This Privacy Policy will help you understand what information we collect at Ocupeye Limited and what choices you have.
Ocupeye Limited is a company registered in England and Wales (number 10493610) at Bank Gallery, High Street, Kenilworth, Warwickshire, CV8 1LY. Ocupeye is committed to compliance with all relevant UK and EU laws in respect of personal data, and to protecting the ‘rights and freedoms’ of individuals whose information Ocupeye collects in accordance with the UK General Data Protection Regulation (GDPR) and Data Protection Act 2018.
We want to reassure you that we will never use your personal information for anything other than the purpose identified when submitting it. We will only use your information how it is intended to be used which is governed by law and we will only capture the information that is required.
How do we collect information from you?
Customer
We obtain information about you and (where relevant) the company or organisation you work in when an enquiry is made on our website, by phone or any other communication method. Other ways we collect information include cookies collected via website browsing activity, signing up for to our newsletter, when a survey or feedback form is completed or when we do customer research. We also obtain information from third party suppliers, such as health organisations.
Supplier
We obtain information about you and the company you work in when an enquiry is made or we purchase your product or service.
What type of information is collected from you?
Customer
The personal information we collect might include your name, personal/work address, personal/work email, personal/work IP address, health information relating to the service you require from us and information regarding what digital pages have been accessed.
This information enables us to carry out our transaction with you, provide support and personalise our services to you.
When you are an Ocupeye patient, we record all your treatment and appointment details so that your healthcare professional can plan your treatment correctly. To make sure that you are treated safely, we may also record your next of kin and ethnic origin as well as all contacts you have with the company such as clinic visits and the results of investigations and letters relating to your care.
To make sure that you are treated properly, we may also record your treatments, allergies, medicines, reactions to medicines in the past and any long term conditions such as diabetes or asthma. Your health record is kept confidential within the company at all times and is only shared with staff when they need it to carry out their job. All staff are required to work to strict professional and contractual codes of confidentiality and where possible we will anonymise information so that individual patients cannot be identified. The only time information will be shared to outside organisations is if they are directly involved in your care, e.g. your NHS hospital or private clinician. We will retain your information as set out in the NHS Code of Practice for Records Management. For further details on how long we hold your information, please contact the Data Protection Officer at contact@ocupeye.com.
Supplier
The personal information we collect might include your name, work address, work email. Purchase order history and delivery information is also recorded and obtained.
This information enables us to carry out our business transactions with you.
How your information is used
Customer
We will use your information to process your enquiry, order and account. We will also personalise your use of our digital channels, post and email communications about our product and care services. We will also use your information to notify you of any changes to our services and anything else that may affect you.
We only retain your personal data for as long as we need it and for the purpose for which it was collected. Whilst taking into consideration our legal obligations to retain information such as financial records for audit and tax purposes, we will regularly review the length of time we retain your personal data and consider the purpose or purposes for which we hold it.
If your data is no longer needed for such purposes, we will securely delete your personal data.
Supplier
We will use your information to process our orders, manage your account and communications about your product. We will also use your information to notify you of changes to our services and anything else that may affect our order.
We only retain your personal data for as long as we need it and for the purpose for which it was collected. Whilst taking into consideration our legal obligations to retain information such as financial records for audit and tax purposes, we will regularly review the length of time we retain your personal data and consider the purpose or purposes for which we hold it.
If your data is no longer needed for such purposes, we will securely delete your personal data.
Medical device supply
When Ocupeye has been instructed to supply you a medical device, the order contains some personal information. Ocupeye needs this information to be able to supply the correct product and service to you. The use of personal details ensures that the product supplied is fit for purpose, for warranty purposes and for maintenance history. These records are kept confidential within Ocupeye at all times and are only shared with staff or organisations when they need it to carry out their job. All staff are required to work to strict professional standards and have signed contractual codes of confidentiality.
Who has access to your information?
Ocupeye will not sell or rent your information to third parties.
Where we use third-party service providers to work on our behalf, we may pass your information to our those providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example delivering your order). However, when we use third-party service providers we disclose only the personal information that is necessary to deliver the service or as required where data must be shared when under obligation from authority/regulatory body. We have agreements and contracts in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.
Any third-party links followed from our digital channels will have their own privacy policies in place which Ocupeye have no control over. Users should familiarise themselves with these directly.
Your choices
You have a choice if you wish to receive information from us. You have the right to ask us to stop processing your information or tell us that you don’t want to receive certain information such as marketing communications. Marketing communications will include an unsubscribe link or you can email contact@ocupeye.com.
Your rights
Subject to certain exceptions you may exercise the rights available to you under data protection law as follows:
• The right to be informed — the right to be provided with any information relating to processing when requested.
• The right of access — the right to obtain confirmation as to whether or not personal data are being processed, and, where that is the case, access to the personal data.
• The right to rectification — the right to obtain the rectification of inaccurate personal data.
• The right to erasure — the right to obtain the erasure of personal data.
• The right to restrict processing — the right to obtain a restriction of processing where one of the following applies (a) accuracy, (b) unlawful, © no longer required and (d) objection.
• The right to data portability — the right to request us to transfer your personal data in a structured, commonly used and machine-readable format to another organisation.
• The right to object — the right to object, on grounds relating to his or her particular situation, at any time where we use the data with your consent or for our legitimate interests.
• Rights in relation to automated decision making and profiling — the right not to be subject to a decision based solely on automated processing and profiling.
Ocupeye will normally fully respond to subject access requests within 14 days, and usually no longer than one calendar month. For multiple or complex requests, we will advise you if this timescale needs to be extended.
Processing a request will not commence before relevant ID has been received that verifies the requester’s identity. You can read more about these rights at https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/.
Security
Details are transmitted mainly over the internet however, this can never be guaranteed to be 100% secure. Whilst we strive to protect your personal information, we can’t guarantee the security of any information you transmit to us; this is done at your own risk. Once we receive your information we make our best effort to ensure its security on our systems.
Cookies
Please refer to our Cookie Policy.
Feedback and complaints
We strive to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We also welcome any suggestions for improving our procedures. This policy was drafted with clarity in mind however, we’re happy to provide any additional information or explanation needed.
If you want to provide feedback about the way we have processed your personal information, please contact the Data Protection Officer at Ocupeye on contact@ocupeye.com or telephone 07407 655 671 in the first instance. You also have the right to contact the Information Commissioner’s Office in their capacity as the statutory body which oversees data protection law at www.ico.org.uk/concerns.
Updates to this policy
This policy may be updated periodically to reflect any necessary changes in our privacy practices. The reader of this policy is bound by these changes from that date of change.
This Privacy Policy was last modified on 21 August 2023.