Privacy Policy

Glasgow Eye Clinic

Last updated: 15/09/2026


1. Who we are

Glasgow Eye Clinic (“we”, “us”, “our”) is a private ophthalmology clinic based at 224 Ayr Road, Newton Mearns, Glasgow, G77 6DR.

We are the data controller for the personal information described in this policy. This means we decide how and why your information is used.

Company registration number: SC601835

Contact for data protection matters: Email: info@glasgoweyeclinic.co.uk


2. What information we collect

Information you give us

  • Contact details — your name, email address, telephone number and postal address.
  • Enquiry details — the service you are interested in and anything else you choose to tell us when you contact us.
  • Appointment details — dates, times and the reason for your visit.
  • Payment information — we take payment for consultations and procedures. Card details are processed by our payment provider and are not stored by us.

Health information

If you become a patient, we record clinical information about you. This includes your medical history, examination findings, test results, diagnoses, treatment provided and correspondence with other healthcare professionals such as your GP or optometrist.

Health information is treated as “special category data” under data protection law and is given additional protection.

Information we collect automatically

When you visit our website we may collect technical information such as your IP address, browser type, device type and the pages you view. This is described further in the Cookies section below.


3. Where we collect it from

  • Directly from you — in person, by telephone, by email, or through forms on our website.
  • Through social media advertising. If you complete an enquiry form within a Facebook or Instagram advert, Meta passes us the details you submitted. Meta’s own handling of that information is governed by its privacy policy at https://www.facebook.com/privacy/policy.
  • From your GP, optometrist or another healthcare professional who refers you to us.
  • From your insurer, where your treatment is funded through a private medical insurance policy.

4. Why we use it, and our lawful basis

Data protection law requires us to have a lawful basis for using your information.

What we do Why Lawful basis
Respond to your enquiry and arrange an appointment To answer your question and book you in Steps taken at your request prior to entering a contract
Provide eye care and treatment To deliver the healthcare you have come to us for Contract; and for health information, provision of healthcare by or under the responsibility of a health professional
Keep clinical records Professional and legal obligations that apply to healthcare providers Legal obligation; and for health information, provision of healthcare and management of health services
Take payment and keep financial records To be paid, and to meet tax and accounting requirements Contract; legal obligation
Handle complaints or legal claims To investigate and respond Legitimate interests; establishment or defence of legal claims
Send you marketing about our services To let you know about services that may interest you Consent
Measure how our website and adverts perform To understand what is working and improve Consent, where this involves non-essential cookies

You can withdraw consent at any time. Withdrawing consent does not affect anything we did before you withdrew it.


5. Who we share it with

We do not sell your information. We share it only where necessary:

  • Your GP or referring optometrist, where this is part of your care. We will discuss this with you.
  • Other healthcare providers, such as a hospital or laboratory, where your treatment requires it.
  • Your insurer, where your treatment is being funded by a private medical insurance policy.
  • Our service providers, including our IT and website providers, appointment and records systems, and payment processor. These organisations act on our instructions and may only use your information for the purposes we specify.
  • Regulators, professional bodies or legal authorities, where we are required to do so by law or by professional obligation.

6. Cookies and website tracking

Our website uses cookies. Essential cookies are needed for the site to function and are always active.

We also use non-essential cookies, including the Meta pixel. This is a piece of code provided by Meta Platforms that tells us when someone who saw one of our adverts visits our website, and allows us to show adverts to people who have visited before. It does not tell us who you are by name.

Non-essential cookies are only set if you consent to them through the cookie banner shown when you first visit the site. You can change your choice at any time using the cookie settings icon on the website.


 

7. Your rights

You have the right to:

  • Be told how your information is used — this policy.
  • Access a copy of the information we hold about you.
  • Correct information that is inaccurate or incomplete.
  • Erase information, in some circumstances. This right is limited where we are required to keep clinical records.
  • Restrict how we use your information, in some circumstances.
  • Object to us using your information, including for direct marketing. If you object to marketing, we will stop.
  • Portability — receive certain information in a machine-readable format.
  • Withdraw consent, where we relied on your consent.

To exercise any of these rights, contact us using the details in section 1. We will respond within one month. There is normally no charge.

 


 

8. Transfers outside the UK

Some of our service providers, including Meta Platforms, process information outside the United Kingdom. Where information is transferred outside the UK, we rely on safeguards approved under UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision covering the destination country.

 


9. How long we keep it

  • Enquiries that do not lead to an appointment up to 12 months from your last contact with us.
  • Financial records six years from the end of the relevant financial year, to meet HMRC requirements.
  • Marketing consents until you withdraw consent, and a record of the withdrawal after that.
  • Clinical records retained in line with professional guidance applying to healthcare records. If you would like to know the period that applies to your records, please contact us.

 


10. Complaints

If you are unhappy with how we have handled your information, please tell us first so we have the chance to put it right.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
www.ico.org.uk

 

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change we will make that clear on our website.