Malvern Optical Ltd Privacy Notice (Updated for DUAA 2025)
This privacy notice for Malvern Optical Ltd (‘we’, ‘us’, or ‘our’) describes how and why we might collect, store, use, and/or share (‘process’) your information when you use our services, such as when you:
- Visit our website at https://www.malvernoptical.co.uk, or any website of ours that links to this privacy notice.
- Engage with us in other related ways, including any sales, marketing, or events.
This notice explains how we handle your information and outlines your privacy rights. If you do not agree with our policies and practices, please refrain from using our Services. If you have any questions or concerns, you can reach us at compliance@malvernoptical.co.uk.
SUMMARY OF KEY POINTS
What personal information do we collect?
When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information?
We do not process sensitive personal information.
Do we receive any information from third parties?
We do not receive any information from third parties.
In what situations and with which parties do we share personal information?
We may share information in specific situations and with specific third parties (for example, in business transfers).
How do we keep your information safe?
We have organisational and technical processes and procedures in place to protect your personal information.
Security and resilience of systems are also recognised as legitimate grounds for processing under the Data Use and Access Act 2025 (DUAA).
However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
What are your rights?
Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
Requests for access to your personal information will be handled in a reasonable and proportionate manner, in line with DUAA requirements.
How do you exercise your rights?
The easiest way to exercise your rights is by contacting us at compliance@malvernoptical.co.uk. We will consider and act upon any request in accordance with applicable data protection laws.
You can raise complaints directly with us if you are concerned about how your data is handled, and you still retain the right to contact the UK Information Commissioner’s Office (ICO).
- WHAT INFORMATION DO WE COLLECT?
We collect personal information you voluntarily provide, depending on how you interact with our Services. This may include:
- Names
- Email Addresses
- Phone Numbers
- Company Name
- IP Address
We do not process sensitive information.
All personal information that you provide must be true, complete, and accurate, and you must notify us of any changes.
- HOW DO WE PROCESS YOUR INFORMATION?
We process your personal information to provide, improve, and administer our services; communicate with you; ensure security and prevent fraud; and comply with legal obligations. We may also process your information for other purposes with your consent or when we have a valid legal reason to do so.
Specifically, we process your information for:
- Delivering and facilitating our services, including maintaining and improving their performance.
- Responding to inquiries and providing support.
- Protecting an individual’s vital interests, such as preventing harm or ensuring safety.
- Ensuring system security and preventing fraud or misuse.
- Complying with applicable laws and regulations.
Under the Data (Use and Access) Act 2025 (DUAA), we may rely on Recognised Legitimate Interests for certain types of processing, such as preventing fraud, maintaining system integrity, or responding to emergencies.
Requests for access to your information will be handled in a reasonable and proportionate manner. Where automated decision-making is used, we will apply appropriate safeguards — including transparency, explanations of key factors involved, and the opportunity for you to request a review.
- WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
We process your personal information only when we have a valid legal reason under applicable law:
- Consent: You have given permission for a specific purpose; you may withdraw consent at any time.
- Performance of a Contract: Necessary to provide or facilitate services.
- Legal Obligations: Necessary to comply with law, regulatory obligations, or litigation.
- Vital Interests: Necessary to protect the safety of an individual or third party.
We may also rely on Recognised Legitimate Interests for purposes such as fraud prevention, system security, or emergencies.
- WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
We may share information in specific situations, including:
- Business Transfers: In mergers, acquisitions, or sales of assets
- Third-Party Services: When using services like Google Maps APIs (e.g. Google Maps API, Places API).
- DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
We use cookies and similar technologies to collect and store information.
Certain low-risk cookies (functional or analytics) may be used without requiring prior consent, but you can opt out. Consent is still required for higher-risk cookies (e.g., advertising).
- HOW LONG DO WE KEEP YOUR INFORMATION?
We retain personal information only as long as necessary to fulfil the purposes outlined in this notice or as required by law.
- DO WE COLLECT INFORMATION FROM MINORS?
We do not knowingly collect data from children under 18. If we become aware of such data, it will be deleted promptly.
- WHAT ARE YOUR PRIVACY RIGHTS?
In regions like the EEA, UK, and Switzerland, you have rights to:
- Request access, rectification, or erasure
- Restrict processing
- Withdraw consent
- Object to processing
- Request data portability
- Challenge automated decision-making
You can also raise direct complaints with us in addition to contacting the ICO.
- CONTROLS FOR DO-NOT-TRACK FEATURES
Most browsers have a Do-Not-Track (DNT) feature. Currently, we do not respond to DNT signals.
- DO WE MAKE UPDATES TO THIS NOTICE?
We will update this notice as necessary to comply with all relevant laws. Material changes will be clearly communicated. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.
- HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
Email: compliance@malvernoptical.co.uk
Phone: 01386 553188
Post: Malvern Optical Ltd, Operations Director, Hangar 3, Pershore Airfield, Long Lane, Throckmorton, Worcestershire WR10 2JH, England
- HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?
You may request access, update, or deletion of your personal information at any time by emailing: compliance@malvernoptical.co.uk or by post using the above contact details.
All requests will be handled in a reasonable and proportionate manner, in line with the Data (Use and Access) Act 2025.