top of page
logo

Privacy Policy

Last Updated 30/07/2026

RevolutionEyes respects your privacy and is committed to protecting your personal information. This notice explains how we collect, use, store and share your information when you:

  • Visit the RevolutionEyes website;

  • Contact us with an enquiry;

  • Book or receive our services;

  • Attend an assessment or treatment appointment;

  • Communicate with us as a patient, prospective patient, representative or healthcare professional; or

  • Subscribe to communications from us.

This notice also explains your rights under UK data-protection law.

Who we are

RevolutionEyes provides private, optometrist-led ophthalmic assessment and treatment services in Scotland.

For the purposes of UK data-protection law, the data controller is:

Legal name: REVOLUTIONEYES LTD
Trading name: RevolutionEyes
Registered or principal address: 39 Semphill Gardens, G74 3UH, Glasgow, Scotland
Company number: SC805111
Email: hello@revolutioneyes.uk
Telephone: 07380903272

The data controller determines why and how personal information is used. Questions about this notice or the use of your information should be sent using the contact details above.

Information we collect

Depending on how you interact with us, we may collect the following information.

Identity and contact information

This may include your:

  • Name;

  • Date of birth;

  • Postal address;

  • Email address;

  • Telephone number;

  • Preferred method of contact; and

  • Emergency contact or representative details.

​

Health and clinical information

​

If you make a clinical enquiry, arrange an assessment or receive care from us, we may collect information concerning your health, including:

  • Ocular and general medical history;

  • Current symptoms and diagnoses;

  • Medication and allergy information;

  • Previous ophthalmic care or treatment;

  • Family ocular or medical history where relevant;

  • Clinical measurements, test results and observations;

  • Retinal images, OCT scans, photographs or other diagnostic images;

  • Details of assessments, advice, referrals, treatment and clinical outcomes;

  • Correspondence from or to your GP, optometrist, ophthalmologist or another healthcare professional; and

  • Information required to assess whether treatment is appropriate and safe.

Information concerning health is special-category personal data and receives additional protection under the UK GDPR. Organisations processing it must identify both an Article 6 lawful basis and an Article 9 special-category condition before processing begins.

​

Booking and payment information

​

We may collect:

  • Appointment dates and service details;

  • Booking and cancellation information;

  • Amounts charged and payment status;

  • Billing details;

  • Refund information; and

  • Limited payment identifiers supplied by our payment provider.

Card details are normally processed securely by our payment provider and are not stored directly by RevolutionEyes, unless expressly stated otherwise.

​

Communications

​

We may retain:

  • Website enquiries;

  • Emails, telephone notes and text messages;

  • Appointment reminders;

  • Complaints and feedback;

  • Consent records; and

  • Other correspondence with you or someone acting on your behalf.

Please avoid including detailed or urgent medical information in a general website contact form. The website and email are not emergency medical services.

​

Website information

​

When you visit our website, we or our service providers may collect:

  • Internet Protocol address;

  • Device and browser information;

  • Pages visited and interactions with the website;

  • Referring website;

  • Approximate location;

  • Cookie preferences;

  • Security and diagnostic logs; and

  • Website analytics, where permitted.

Further information is provided in the Cookies section below.

How we collect information

We may obtain information:

  • Directly from you;

  • From a parent, guardian, carer or authorised representative;

  • Through our website, contact forms or booking system;

  • During telephone, remote, clinic or home-visit consultations;

  • From another healthcare professional involved in your care;

  • From diagnostic equipment and clinical examinations;

  • From payment, website and communications providers; or

  • From publicly available sources where appropriate and lawful.

If another person supplies information on your behalf, we may ask them to confirm their identity, authority and relationship to you.

How we use information

We may use your personal information to:

  • Respond to questions and appointment requests;

  • Register you as a patient;

  • Arrange and manage appointments;

  • Confirm your identity;

  • Review your ocular and medical history;

  • Assess whether a service or treatment is clinically appropriate;

  • Conduct examinations and provide treatment;

  • Create and maintain accurate clinical records;

  • Monitor safety, progress and clinical outcomes;

  • Provide aftercare and respond to clinical concerns;

  • Communicate with other healthcare professionals where appropriate;

  • Process payments, cancellations and refunds;

  • Manage complaints, incidents and safeguarding concerns;

  • Maintain professional and clinical standards;

  • Meet legal, regulatory, insurance and accounting obligations;

  • Establish, exercise or defend legal claims;

  • Protect patients, staff, systems and the public;

  • Improve our services and website; and

  • Send optional marketing communications where permitted.

We will not use your information for a materially incompatible purpose without first considering whether further information or consent is required.

Lawful bases

We rely on one or more of the following lawful bases under Article 6 of the UK GDPR.

​

​

Where we rely on legitimate interests, those interests may include safely operating the clinic, maintaining records, protecting our systems, managing enquiries and appointments, improving services and defending legal claims. We consider whether these interests are necessary and balanced against your rights and reasonable expectations.

Health information

We normally process health information under Article 9(2)(h) of the UK GDPR because it is necessary for:

  • Medical diagnosis;

  • The provision of health treatment or care; or

  • The management of health services.

This processing is undertaken by, or under the responsibility of, a healthcare professional who owes professional duties of confidentiality, in accordance with applicable UK law, including the Data Protection Act 2018.

Where appropriate, we may instead rely on:

  • Your explicit consent;

  • Protection of vital interests where you cannot consent;

  • The establishment, exercise or defence of legal claims; or

  • Another condition permitted by law.

Consent to receive a clinical procedure is different from the lawful basis used to process clinical information. Withdrawing consent to a procedure does not necessarily require us to erase information that we must retain as part of your clinical record.

