Visioncare At Home is committed to protecting your privacy and handling your personal data with care, transparency and respect.
Visioncare At Home is committed to building strong and lasting relationships with you based on trust and mutual benefit. Part of this commitment means safeguarding and respecting your privacy and your choices. Respecting your privacy is essential to us. This is why we have put in place this Privacy Statement to explain our data practices.
We promise to be fair and transparent in our use of your data. Specifically:
In the event that we wish to use your information in a way that we have not mentioned, we will always inform you beforehand, in line with our duties and legal responsibilities.
When you share personal data with us or when we collect personal data about you, we use it in line with this Privacy Policy.
Visioncare At Home Limited (Company registration number SC322887) is the data controller responsible for the personal data that you share with us. The "data controller" means the person or organisation that decides what personal data is held and how it is used.
We have an appointed data protection officer who can be contacted at privacy@visioncareathome.co.uk and provides oversight on our data protection issues.
Personal data is any information relating to a person who can be identified from that data directly or indirectly. For example, a person's name, address, date of birth, photograph, financial details, job title/employer or health information counts as personal data. The rules in the Data Protection Act also apply to certain health information.
We might collect or receive personal data from you via our websites, forms or otherwise. Sometimes you give this to us directly (e.g., when you book an appointment). We'll also collect data from you when you contact us or use our services.
The type of data we may collect will depend on the purposes you contact us. Personal data we may use includes:
Also we may acquire information about you from third party sources, where you have consented to the sharing of that information, or where we have a specific interest in obtaining that information. Details of when we may do this are described in the sections below.
Data protection law requires us to have a legal basis for processing your personal data. Here are the bases we rely on:
Data that is necessary to enter into or perform a contract with you (e.g. to fulfil your order).
We rely on this for example when we want to use your personal data to improve our products and you can manage the associated legitimate interest.
Sometimes we need to deal with your personal data and use it so that we can comply with a legal obligation.
This applies where you have given us your explicit consent to use your personal data (e.g. to receive our marketing communications).
We may and will process data to enable certain persons or systems to access information about individuals. The reasons for processing data are administrative, clinical and operational in nature — including fulfilling your orders, managing your account and relationship with us, improving our products and services, and communicating with you in connection with your appointments, delivery notifications, business development and statistical analysis.
Among others, the categories of data we process and the reasons for processing will depend on the service you use.
We will do so with the intention of treating every person as an individual and will process as little or as much as reasonably justifiable. We will be mindful to ensure we only process what is necessary.
Service and health administration — for example communicating with you about your appointment and the goods and services we're providing, and to make sure you have access to all the information you need about our products and how to use them properly. We'll also send you important notices, for example changes to any of our services or contractual obligations.
As part of our service we use NHS health communication as part of our statutory legal healthcare services. We may need to communicate between clinicians/practices. This is part of our legitimate interest for the processing of appropriate data communications between clinical practitioners and is part of our standard operating procedure.
PCR Disease report service: In your request, we will contact you or arrange to you to access the patient reports & glossaries. This is part of your legitimate interest for us to provide you with this information.
Supplier request: We may contact you to follow up on a quote or when arranging for an optician practitioner visit.
Marketing communications: If we are telling you about a new product or service you have requested, or information about these communications at any time by contacting us at the link below.
Where we carry out profiling for marketing purposes, we will ensure that we are transparent about this and give you an opportunity to object to these communications on request.
First it needs to be clear that we do not sell your personal data.
Your personal data will be accessible only to people within Visioncare At Home. Where appropriate, we may share your personal data between our teams to harmonise and update the information you share with us to tailor our communications based on your preferences, and to send timely and pertinent notices.
We may also share your information with third parties where relevant and where we are required to do so. We will ensure that any third party we instruct is confident in sharing with you any of the following:
We are committed to keeping your personal data safe and secure. We have various policies and controls in place at Visioncare At Home to ensure that data remains secure and to prevent it from being lost, destroyed or misused.
We always strive to store your personal data securely and we ensure your personal data can be accessed by authorised persons only, before making necessary data transfers.
Regular reviews to keep system access secure at all times.
Data loss prevention controls protect your most sensitive information.
Ongoing penetration and vulnerability testing to keep systems safe.
Structured data infrastructure designed to protect your personal data at every layer.
Data is stored on servers located in the UK. We use a variety of security, technology and procedures to help protect your personal information from unauthorised access, use or disclosure.
For further information please contact us as per the CONTACT section below.
We will not keep the information for any longer than is needed. However, we consider several criteria to make sure that we do not keep your personal data for longer than is necessary or appropriate. These criteria include:
When we no longer need to retain your personal data, we will commit to ensuring that the future data will return to identifiable individuals is suppressed or destroyed.
Subject to certain conditions, you have the following rights and several options available to you. If you believe that we are processing your personal data in a way that is incorrect or you have a concern about such processing, we would ask you to contact us first and we will be happy to respond to you. We shall respond to legitimate requests within a month of receipt, unless we find a reasonable grounds for providing an extension to this timeline. We will notify you promptly in such cases.
If you think there has been a breach, in the first instance it is advisable to raise this informally with our data protection officer.
Recipients, publication or archiving must be mentioned. This confirms that we are signing and initialing the data extract.
You have the right to know how your personal data is collected, used and shared. The Privacy Policy is part of how we fulfil this obligation.
You have the right to request a copy of the personal data we hold about you, subject to certain restrictions. A reasonable administrative fee may be charged for manifestly unfounded or excessive requests.
You have the right to have your personal data corrected if it is incorrect or outdated and/or completed if it is incomplete. If you have an account, you may be able to update your information directly through our website.
In some cases, you have the right to have your personal data erased or deleted. Note: this is not an absolute right. A request to delete information may be refused if the personal data is processed based on a consent. Where you withdraw your consent, this does not affect the lawfulness of processing prior to the withdrawal.
The right to restrict processing applies in certain circumstances. Where processing is restricted, we will continue to store your personal data but will suspend all processing of that data until either the restriction is no longer in place or until an enquiry is resolved.
You have the right to move, copy or transfer your personal data from one place to another in a safe and secure way, where it is technically feasible to do so.
The right to object only applies in certain cases — notably in relation to processing based on legitimate interests, and for direct marketing purposes (including profiling). We will always inform you of your right to object at the point of collection.
The right to not be subject to a decision based solely on automated processing — including profiling — which produces legal or similarly significant effects. Where you have a complaint in relation to automated decision-making, you may raise your complaint in the manner set out in this policy.
You may also find it helpful to note that you can question or protest an automated data decision that has been made about you. If you have any concerns, please contact our Data Protection Officer. Details can be found in the CONTACT section below.
You can exercise any of these rights by raising a request with our data protection officer who will respond and validate your identity, assess your request before deciding on the most appropriate way to address it. Details can be found in the CONTACT section below.
We may change the terms of this privacy policy. Any updates will take effect as soon as they are posted on our website.
Visioncare At Home works in compliance with the numerous legislations, codes, regulations and regulatory guidelines. These include:
For further information on our Privacy Policy and Legislation, please refer to the ICO website.
If you have any questions or concerns about how we use your personal data, or would like to exercise any of your rights listed, please contact:
Copyright © Visioncare At Home 2024. All Rights Reserved.