Privacy Policy
This policy explains how Bright Eyes of Cambridge (‘Our Company’) uses the personal data we collect from you, both in person and when you use our website or social media. Our Company reserves the right to make changes to this policy at any time and will post the date of the latest update towards the bottom of this policy. By accessing our website or social media (‘Online Services’), or making a purchase from us, you are consenting to the information collection and use practices described below.
What data we collect
Our Company collects some or all of the following personal data when you engage with us or have your iris photographs taken:
· Name
· Age (if under 16)
· Home town/city
· Telephone number
· Email address
· Address (if your iris photograph is being posted)
· Photographs of your iris or irises
In addition, we may also collect passive information about you when you engage with our Online Services. This may include, but not be limited to the date and time of your visit, the length of your visit, the specific webpages you visited, your IP address, the type of web browser and operating system used, the address of any website that directed you to the Online Services, and information about your mobile device used to access the Online Services (including phone number, operating system details, and any applicable unique identifiers for you or your device, including your devices’ Unique Device Identifier (UDID), any Apple or iOS identifiers (e.g., IDFA or an Advertising Identifier), any Google or Android identifiers (e.g., Android or Google Advertising ID), any Windows identifiers (e.g., Windows Advertising ID), or any other similar identifiers which identify you or your device).
How we collect your data
Our Company collects and processes data when you:
· complete a paper booking form (if visiting us at a stall)
· have a photograph taken of your iris or irises
· email us
· voluntarily complete a customer survey
· engage with our Online Services, via cookies or related technologies
For information on how analytic service providers, including, for example, Google or Facebook, collect and use the information collected, please visit the appropriate data use/privacy policy of these organisations, which govern their use.
Our Company collects your data so that we can:
· process your order
· send you customer satisfaction surveys
· email you with updates or marketing about Our Company
· analyse use of our Online Services
Marketing
If you have agreed to receive our emails, you may always opt out at a later date.
You have the right at any time to stop Our Company from contacting you for marketing purposes.
Our Company does not share your data with any other organisation at any time, unless for legal compliance.
Legal compliance
Our Company reserves the right to disclose personal information when we reasonably believe disclosure is required by law, if we reasonably believe disclosure is necessary to establish or exercise legal rights, or in situations involving potential threats to physical safety.
In the event that Our Company is acquired by or merged with a third-party, we reserve the right to sell or otherwise transfer any and all information we have collected from you as part of that transaction and such third-party will assume the rights and obligations with respect to that information as described in this Policy or subsequent updates.
Cookies on our website
What are cookies?
Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our website, we may collect information from you automatically through cookies or similar technology. For further information, visit www.allaboutcookies.org
What types of cookies do we use?
Functional – Our Company uses these cookies so that we recognize you on our website and remember any previously selected preferences. These could include what language you prefer and the location that you are in. A mix of first-party and third-party cookies are used.
Advertising – Our Company uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device and your IP address.
How to manage cookies
You can set your browser not to accept cookies and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
Storage of your data
Paper records (booking forms) are stored separately to electronic information and are stored in locked cabinets.
No addresses are stored electronically, unless you have your iris photograph posted, in which case address labels are generated electronically. Downloaded labels are deleted within one month of the item being received.
Names and accompanying email addresses are stored on a password-protected document and are not shared with any other organisation.
The edited iris images and one or more accompanying original photographs are stored electronically. No identifying personal information is directly stored alongside the image, other than when you have requested your name to be shown on the image.
Duration of storage of your data
If you have your iris photo taken:
Your personal data will be stored for a period of no more than five years. If you have made no further contact with us during this period, most of your data will then be deleted within three months and any paper records destroyed.
Iris photographs and images may be stored for as long as the company is in operation.
Your name, home town, and the date your photograph was taken, together with an identifying code to link this information to an image, may be stored for as long as the company is in operation. This is to ensure that if you get back in touch at a later date, for example to order a further copy of your image, we can identify the correct image.
If you send a general email enquiry only:
We will send you the required information and store the data that you send us as part of this enquiry.
If you do not go on to communicate with us or to make a booking, we will send a follow up courtesy email at some point.
Unless you respond to this follow up enquiry, we will then remove all of your data between four and eight weeks after this courtesy email has been sent.
Your data protection rights
Our Company would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to be informed – you have the right to be told what data Our Company holds about you and what we do with it. This policy details this information. You also have the right to be informed should there be a security breach involving your personal data.
The right to access – you have the right to request Our Company for copies of your personal data. We may charge you a small fee for this service.
The right to rectification – you have the right to request that Our Company correct any information that you believe is inaccurate. You also have the right to request that Our Company completes any information that you believe is incomplete.
The right to erasure – you have the right to request that Our Company erase your personal data, under certain conditions.
The right to restrict processing – you have the right to limit what data Our Company uses.
If you make a request, we have one month to respond to you.
Privacy policies of other websites
Our Company website contains a link to a third-party website. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
Changes to our privacy policy
Our Company keeps its privacy policy under regular review (minimum 4x per year) and keeps the updated policy on our website. This privacy policy was last updated on 2nd January 2025 and last checked for accuracy on 2nd January 2025.
How to contact us
If you have any questions about Our Company’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us by email: contact@brighteyesofcambridge.uk
How to contact the appropriate authority
Should you wish to report a complaint or if you feel that Our Company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office https://ico.org.uk/make-a-complaint/
