Privacy Policy
Privacy Policy
Last updated: 27/09/2026
EyeDRATE Clinic ("we", "us", "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make an enquiry, book an appointment or use our services.
EyeDRATE Clinic provides eye wellness and dry-eye symptom support services in Northamptonshire, including assessments and therapies relating to eyelid health, meibomian gland function and tear-film stability.
For the purposes of UK data protection law, EyeDRATE Clinic is the data controller responsible for your personal information.
1. Who we are
EyeDRATE Clinic
Email: info@eyedrateclinic.co.uk
Telephone: 07356 252537
Our clinic locations include:
Oxford Street Therapy Centre
18 Oxford Street
Wellingborough
NN8 4HY
Chemist Near Me
52 Gloucester Avenue
Northampton
NN4 8QF
If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above.
2. Information we collect
Depending on how you interact with us, we may collect the following information:
Information you provide to us
This may include:
Your name
Telephone number
Email address
Appointment and booking information
Information contained in enquiries or messages you send to us
Information about your symptoms and eye comfort
Information about contact lens use, screen use and relevant eye or health history
Information provided during an assessment or therapy session
Treatment or session notes
Payment and transaction information
Any other information you choose to provide to us
Some information relating to your health may constitute special category data under UK data protection law and is subject to additional legal protections.
Information collected automatically
When you visit our website, certain technical information may be collected automatically, depending on the cookies and technologies used on the website. This may include:
IP address
Browser type and version
Device information
Operating system
Pages visited
Date and time of visits
Referring website
General website usage information
We only use non-essential cookies or similar technologies where the applicable legal requirements have been satisfied.
3. How we use your information
We may use your personal information to:
Respond to enquiries and messages
Arrange and manage appointments
Provide assessments and therapy sessions
Understand your symptoms and individual requirements
Maintain appropriate client and treatment records
Provide personalised information and recommendations relating to our services
Process payments
Communicate with you about appointments
Send appointment reminders where appropriate
Respond to questions or requests
Manage our business and maintain appropriate records
Improve our website, services and customer experience
Meet legal, regulatory, accounting and insurance requirements
Protect the security of our website, business, clients and staff
Establish, exercise or defend legal claims where necessary
We will only use your personal information for purposes that are compatible with applicable data protection law.
4. Health information
Because of the nature of our services, we may need to collect information relating to your eyes, symptoms, medical history or other health information.
Health information is considered special category personal data under the UK GDPR and receives additional protection.
We will only process health information where we have a lawful basis under Article 6 of the UK GDPR and an appropriate condition for processing special category data under Article 9 and the Data Protection Act 2018, where required.
We aim to collect only the health information that is reasonably necessary for the purposes for which it is being processed.
We will take appropriate measures to protect health information against unauthorised access, loss, misuse or disclosure.
5. Our lawful bases for using personal information
Depending on the circumstances, we may rely on one or more of the following lawful bases:
Performance of a contract
We may process your information where it is necessary to provide services you have requested, manage your appointment or fulfil an agreement with you.
Legal obligation
We may process personal information where this is necessary to comply with a legal or regulatory obligation.
Legitimate interests
We may process information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
For example, this may include managing our business, maintaining appropriate records, protecting our systems and improving our services.
Consent
Where required, we may ask for your consent before processing certain information or using your information for a particular purpose.
Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Health and special category information
Where we process health information or other special category data, we will also identify and rely on an appropriate Article 9 condition under UK data protection law.
6. Who we may share your information with
We do not sell your personal information.
We may share information where reasonably necessary with trusted third parties who help us operate our business or provide our services.
These may include:
Website hosting and website technology providers
Appointment and booking providers
Payment service providers
Email and communication providers
IT and cloud storage providers
Professional advisers such as accountants, insurers, legal advisers or other professional consultants
Service providers who assist us with website security, maintenance or administration
Healthcare or other professionals where appropriate and lawful
Regulatory, governmental, law-enforcement or other authorities where we are legally required to do so
Where another organisation processes personal information on our behalf, we will take appropriate steps to ensure that it provides appropriate security and confidentiality.
