Privacy Policy

  1. Introduction

At Optica, we value your privacy and are committed to protecting your personal information. This Privacy Policy (referred to as the “Policy”) applies to both Optica’s physical stores and Optica’s websites.

 

  1. Purpose of this Privacy Policy

The purpose of this Policy is to provide you with information on how Optica collects and processes your personal data when you use Optica’s websites and marketing forms. This includes any data you provide through the website and/or Optica’s application process. It is important to read this Policy in conjunction with any other privacy policies provided on specific occasions when we collect or process your personal data. This Policy works alongside other notices and privacy policies and does not override them.

 

  1. Controller

Optica is the controller and is responsible for your personal data (referred to as Optica, “we,” “us,” or “our” in this Policy). If you have any questions regarding this Policy or if you wish to exercise your legal rights, please contact the Information Security and Compliance unit using the contact details provided below:

Optica

  • CR number: 17531
  • Telephone no: +973 1700 0250
  • Email: optica@optica.net

Address: PO Box 927, Manama, Kingdom of Bahrain

 

  1. Changes to the Policy and Your Duty to Inform Us of Changes

We regularly review our Policy. It is important to ensure that the personal data we hold about you is accurate and up to date. Please inform us if your personal data changes during your relationship with us.

 

  1. Third-party Links

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not have control over these third-party websites and are not responsible for their privacy statements. When you leave our website, we recommend reading the privacy policy of every website you visit.

 

  1. Personal Data and Sensitive Personal Data

Personal data, also known as personal information, refers to any information that can identify an individual. It does not include data where the identity has been removed (anonymous data). Sensitive personal data refers to personal information that directly or indirectly reveals an individual’s race, ethnicity, genetic or biometric data used for identification purposes, political or philosophical views, religious beliefs, union affiliation, criminal record, or any data related to their health.

 

Your information is stored for durations deemed necessary for legal obligations or to keep you updated on our offerings. This data assists us in generating generic details, which then aids in market and commercial analysis. Importantly, this generic information won’t be personally identifiable.

 

If you have registered on our website, you have voluntarily provided details for us to collect, use, store, and transfer various types of personal data and/or sensitive personal data about you, which we have categorized as follows:

  1. Identity Data: Full name, gender, nationality, date of birth, title, username or similar identifier, photograph, and/or video.
  2. Contact Data: Contact and address details, including telephone numbers and email addresses.
  3. Identification Data: Identification numbers issued by government bodies (e.g., CPR, passport copy, driver’s license number, and other government-issued identity numbers) and biometric data where required.
  4. Voice and Video Recording through customer services.
  5. Technical and Usage Data: Internet protocol (IP) address, login data, date and duration of website visits, pages visited, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on devices used to access the Optica website and application.
  6. Profile Data: Username, preferences, feedback, and survey responses.
  7. Marketing and Communications Data: Preferences in receiving marketing communications from us and our third parties, as well as your communication preferences.

 

Should we encounter issues processing a request, we use this contact data to reach out to you. We would use your telephone number only in urgent cases or if there’s an error with the details you’ve provided.

Furthermore, we may utilize your contact details to notify you about our products, services, and promotions that might interest you. Should you wish to opt out of such communications, kindly inform us via email at customercare@optica.net. We ensure that your personal details are not shared with third parties except as highlighted in the “Sharing Information” section.

We also collect, use, and share aggregated data, such as statistical or demographic information, for various purposes. Aggregated data may be derived from your personal data but does not qualify as personal data under the law, as it does not directly or indirectly reveal your identity. If the aggregated data becomes connected or combined with your personal data in a way that can directly or indirectly identify you, we will treat the combined data as personal data and use it in accordance with this Policy.

If it is required by law or under the terms and conditions of a contract between us, and you fail to provide the requested personal data, Optica may not be able to provide services to you through the Optica website or application.

 

  1. How Optica Collects Your Personal Data
  2. a) Direct Collection: We collect personal data directly from you through various communication channels such as emails, phone calls, face-to-face meetings, or online during the registration/account creation process, completion forms, payment process, feedback provision, and when you contact us. This includes your engagement with Optica and its employees to receive services.

 

  1. b) Automated Collection: When you interact with our website or portal, we automatically collect Technical Data about your device, browsing actions, Log Files (IP addresses are used for diagnosing server issues, analyzing trends, administering the site, and tracking user movements for internal traffic statistics,) and patterns using cookies and similar technologies.
  1. c) Indirect Collection: We may also collect personal data indirectly from our employers, external agencies, coordinators, partner entities, and through Optica’s social media platforms and website.

 

  1. Purposes of Personal Data Collection and Lawful Basis for Processing

We will only use your personal data, including sensitive personal data, in compliance with applicable laws and regulations (legal/regulatory obligations, contractual obligations, data subject consent, and legitimate interests). We use personal data for various purposes, including:

 

  • Updating and improving our products and services.
  • Setting up appointments for eye checkups at the premises / homes of our customers.
  • Improve Optica’s accuracy when providing customers with information regarding their eyecare needs.
  • Offering and creating customized products for Optica’s customers.
  • Supporting Bahrain-based enterprises in enhancing their business operations and development.
  • Handling customer requests and inquiries through Optica’s service channels.
  • Analyzing information to understand market needs, performance, and policy refinement.
  • Responding to requests and managing litigation procedures, if applicable.
  • Conducting fraud/violation investigations and reporting.
  • Managing Optica’s internal and external portals.
  • Facilitating payments related to products and purchases.
  • Managing social media channels, e-content, and communications.
  • Organizing events to maintain brand image and reach customers.
  • Performing risk assessments and due diligence activities on partners.
  • Compliance with legal obligations.

 

  1. Categories of Recipients of Your Personal Data

Your personal data may be processed by Optica’s employees and shared with third parties, including cloud providers for email communication and storage, government entities for system integration, outsourced service providers, partner banks, external agencies, and other parties with legitimate interests as mentioned above.

 

  1. Cookies

You have the option to configure your browser settings to refuse or alert you about cookies. Please note that disabling or refusing cookies may impact the functionality and accessibility of certain parts of the Optica website and portal.

 

  1. Your Legal Rights

You have the following rights regarding your personal data:

  1. Access: Request access to your personal data.
  2. Rectification: Request corrections or modifications to your personal data.
  3. Erasure: Request removal, blocking, or restriction of your personal data.
  4. Objection: Object to the use of your personal data for direct marketing purposes.
  5. Non-discrimination: Object to processing that may result in defamation, discrimination, or financial/moral damage.
  6. Automated Processing: Object to decisions based solely on automated processing and request alternative methods.
  7. Withdrawal of Consent: Withdraw your consent to the processing of your personal data if consent is the lawful basis for processing.

 

Optica will process these requests free of charge within 10 working days, in accordance with relevant laws. If you have concerns about the processing/use of your personal data, you have the right to lodge a complaint with the Bahrain Personal Data Protection Authority.

 

  1. Security Measures

Optica implements appropriate security measures to protect your personal data from accidental loss, alteration, disclosure, or unauthorized access, in accordance with relevant laws and regulations in the Kingdom of Bahrain.

 

  1. Retention Period of Your Personal Data

We retain your personal data based on the validity of the contract, legal and regulatory requirements, tax and accounting obligations, reporting retention periods, fulfilling intended purposes, and historical archiving. Personal data may be retained for a longer period in the event of a complaint or anticipated litigation. After the retention period, we securely destroy, erase, or anonymize your personal data to prevent restoration. If personal data is anonymized, you will no longer be notified about its use for research and statistical purposes. Requests for amendments, objections, or withdrawals beyond the retention period cannot be supported.