Privacy Policy

Your privacy matters to us. Learn how we collect, use, and protect your personal information.

Last updated: 8th May 2026

EyeCare Solutions Ltd ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using EyeCare Solutions Ltd services, you consent to the practices described in this Privacy Policy. If you do not agree with the terms of this privacy policy, please do not access or use our website or services.

Information We Collect

Personal Information

We may collect personal information that can be used to identify or contact you, including:

  • Name and contact details (email address, phone number, postal address)
  • Payment information (processed securely through third-party payment processors)
  • Account credentials and login information
  • Communication records (emails, chat logs, support tickets)
  • Demographic information (age, gender, location - when provided voluntarily)

Technical Information

We automatically collect certain technical information when you visit our website:

  • IP address and geolocation data
  • Browser type, operating system, and device information
  • Pages visited, time spent, and click patterns
  • Referring website and search terms used
  • Cookies and similar tracking technologies

Sensitive Information

We may collect sensitive information in specific contexts:

  • Health-related information related to eye health concerns
  • Feedback about product effectiveness and user experience
  • Information about medical conditions (when voluntarily provided)

Important: We never collect sensitive medical information without your explicit consent, and such information is always handled with additional security measures.

How We Use Your Information

We use your personal information for various purposes in accordance with applicable data protection laws:

Service Provision

  • Processing orders and delivering products
  • Providing customer support and technical assistance
  • Managing your account and preferences
  • Communicating about your orders and services

Communication

  • Sending order confirmations and shipping updates
  • Providing customer support responses
  • Sending newsletters and marketing communications (with consent)
  • Important service announcements and updates

Improvement & Analytics

  • Analyzing website usage and user behavior
  • Improving our products and services
  • Conducting research and development
  • Personalizing your website experience

Legal & Security

  • Complying with legal obligations
  • Protecting against fraud and security threats
  • Enforcing our terms and conditions
  • Responding to legal requests and investigations

Legal Basis for Processing

We process your personal information based on the following legal grounds under UK GDPR:

  • Contractual Necessity: To fulfill our contractual obligations to you
  • Legitimate Interest: For purposes that are necessary for our legitimate business interests
  • Consent: When you have given explicit consent for specific processing activities
  • Legal Obligation: To comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We share information with trusted third-party service providers who assist us in operating our website and conducting our business:

  • Payment Processors: To process payments securely (Stripe, PayPal)
  • Shipping Services: To deliver orders (Royal Mail, DHL, UPS)
  • Email Services: To send communications (Mailchimp, SendGrid)
  • Analytics Providers: To analyze website usage (Google Analytics)
  • Customer Support: To provide support services (Zendesk, Intercom)

Legal Requirements

We may disclose your personal information when required by law or to protect our rights:

  • To comply with legal processes and government requests
  • To protect our rights, privacy, safety, or property
  • To prevent or investigate potential wrongdoing
  • To protect users from harm or fraud

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to opt out.

Data Security Measures

We implement comprehensive security measures to protect your personal information:

Encryption

All data transmitted between your browser and our servers is encrypted using SSL/TLS protocols. Sensitive data is encrypted at rest using industry-standard encryption methods.

Access Control

Access to personal information is restricted to authorized personnel who require it for legitimate business purposes. All employees undergo privacy training.

Secure Infrastructure

Our servers are hosted in secure data centers with 24/7 monitoring, firewalls, and intrusion detection systems.

Regular Updates

We regularly review and update our security measures to address emerging threats and maintain compliance with industry standards.

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

  • Account Information: Retained while your account remains active
  • Order Information: Retained for 7 years for tax and legal purposes
  • Marketing Communications: Retained until you unsubscribe
  • Support Tickets: Retained for 3 years for quality assurance

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze website usage:

Types of Cookies

Essential Cookies

Required for basic website functionality, including security, user authentication, and shopping cart features.

Performance Cookies

Collect information about how visitors use our website, helping us improve performance and user experience.

Functional Cookies

Remember your preferences and choices to provide personalized features and a more convenient experience.

Marketing Cookies

Used to deliver relevant advertisements and track marketing campaign effectiveness (with your consent).

Managing Cookies

You can control cookies through your browser settings:

  • Accept or reject cookies through our cookie consent banner
  • Configure your browser to block or delete cookies
  • Review cookie settings in your browser preferences

Note: Disabling essential cookies may affect website functionality and your ability to use certain features.

Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal information:

Right to Access

You can request a copy of the personal information we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal information.

Right to Erasure

You can request deletion of your personal information in certain circumstances.

Right to Restrict Processing

You can request restriction of processing in specific situations.

Right to Data Portability

You can request transfer of your data to another service provider.

Right to Object

You can object to processing based on legitimate interests.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

  • Email: [email protected]
  • Phone: +44 20 7946 0958
  • Post: EyeCare Solutions Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

We will respond to your request within 30 days, unless additional time is required to comply with your request.

International Data Transfers

Your personal information is primarily processed within the United Kingdom. However, we may transfer data to other countries in the following circumstances:

  • When using international service providers (e.g., US-based email services)
  • When required for order fulfillment and shipping
  • When accessing our services from outside the UK

Protection Measures

When transferring data internationally, we ensure appropriate safeguards are in place:

  • Using service providers with GDPR-compliant data protection standards
  • Implementing Standard Contractual Clauses (SCCs) where required
  • Ensuring recipients provide adequate protection for your data

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our systems.

If we become aware that we have collected personal information from children without verification of parental consent, we take immediate steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations.

Notification of Changes

We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notification to registered users
  • Displaying a prominent notice on our website

Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.

Contact Us for Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Data Protection Officer

Email: [email protected]

Phone: +44 20 7946 0958

Address: EyeCare Solutions Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

Complaints

If you believe we have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):