Providing information

You are not generally required to provide information merely to browse the website.

However, we need certain identity, contact, health and payment information to assess you safely and provide requested services. If relevant information is not supplied, we may be unable to offer an appointment, determine whether treatment is appropriate or provide care safely.

Please tell us if the information you have provided changes or is inaccurate.

Sharing information

We disclose personal information only where necessary and lawful. Depending on the circumstances, recipients may include:

  • Optometrists, ophthalmologists, GPs and other healthcare professionals involved in your care;

  • Hospitals, clinics, diagnostic providers and referral services;

  • Your parent, guardian, carer or representative, where authorised or otherwise lawful;

  • Wix and other website, hosting, booking or communications providers;

  • Payment processors, banks and accounting providers;

  • Secure clinical-record and cloud-storage providers;

  • IT support, cybersecurity and professional advisers;

  • Insurers and indemnity providers;

  • Regulators and professional bodies, including the General Optical Council where applicable;

  • Police, courts, public authorities or safeguarding bodies where disclosure is required or legally justified; and

  • A purchaser, adviser or successor if the business is reorganised, transferred or sold, subject to appropriate safeguards.

Service providers acting as processors may use information only under our instructions and must protect it appropriately.

We do not sell patient information.

Healthcare communications

Where clinically appropriate, we may communicate with your GP, usual optometrist, ophthalmologist or another healthcare professional involved in your care.

We will normally discuss this with you. However, information may be disclosed without consent where required by law or where there is a sufficiently serious concern involving patient safety, safeguarding, public protection or another overriding legal justification.

Marketing

We may send information about RevolutionEyes services, events or updates where you have provided consent or where another lawful electronic-marketing rule permits it.

You may unsubscribe at any time by:

  • Selecting the unsubscribe option in an email;

  • Contacting us at hello@revolutioneyes.uk; or

  • Asking us during an appointment.

Withdrawing marketing consent will not affect clinical communications, appointment reminders or other messages necessary to provide your care.

We do not use health information to target third-party advertising without a specific and lawful basis.

Cookies

Cookies and similar technologies allow websites to recognise a device, operate securely, remember preferences and understand how the site is used.

Our website may use:

  • Strictly necessary cookies, required for security and core website functions;

  • Functional cookies, which remember choices or support optional features;

  • Analytics cookies, which help us understand website use; and

  • Marketing cookies, if advertising or tracking services are enabled.

Where consent is legally required, optional cookies will not be activated until you choose to accept them. ICO guidance requires organisations to explain cookies clearly and obtain an active choice for non-essential cookies; simply continuing to browse does not constitute valid consent.

​

International transfers

Some website, booking, email, payment, cloud or IT providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that an appropriate legal mechanism is used. This may include:

  • UK adequacy regulations;

  • The UK International Data Transfer Agreement;

  • The UK Addendum to approved contractual clauses; or

  • Another safeguard permitted by data-protection law.

You may contact us for further information about the safeguards applying to relevant transfers.

Information security

We use proportionate technical and organisational measures designed to protect personal information from:

  • Unauthorised access;

  • Accidental loss;

  • Improper disclosure;

  • Alteration;

  • Destruction; and

  • Other unlawful use.

Measures may include access controls, passwords, encryption, secure systems, backups, staff confidentiality, restricted permissions and service-provider checks.

No internet transmission or storage system can be guaranteed to be completely secure. If we identify a personal-data breach, we will assess it and notify the ICO and affected individuals where legally required.

Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet clinical, professional, legal, accounting, insurance and regulatory requirements.

Our retention decisions take account of:

  • The nature and sensitivity of the information;

  • Clinical continuity and patient safety;

  • Professional record-keeping requirements;

  • Applicable limitation periods;

  • Safeguarding considerations;

  • Regulatory or insurance requirements; and

  • The risk associated with retaining or deleting the information.

​

Your rights

Depending on the circumstances and lawful basis, you may have the right to:

  • Be informed about how your information is used;

  • Request access to your personal information;

  • Ask us to correct inaccurate or incomplete information;

  • Request deletion of information;

  • Request restriction of processing;

  • Object to processing based on legitimate interests;

  • Object to direct marketing at any time;

  • Request transfer of information in a portable format;

  • Withdraw consent where processing relies on consent; and

  • Challenge certain decisions made solely through automated processing.

These rights are not absolute. For example, we may need to retain clinical information despite an erasure request where continued retention is necessary to comply with professional or legal obligations or defend a legal claim.

The ICO requires the right to object to be clearly and separately brought to an individual’s attention:

 

You have the right to object at any time to the use of your personal information for direct marketing. You may also object to processing based on our legitimate interests, although we may continue if we can demonstrate compelling lawful grounds.

​

To exercise a right, contact us at hello@revolutioneyes.uk. We may request evidence of identity and authority before responding. We will normally respond within the period required by data-protection law.

You will not normally be charged, although a reasonable fee may be permitted for requests that are manifestly unfounded or excessive.

Complaints

Please contact us first if you have concerns about how we use your information:

Email: hello@revolutioneyes.uk
Postal address: 39 Semphill Gardens, G74 3UH, Glasgow
Telephone: 07380903272

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk

A compliant notice should identify the organisation, purposes, lawful bases, recipients, international transfers, retention arrangements, individual rights and the right to complain to the ICO.

​

Changes to this notice

​

We may update this notice when our services, suppliers or legal obligations change. The latest version will be published on this page with its effective date.

If a change significantly affects how we use existing patient information, we will take reasonable steps to bring it to the attention of affected individuals.

bottom of page