Privacy Policy
Your privacy and identity security is very important to us. The information you provide Exact Eyecare with will be used in the processing of your order and to contact you when necessary in connection to your order. We take every care to ensure the security and privacy of any information you have provided.
General Data Protection Regulations (GDPR)
Opticare is committed to responsible data management and subscribe to the principals of the new EU General Data Protection Legislation Which came into force on 25th May 2018. We are committed to maintaining the privacy of our users and maintaining the security of any personal information received from you
How do we use your personal data?
Your personal data will be kept confidential and secure and will, unless you agree otherwise, only be used for the purpose(s) for which it was collected and in accordance with this Privacy Policy, applicable Data Protection Laws, clinical records retention periods and clinical confidentiality guidelines.
Sensitive personal data related to your health will only be disclosed to those involved with your treatment or care, or in accordance with UK laws and guidelines of professional bodies. We will only use your sensitive personal data for the purposes for which you have given us your explicit consent to use it. We may use your medical data where we have a legal or regulatory obligation to do so or to support your doctor, nurse or other healthcare professional.
The security of your personal data
We protect all personal data we hold about you by ensuring that we have appropriate organisational and technical security measures in place to prevent unauthorised access or unlawful processing of personal data and to prevent personal data being lost, destroyed or damaged. We conduct assessments to ensure the ongoing security of our information systems. Any personal data you provide will be held for as long as is necessary having regard to the purpose for which it was collected and in accordance with all applicable UK laws.
At your request, we may occasionally transfer personal information to you via email, or you may choose to transfer information to us via email. Email is not a secure method of information transmission; if you choose to send or receive such information via email, you do so at your own risk.
Disclosure of your personal data
In the usual course of our business we may disclose your personal data (to the extent necessary) to certain third party organisations that we use to support the delivery of our services. This may include suppliers and sub-contractors for the performance of any contract we enter into with you or organisations providing IT systems support and hosting in relation to the IT systems on which your information is stored,
Sensitive personal data (including information relating to your health) will only be disclosed to third parties in accordance with this Privacy Policy. That includes third parties involved with your treatment or care, or in accordance with UK laws and guidelines of appropriate professional bodies. It may also be provided to external service providers and regulatory bodies (unless you object) for the purpose of clinical audit to ensure the highest standards of care and record keeping are maintained.
Medical professionals working with us:
We share clinical information about you with our medical professionals as we think necessary for your treatment. Medical professionals working with us might be our employees, or they might be independent consultants in private practice. In the case of independent consultants, the consultant is the data controller of your personal data, either alone or jointly with us and will be required to maintain their own records in accordance with Data Protection Laws and applicable clinical confidential guidelines and retention periods. Where that is the case, we may refer you to that consultant to exercise your rights over your data. Our contracts with consultants require them to cooperate with those requests. In all circumstances, those individual consultants will only process your personal data for the purposes set out in this Privacy Policy or as otherwise notified to you.
External practitioners: If we refer you externally for treatment, we will share with the person or organisation that we refer you to, the clinical and administrative information we consider necessary for that referral. It will always be clear when we do this.
Your GP: If the practitioners treating you believe it to be clinically advisable, we may also share information about your treatment with your GP. You can ask us not to do this, in which case we will respect that request if we are legally permitted to do so, but you should be aware that it can be potentially very dangerous and/or detrimental to your health to deny your GP full information about your medical history, and we strongly advise against it.
Medical regulators: We may be requested – and in some cases can be required – to share certain information (including personal data and sensitive personal data) about you and your care with medical regulators such as the General Optical Council. We will ensure that we do so within the framework of the law and with due respect for your privacy.
The information in some instances is to understand your needs and provide you with a better service and to improve our products and services. We may send you promotional emails about new products, special offers, and keep you informed of any website changes that may affect you.
Security
Exact Eyecare is committed to ensuring that your information is secure and we have physical, electronic and managerial procedures to safeguard and secure the information collated online.
All personal information supplied is kept on secure servers and within its internal systems. Exact Eyecare uses adequate safety measures to protect information from non-authorised access or non-authorised changes, and from the circulation or distribution of data. To prevent non-authorised access, to maintain the accuracy of the data and guarantee the proper use of information, Exact Eyecare uses adequate physical, electronic and managerial procedures to safeguard and protect the information and data stored in our system. Information on purchase transactions (e.g. credit card number) is handled securely through selected suppliers that guarantee that they have adopted the most adequate security measures. Furthermore, a secure system for authorising credit card payments and identifying fraudulent activities is used. Exact Eyecare uses the standard SSL (Secure Sockets Layer) to protect the confidentiality of your personal information. Although no computer system is completely secure, Exact Eyecare believes that the measures it has implemented reduce the possibility of security problems to an appropriate level for the type of data involved.
Exact Eyecare will process users’ information for contractual purposes for 10 years after the termination of the contract, including Prescription Information which will also be held for 10 years from the date of the purchase of the prescription glasses on the Website when the Prescription Information was provided. Users information is processed at the premises of OptExact Eyecare icare and in the places where the servers are located. For further information, contact Exact Eyecare using info@ExactEyecare.co.uk
Remaining Anonymous whilst Browsing
You can browse all the Exact Eyecare website including all our products, services and prices without disclosing any personal information about yourself.
Links to other websites
Exact Eyecare may contain links to other websites of interest. However once you use these links to browse these other sites, you should be aware that we do not have any control over the website in question. Therefore this privacy statement does not apply to the other website in question. You should check the website you are browsing’s privacy policy in this event.
The Use of Cookies
We use a technology called “cookies” as part of our normal business procedure to track patterns of behaviour of visitors to the Website. A cookie is an element of data that the Website sends to your browser that is then stored on your system. You can set your browser to prevent this happening. Any information collected in this way can be used to identify you unless you change your browser settings.