This is the privacy notice for the collection and use of personal data by Eye Concept Limited. Our registered office is at 93 Stoke Newington Rd. London N16 8AA.
Contact
Please contact us if you have any queries regarding this privacy notice, concerns over your personal data, or if you wish to exercise your rights as a data subject.
For GDPR and Data Protection related queries we can be contacted via [email protected], 020 8091 7503, or 93 Stoke Newington Rd. London N16 8AA.
Introduction
This privacy notice explains how we collect and use personal data about you. In general, we use personal data to
- Assist you with any enquiries and to make appointments
- To treat you as our patient
- To provide you with information and offers related to our products and services
- Maintain our records
Exactly what data we may collect and how we may use it, is determined by the services you receive from us for e.g. you may have made an enquiry and be a patient.
If you make an enquiry
If you make an enquiry directly to us by contacting our customer services team, filling out an enquiry form on our website or via social media or make an enquiry via a third party such as a price comparison website.
Personal data, Purpose and Legal Basis
We collect, use and store different types of personal data about you. Detailed below is the data we may collect, what it is used for and our legal basis for processing this data.
| Personal Data | Purpose for processing | Our legal basis for processing |
|---|---|---|
| Personal contact details (name, address, email, telephone number) | To allow us to contact you regarding your enquiry | To potentially enter into a contract with you |
| Communications Information we may learn about you from emails, calls, letter between us. (Calls to customer services may be recorded) | To maintain a record of our communications with you in order to potentially provide you with a service | To potentially enter into a contract with you |
| Tracking information* Pixels, ad tags, cookies which can be seen / changed at: Privacy Policy | To allow us to understand user behaviour to improve our website and give the best possible experience to those learning about our services. Serve tailored online advertising to share benefits of our services that you may have missed on our website |
With your consent** And/or legitimate interests |
| Marketing Preferences | To maintain a record of your marketing choices. To send marketing communications to you |
With your consent** And/or legitimate interests |
| * Only relevant if you use our website. ** Consent to Marketing You can update your preferences or withdraw your consent to Marketing at any time by:
|
||
If you attend an appointment
When you visit one of our clinics for an appointment.
Personal data, Purpose and Legal Basis
| Personal Data | Purpose for processing | Our legal basis for processing |
|---|---|---|
| Personal contact details (name, address, email, telephone number) | To contact you regarding your appointment | Necessary for our contract with you |
| Occupation | To ensure you receive the correct advice in relation to your occupation | Necessary for our contract with you |
| Health Information e.g. prescription, biometry, existing health conditions, medications |
To provide you with the relevant advice and treatment | Necessary for our contract with you. Necessary to meet a Legal Obligation Article 9: Necessary for the provision of healthcare |
| Ethnic Origin | To provide you with the relevant advice and treatment. (some conditions run in families and can affect your suitability for treatment) | Necessary for our contract with you Article 9: Necessary for the provision of healthcare |
| CCTV Images | To protect our premises and staff | Legitimate Interests |
| Communications Information we may learn about you from emails, calls, letter between us. (Calls to customer services are recorded) |
To maintain a record of our communications with you in order to potentially provide you with a service | Necessary for our contract with you |
If you receive treatment
When you visit our office for an appointment.
