Our Website - general brochure - Single controller Policy
Privacy Notice
About Us
This is our Privacy Notice and we control the personal information you give us. We are Paul Moore Opticians Ltd. We share some or all of your personal data with others, being:
Worldpay, Royal Mail, Optisoft, Robert S Boys, Essilor, A&J Brown, Presteven Limited, Medisoft Online Portal, Spa Medica, Arrowe Park Hospital, Spire Murrayfield Hospital, Bausch & Lomb, Johnson & Johnson, Alcon, Coopervision, NHS WIRRAL, NHS CCG, NHS ENGLAND.
The Personal Data we collect from you
We collect the personal data you provide us when you fill in the blanks in the website forms. A full list can be found clicking this link.
We also collect the following personal data from you:
- fill in a contact form online
- information you provide when you telephone us about your order or any other reason
- the information in your emails to us
- the information you provide over social media
- the information you provide on paper-based documents and forms
Using your data to fulfil the Contract
To fulfil the request or contract we use your data to allocate you the brochure, materials or products, manage and track your request or order, update you on progress, generate delivery notes and administration generally. We may have to use third parties to help us achieve these aims in accordance with our legitimate interests (see below).
Sharing with others to deliver the products and for legitimate interests
To help us fulfil the request or contract we share your data with these parties for the reasons below as it is in our legitimate interests to do so having taken into account all relevant factors around your privacy. If we do not engage these external contractors our prices would have to increase as we would have to engage more staff and buy more infrastructure. We require them to be GDPR compliant and enter data processor contracts with us or ensure their contracts make appropriate statements.
We share personal data with our designated delivery service so we can get the brochure, materials or products delivered to you. We will communicate who they are at the time they are going to deliver.
We use an external email provider which we use so we can confirm your request or order by email and handle any enquiries. They are a data processor for this purpose but also their own data controller.
OPTISOFT: Patient record programme, used for payments, patient records, emailing & texting. BAUSCH & LOMB, COOPERVISION, JOHNSON & JOHNSON and ALCON: Contact lens providers, they deliver contact lenses to us for patients.
We analyse your use of the site and products you buy or view so we can promote similar or related products, sites or services to you.
The following is a list of the outside parties we use:
Worldpay, Royal Mail, Optisoft, Robert S Boys, Essilor, A&J Brown, Presteven Limited, Medisoft Online Portal, Spa Medica, Arrowe Park Hospital, Spire Murrayfield Hospital, Bausch & Lomb, Johnson & Johnson, Alcon, Coopervision, NHS WIRRAL, NHS CCG, NHS ENGLAND.
We may also share your data with other relevant parties where it is relevant to the fulfilment of the contract.
Who else we share your personal data with for legitimate interest reasons
We share your personal data with the following parties for reasons of legitimate interest:
- we use a cloud based Customer Relationship Management software which means your personal data is on their cloud servers as our data processor.
- we use an outside party to bill and collect.
- we use agents, advisers or others involved in running accounts and services for you and your business or collecting what you or your business owe;
- we use Third party vendors who help us to manage and maintain the IT infrastructure, website, and linked services;
- we use Logistics and delivery providers who enable us to deliver brochures, materials or products you request or order on our websites;
- we use professional advisors, such as lawyers, accountants, debt collectors and consultants;
Worldpay, Royal Mail, Optisoft, Robert S Boys, Essilor, A&J Brown, Presteven Limited, Medisoft Online Portal, Spa Medica, Arrowe Park Hospital, Spire Murrayfield Hospital, Bausch & Lomb, Johnson & Johnson, Alcon, Coopervision, NHS WIRRAL, NHS CCG, NHS ENGLAND.
We may also share your data with other relevant parties where it is relevant to the fulfilment of the contract.
Cookie Policy
Special Category Data
We collect Sensitive or Special Category Personal data of the type set out below and the reasons for its necessity:
- about your mental and/or physical health. We need this information so we can test eyes and assess health, for any spectacles, making health referrals and in diagnosing any health issues (such as cataracts, diabetes, glaucoma, macular degeneration etc). We may share this information (only with patient consent) with your doctor or another medical professional. If you are unable to give your consent we will not be able to do a comprehensive sight test and eye health checks or any referrals for treatment.
We require these details in order to ensure we provide you with the correct goods ordered.
Adding Data Together
We aggregate the following data we collect from different sources and put it together:
- any paper based documents you have or do provide us with
- data you provide over the telephone (including any text or other messages),
- data you provide over email
- the information you provide over social media
- the information you provide in person
and other sources.
Retention of Data
We will keep your data for 7 years after the year you request or order it so we can comply with contract law issues, product liability issues, insurance issues, company law obligations, record keeping for accounting and tax audits. If there are any complaints or questions on product liability or insurance issues we will keep your data for 6 years after the matter is dealt with. We may hold onto data were there are legal reasons to retain it.
Where we process your personal data to fulfil:
- your request or a contract with you, we will process such personal data until we fulfil that request or contract and for so long thereafter as may be necessary to keep a record of that request or contract, which will typically for a request will be 6 months and for a contract 6 years, and to deal with any complaints or claims relating to that request or contract, which will be until the final resolution of such complaints or claims (having regard to the nature of any potential claims and the limitation of liability periods that apply to them); or
- a legal obligation (such as anti-Money Laundering, tax and accounting obligations), we will process such personal data for so long as necessary to fulfil that obligation; or
Where we process your personal data based on:
- our legitimate interest, we will process such personal data for so long as necessary to achieve that legitimate interest, which will typically be for 6 years after we collect your personal data or the last time we use your personal data (or longer in relation to any legal claims that might arise having regard to the nature of any potential claims and the limitation of liability periods that apply to them); or
-your consent, for example, to send you marketing information, we will process such personal data until you withdraw that consent. Please bear in mind that it may take a short time to process any withdrawal of your consent. We aim to do this as soon as reasonable after receipt of your request, although you may still receive emails that are already in process around the time of your withdrawal.
Marketing
We will use your personal data only to market to you inline with your permissions given to us.
- by email. We may promote our products to you by email until you unsubscribe. The unsubscribe option will be present in any marketing email we send. We may send you our marketing by email as you have bought goods from us.
- by telephone. Please help us by telling us of any changes to your contact numbers.
-by text and picture message. Please help us by telling us of any changes to your numbers.
- by post to the address we have at any time
We may send you offers from selected third parties from time to time if you have given us permission. You can withdraw your consent at any time.
Your rights regarding your personal information
Data privacy laws provide you with a number of rights over your personal information.
You may be entitled to:
ask us for access to the personal information we hold about you;
request the correction and/or deletion of your personal information;
request the restriction of the processing of your personal information, or object to that processing;
withdraw your consent to the processing of your personal information (where we are processing your personal information based on your consent);
request for the receipt or the transfer to another organisation, in a machine-readable form, of the personal information that you have provided to us; and
complain to your local data protection authority if your privacy rights are violated, or if you have suffered as a result of unlawful processing of your personal information.
If you would like to exercise your rights, please let us know by getting in touch with us as set out in the Contact us section below.
Change of Purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Contact Us
If you have any questions please contact us:
By Postal address: 255 Hoylake Rd, Greasby, Wirral, CH46 0SL
You can contact Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Telephone: 0303 123 1113 Fax: 01625 5245