- Information about us
- What personal information do you collect?
- How and why do we use your personal data?
- How long do you keep my information for?
- Who do you share personal information with?
- How do you process my personal information?
- How can I update or change my personal information
- What rights do I have?
- What choices do I have?
- Protecting personal information
- Contact us
I am a store customer or I use the Specsavers website
- Specsavers Espana Limited (a company registered in Guernsey with company number 44132 and its registered office is La Villiaze, St Andrews, Guernsey, GY6 8YP).
- Specsavers Optical Group Limited (a company registered in Guernsey with company number 12294 and its registered office at La Villiaze, St Andrews, Guernsey, GY6 8YP).
- Specsavers España Franchisor SL (a company registered in Spain with VAT number B8453629 and registered office at C/ Pradillo 5, ground floor right door, 28002, Madrid, Spain).
- Each company running the Specsavers stores in Spain. Details of each store company are available in the relevant store.
Specsavers Group and the corresponding Specsavers store(s) are data controllers of your personal information for the purposes of any data-protection legislation that applies. For the purposes of data protection, Specsavers has a nominated person within the European Union. This is our Data Protection and Privacy Manager based in Denmark. You can contact them via firstname.lastname@example.org.
We may collect and process information about you including:
- your name;
- your date of birth;
- your contact phone numbers (including mobile);
- your email and postal address;
- your relevant health details including (a) current and past eye health conditions, general health conditions and glasses, contact-lens prescriptions, (b) current medication details, and (c) correspondence between your optometrist and your GP or ophthalmologist;
- your examination and test results;
- your payment details;
- your employment, lifestyle and driving information;
- details of any prescription supplied to you by your healthcare professional or medical practitioner;
- information that you provide by filling in forms on our website;
- details of your visit to the website and any transactions you carry out on the website;
- any information or images you give us when you use our virtual try-on technology; and
- any other information you have voluntarily given us.
We mainly collect this information from you when you give it to us voluntarily, but we may also collect it from other sources if it is legal to do so. This includes from healthcare providers, institutions or people you have authorised to provide information on your behalf (for example, parents or guardians), third-party service providers, government, tax or law-enforcement agencies, and others. We can also combine this information with information from public sources.
We may also collect personal information about you from your use of other Specsavers Group websites or services.
Your personal data is processed for the following reasons, so that we can provide you with the best possible eye health care and customer experience. Here's how we use your data:
To provide professional eye care services:
- To perform eye examinations so we can understand your eye health and any medical conditions.
- To determine your prescription for eyewear needs and dispense your eyewear aids.
- To book your eye tests.
- To confirm your appointment. We'll send you a confirmation and a courtesy reminder will be sent a short period before the appointment is due.
- To contact you about changes to our service that could affect or inconvenience you.
- To send you eye test reminders. Changes in your eyesight are usually very gradual, so regular eye tests are important.
- To send you eye health communication regarding eye health and vision correction and how you can look after this.
- To send you direct marketing communications about our products, offers and discounts by post, email, sms, telephone and social media. You can opt out of these communications at any time.
- Survey and feedback requests to help us improve our service to you and make our services and products more relevant to you.
For commercial purposes:
- To process any transactions when you purchase our goods and services
- To process your credit/ debit card information when used to pay for our goods and services and dealing with refunds.
- So we can provide our products and services to you.
- To improve our products and services to you, we use data collected through the use of customer surveys, cookies, research and analysis.
- If you are browsing our website, we will not collect any information which will identify you by name. However, we will collect information using cookies or traffic data which uses IP addresses or other numeric identifiers, which analyse how people use our website. See Cookies policy.
- To communicate with you as well as send you healthcare information, details of special offers and discounts relevant to you.
- So we can respond to complaints, queries and any claims made against us.
- To meet our contractual obligations
- To recognise you as being a customer
- Fraud prevention and detection
- Health and safety of members of the public, our staff and our customers
- Corporate requirements including mergers and acquisitions.
To meet our regulatory obligations:
- If you choose to exercise your data rights e.g. a subject access request.
- So we're able to meet our obligations as registered and dispensing optometrists.
- So we can respond to any complaints or claims we receive from regulators or other third parties.
We and other members of the Specsavers Group will keep personal information for as long as is reasonably necessary (or as defined under healthcare laws and regulations which apply) to provide products and services, including aftercare services, and to maintain records as needed to satisfy tax and other legal or regulatory requirements, as well as to protect and defend against claims.
Each Specsavers store is operated by a company. When you place an order for products or services in a store, the data controller of the personal information will be that store. Specsavers Optical Group will process that information, including any health information, on behalf of the store. Specsavers Optical Group also provides and processes IT, marketing and other services for each store and any associated personal information.