Personal data, Purpose and Legal Basis
| Personal Data | Purpose for processing | Our legal basis for processing |
|---|---|---|
| Personal contact details (name, address, email, telephone number) | To contact you regarding treatment or aftercare | Necessary for our contract with you |
| Health Information e.g. prescription, biometry, existing health conditions, medications |
To provide you with the relevant advice and treatment | Necessary for our contract with you. Article 9: Necessary for the provision of healthcare |
| Ethnic Origin | To provide you with the relevant advice and treatment. (some conditions run in families and can affect your suitability for treatment) | Necessary for our contract with you Article 9: Necessary for the provision of healthcare |
| Payment details e.g. bank details for direct debit |
To take payment | Necessary for our contract with you Necessary to meet a Legal Obligation |
| Communications Information we may learn about you from emails, calls, letter between us. (Calls to customer services are recorded) |
To maintain a record of our communications with you in order to potentially provide you with a service | Necessary for our contract with you |
If you use Our Finance Options
Personal data, Purpose and Legal Basis
| Personal Data | Purpose for processing | Our legal basis for processing |
|---|---|---|
| Personal contact details (name, address, email, telephone number) | To verify your identity and contact you regarding your finance agreement | Necessary for our contract with you |
| Employer | To assess if you are eligible for credit | Necessary for our contract with you. |
| Financial information | To assess if you are eligible for credit | Necessary for our contract with you |
If you have been referred for treatment under an NHS contract
If you have been referred for treatment under an NHS contract
Personal data, Purpose and Legal Basis
| Personal Data | Purpose for processing | Our legal basis for processing |
|---|---|---|
| Personal contact details (name, address, email, telephone number) | To contact you regarding consultation, treatment or follow up care | Necessary for our contract with you |
| Health Information e.g. existing health conditions, medications and allergies, records related to treatment provided |
To provide you with the relevant treatment or healthcare service | Necessary for our contract with you. Article 9: Necessary for the provision of healthcare |
| Communications Information we may learn about you from emails, calls, letter between us. (Calls to customer services are recorded) |
To maintain a record of our communications with you in order to potentially provide you with a service | Necessary for our contract with you |
If you apply for a job
Personal data, Purpose and Legal Basis
| Personal Data | Purpose for processing | Our legal basis for processing |
|---|---|---|
| Personal contact details (name, address, email, telephone number) | To contact you regarding the recruitment process and any offer of employment | To enter into a contract with you |
| Information about a disability, the effects of that disability, and adjustments that may need to be made during the recruitment process | To allow for reasonable adjustments to the recruitment process for disabled applicants | To comply with a legal obligation To exercise rights and obligations under employment law. |
| Information provided in your CV, covering letter or application form. (Education, Qualifications, Experience) Information gathered from interview notes or assessments |
To make a decision about your suitability for the role applied for. | To enter into a contract with you. |
| Offer letter, and proposed employment contract | To provide you with details of the terms and conditions of the potential contract between you and Eye Concept | To enter into a contract with you. To comply with a legal obligation |
| Information on your right to work in the UK (copies of identity documents) | To evidence and record your right to work in the UK | To enter into a contract with you. To comply with a legal obligation |
Where we collect your personal information from
- Directly from you
- Health Professionals
- Third party referrals
- Finance Providers
- Google Analytics
- Recruitment Agencies
- Former employers or other referees
Third Parties
We may use third parties (data processors) as required to deliver certain services, such as, IT systems, software providers, confidential waste disposal, records storage, email and postal distribution, surveys who will process personal information on our behalf and only on our instruction.
We conduct an appropriate level of due diligence and put in place contractual documentation in relation to any contractor to ensure that they process personal information appropriately and according to our legal and regulatory obligations
Your Rights
You have the following rights in respect of the personal data we process about you:
- Right of access – you have the right to request a copy of the information that we hold about you.
- Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
- Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
- Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
- Right of portability – you have the right to have the data we hold about you transferred to another organisation.
- Right to object – you have the right to object to certain types of processing such as direct marketing.
- Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling
- Right to withdraw your consent – if you have given your consent for us to process your data you have the right to withdraw this at any time.
Security
We are fully committed to keeping your personal data secure and we have implemented appropriate information security policies, rules and technical measures to protect the personal data that we have under our control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss.
Retention
We keep your personal data only for as long as necessary for the purposes of:
- Providing you with the services you have requested;
- to maintain records of treatment;
- to support a claim or to defend ourselves against legal proceedings
- to comply with the law
Our retention schedule is available on request.
Complaints
We aim to resolve all complaints about how we handle personal data directly and would like you to give us the opportunity to address any concern you have by contacting us by email at [email protected], writing to us – 93 Stoke Newington Rd. London N16 8AA or calling us on 020 8091 7503.
Changes to our privacy notice
We keep this privacy notice under regular review. If you would like a copy of this statement printed or sent to you, please contact us by email at [email protected], writing to us – 93 Stoke Newington Rd. London N16 8AA or calling us on 020 8091 7503.
Update Every Year In January.