Privacy Policy

1. Who We Are

OcuTriage Limited (Company No. 17349257), 13 Millfield Road, Luton, LU3 1RT, United Kingdom. Email: support@ocutriage.co.uk. Website: www.ocutriage.co.uk. We are registered with the Information Commissioner’s Office (ICO), Registration Number ZC205428. OcuTriage acts as a Data Processor for patient information processed on behalf of optical practices and as a Data Controller for its own website, customer accounts and business operations.

2. Information We Collect

We collect practice account information and limited patient triage information, including patient initials, age, contact number, symptom information, responses to triage questions, date and time of triage and the staff member completing the triage. Practices should avoid entering unnecessary personal information.

3. How We Use Information

To provide access to the platform, generate PDF reports, maintain security, provide customer support, improve our services and comply with legal obligations. Patient triage information is never used for marketing.

4. Legal Basis

We process information under the UK GDPR using the legal bases of performance of a contract, legitimate interests and compliance with legal obligations.

5. Data Retention

Patient triage information is stored only to generate clinical summaries and PDF reports. All patient triage information is automatically and permanently deleted from OcuTriage’s servers 30 minutes after it is created. Practices are responsible for downloading and securely retaining any reports required within their own clinical record systems.

6. Data Security

We use HTTPS encryption, authentication controls, audit logging, secure hosting, access controls and routine backups. We continually review and improve our security arrangements.

7. Data Sharing

We do not sell personal information. Information is shared only with trusted hosting, infrastructure and technical support providers under appropriate contractual safeguards or where required by law.

8. International Transfers

Where information is transferred outside the UK, appropriate safeguards are implemented in accordance with UK data protection law.

9. Cookies

OcuTriage uses only strictly necessary cookies required for authentication and security. Full details are available in our Cookie Policy.

10. Your Rights

Individuals may have rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent where applicable.

11. Optical Practice Responsibilities

Optical practices remain responsible for ensuring lawful processing of patient information, maintaining clinical records and exercising professional clinical judgement. OcuTriage supports structured symptom collection and does not replace professional clinical judgement.

12. Data Protection Enquiries

Email: support@ocutriage.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

13. Changes

We may update this Privacy Policy from time to time. The latest version will always be published on our website.