Who we are?

Glasses On Spec are an online optical retail store. We are registered with the Information Commissioners Office as a Data Controller, registration number Z7312649.

Your Privacy

This notice provides detailed information on when and why we collect your personal information, how we use it and the very limited conditions under which we may disclose it to others.

Your privacy matters to us and we are committed to the highest data privacy standards, patient confidentiality and adherence with the Data Protection Act 2018 and UK GDPR. We adopt the six core principles of data protection.

Collection of your Personal Data

Where you provide personal data to us, we will become responsible for it as the data controller.

We will only collect data that is necessary for us to deliver the best possible service and ensure that you are provided with information relevant to your purchase.

We collect your personal information directly from you, for example, when you place an order, get in touch with us by telephone or email, or when you visit our website.

 

Main Categories and Type of Personal Data Collected and processed.

Processing ActivityPersonal Data Required/HeldRetention TimeReason to hold Data
PurchasesName, telephone numbers, address, email, prescription, and photos for varifocal purchases.3 YearsContract – in order to provide the service or products you have requested

 

MarketingName, email address, address, telephone numberUntil asked to stop by you or until consent withdrawn by youLegitimate interests – we will provide information which we believe is of genuine interest to you.

 

Consent – you have given consent to receive information about products or services that are of interest to you

Credit/Debit card paymentsWe do not collect financial data – when placing an order, you are redirected to a third-party service provider who deals with the payment process.N/AN/A
Collection of online identifiers for analytical purposes (Cookies)Cookie information

IP address

Device ID

Session ID

Interaction history

Website feedback

See Cookie Policy

[If your website uses cookies please insert link to cookie policy here]

 

 

Consent – Ensuring visitors get the best experience.

 

 

 

Sharing of Personal Data

During the delivery of our service to you, we will share your data with other companies who are critical for the provision of our service to you and will be viewed as Data Processors. They are under contract with us and have provided sufficient guarantees that they will process your data only as per the terms of that contract and throughout processing activities will ensure your data is protected using appropriate technical and organisation measures.

Our operations are based in the UK, and your personal information is generally processed within the UK and countries within the European Economic Area (EEA). In some instances, we may transfer your personal information to third countries, for example, where our suppliers or cloud service providers are situated outside the UK and EEA.

If the recipient is situated in a third country that has not received an adequacy decision from the relevant regulator, we will ensure additional safeguards are in place including the use of applicable standard contractual clauses.

A full list of processors is available from our Data Protection Officer.

We may also pass information to external agencies and organisations, including the police, for the prevention and detection of fraud and criminal activity. Should any claim be made, we may pass your personal information to our insurers and, if our business is wholly or partially transferred to a third party, your personal information may be one of the transferred assets.

Securing and Processing of your Personal Data

To provide and manage our services your electronic data is stored and processed by Automattic (WooCommerce), who are certified to ISO27001, which has appropriate security processes in place.

Your data is also stored within our own IT systems, which are secured to prevent access or intrusion by anyone who is not authorised to have access to your data.

In the unlikely event that we lose your data, or a device on which your data resides, or it is accessed by someone unauthorised, we will inform you if the loss or unauthorised access of your data has potential to cause you harm. We may report this to the Information Commissioners Office, who are responsible for regulating data protection legislation in the UK.

https://ico.org.uk/

Your rights in relation to personal data

Under UK data protection law, you have following rights which you can exercise by emailing our Data Protection Officer on HarroldDPO@clinicaldpo.com

RightExplanation
Right to be InformedThis means that we have to be transparent in how we collect and use your personal data
Right of AccessYou have the right to access your personal data.
Right to RectificationIf the information we hold about you is inaccurate or incomplete you can request that we correct this
Right to ErasureYou can request that we delete or remove personal data in certain circumstances
Right to Restrict ProcessingYou have the right to request that we cease processing your data if

·         you consider it inaccurate or incomplete and/or

·         you object to the reason we’re processing your data

We will review the validity of your request and respond to you with our decision

Right to Data PortabilityWhere you have consented to our processing your data or where the processing is necessary for us to deliver a contract you can request a copy of that data be provided to a third party
Right to ObjectYou have the right to object to our processing in certain circumstances. For example, you can object to:

·         direct marketing and

·         processing for the purposes of scientific/historical and statistics

Rights relating to Automated Decision-Making including ProfilingWe do not use automated decision-making or profiling

Where automated decision-making is applied, organisations must

·         give you information about the processing

·         introduce simple ways for you to request human intervention or challenge a decision

·         carry out regular checks to make sure that our systems are working as intended

 

If you are unhappy with anything we have done with your data, you have the right to complain to the Information Commissioners Office.

To make a complaint to the Information Commissioners Office use the link below or call their hotline on Tel No.: 0303 123 1113 

 https://ico.org.uk/concerns/

How to contact us?

For all data protection matters or questions relating to how we manage your data, you can contact our Data Protection Officer via these means:

Data Protection Officer:                 Clinical DPO

Phone Number                                 0203 411 2848

Email:                                                    HarroldDPO@clinicaldpo.com