Who we are

This website, olearyopticians.co.uk, is operated by C.R. Optometrists Ltd, trading as C N O’Leary Optometrist, of 17 Cowbridge Road, Pontyclun, Rhondda Cynon Taff, CF72 9EA (“we”, “us”). We are the data controller for the personal information described in this policy.

You can contact us about anything in this policy by phone on 01443 223 712, by email at [email protected], or by post at the address above.

The short version

We collect only the information we need to look after your eyes and hearing, to respond when you contact us, and to run this website. We do not sell your information to anyone. We only send you marketing if you ask us to, and you can opt out at any time.

What we collect and why

When you contact us or request an appointment

Our contact and appointment forms collect your name, how to reach you (phone or email), and the details of your enquiry or appointment request – and, optionally, your date of birth, which helps us match you to your patient records. We use this information to respond to you and to arrange your appointment. The legal basis is taking the steps you have requested as part of providing you with care and services, and our legitimate interest in responding to enquiries.

When you sign up for news and offers

If you opt in to our newsletter, we collect your name and email address and use them to send you occasional news and offers. The legal basis is your consent. Every email includes an unsubscribe link, and you can also unsubscribe by contacting us.

When you visit our practice

As a healthcare provider we keep patient records, including clinical details of your eye examinations and any treatment or referrals. These records are kept securely, are subject to professional confidentiality, and are retained in line with clinical record-keeping requirements. Where you receive NHS-funded services, we share the details necessary to administer those services with NHS Wales.

When you browse this website

Like most websites, we use a small number of cookies and similar technologies, managed through the consent banner you see on your first visit. Our website also uses Cloudflare Turnstile to protect our forms from spam (which processes technical information such as your IP address) and embeds a Google map on our contact pages. For full details, including how to change your choices, see our cookie policy.

Who we share information with

We never sell your personal information. We share it only with:

• Service providers who help us run this website and our practice (such as our website hosting and email services), who may only use it on our instructions
• NHS Wales, where needed to provide and administer NHS-funded services
• Healthcare professionals, such as your GP or a hospital specialist, where you are referred for further care
• Amplify Hearing, who provide hearing care services at our practice – if you book a hearing appointment through their website, Amplify act as controller of that information under their own privacy policy

How long we keep your information

We keep personal information only as long as we need it. Enquiries are kept for as long as needed to deal with them and for a reasonable period afterwards. Newsletter details are kept until you unsubscribe. Patient records are retained in line with professional and legal record-keeping requirements for optical records.

Your rights

Under UK data protection law you have the right to ask us for a copy of your personal information, to have it corrected or (in some circumstances) deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where consent is our basis for using it. To exercise any of these rights, just contact us using the details above.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113 – though we would welcome the chance to put things right first.

Security

We take appropriate technical and organisational measures to protect your information, including secure connections to this website (HTTPS), access controls, and security monitoring.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date at the top.