We may reveal your personal information to other people, including in the following circumstances.
- We use other organisations to help us process personal information but they are not allowed to use it for other purposes. We may use the information we receive from other organisations to add to and improve our databases of customer details.
- We may reveal personal information to health authorities or national equivalent bodies.
- We may pass personal information to external agencies and organisations, including the police and other law-enforcement agencies to prevent and detect fraud (including fraudulent transactions) and criminal activity. These external agencies may check the information we give them against public and private databases and may keep a record of those checks to use in future security checks.
- If a claim is made, or could be made, against us or other members of the Specsavers Group, we may pass personal information to our insurers.
- If we sell or buy any business or assets, we may reveal personal information about you to the prospective seller or buyer of that business or the assets.
- If we (or substantially all of our assets) are bought or taken over by another organisation (or there is a reorganisation within our corporate group), personal information we hold about customers will be one of the assets transferred.
- We may pass certain personal information to your employer, if you have been referred to us as a corporate eye-care customer.
- We may pass your personal information to others to keep to any legal obligation (including court orders), to enforce or apply our terms and conditions of use of website or other agreements we have with you, or to protect our rights, property and safety or those of our customers, employees or others.
- We may disclose an anonymised version of your email address (we use a process called hashing to protect your details) to third party social media sites such as Facebook to enable us to display marketing to you via such sites. "Hashing" is similar to encryption and means that we scramble the plain text of your email address to create a unique and irreversible message. This means that the social media sites do not receive a plain text version of your email address. Where we do this, we require social media providers only to use your information for the purposes of enabling us to display marketing to you through their site and not for any of their own purposes. You can update your social media privacy preferences on your own social media accounts.
Your personal information may be transferred to, stored and processed in one or more countries outside the European Economic Area (EEA), including Guernsey. Guernsey’s data-protection laws are similar to those in the EU and so these transfers are allowed.
If we transfer your personal information to others outside of the EEA, we take extra steps in line with data-protection laws. These include contract terms approved by the EU Commission with the relevant organisations receiving your personal information, whether members of the Specsavers Group or not.
We also take reasonable steps to make sure your personal information is adequately protected in line with the requirements of the Spanish data-protection law.
You can update or change your personal information at your local Specsavers store or by contacting email@example.com.
You have certain rights under data-protection legislation, including the option to:
- access your personal information – we may charge a fee if we are allowed to do so by law;
- correct your personal information if it is inaccurate or incomplete;
- erase your personal information and prevent further processing in specific circumstances and where there is no other legal reason for us to continue keeping or processing that information. These include for example:
- if the personal information is no longer needed in relation to the purpose for which it was originally collected or processed;
- if you withdraw your permission;
- if you object to us processing your personal information;
- if you ask us to stop processing your personal information (although we are entitled to store your personal information, we cannot further process it if you ask us not to);
- if we move or transfer your personal information to another organisation; and
- if you object to us processing your personal information in the following circumstances.
- if processing is based on legitimate interests or carrying out a task in the public interest or when exercising an official authority.
- if information is processed for direct marketing.
- if information is processed for purposes of scientific or historical research and statistics.
To ask for any of the above rights, please contact your Specsavers store or firstname.lastname@example.org.
You have a right to complain to the Office of the Information Commissioner. They can investigate whether organisations are keeping to data-protection law. See www.aepd.es/es
We may use your personal information to contact you about our products and services.
If you do not want to receive marketing material, including special offers and discounts you can let us know in store or by emailing email@example.com.
You can choose to stop receiving marketing emails from us by following the unsubscribe link and instructions on the marketing emails we send you.
We use a variety of security technology and procedures to help protect your personal information from unauthorised access and use. Examples of these are shown below.
- Encryption, meaning that information is hidden so that it cannot be read without special knowledge (such as a password). This is done with a secret code or what’s called a ‘cypher’. The hidden information is said to then be ‘encrypted’.
- Using a different name for you so we can hide parts of your personal information from view.
- Controlling access to systems and networks as this allows us to stop people who are not allowed to view your personal information from getting access to it.
- Training our staff so we make them aware of how to handle information and how and when to report when something goes wrong.
- Regular testing of our technology and ways of working, including keeping up to date on the latest security updates.
We have no control over the contents of other websites or resources which are linked to our website. We accept no responsibility for them or the privacy practices they use, or for any loss or damage that may arise from you using those websites or resources.
Last updated 30/07/2021
© Specsavers 2021. All rights reserved.
See our Intellectual property rights policy which applies to all trademarks and copyright material.