CG Optical
Processing Activity | Personal Data Required/Held | Retention Time | Reason to hold Data |
---|---|---|---|
Optical service and products | Name, date of birth, telephone numbers, address and email address. Current and past health and medication information, family history, your examination results including images, and lifestyle information. Data received from other healthcare professionals as part of your ongoing care. |
10 years after last contact or until age 25, whichever is later. | Contract - in order to provide the service or products you have requested. Where health data is processed, we do so for the provision of healthcare. |
Reminders | Name, email address, address, telephone numbers. | 10 years after last contact or until age 25, whichever is later or until asked to stop by you. | Contract - In order to provide the ongoing service appointment reminders are sent. |
Marketing | Name, email address, address, telephone number. | Until asked to stop by you or until consent withdrawn by you. | Legitimate interests – we will provide information which we believe is of genuine interest to you. Consent - you have given consent to receive information about products or services that are of interest to you. |
Credit/Debit card payments | Cardholder name, card number, security number. Banking details for direct debit mandates. | Duration of the transaction. | Contract – you have agreed to provide these details to pay for the service or products ordered. |
CCTV footage | Images. | 7 Days. | Legitimate interests - Prevention and detection of crime. Protection of our colleagues and visitors. Investigation of accidents, incidents, criminal activities and breaches of our policies. |
Collection of online identifiers for analytical purposes (Cookies) | Cookie information IP address Device ID Session ID Interaction history Website feedback |
See Cookie Policy www.cgoptical.co.uk/privacy |
Consent - Ensuring visitors get the best experience. |
Right | Explanation |
---|---|
Right to be Informed | This means that we have to be transparent in how we collect and use your personal data. |
Right of Access | You have the right to access your personal data. |
Right to Rectification | If the information we hold about you is inaccurate or incomplete you can request that we correct this. |
Right to Erasure | You can request that we delete or remove personal data in certain circumstances. |
Right to Restrict Processing | You have the right to request that we cease processing your data if
|
Right to Data Portability | Where you have consented to our processing your data or where the processing is necessary for us to deliver a contract you can request a copy of the data provided to a third party. |
Right to Object | You have the right to object to our processing in certain circumstances. For example, you can object to:
|
Rights relating to Automated Decision-Making including Profiling | We do not use automated decision-making or profiling.
Where automated decision-making is applied, organisations must
|