Privacy policy

Who we are

Sapphire Trading Limited, trading as Arthur Morrice Opticians, 11 Beauchamp Place, Knightsbridge, London, SW3 1NQ, is responsible for your personal information. We're the "data controller". Company number: 06439747. ICO registration number: ZC209348.

Email: sw3@arthur-morrice.com
Telephone: 07948 347394

What this policy covers

This policy covers your personal information when you visit our website, buy from us, book an appointment or use our practice for your eye care. Some of this is health information, which has extra protection under UK GDPR.

What we collect and why

Information Why we use it Our legal basis
Name, address, phone, email and contact preferences To manage your care and orders, and to contact you Contract and legitimate interests
Date of birth and other demographic details To identify you and provide suitable care Contract and provision of health care
GP surgery To contact your GP where your care requires it Provision of health care
Sight test type, appointments, recalls and attendance To book your appointments and remind you when a test is due Contract and provision of health care
Eye exams, prescriptions, clinical notes and alerts, and uploaded documents To provide and record your eye care Contract and provision of health care
Family links, such as a husband, wife or child To manage linked appointments and care Legitimate interests
Purchase history, including frames and lenses To supply your order and support aftercare Contract
Messages we send you, including emails, texts and letters To keep a record of our contact with you Legitimate interests
Online order and delivery details To process and deliver your order Contract
Website, device and cookie information To run the website and understand how it's used Consent or legitimate interests, depending on the cookie
Marketing preferences To send marketing you've agreed to receive Consent or legitimate interests

We don't take your full card details. Online payments go through Shopify's secure checkout.

Who we share it with

We share information only where it's needed, or where the law requires it. This can include:

  • Your GP and other health care professionals, including NHS services if you're referred
  • Delivery companies, including Rush and DHL
  • Our insurers and professional advisers
  • The police, regulators or courts, where the law requires it or to prevent fraud or crime
  • A new owner, if all or part of our business is sold

We don't sell your personal information.

Companies that handle data for us

These companies process information on our instructions.

Company What it does Where
Optix Software Ltd Stores and processes our patient records UK
Calendly Online appointment booking United States
Shopify Runs our online shop and checkout Outside the UK, including Canada, Ireland and Singapore
Klaviyo Website sign-up forms and marketing emails United States
Google Website analytics and maps UK, EU, United States and other countries

Where information leaves the UK, we use the protections UK law requires, such as adequacy decisions or standard contract terms.

How we keep it safe

Our patient records are stored and processed by Optix Software Ltd in UK facilities certified to ISO 27001. We only allow the companies listed above to use your information for the purposes we've set out, and on our instructions.

How long we keep it

We keep adult clinical records for 10 years after your last visit, and children's records until their 25th birthday. We keep records of deceased patients for 10 years. We keep order and tax records for 6 years. Messages about your care are kept with your clinical record. Routine reminders, recalls and marketing messages are kept for 2 years. We keep your marketing details until you opt out.

Children

If you book for your child, or manage their care, we'll hold their information in the same way. Please give their details only if you have the right to do so.

Marketing

We'll send marketing only where the law allows it. You can opt out at any time using the link in our emails or by contacting us. We'll still send messages about your care, such as appointment reminders, unless you ask us not to.

Cookies

Our website uses cookies to work properly, and with your consent where required, to understand how it's used and support our marketing. You can manage cookies through your browser or our cookie banner.

Your rights

You have the right to:

  • See the information we hold about you
  • Correct information that's wrong
  • Ask us to delete your information, or restrict how we use it
  • Object to how we use it
  • Ask us to move your information to another provider
  • Withdraw consent where we rely on it

Some of these rights have limits. For example, we may need to keep clinical records even if you ask us to delete them. Please contact us to use any of these rights.

Complaints

If you're unhappy with how we've used your information, please contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We'll publish any changes on this page and update the date at the top.