- 1. Introduction
We respect privacy and your rights to control your personal data. Our principle guidelines are simple. We will be clear about the data we collect and why. Your data is sacredly protected by us. We do not and will not sell your data to third parties.
The prime purpose of collecting your data is to improve your experience. Whether you’re visiting us for an eye examination, ordering your new spectacles or offering highly responsive customer service when you need us, our aim is for you to have a great experience of the highest professional standards.
This Privacy Statement (the 'Statement') explains the personal information we collect from you, either directly or indirectly, and how we will use it. Personal information is any information that can be used to identify you or that we can link to you. The Statement also elaborates on the choices you can make about the data we collect, and how you can control these decisions. It applies to all products offered by Eye Academy ('Eye Academy Product(s)'). It also applies to any Eye Academy-controlled websites, as well as other offline interactions, such as visiting an Eye Academy practice or attending an Eye Academy event (collectively referred to as, 'Services'). Please read this Statement carefully to understand how Eye Academy may collect, use and share your personal information. The terms 'we', 'us', or 'Eye Academy' are each intended as a reference to The Eye Academy (Richmond) Ltd.
The Eye Academy (Richmond) Ltd also covers all Eye Academy practices including:
- Eye Academy, Windsor
- Eye Academy, Guildford
- Eye Academy, Banstead
- Ellis & Thompson Optometrists, Cobham
- Underwood Eyecare, Ferndown
- Peepers Opticians, Banbury
- 2. The Types of Personal Information We Collect
Information you provide to us
We collect information you voluntarily provide to us, such as your:
- your name
- your date of birth
- your contact telephone numbers (including mobile)
- your email and postal address
- your relevant health details including (a) current and past eye health/conditions, general health condition and spectacles or contact lens prescriptions; (b) current medication details; and (c) correspondence between your optometrist and your GP/ophthalmologist
- your examination and test results
- your payment details
- your occupation/lifestyle/driving information
- details of any prescription supplied to you by your healthcare professional or medical practitioner
- information that you provide by filling in forms on Eye Academy website
- details of your visit to the website and any transactions you carry out on the website
- any other information voluntarily provided to us by you from time to time for instance, when you want to learn more about Eye Academy Products and Services, when you contact Eye Academy to book an appointment or when you make a purchase in one of our branches.
Information we collect automatically
We automatically collect information about you, such as information collected by cookies and similar technologies when you use, access or interact with us via our websites. We may, for example, collect information about the type of device you use to access our websites, the operating system and version, your IP address, your general geographic location, as indicated by your IP address, your browser type, the web pages you view on our websites, whether you interact with content available on our websites and how.
Information obtained from other sources
We may receive information about you from social media platforms, for instance, when you interact with us on those platforms. From time to time we may receive information from third parties relating to your eye health; including prescriptions from other opticians or hospitals and any referral information from GP’s, medical practices or hospitals. We protect data obtained from third parties according to the practices described in this Statement and we also apply any additional restrictions imposed by the source of data.
Information of children
Eye Academy only collects information for children when legal parents or guardians choose to bring them for an appointment or purchase prescribed products on the child’s behalf (including prescription eyewear and contact lenses) at Eye Academy.
The Eye Academy website(s) does not target and is not intended to attract children under the age of sixteen. Although visitors of all ages may navigate through our websites, we do not knowingly collect or request personal information from those under the age of sixteen without parental consent. If following a notification from a parent, guardian or discovery by other means, a child under sixteen has been improperly registered on our site by using false information, we will cancel the child's account and delete the child's personal information from our records.
Customer Interactions with Eye Academy
To make the information in this Statement easy to understand, we have highlighted different occasions when Eye Academy could potentially collect personal information from customers. The customer interactions with Eye Academy are broken down into the following segments:
Learning about Eye Academy
As you gather more information about Eye Academy, you may virtually or physically visit a site that we own. Examples include browsing our website, calling our customer service team, physically visiting an Eye Academy-owned practice or attending Eye Academy-sponsored events. To learn more about Eye Academy Products, you may voluntarily provide personal information, such as your name and email address during these interactions. We may also collect information about you online via cookies or similar technologies when you visit our websites.
We collect: name, email address, contact phone number, appointment request details, Date of Birth, IP address, and information provided by cookies or similar technology.
Why: We use this information to book requested appointments, answer enquiries or share news about events and products offered by Eye Academy. Additionally, the IP address helps us to understand geographic information about our website visitors better, so that we can improve our website for everyone. It is our legitimate interest to process your personal data for these purposes.
Buying Products from Eye Academy
Once you have decided to buy a product from Eye Academy, we offer a way for customers to buy directly from us at www.eyeacademy.com or at an Eye Academy owned optical practice. When you buy from us, you may be asked to provide information so that we can complete your purchase.
