PRIVACY NOTICE FOR PATIENTS OF MAYER & MAYER OPTOMETRISTS
Why we collect and
process your personal data
Mayer & Mayer Optometrists is a registered data
controller. This privacy notice sets out
We collect and process patients’ personal data for the
purposes of healthcare.
Our legal bases for processing personal data for healthcare
purposes, including appointment reminders, include public task or legitimate
When we provide services under the NHS General
Optical Services contract (such as a sight test funded by the NHS), our legal
basis for processing personal data in respect of that service is public task.
Otherwise our legal basis is legitimate
Our condition for processing special category data is the
provision of health or social care.
The data we may
collect and process
The personal data of patients that we may collect and
Your name, contact details and personal
identifiers (such as date of birth and NHS number)
Your general and ocular health history, your
family medical and ocular history, and any relevant signs or symptoms you tell
Details of medicines, spectacles and contact
lenses prescribed for you
Details of examinations and other healthcare
checks and treatments we provide
Information relevant to your continued care from
other people who care for you or know you well, such as other health
professionals and relatives
How we hold and share
your personal data
We process your personal data in the strictest
confidence. We keep your personal data
securely in our filing and electronic systems.
Patient records are only accessible to the healthcare professionals
working at the practice and those under their supervision.
We will usually keep any personal data we hold about you for
ten years after our last contact with you before we delete it. This is the period recommended as good
practice by the College of Optometrists.
If we collected the data when you were aged under 18, we will keep it
until your 25th birthday, in line with NHS requirements. In exceptional cases we may need to retain
personable data for a longer period, and will explain our reasons for doing so
In the course of processing your personal data we may share
The healthcare professionals working at this
practice and those under their supervision
Healthcare professionals and those under their
supervision at other optical practices, but only if you have specifically asked
us to pass your personal data (such as prescription) to them
Your GP, ophthalmologists and other healthcare
providers and commissioners, and suppliers of optical appliances or similar
products, in connection with your ongoing healthcare treatment
Financial institutions so that we can arrange
payment for services provided to you.
You have legal rights in respect of the personal data we
hold about you. The Information
Commissioner’s Office (ICO) whose details are below, has published guidance on the full range of rights. The rights
that are most relevant to the way in which we use your personal data include:
The right to be informed about how we use
personal data – this privacy notice gives that information.
The right to object – if you object to us
processing your data for healthcare purposes where our legal basis is
legitimate interests (see ‘why we collect and process your personal data’,
above) we will then stop doing so, unless we are processing the data in respect
of a legal claim or can otherwise show that our legitimate interest in
processing the data overrides your rights and interests
The right of access – if you ask us for the
personal data we hold about you we will provide it within a month, free of
charge (unless we have already provided it to you, in which case we may have to
charge you the administrative cost of providing it again)
The right to rectification – if you ask us to
correct personal data about you that is inaccurate or incomplete, we will do so
within a month (unless we need longer, in which case we will discuss this with
The right to erasure – also known as ‘the right
to be forgotten’. If you ask us to
delete your personal data, we will do so if there is no compelling reason to
continue processing the data. We will
not usually delete healthcare data before our usual time limit (see ‘how we
hold and share your personal data’ above) where we have a duty to keep accurate
records – for example, to comply with a legal obligation, or in connection with
a legal claim. If you ask us to delete
such data we will discuss this with you.
Contacting us and the
ICO about your personal data
Please speak to us first if you have any questions or
concerns about the way in which we process personal data. Telephone 01704 532367 or email firstname.lastname@example.org or write to us
at Mayer & Mayer Optometrists, 7 Grange Road, Southport, Merseyside PR9
You have the right to complain to the ICO if you have a
concern about our handling of your personal data which you do not think we can
resolve. You can contact the ICO at https://ico.org.uk or telephone them on 0303 123 1113.
Mayer & Mayer
The pages on the Mayer & Mayer Optometrists website
(‘’the Website’’) are published by Mayer & Mayer Optometrists Ltd. , a
company registered in England and Wales with company registration number
05419445, whose registered address is at 7 Grange Road, Southport, Merseyside
Mayer & Mayer Optometrists respect your right to privacy
and will process personal information you provide only in accordance with the
General Data Protection Regulation (GDPR).
collected and how it is used
Mayer & Mayer Optometrists will not collect any
information about individuals, except where it is specifically and knowingly
provided by them.
Third-party use of
Except as described above, Mayer & Mayer Optometrists
will not disclose, sell or rent your personal information to any third party.
However, if a third party acquires all (or substantially
all) of Mayer & Mayer Optometrists’s business and/or assets, Mayer &
Mayer Optometrists may disclose your personal information to that third party
in connection with the acquisition.
Mayer & Mayer Optometrists may disclose your information where
required to do so by applicable law, by a governmental body or by a law enforcement
Whilst Mayer & Mayer Optometrists take appropriate
technical and organisational measures to safeguard the personal information
that you provide, no transmission over the internet can ever be guaranteed
secure. Consequently, please note that
the security of any personal information that you transfer over the internet to
Mayer & Mayer Optometrists cannot be guaranteed.
Third party sites
The Website may contain links to other websites operated by
third parties. Please note that this
privacy notice applies only to the personal information that Mayer &
Mayer Optometrists collect through the Website and Mayer & Mayer
Optometrists cannot be responsible for personal information that third parties may
collect, store and use through their website.
You should always read the privacy statement of each website you visit