CG Optical Opticians Stratford-upon-Avon | Sight Test Stratford-upon-Avon | Sunglasses Stratford upon Avon

CG Optical

Who we are?

We at CG Optical Ltd are registered with the Information Commissioners Office as a Data Controller under registration number ZA460262. We are specialist in Optometry and operate from 57 Ely Street, Stratford-upon-Avon, Warwickshire CV37 6LN.

Your Privacy

Your privacy matters to us and we are committed to the highest data privacy standards, patient confidentiality and adherence with the Data Protection Act 2018 and UK GDPR.

To disclose this to you, our Privacy Notice includes the following:

What data we collect from you.
How and why we process it.
Who we share it with and why.

We adopt the six core principles of data protection which are:

Lawfulness, fairness and transparency - we process personal data lawfully, fairly and in a transparent manner in relation to you, the data subject.
Purpose limitation - we only collect personal data for a specific, explicit and legitimate purpose. We clearly state what this purpose is in this Privacy Notice, and we only collect data for as long as necessary to complete that purpose.
Data minimisation - we ensure that personal data we process is adequate, relevant and limited to what is necessary in relation to the processing purpose.
Accuracy - we take every reasonable step to update or remove data that is inaccurate or incomplete. You have the right to request that we erase or rectify erroneous data that relates to you, and we will complete this task as soon as possible but guarantee to do so within a month.
Storage limitation - we delete personal data when we no longer need it. Whilst the timescales in most cases aren't set, we outline our retention strategy within this Privacy Notice.
Integrity and confidentiality - we keep personal data safe and protected against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

Collection of your Personal Data

We collect your personal information via disclosure directly from you or your parent or guardian. This might be via our website, via our booking system, telephone or face to face engagement.

Categories and Type of Personal Data Collected and processed.

We collect contact details from you including:

Name
Address
Telephone number(s)
Email addresses
Date of Birth

In addition to this contact information, we collect clinical data including:

Current and past relevant health and medication information.
Examination results including images.
Relevant lifestyle information such as pastimes or work impacting on health care.

Finally, we collect financial information where appropriate including:

Payment card details.
Banking details for direct debit mandates.

We treat all personal data as sensitive but acknowledge that we also process special category data.

Child Data

Article 8 of the UK GDPR and Article 9 of the UK Data Protection Act 2018 specify how we are permitted to process data relating to children under 16 (for the UK this is under 13). Given our industry we comply with this requirement by permitting parents or guardians to make appointments for children and to provide us with their own contact details to use on behalf of the children. On the appointment confirmation we offer a statement of understanding which confirms that the recipient is indeed a parent or guardian of the child.

Reason for Data collection and processing activities.

Contact information is captured to enable us to contact you through various communication channels on matters directly related to your treatment. This could include appointment reminders, results, check-up reminders and any other information which is felt to be crucial to your care. We may also with your consent send offers from us about our services. Clinical data is collected as an essential means of providing you with the service which you require and without collecting this information our service could not be delivered. Payment information is collected to facilitate the payment of our services.

Sharing of Personal Data

During the delivery of our service to you, we will share your data with other companies who are critical for the provision of our service to you and will be viewed as Data Processors. They are under contract with us and have provided sufficient guarantees that they will process your data only as per the terms of that contract and throughout processing activities will ensure your data is protected using appropriate technical and organisation measures.

A full list of processors is available from our Data Protection Officer.

We may also need to share your data with other health care providers, such as the NHS, where this is needed to ensure you receive appropriate treatment and care.

Securing and Processing of your Personal Data

Your data is stored mainly within Optix which has appropriate security processes in place.

Your data is also stored within local devices secured using passwords and user authentication. Our practice is secure and operated to ensure data and the devices on which that data resides, are protected.

In the unlikely event that we lose your data, or a device on which your data resides, or it is accessed by someone unauthorised, we have a duty to inform you immediately. If the loss or unauthorised access of your data has potential to cause you harm, we will also report this to the Information Commissioners Office, who are responsible for regulating data protection legislation in the UK. https://ico.org.uk/

Our legal basis for processing your personal data?

We are required to identify one of six possible legal grounds for processing. These are:

consent
contract
legitimate interests
vital interests
public task
legal obligation

As all of our processing activities are crucial to the provision of the service which we enter into a contract with you to provide, we process your data based on that contractual relationship.

We could also process your data under our legitimate interests as all processing activities are essential for the provision of our service to you.

Where special category of data is processed, we do so Article 9 (2) h – processing is necessary for…the provision of health or social care.

How long do we keep your personal data for?

We process three categories of personal data and retain this data for different periods of time.

Contact information is retained as long as the data subject is a customer of ours. Where the data subject has not used our services recently, and in the absence of a direct data subject request, we hold contact information for a period of 10 years from the last appointment.

Based on the guidance of The Association of Optometrists the clinical data we process is held for a period of 10 years.

Payment information is held by us only as long as is necessary to process the payment or to set up the direct debit mandate.

Your rights in relation to personal data

Under the UK GDPR, you have rights to access and control your personal data. These rights include:

access to personal information
correction and deletion
withdrawal of consent (if processing data on condition of consent)
data portability
restriction of processing and objection
lodging a complaint with the Information Commissioner’s Office

You can exercise your rights by emailing our Data Protection Officer on CGOpticalDPO@Clinicaldpo.com

If you are unhappy with anything we have done with your data, you have the right to complain to the Information Commissioners Office.

To make a complaint to the Information Commissioners Office use the link below or call their hotline on Tel No.: 0303 123 1113. https://ico.org.uk/concerns/

Use of cookies and other technologies

What are cookies?

We may place small text files called ‘cookies’ on your device when you visit our website. These files do not contain personal data, but they do contain a personal identifier allowing us to associate your personal data with a certain device. Cookies are NOT viruses, any kind of malware, programs or applications. Cookies cannot see the files on your device.

Why do we use cookies?

Cookies serve several useful purposes for you, including:

Tailoring our website’s functionality to you personally by letting us remember your preferences, location or device type.
Improving how our website performs.
Improving your experience and allowing our website to recognise you when you return.
Allowing us to customise our website to your interests.
Understanding who our audience is so that we can provide content most relevant to you.
Allowing third parties to provide services to our website.
Helping us deliver interest-based advertising where appropriate in compliance with the applicable laws.

Types of cookies that we use

We use different types of cookies on our website. Some of these cookies are placed by us, while others are placed by our third-party plug-ins, suppliers or advertisers. These cookies may be deleted from your device at different times, such as at the end of your browsing session (when you leave the website) or after a pre-set amount of time, or they may persist on your device until you delete them. We use the following types of cookies on our website:

Essential cookies – these are cookies that allow our website to perform its essential functions. Without these cookies, some parts of our websites would stop working. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Non-essential cookies – with your consent non-essential cookies are set when you visit our website. They serve to optimize the user experience, provide us with insights about how users use our website, or are used for marketing purposes.

To the extent personal data is processed via these cookies, the respective legal basis is your consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by adjusting your cookie settings.

How to contact us?

For all data protection matters or questions relating to how we manage your data, you can contact our Data Protection Officer via these means:

Data Protection Officer: Clinical DPO.
Phone Number 0203 411 2848
Email: CGOpticalDPO@Clinicaldpo.com

If you have any questions or comments about privacy, you should email via our Contact Form

Home

Book an Appointment

About

Eye Examinations

Eye Conditions

Luxury Eyewear

Designer Sunglasses

Childrens Eyewear

Bespoke Lenses

Contact Lenses

Testimonials

What's New

Contact

Privacy Policy

Privacy Policy

Privacy Policy

Subscribe to our newsletter