We collect: your name, phone number (optional), email address, prescription details (if necessary), delivery/shipping address, and payment information.
Why: We use this information to complete your transaction, carry out any follow up with you about your purchase, help with any delivery issues, handle returns, and other issues related to the purchase of products from Eye Academy. Processing your personal data for this purpose is necessary for the performance of the agreement we have with you. Please note, we do not store any payment or credit card information. We only use payment information in connection with the purchase of Eye Academy Products.
If we collect Direct Debits from you these payments will either be processed by Optix Ltd or Coopervision Ltd. Any third-party company is only permitted to process your data for the specified purposes and in accordance with our instructions.
We retain your information for as long as reasonably necessary to provide our products and services and to maintain records to satisfy tax and other legal requirements.
Getting Help from Eye Academy
From time to time, you may decide to contact one of our practices or our Customer Service department for assistance with your Eye Academy purchase or experience. To be able to offer you the best service possible, we may collect certain data from you.
We collect: This may include contact information, such as your name, email address, phone number, social media identifiers (if you contact us using a social media channel), and the content of your chats and other communications with Eye Academy Customer Care (including voice recording if you call Customer Care). Collecting the above-described information is necessary to provide customer support.
Why: We collect this information to give you the best and most efficient customer support possible. For instance, for customer inquiries and technical questions, we use contact information to respond to the customer in their preferred channel (phone, email, social). For product returns and/or exchanges, we use contact information to ensure successful product receipt and/or delivery. Using these types of data is necessary to fulfill the agreement we have with you.
- 3. How We Use Personal Information
Eye Academy uses the data we collect to provide you with Products and Services we offer, which includes using data to improve and personalise your experiences. We also use the data to communicate with you, for example, informing you about your next appointment, account, new products or services available, security and other types of updates.
Eye Academy uses the data for the following purposes:
• Providing our Product Experience
• Customer Support
• Product Improvement
• Security, Safety, and Dispute Resolution
• Business Operations
• Communication, Marketing, and Advertising
Providing an Eye Academy Experience
We use data to provide, support and improve the Eye Academy Products and Services we offer to ensure our customers have the most thorough, pleasant and efficient experience. This processing is necessary for the responsibility and success of the agreement we have with you.
We use data to respond to customer enquiries, assist with issues and provide other customer care and support services. This processing is necessary for the performance of the agreement we have with you, as well as to serve our legitimate interest.
We continually use data for research purposes and to develop and improve our Eye Academy Products and Services, including maintaining and improving the Eye Academy Products and Services, such as using search queries and clicks to improve the relevance of search results. This processing is necessary to serve our legitimate interest.
Security, Safety and Dispute Resolution
We use data to protect the security and safety of our Eye Academy Products & Services and our customers, to detect and prevent fraud, to resolve disputes and enforce our agreements. This processing is necessary to serve our legitimate interest.
We use data to develop aggregate analysis and business intelligence that enable us to operate, protect, make informed decisions, and report on the performance of our business. This processing is necessary to serve our legitimate interest.
Communication, Marketing, and Advertising
A cookie is a small text file containing information that a website transfers to your computer's hard disk for record-keeping purposes. A cookie cannot give us access to your computer or to your personal information. Most web browsers automatically accept cookies; consult your browser's manual or online help if you want information on restricting or disabling the browser's handling of cookies. If you disable cookies, you can still view the information on our website, but the functionality of certain areas may be reduced.
For information about managing email subscriptions and promotional communications, please visit Your Rights and Choices.
To give you a better understanding of the personal information we collect and use in different occasions you may interact with Eye Academy, please see the sections below.
- 4. How We May Share Personal Information
Eye Academy does not and will not sell personal information about our customers or patients. We only disclose your data as described in this Statement. We may share information with the following types of third parties.
Third Party Vendors
Eye Academy uses or may use a variety of third-party vendors to carry out services like website management and hosting, online product purchases and shipping, credit card processing and email and mail communications. We only share your personal data as necessary. To complete a transaction, provide a Product or Service you have requested or authorised and only with vendors or agents working on our behalf for the purposes described in this Statement. In this case, your personal information will be shared with these agents or contractors but only for the purpose of performing services on behalf of Eye Academy and in accordance with this Statement. It is our legitimate interest to process your personal data for these purposes. For questions about third-party vendors, please send an email to firstname.lastname@example.org.
Eye Academy-controlled affiliates and subsidiaries
We share information with Eye Academy-controlled affiliates and subsidiaries for business purposes, such as internal administration, promoting Eye Academy Products and providing customers with our Eye Academy Products and Services. It is our legitimate interest to process your personal data for these purposes.
When legally required, strictly necessary to protect our rights or the rights of our affiliates or customers, we disclose your personal information to law enforcement authorities, investigative organisations, our affiliates or in legal proceedings.
