Privacy policy

This Privacy Notice explains how and why we collect, process and disclose your personal data. It also outlines your rights in relation to your personal data. Please read the following carefully.

This Privacy Notice is current from 17/09/2026. From time to time we may make changes to our policy, processes and systems in relation to how we handle your personal data. We will update this Privacy Notice to reflect any changes. Those changes will be available on our website and in the clinic.

Lominol Limited T/A Optilase Clinic (Company Registration Number: 388869) who is the controller for the personal data we process for private or corporate sponsored patients, unless otherwise stated.

There are many ways you can contact us, including by phone, email and post.

Clinic Postal Address

Optilase
17B Opera Lane
Cork City
T12 Y7ND

Contact number: +353 01 223 8821

Email: info@optilase.com

Personal data refers to information relating to an identified or identifiable person. It does not include data that has been anonymised and cannot be traced to an identified or identifiable person.

We currently collect and/or process the following personal data:

• Identifying and demographic information: full name, date of birth, gender, address, insurance information, phone number(s) and email address.

• Medical and health information (special categories personal data): scan results, medical history (for example current and previous history of doctor treatments and details of surgeries and/or pregnancies); skin and eye conditions (for example current or previous history of skin conditions or allergies); use of medication (current or previous history of medication taken and/or creams used), as well as any other relevant health related data customers choose to provide us or upload to our systems in connection with the Services.

• Financial information: payment preference, bank account details, credit card information.

• Communication: record of interaction between patients and clinic such as consultations, emails, phone calls and posts; phone call recordings; voicemails; emails.

• Patient preferences and feedback: opinions and intentions disclosed during communication with the clinic, satisfaction survey responses, complaints.

• Electronic device information: IP address and cookies information when visiting our website (for more information please see our Cookie Policy).

Most of the personal information we process is provided to us directly by you from the following sources:

• Website contact form.

• Website visits through cookies (see our Cookie Policy for more details).

• When you visit the website, we collect certain information related to your device, such as your device's IP address, referring website, what pages your device visited, and the time that your device visited our website.

• Phone or email queries.

• Information you sent us on the health questionnaires.

• Information communicated to and by you throughout your treatment.

• Information collected from testing and scanning you have throughout your treatment.

• When you engage with us on social media.

• When you review our services.

• When you apply for an employment vacancy with Lominol Limited.

On some occasions we will also receive personal information indirectly from third parties such as:

• GP or other specialist referral.

• Technical data from third parties, including analytics providers such as Google.

• Contact, financial and transaction data from providers of technical, payment and delivery services.

The legal basis for processing your personal data

We will only collect and process your personal data where we have a legal basis to do so. As a data controller, the legal basis for our collection and use of your personal data varies depending on the manner and purpose for which we collected it. We will only collect personal data from you when:

• we have your consent to do so; or

• we need your personal data to perform a contract with you; or

• we are pursuing our legitimate interests in a way that you might reasonably expect to be part of running our business and that does not significantly impact your interests, rights and freedoms, for example showing Lominol Limited advertisements to you as you browse the internet; or

• we have a legal obligation to collect or disclose personal data from you (for example in suspected instances of fraud where we need to give personal data to law enforcement or a government body).

The table below sets out each purpose and the legal basis we rely on.

Your information is securely stored within our patient electronic database system, which also includes the integration of our web forms system.

The number of paper records processed at Optilase is very limited. They are stored internally in our secure clinics, and with a trusted third-party storage provider.

CCTV recordings are securely stored in an authorised staff access controlled area managed directly by Optilase and are not accessible online. Only a very limited number of authorised Optilase staff can access those recordings, and only with regard to security purposes and/or access requests. CCTV recordings are deleted after 28 days.

In order to provide you with the best quality of care, as well as ensuring compliance with legal obligations, some of your personal data will be shared on a need-to-know basis with the following third parties:

• Other healthcare providers that require your personal data as part of the provision of medical treatment.

• Service providers and suppliers that provide goods and services necessary for the provision of services to you (for example customised lens suppliers).

• Other third-party advisors (for example legal advisors, insurance) that have access to your personal data as a necessary and controlled part of the provision of service.

• Accreditation bodies such as JCI.

If you wish to obtain more information on third parties with whom your data may be shared, please contact our Data Protection Officer at privacy@optilase.com.