Important: You should add the names of your actual booking, payment, email, cloud-storage and website/analytics providers here before publishing this policy.
7. International transfers
Some of the service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your information receives an appropriate level of protection under applicable data protection law.
Where required, we will use appropriate safeguards for international transfers, such as UK adequacy regulations, international data transfer agreements or other legally recognised safeguards.
8. How long we keep your information
We will only retain personal information for as long as it is reasonably necessary for the purposes for which it was collected, including to meet legal, regulatory, accounting, insurance and reporting requirements.
Different types of information may therefore be retained for different periods.
For example:
Enquiry information may be retained for as long as reasonably necessary to deal with the enquiry and maintain appropriate business records.
Appointment and client records may be retained for an appropriate period following your last interaction with us.
Financial and transaction records may be retained where required by tax, accounting or other legal requirements.
Marketing information will generally be retained until you unsubscribe or it is otherwise no longer required.
We periodically review the information we hold and securely delete or anonymise information when it is no longer required.
Before publishing: EyeDRATE should insert its actual retention periods or a more specific retention schedule where appropriate, particularly for client/health records.
9. Keeping your information secure
We take reasonable and appropriate technical and organisational measures to protect your personal information.
These measures may include:
Access controls
Password protection
Secure systems and devices
Appropriate staff access restrictions
Secure storage
Regular review of information held
Appropriate procedures for handling personal information
Measures designed to protect information against accidental loss, destruction, misuse or unauthorised access
No method of transmitting or storing information electronically can be guaranteed to be completely secure. However, we take reasonable steps to protect your information.
10. Cookies
Our website may use cookies and similar technologies.
Cookies are small files placed on your device that can help a website function, remember preferences, understand website usage or provide other functionality.
Some cookies may be strictly necessary for the website to operate.
Where cookies are not strictly necessary, we will obtain consent where required by applicable law.
You can manage cookies through your browser settings and, where provided, through our website's cookie consent mechanism.
For further information, please see our Cookie Policy.
Important: Your Cookie Policy should be checked against the actual cookies installed on the EyeDRATE website, particularly any analytics, advertising, embedded booking, payment, Google, Meta or other third-party services.
11. Marketing communications
We may contact you about our services where permitted by applicable law.
Where we are required to obtain consent before sending marketing communications, we will ask for that consent.
You can unsubscribe from marketing communications at any time by following the unsubscribe instructions in the relevant communication or by contacting us.
We will not make it unnecessarily difficult for you to withdraw consent or opt out.
12. Your data protection rights
Under UK data protection law, you may have rights including:
The right to be informed about how your personal information is used
The right to access personal information we hold about you
The right to request correction of inaccurate or incomplete information
The right to request deletion of your information in certain circumstances
The right to request restriction of processing in certain circumstances
The right to object to certain processing
The right to data portability in certain circumstances
Rights relating to automated decision-making and profiling, where applicable
The right to withdraw consent where we rely on consent
These rights are subject to certain legal conditions and exemptions, so they may not apply in every circumstance.
To exercise your rights, please contact:
We may need to verify your identity before fulfilling certain requests.
13. Complaints
If you have concerns about the way we use your personal information, please contact us first so that we can try to resolve your concern.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
The ICO's website is:
14. Third-party websites
Our website may contain links to websites operated by third parties.
We are not responsible for the privacy practices, content or security of third-party websites.
We recommend that you read the privacy policy of any third-party website before providing personal information.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or the way we process personal information.
When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.
We recommend that you review this page periodically.
16. Contact us
If you have questions about this Privacy Policy, how we use your information, or your data protection rights, please contact:
EyeDRATE Clinic
Email: info@eyedrateclinic.co.uk
Telephone: 07356 252537
Last updated: [INSERT DATE]