Sale or Merger
We may share your personal information in the event of a merger, acquisition, or sale of all or a portion of our assets. Of course, we shall notify you via email and/or a prominent notice on our website and inform you of your rights.
Sharing and Disclosure of Aggregate Data
We share data in aggregate form and/or in a form which does not enable the recipient of such data to identify you, with third parties, for example, for industry analysis.
Please note, from time to time we may include links to products or applications of third parties whose privacy practices may differ from Eye Academy. If you provide personal data to any of those third parties or their products, your data is governed by their privacy statements, and we encourage you to read these privacy statements carefully.
When sharing data with third parties, your personal information may be transferred to countries where data protection laws may provide a lower standard of protection for your personal information than your country. We take great care in protecting your personal information and have put in place adequate mechanisms to protect it when it is transferred internationally. We will transfer your personal information in compliance with applicable data protection laws and will implement suitable safeguards to ensure that your personal information is adequately secured by any third party that will access your information (for instance, by using the Standard Contractual Clauses as approved by the European Commission). If you have questions or wish to obtain more information about the international transfer of your personal information or the implemented safeguards, please send us an email to email@example.com.
- 5. The Legal Bases for Using Personal Information
There are different legal bases that we rely on to use your personal information, namely:
Performance of a contract
The use of your personal information may be necessary to perform the agreement you have with us. For example, to complete your purchase from Eye Academy, to perform professional eye examinations and dispense prescribed items in accordance with the UK legal standard, to help with delivery issues or to handle returns and exchanges.
We may use your personal information for our legitimate interests. For example, we rely on our legitimate interest to analyse and improve our Eye Academy Products and Services and the content on our website(s), to send you notifications about updates or information about Eye Academy Products and Services or to use your personal information for administrative, fraud detection or legal purposes.
Where we process your personal information based on our legitimate interest and no opt-out mechanism is available to you (e.g. for your eye examination reminders), you may exercise your right to object by sending an email to firstname.lastname@example.org.
- 6. Security, Storage and Retention of Personal Information We Collect
Eye Academy is committed to protecting the security of your personal information. However, while we take reasonable precautions to guard the personal information we collect, no security system is impenetrable.
While no Service is completely secure, Eye Academy takes precautionary measures to help prevent information about you from loss, theft, misuse and unauthorised access, disclosure, alteration and destruction. For example, we store the personal data you provide on computer systems that have limited access and that are in controlled facilities. We also ensure that our third-party data centre vendors provide adequate security measures. Additionally, your data is protected with encryption, such as Transport Layer Security (TLS), during transition over the Internet. Please note, for your online Eye Academy account, your password is stored using one-way hash, which means that it cannot be recovered (or disclosed) by anyone, including Eye Academy, it can only be reset.
If we hold physical patient records for yourself, these are secured by means of limited access. They are in secure storage within the practice building and backed up on a secure computer system.
You can only access your Eye Academy account information and our service through the use of an individual user login and password. To protect the confidentiality of personal information, you must keep your password confidential and not disclose it to any other person. Please notify us immediately if you believe your password has been misused. You should always log out and close your browser when you finish your session. Please note, we will never ask you to disclose your password in an unsolicited phone call or email.
If you have any questions about the security of your personal information, you can contact us at email@example.com.
Personal data collected by Eye Academy may be stored and processed in your region, or in any other country where Eye Academy or its affiliates, subsidiaries or service providers are located or maintain facilities. Eye Academy has put in place adequate mechanisms to protect personal information when it is transferred internationally, for example by using the Standard Contractual Clauses as approved by the European Commission.
We retain your information for as long as reasonably necessary to provide our products and services and to maintain records to satisfy tax and other legal requirements.
We only retain information to continue to provide services to you, to comply with applicable laws (including those regarding document retention), resolve disputes with any parties and otherwise as necessary to allow us to conduct our business. All personal information we retain will be subject to this Privacy Statement and our internal retention guidelines. If you have a question about a specific retention period for certain types of personal information we process about you, please send an email to firstname.lastname@example.org.
- 7. Your Rights and Choices
We want you to be in control of how your personal information is used by us. Subject to local law, you can do this in the following ways:
- you can ask us for a copy of the personal information we hold about you;
- you can inform us of any changes to your personal information, or if you want us to correct any of the personal information we hold about you;
- in certain situations, you can ask us to erase, block or restrict the personal information we hold about you, or object to particular ways in which we are using your personal information; and
- in certain situations, you can also ask us to send the personal information you have given us to a third party.
Where we are using your personal information on the basis of your consent, you are entitled to withdraw that consent at any time. Moreover, where we process your personal information based on legitimate interest or the public interest, you have the right to object at any time to that use of your personal information.