List of Sub-Processors currently engaged and approved by Optilase to process the patient’s Personal Data:

We may send you direct marketing communications, product information and promotional offers:

• if you have consented to receiving such communications from us;

• if we have an existing business relationship with you and can rely on your implied consent;

• if you are from a country where the laws permit us to send you such communications based on our legitimate interests, if you have bought a product or service from us and have not opted out of receiving communications from us (for example the EEA or UK); or

• if you are from a country where the laws permit us to send you such communications.

The marketing communications we send will be in relation to our own products or services. Your personal data will not be used for third-party direct marketing unless separate explicit consent has been collected for that, or you are from a country where the laws permit such processing.

You will always have full control of your marketing preferences. If you do not wish to continue receiving marketing information from us at any time:

• you can unsubscribe by using the unsubscribe directions or link included in marketing communications from us; or

• you may withdraw your consent by contacting us by email at privacy@optilase.com.

Customers located in certain regions, such as the EEA and UK, also have the right to object to their personal data being processed for direct marketing purposes at any time. If you would like to object you can contact us by email at privacy@optilase.com.

We will process all requests as soon as possible, but please note that due to the nature of our IT systems and servers it may take a few days for any opt-out request to be implemented.

We use targeted advertising tools to advertise our services, including but not limited to:

• Google Analytics

• Facebook

• Instagram

• TikTok

• YouTube

We use these tools to deliver relevant content to you in marketing communications (where applicable), and to measure the effectiveness of the advertising provided.

If you would like any further information about the data collected by these third parties, or would like to opt out of targeted advertising, please contact us at privacy@optilase.com.

Our website may include links to and from the websites of our partner networks, advertisers and affiliates, or to social media platforms. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to their websites.

Under data protection law, you have rights including:

• Your right of access. You have the right to ask us for copies of your personal information.

• Your right to rectification. You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

• Your right to erasure. You have the right to ask us to erase your personal information in certain circumstances. This right is not absolute, as some data must be kept following other legal obligations.

• Your right to restriction of processing. You have the right to ask us to restrict the processing of your personal information in certain circumstances.

• Your right to object to processing. You have the right to object to the processing of your personal information in certain circumstances.

• Your right to data portability. You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

• Your right to object to automated decision-making including profiling. You have the right not to be the subject of any automated decision-making or profiling by us.

• Your right to withdraw consent. Where we are relying on your consent for the processing of your personal data, you have the right to withdraw your consent at any time. In respect of the e-marketing we conduct, an unsubscribe option is included with every e-marketing communication we send.

Your right to complain to the relevant supervisory authority. Should you have any concerns or complaints regarding the way in which we process your data, you also have the right to make a complaint to the Data Protection Commission. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please do contact us in the first instance at privacy@optilase.com.

This is why we process your personal data:

• Booking a consultation.

• Providing, operating and maintaining our services.

• Managing our customers' use of our services, responding to enquiries and comments, and providing customer service and support.

• Sending customers technical alerts, updates, security notifications and administrative communications.

• Investigating and preventing fraudulent activities, unauthorised access to our services, and other illegal activities.

• For any other purposes about which we notify customers and users.

We use your personal information in this context based on the contract that we have in place with you, or our legitimate interest for security purposes (for example the prevention and investigation of fraudulent activities). Personal information will be deleted based on the terms of the contract.

The personal data we collect from you may be transferred to, and stored at, destinations outside the European Economic Area (EEA) using legally provided mechanisms to lawfully transfer data across borders. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the provision of our services to you. We will take all steps necessary to ensure that your data is treated securely and in accordance with this privacy notice.

If we share your personal data outside of the European Economic Area, we ensure that there is an appropriate transfer mechanism in place to protect your personal data and comply with our data protection obligations.

Please contact us at privacy@optilase.com if you want further information on the countries to which we may transfer personal data and the specific mechanism used by us when transferring your personal data outside the EEA.

Data Protection Officer

Our Data Protection Officer is Joanna Melia. You can contact her at privacy@optilase.com or via our postal address. Please address the envelope to 'Data Protection Officer'.

Data Protection Commission

• Telephone: +353 (0)761 104 800

• Email: info@dataprotection.ie

• Website: dataprotection.ie

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at privacy@optilase.com if you wish to make a request.