Privacy Policy

This privacy policy explains how Menassa Vision collects, uses, and protects your personal information when you use our website and services.

Last updated: February 2026

Who We Are

Menassa Vision is the private ophthalmology practice of Ms. Nardine Menassa, Consultant Ophthalmologist. For the purposes of UK GDPR, Menassa Vision acts as the data controller for personal data collected through this website and through patient enquiries and care.

What Information We Collect

Information you provide directly

• Name, date of birth, and contact details
• Health and medical information relevant to your care
• Insurance details
• Enquiry and booking information
• Any information you include in contact forms, emails, or calls

Information collected automatically

• IP address and browser type
• Pages visited, on-site interactions, and time spent on site
• Referring website
• Device information

How We Use Your Information

We use personal information to:

• Provide medical consultations and treatment
• Manage appointments and communications
• Process payments and insurance claims
• Maintain medical records as required by law
• Improve our website and services
• Send relevant updates about your care
• Send marketing communications only where you have consented

Legal Basis for Processing

Under UK GDPR, we process personal data using the following legal bases:

• Contract: to provide services you request
• Legal obligation: to meet clinical and regulatory duties
• Legitimate interests: to run and improve our services and website
• Consent: for marketing communications and optional cookies

Special Category Data

As a healthcare provider, we process special category data (health information) where necessary for medical diagnosis, treatment, and care management. This is processed under UK GDPR and Data Protection Act 2018 conditions relating to health and social care.

Data Sharing

We may share your information with:

• Hospitals and clinics involved in your treatment
• Your GP (with your consent)
• Your insurance provider (for claims processing)
• Laboratory and diagnostic services
• Professional and regulatory bodies when legally required
• IT and service providers who support our systems under strict confidentiality

We do not sell your personal data to third parties.

International Data Transfers

Where service providers process data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or approved contractual protections.

Data Retention

Medical records are retained in line with legal and professional requirements (typically at least 8 years after last treatment entry for adults). Enquiry and administrative records are kept only for as long as needed for operational, legal, and regulatory purposes.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of data (subject to legal retention requirements)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent (where processing is based on consent)

To exercise your rights, contact us using the details above. We may need to verify your identity before fulfilling your request.

Cookies

Our website uses essential cookies for core functionality and optional analytics cookies to help us improve the site. You can manage cookie preferences using the cookie preferences control on the site and through your browser settings.

Security

We use appropriate technical and organisational safeguards to protect personal data against unauthorised access, alteration, disclosure, or destruction.

Children's Data

Where we process children's data for clinical care, we do so in accordance with applicable legal and professional obligations, including obtaining consent from a parent or guardian when required.

Automated Decision-Making

We do not make solely automated decisions that produce legal or similarly significant effects on individuals.

Changes to This Policy

We may update this privacy policy from time to time to reflect service or legal changes. The latest version will always be published on this page.

Complaints

If you have concerns about how we handle your data, please contact us first and we will try to resolve the issue promptly. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk.

Contact Us

Email: info@menassavision.co.uk
Phone: 0151 271 2101
Post: Menassa Vision, c/o St Paul's Eye Unit, Royal Liverpool University Hospital, Prescot Street, Liverpool, L7 8XP.