We rely on you to ensure that your personal information is complete, accurate and up to date. Please do inform us promptly of any changes to or inaccuracies in your personal information by contacting email@example.com.
We will respond to your request as soon as possible but certainly within 30 days. For more information about how you can control your Communication, Marketing and Advertising Preferences, please visit Your Choices sections below.
Your Eye Academy Record
If you have visited an Eye Academy owned location and attended an examination or made a prescription purchase; we will have created a medical record to document this. In certain circumstances, you can request that we erase your data which we will do where this would not prevent us meeting our legal and regulatory obligations.
Your Eye Academy Online Account
If you wish to access, edit or remove profile information, change your password, close your account or request deletion of your personal data, you can do so by logging in to your Eye Academy account or by sending an email to firstname.lastname@example.org. If you cannot access certain personal information collected by Eye Academy, via the Eye Academy account, we will respond to any request to access or delete your personal data as soon as possible, certainly within 30 days.
Your Communication, Marketing and Advertising Preferences
You can opt out of receiving direct marketing communications from Eye Academy by following the instructions included in every email sent to you via the “Unsubscribe” tab. We respect your choice, and we will stop sending you promotional emails once you unsubscribe.
Please note, regardless of your communication settings, we will continue to communicate with you regarding appointment reminders, changes to terms and conditions, policy updates, routine customer service messages such as information about a current or past purchase, delivery of products, or any other significant information that may affect you.
If you choose not to receive appointment reminders please email email@example.com with the name of the practice you visited for your appointment or made a purchase.
A cookie is a small data file containing a string of characters that is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognise your browser. The length of time a cookie will stay on your computer or mobile device depends on whether it is a "persistent" or "session" cookie. Eye Academy uses both types of cookies. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your computer or mobile device until they expire or are deleted. We use the following types of cookies on our website.
- Strictly necessary cookies. These cookies are essential for you to browse our website and use its features. Without these cookies, services like shopping baskets cannot be provided.
- Performance cookies. These cookies collect information about how you use our websites. This data may be used to help optimise our website and make it easier for you to navigate.
- Functional cookies. These cookies allow our websites to remember choices you make while browsing and personalise your experience. We may store your geographic location in a cookie, for instance, to ensure that we show you the website relevant to your area.
- Third Party cookies. Third party cookies are those placed by websites and/or parties other than Eye Academy. These cookies may be used on our website to improve our products or services or to help us provide more relevant advertising. These cookies are subject to the respective privacy policies for these external services, for example, Facebook Data Use Policy.
- Analytics cookies. We use analytics cookies, like those offered by Google Analytics, to help us understand things like how long a visitor stays on our website, what pages they find most useful, and how they arrived at Eye Academy.com. To learn more about Google Analytics and your data, visit this Google webpage.
How to control Cookie settings
Most web browsers allow you to control cookies through their settings preferences. However, if you limit the ability of websites to set cookies, you may impair your overall user experience, as it will no longer be personalised to you. Some browsers offer a “Do Not Track” (“DNT”) signal where you can indicate your preference regarding tracking and cross-site tracking. Although we do not currently employ technology that recognises DNT signals, we will only process your personal data in accordance with this Statement. Below you can learn about how to control cookie settings on popular web browsers:
In addition to cookies, we sometimes use small graphic images known as 'pixels' (also known as web beacons, clear GIFs, or pixel tags). We use pixels in our email communications to you (if you have selected to receive such communications) to help us to understand whether our email communication has been viewed. We also use third party pixels (such as those from Google, Facebook, and other advertising networks) to help us provide advertising that is relevant to your interests. Learn more about our advertising and marketing activities below.
- 9. Changes to Our Privacy Statement
Eye Academy reserve the right to modify or update this Statement when necessary, to reflect customer feedback and changes in our Eye Academy Products and Service. Please review it regularly. When we update this Statement, we will revise the 'Last Update' date at the top of the Statement. If there are material changes to the Statement or in how Eye Academy uses your personal data, we will inform you either by posting a notice of such changes, prior to them taking place or by directly sending you a notification. We encourage you to regularly review this Statement to learn more how Eye Academy is using and protecting your information.
- 10. Data Protection Registration
We are registered as a data controller with the UK Information Commissioner's Office.
Our data protection registration number is Z6150793
- 11. How To Contact Us
This website is owned and operated by The Eye Academy (Richmond) Ltd
We are registered in [England and Wales] under registration number 04317626
If you have any questions about the use of your personal information, please email firstname.lastname@example.org.
Unless otherwise stated, Eye Academy Ltd. is a data controller for personal data we collect through the Eye Academy Products and Services subject to this Privacy Statement. Our address is Suite 12 Silwood Business Centre, Silwood Park, Buckhurst Road, Ascot, Berkshire, SL5 7PW.