Sukhi Eye Spa
Legal

Privacy Policy

Last updated: 14 September 2026

This policy covers dryeyeleamington.co.uk, including our OptiLight (dry eye) and Valeda (dry AMD) pages. It explains what personal data we collect when you use this website, why, and what rights you have over it.

Who we are

Sukhi Eye Spa, 64D Regent Street, Leamington Spa, CV32 5EG. We are the "data controller" for the personal data described in this policy — meaning we decide how and why it's used.

Contact: hello@sukhieyes.co.uk · 01926 893 0333

ICO registration number: C1652719

What we collect

We only collect what you give us directly through the forms on this site — we don't buy in data or collect it from anyone else.

WhenWhat we collect
Enquiry / booking formName, email, phone number, which treatment you're interested in, and anything you write in the message field
Symptom check / vision quizYour answers, a calculated score, and (if you choose to submit your details afterwards) name, email, phone
Browsing the siteStandard analytics data — pages viewed, approximate location (from IP address), device type, how you arrived at the site
A note on health information: Details about your eye symptoms or diagnosis that you choose to share with us (for example, in the message field or the symptom quiz) count as "special category" health data under UK data protection law, which gets extra protection. We only use it to understand your enquiry and prepare for your consultation — never for anything else — and we ask for your clear consent by way of you choosing to submit the form.

Why we use your data, and our legal basis

Who we share it with

We use a small number of third-party services to run this site. We don't sell your data to anyone.

ServiceWhat it's forWhere your data goes
FormspreeHandles form submissions and delivers them to us by emailUnited States
Google Analytics (GA4)Site analytics — how the site is used, in aggregateUnited States
TrustindexDisplays our Google reviews on the siteEU
YouTube (privacy-enhanced mode)Embeds treatment videosUnited States

Where data leaves the UK, these providers rely on Standard Contractual Clauses or an equivalent safeguard recognised under UK GDPR.

Cookies

When you first visit this site, you'll see a cookie banner asking whether you're happy for us to set analytics and functional cookies. Until you respond, none of the cookies below are set.

Our video embeds use YouTube's privacy-enhanced ("nocookie") mode, which doesn't set tracking cookies unless you press play.

You can change your choice at any time using the "Cookie settings" link in the footer of any page.

If you're running paid advertising (Google Ads), conversion-tracking cookies will also apply here — this section should be revisited and the banner's categories updated when that's live.

How long we keep your data

DataRetention period
Enquiries that don't lead to an appointment24 months from your last contact with us, then deleted
Patient clinical records (adults)Minimum 10 years from your last consultation, in line with College of Optometrists guidance
Patient clinical records (under 18 at last treatment)Until your 25th birthday (26th if you were 17 at your last treatment), in line with College of Optometrists guidance
Website analytics (Google Analytics)14 months (Google's standard event retention)

The clinical record retention periods reflect College of Optometrists guidance and the legal limitation period for negligence claims, rather than a period we've set ourselves.

Your rights

Under UK GDPR, you have the right to:

To use any of these rights, contact us at hello@sukhieyes.co.uk. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO).

Keeping your data secure

We use reputable, established third-party providers (listed above) and don't store form submissions on this website itself — they're delivered directly to us. We take reasonable technical and organisational steps to protect data in transit and once received.

Children's data

This site isn't directed at children, and we don't knowingly collect data from anyone under 18 submitting on their own behalf. If you're a parent or family member enquiring on behalf of someone else (common for our Valeda / dry AMD page), that's fine — just let us know in the message field.

Changes to this policy

We'll update this page if how we handle data changes — for example, once paid advertising and its associated cookies go live. The date at the top shows when it was last revised.