil Code section 1798.83 permits residents to request details of personal information disclosed to third parties for their direct marketing purposes. We do not make such disclosures.
9. Children’s privacy
The Site is intended for eyecare professionals and is not directed at children. We do not knowingly collect personal information from anyone under 18 through this Site. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Links to other websites
The Site links to services we do not operate, including our lens design platform login and our Microsoft Bookings scheduling page. We are not responsible for the content or privacy practices of sites we do not control, and we encourage you to read their policies.
11. Changes to this policy
We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date above. Where changes are material, we will take reasonable steps to notify you. Continuing to use the Site after changes take effect means you accept the revised policy.
12. Contact us
Questions about this policy, or requests about your personal information:
- Email: privacy@doctorsowndesign.com
- Phone: 833.274.2020
Aurora GP Lab Inc., California, United States.