Privacy Policy – United Kingdom
Last Updated: 06 August 2025
| Version | Date | Summary of Changes |
|---|---|---|
| 1.0 | 06 August 2025 | Initial adoption of new UK GDPR aligned policy |
1. Introduction
1.1. Sightique Optic Supplies UK Ltd (“Sightique UK”, “we”, “our”, “us”) is committed to protecting your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
2. Information We Collect
2.1. We collect:
2.1.1. Identity data: name, surname, date of birth.
2.1.2. Contact data: email, phone numbers, addresses.
2.1.3. Company data: business name, registration number, VAT number.
2.1.4. Financial data: banking details (if needed for transactions).
2.1.5. Marketing preferences: explicit opt-in consent for newsletters and communications.
2.1.6. Website usage data: IP address, device type, pages visited, cookies.
3. Lawful Basis for Processing
3.1. We process personal data on the following bases:
3.1.1. Contract: to fulfil our contractual obligations (e.g., supply products, process orders).
3.1.2. Legal obligation: to comply with UK laws.
3.1.3. Legitimate interests: for business operations (e.g., credit control, fraud prevention).
3.1.4. Consent: for marketing communications (you can withdraw at any time).
4. How We Use Your Data
4.1. We use your data for:
4.1.1. Providing products and services.
4.1.2. Processing orders and managing accounts.
4.1.3. Conducting credit checks.
4.1.4. Sending marketing communications (only with your explicit opt-in).
4.1.5. Complying with legal obligations.
5. Sharing Your Data
5.1. We may share data with:
5.1.1. Service providers (e.g., IT, logistics, marketing, payment processors) under written Data Processing Agreements.
5.1.2. Credit reference agencies.
5.1.3. Regulators and authorities (where legally required).
5.1.4. Business acquirers in case of sale or merger.
6. Cross-Border Transfers
6.1. If your personal data is transferred outside the UK, we will implement safeguards, including:
6.1.1. Using Standard Contractual Clauses (SCCs) or the UK’s International Data Transfer Addendum; or
6.1.2. Ensuring the recipient country has an adequacy decision by the UK government.
7. Shared Infrastructure & Intra-Group Processing
7.1. Sightique Optic Supplies UK Ltd and Sightique Optic Supplies CC (South Africa) operate as part of the same group of companies and share certain systems, infrastructure, and databases (including CRM, email, and order management systems). This means that your personal data may be accessed or processed by either entity where necessary for legitimate business purposes, such as order fulfilment, account management, and group-wide administration.
7.2. These transfers are governed by intra-group agreements that incorporate the UK’s International Data Transfer Addendum and/or Standard Contractual Clauses (SCCs), ensuring that your data remains protected in accordance with Chapter V of the UK GDPR.
8. Your Rights
8.1. Under UK GDPR, you can:
8.1.1. Access your personal data.
8.1.2. Request correction or deletion.
8.1.3. Withdraw consent for marketing.
8.1.4. Object to processing or request restriction.
8.1.5. Request data portability.
8.1.6. Complain to the ICO: https://ico.org.uk/make-a-complaint.
9. Security
9.1. We apply appropriate security measures and ensure that our processors meet UK GDPR standards.
10. Data Breach Notification
10.1. If we become aware of a breach that may affect your personal data, we will notify the Information Commissioner’s Office (ICO) within 72 hours and, where required, notify you without undue delay.
11. Retention
11.1. We retain data for as long as necessary for the purposes outlined or as required by law.
12. Cookies
12.1. Our site uses cookies for analytics and functionality. You can manage cookie preferences through your browser or via our cookie banner.
13. Updates
13.1. We may update this policy periodically. Any changes will be posted on our website, and significant updates will be communicated to you.
14. Contact Us
