Privacy Policy

Dry Eye Treatment Centre 

Last updated: January 2026

Dry Eye Treatment Centre (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with us, including when you visit our website, contact us, or receive treatment at our clinic. 

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

1. Who We Are 

Dry Eye Treatment Centre is a UK-based specialist clinic providing assessment and treatment for dry eye disease and related conditions. 
For the purposes of data protection law, Dry Eye Treatment Centre is the Data Controller responsible for your personal data.

Contact details:
Email: patient@dryeyetreatmentcentre.co.uk
Telephone: 01858 370115
Address: 37 The Point, Market Harborough, Leicestershire, LE16 7QU 

2. Personal Data We Collect

We may collect and process the following types of personal data:

a) Personal and Contact Information

  • Name
  • Date of birth
  • Address
  • Email address
  • Telephone number

b) Health and Medical Information (Special Category Data)

  • Medical history relevant to eye health
  • Dry eye symptoms and clinical findings
  • Diagnostic images and test results
  • Treatment plans and clinical notes

c) Appointment and Communication Data

  • Appointment dates and attendance
  • Communications with us by phone, email, website forms, or in person

d) Appointment and Communication Data

  • IP address
  • Browser type and device information
  • Pages visited and usage data (via cookies)
3. How We Collect Your Data 

We collect personal data in the following ways:

  • When you book an appointment or complete forms
  • During consultations and treatments
  • When you contact us by phone, email, or website
  • When you use our website (via cookies and analytics tools)
4. How We Use Your Data

We use your personal data to:

  • Provide safe and effective eye care and treatment
  • Maintain accurate medical records
  • Manage appointments and communicate with you
  • Process payments and issue invoices
  • Improve our services and patient experience
  • Comply with legal, regulatory, and professional obligations

We will only use your data where we have a lawful basis to do so.

5. Lawful Bases for Processing 

Under UK GDPR, we rely on the following lawful bases:

  • Provision of healthcare: Processing is necessary for medical diagnosis and treatment
  • Legal obligation: To comply with healthcare and regulatory requirements
  • Legitimate interests: For service improvement and clinic administration
  • Consent: Where required, such as for marketing communications

Special category health data is processed under healthcare and medical purposes exemptions.

6. How We Store and Protect Your Data 

We take data security seriously and use appropriate technical and organisational measures to protect your information, including:

  • Secure practice management systems
  • Password-protected and encrypted digital records
  • Restricted staff access on a need-to-know basis
  • Secure storage of any paper records

We retain your personal data only for as long as necessary and in line with NHS and professional record-keeping guidelines.

7. Sharing Your Data

We may share your personal data only where necessary, including with:

  • Healthcare professionals involved in your care
  • Diagnostic or referral partners (with your consent where required)
  • IT and practice management system providers
  • Regulatory or legal authorities if required by law

We do not sell or rent your personal data to third parties.

8. Cookies and Website Analytics

Our website uses cookies to improve functionality and understand how visitors use our site.

Cookies may collect anonymised information such as pages visited and time spent on the site. You can control or disable cookies through your browser settings.

For more information, please see our Cookie Policy (if applicable).

9. Your Data Protection Rights 

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data (where applicable)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us using the details above. We may need to verify your identity before responding.

10. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Website: www.ico.org.uk
Telephone: 0303 123 1113

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law or our practices. The latest version will always be available on our website and in the clinic.

If you have any questions about this Privacy Policy or how we use your personal data, please contact Dry Eye Treatment Centre directly.