Privacy Policy

Who we are

What data we collect

We collect personal information in the following ways:

• •When you contact us by phone, email, or through our website forms, we collect your name, email address, phone number, and any information you choose to share in your message. This may include details about your medical history or condition if you provide them voluntarily.
• •When you book a consultation, we collect your name, email address, phone number, your reason for enquiry (from the options you select), your preferred appointment format, and any additional information you share in the free text field.
• •When you visit our website, we may collect technical data such as your IP address, browser type, operating system, and pages visited. This data is collected through cookies and similar technologies (see the Cookies section below).
• •When you attend appointments, we may collect and record clinical information about your eye socket, prosthesis, and treatment history. This information is necessary to provide you with safe and effective care.

Why we collect your data and the legal basis

We use your personal data for the following purposes:

• •To respond to your enquiries and arrange appointments. Legal basis: legitimate interest (we need to respond to people who contact us) and, where you have submitted a form, your consent.
• •To provide ocular prosthetic care. Legal basis: this is necessary for the provision of health care, which falls under UK GDPR Article 9(2)(h). We process health-related data only where it is necessary to provide you with treatment.
• •To send you appointment reminders and aftercare information. Legal basis: legitimate interest (it is in your interest to receive reminders and care information related to your treatment).
• •To improve our website. Legal basis: legitimate interest (we analyse anonymous usage data to make the website work better for visitors).

We will never sell, rent, or share your personal data with third parties for marketing purposes. We do not send marketing emails unless you specifically request them.

Who we share your data with

We share your personal data only where necessary:

• •With your referring clinician or surgeon, if you have asked us to liaise with them or if it is necessary for your care. We will always tell you before sharing information with another healthcare professional.
• •With our website hosting provider (for technical data only). Our website is hosted on Vercel, which may process server logs containing your IP address. This data is not used to identify you personally.
• •With Google (if you interact with the embedded Google Map on our Contact page). Google's privacy policy applies to their services: policies.google.com/privacy.

We do not share your data with any other third parties.

How long we keep your data

• •Enquiry and contact form data: we keep this for up to 2 years after your last contact with us, after which it is deleted.
• •Patient clinical records: we keep these for the duration of our clinical relationship with you and for a period of 10 years after your last appointment, in line with recommended retention periods for health records in the UK. For paediatric patients, records are kept until the patient's 25th birthday or for 10 years after the last appointment, whichever is longer.
• •Website analytics data: anonymous technical data is retained for up to 26 months.

Your rights

Under UK data protection law, you have the following rights:

• ✓The right to access the personal data we hold about you.
• ✓The right to ask us to correct any inaccurate data.
• ✓The right to ask us to delete your data.
• ✓The right to withdraw your consent at any time.
• ✓The right to object to processing based on legitimate interest.
• ✓The right to request that we restrict the processing of your data.
• ✓The right to data portability.

The right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled. The ICO can be contacted at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights, contact us at lorna@kindeyesprosthetics.com.

Cookies

Our website uses a small number of cookies:

• •Essential cookies: these are necessary for the website to function (for example, remembering your cookie preferences). They do not collect personal data and cannot be switched off.
• •Analytics cookies: if we use a website analytics service, it may set cookies to help us understand how people use the site. This data is anonymous and aggregated.
• •Third-party cookies: the Google Maps embed on our Contact page may set cookies. These are governed by Google's privacy policy.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Blocking essential cookies may affect the functionality of the website.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it was most recently revised. If we make significant changes, we will make this clear on our website.