PRIVACY NOTICE FOR PATIENTS OF BRIGHT OPTICS LTD
Why we collect and process your personal data.
Bright Optics Ltd is a registered data controller. This privacy notice sets out our privacy policy.
We collect and process patients’ personal data for the purposes of healthcare and marketing.
Our legal bases for processing personal data for healthcare purposes, including appointment reminders, include public task or legitimate interests.
Our condition for processing special category data is the provision of health or social care.
We process our patients' personal data for marketing purposes with their consent or to meet a legitimate interest. This means we can tell you about eye care products and services that may be relevant to you. If you do not want us to process your personal data for marketing purposes, please let us know and we will stop.
The data we may collect and process
The personal data of patients that we may collect, and process includes:
How we hold and share your personal data
We process your personal data in strict confidence. We keep your personal data securely in our filing and electronic systems. Patient records are only accessible to the healthcare professionals working at the practice and those under their supervision.
We will usually keep any personal data we hold about you for ten years after our last contact with you before we delete it. This is the period recommended as good practice by the College of Optometrists. If we collected the data when you were aged under 18 we will keep it for ten years, or until your 25th birthday if that is later, in line with NHS requirements. In exceptional cases we may need to retain personal data for a longer period and will explain our reasons for doing so on request.
While processing your personal data we may share it with:
Your rights
You have legal rights in respect of the personal data we hold about you. The Information Commissioner’s Office (ICO) has published guidance on the full range of rights. The rights that are most relevant to the way in which we use your personal data include:
Contacting us and the ICO about your personal data
Please speak to us first if you have any questions or concerns about the way in which we process personal data. You can contact Simon Athey (Data protection Officer) via eyecare@brightoptics.co.uk.
You have the right to complain to the ICO if you have a concern about our handling of your personal data which you do not think we can resolve. You can contact the ICO here.
© Bright Optics Ltd, Registered office: 159 Brinsworth Lane, Brinsworth, Rotherham, S60 5BX. Registered number: 14326347. Registered in England and Wales.
We need your consent to load the translations
We use a third-party service to translate the website content that may collect data about your activity. Please review the details in the privacy policy and accept the service to view the translations.