Brightlens Ltd complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Why We Collect Personal Information

We collect personal information only where necessary for:

• Delivering requested services
• Managing bookings and appointments
• Client communication
• Processing invoices and payments
• Meeting legal and accounting obligations

Lawful Basis for Processing

We process personal information based on:

• Contractual necessity
• Legitimate business interests
• Legal obligations
• Consent where required

Data Protection Commitment

Brightlens Ltd:

• Stores client data securely
• Limits access to authorised personnel only
• Does not sell personal information
• Uses appropriate security measures to protect data

Your Rights

You have the right to:

• Request access to your personal data
• Request correction of inaccurate information
• Request deletion of personal data where legally permitted
• Object to certain processing activities
• Withdraw consent where applicable

Data Requests

To request access, correction, or deletion of your personal information, please contact:

info@brightlens.uk

We will respond to GDPR requests within the timeframes required by applicable law.