Community Eyecare

Privacy Policy

Introduction

In this Privacy Policy, references to Community Health and Eyecare Ltd, CHEC, we, us or our means the members or the group companies that process your personal information.

In this Privacy Policy, reference to you means the persons whose personal information we collect, use and process. This includes anyone who contacts us in connection with the services we provide or otherwise contacts us including on behalf of any patient under our care.

Community Health and Eyecare is a company registered in England and Wales with company number 07296068, whose registered office is 1-6 Star Building, Caxton Road, Fulwood, Preston, United Kingdom, PR2 9BS.

What is the Purpose of this notice?

Community Health and Eyecare Ltd, trading as CHEC is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. At CHEC we pride ourselves in the care and service we provide to all. This includes handling personal data in a responsible manner and maintaining your privacy. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights. This notice makes you aware of how and why your personal data will be used and how long it will usually be retained for. It provides you with certain information that must be provided under the UK General Data Protection Regulations and Data Protection Act 2018.

What is Personal data?

Under the UK’s General Data Protection Regulation (GDPR) personal data is defined “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”

How is your personal data collected?

CHEC may use different methods to collect data from and about you including through: 

  • Direct interactions. You may give us your personal information by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
    • Enquire about our services whether as a patient, candidate or through other interests
    • Contact us via our website
    • Request marketing materials be sent to you
    • Enter a competition, promotion or survey, or
    • Give us feedback or contact us
  • Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies.
  • Third parties or publicly available sources. We will receive personal data about you from various third parties and public sources.

How we may use your information

CHEC will collect and use your personal data for the purposes of:

  • Your healthcare needs
  • For you to remain well informed with regard to your care and treatment, including notification of any appointments or updates
  • Responding to queries
  • Helping us to reflect, review and improve the service we provide
  • Obtaining patient feedback
  • To comply with laws and regulations applicable to CHEC
  • Maintain records required for compliance with laws
  • Managing and administrating complaints and claims
  • Engaging in effective relationships with suppliers and other third-party companies
  • Conducting business processes including but not limited to operational processes, resourcing and recruitment and marketing and engagement

In order for us to provide you with the best service, where we need to collect personal data for in any event, we are committed to ensuring that the information we collect and use is appropriate for this purpose, and does not constitute an invasion of your privacy.

How will CHEC use the personal data it collects about me and how long will this information be kept for?

CHEC will process (collect, store and use) the information you provide in a manner compatible with the UK’s General Data Protection Regulation (GDPR). We will endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary. CHEC is required to retain information in accordance with the law, such as information needed for income tax and audit purposes. How long certain kinds of personal data should be kept may also be governed by specific business-sector requirements and agreed practices. Personal data may be held in addition to these periods depending on individual business needs.

Will CHEC share my personal data with anyone else?

We may pass your personal data on to third-party service providers contracted to CHEC while providing you with an effective service. Any third parties that we may share your data with are obliged to keep your details securely, and to use them only until they no longer require your data to fulfil this service, they will dispose of the details in line with CHEC’s procedures. If we wish to pass your sensitive personal data on to a third party, we will only do so once we have obtained your consent, unless we are legally required to do otherwise.

Under what circumstances will CHEC contact me?

Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure.

Can I find out the personal data that CHEC holds about me?

CHEC at your request, can confirm what information we hold about you and how it is processed. If CHEC does hold personal data about you, you can request the following information:

  • Identity and the contact details of the person or organisation that has determined how and why to process your data. In some cases, this will be a representative in the EU.
  • Contact details of the Data Protection Officer, where applicable.
  • The purpose of the processing as well as the legal basis for processing.
  • If the processing is based on the legitimate interests of CHEC or a third-party, information about those interests.
  • The categories of personal data collected, stored and processed. Recipient(s) or categories of recipients that the data is/will be disclosed to.
  • If we intend to transfer the personal data to a third country or international organisation outside the UK, information about how we ensure this is done securely.
  • How long the data will be stored.
  • Details of your rights to correct, erase, restrict or object to such processing. Information about your right to withdraw consent at any time.
  • How to lodge a complaint with the supervisory authority.
  • Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
  • The source of personal data if it was not collected directly from you.
  • Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

In order to access this information, we will require you to complete a DSAR form, which is available upon request. We would also require two forms of ID, one photographic and one proof of address for where you wish the records to be sent, should they not be sent electronically.

What should I do if my personal data change

If you become aware that the personal data CHEC holds is inaccurate or if any of your personal data changes, where possible, we ask that you inform CHEC of such changes. This will allow us to ensure continued care and service. We will not be deemed responsible where data held is incorrect and this results in missed communications or any other inconvenience or loss.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact our DPO at [email protected]. You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues