Your information
Version 1.0 · effective 19 October 2026
This notice explains how The Lens Audit uses your personal information when you, or your optician, send us a referral.
The Lens Audit is run by The Lens Audit Limited (company number 17137295, registered office 31a New Barn Lane, Cheltenham, England, GL52 3LB). Our director, Dr Guzaliya Safiullina, is also the director of Medical Consulting Ltd (company number 12252304), which is registered with the Care Quality Commission. The Lens Audit Limited is the controller of the information described here, which means we decide how it is used and are responsible for protecting it. Our registration number with the Information Commissioner's Office (ICO) is ZC217821.
| About | What | Where it comes from |
|---|---|---|
| Patients | Name, date of birth, phone, email | You, or your optician with your permission |
| Patients | Health information: eye measurements (biometry, keratometry, astigmatism), vision and prescription, cataract and eye health notes, scans and letters, your visual goals | Your optician, GP or you |
| Patients | Payment status and method (we never see or store your full card number) | You and our payment provider, Stripe |
| Patients | Our consultant's report and our correspondence with you | Us |
| Opticians and GPs | Name, practice, address, email, phone, professional registration number | The referrer |
Health information is special category data and has extra legal protection.
We use your information to check your records, arrange payment, have a GMC-registered Consultant Ophthalmologist review them, write your Lens Audit report, send it to you and, with your permission, to your referring clinician, and to answer your questions.
We do not use your information for marketing, we do not sell it, and we do not use it to make automated decisions about you. We do not currently use artificial intelligence to process referrals; every record is reviewed by a person.
Your information is stored in the UK. If a provider ever processes it outside the UK, we make sure UK-approved safeguards (such as the International Data Transfer Agreement) are in place.
All connections to our website are encrypted. Staff sign in with individual accounts and two-factor authentication, see only the referrals they are working on, are signed out after 30 minutes of inactivity, and every view and download of a patient record is logged. Backups are encrypted and kept in the UK.
Our full Records Retention Schedule is available on request.
You have the right to:
To use any of these rights, email data@thelensaudit.com or use the form at the bottom of this page. We will reply within one month. There is normally no charge.
If you are unhappy with how we have handled your information, please tell us first: email data@thelensaudit.com or use the form below. We will acknowledge your complaint within 30 days, investigate it, keep you updated and tell you the outcome. Our Data Protection Complaints Procedure explains this in full.
You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Our website uses only what it needs to work:
We do not use advertising or tracking cookies, so we do not ask you to accept cookies. Card payments take place on Stripe's own secure page, which has its own cookie policy.
We review this notice at least once a year. The version and date are shown at the top of the page, and each referral records which version was in force when it was sent.
Use this form to ask for a copy of your information, to correct or delete it, or to complain about how we have handled it. You can also email data@thelensaudit.com or call 01524 951987.