Last updated: 11 April 2026
Ophthalmic Supplies and Solutions Ltd (trading as CES Academy) is the data controller responsible for your personal data.
| Legal entity | Ophthalmic Supplies and Solutions Ltd |
| Trading name | CES Academy |
| Registered address | Kent, United Kingdom |
| Contact email | [email protected] |
| Website | www.cesacademy.co.uk |
| ICO registration number | [ICO REGISTRATION NUMBER — PLACEHOLDER] |
Depending on how you interact with our website and services, we may collect the following categories of personal data:
| Category | Examples |
|---|---|
| Identity data | First name, surname |
| Contact data | Email address, telephone number |
| Professional data | GOC / GMC registration number, practice name and location |
| Preference data | Areas of CPD interest, opt-in preferences |
| Technical data | IP address, browser type, pages visited (via analytics) |
| Communications data | Records of emails sent to or received from you |
We collect personal data through the following means:
| Purpose | Lawful Basis |
|---|---|
| Notifying you of upcoming CPD events matching your interests | Consent (UK GDPR Art. 6(1)(a)) |
| Processing IP placement and course applications | Contract / Pre-contract steps (Art. 6(1)(b)) |
| Sending administrative communications about your application | Contract (Art. 6(1)(b)) |
| Complying with legal and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
| Improving our services and website | Legitimate interests (Art. 6(1)(f)) |
Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
| Data type | Retention period |
|---|---|
| CPD event registration records | 7 years from date of registration |
| IP placement application records | 7 years from date of application |
| Course application records | 7 years from date of application |
| Financial and payment records | 7 years (statutory requirement) |
| Email correspondence | 3 years from last contact |
| Website analytics data | 26 months (rolling) |
After the applicable retention period, personal data is securely deleted or anonymised.
We do not sell your personal data. We may share it with trusted third parties only where necessary:
All third-party processors are bound by data processing agreements and are required to handle your data in accordance with UK GDPR.
You have the following rights regarding your personal data:
| Right | What it means |
|---|---|
| Right of access | Request a copy of the personal data we hold about you |
| Right to rectification | Ask us to correct inaccurate or incomplete data |
| Right to erasure ('right to be forgotten') | Ask us to delete your personal data where there is no compelling reason to continue processing it |
| Right to restrict processing | Ask us to pause processing your data in certain circumstances |
| Right to data portability | Receive your data in a structured, machine-readable format |
| Right to object | Object to processing based on legitimate interests or for direct marketing |
| Right to withdraw consent | Withdraw consent at any time where processing is based on consent |
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. There is no charge for making a request.
If you wish to have your personal data deleted from our systems, please send a written request to [email protected] with the subject line "Data Erasure Request" and include:
We will confirm deletion within 30 days. Please note that we may be required to retain certain records for legal or regulatory reasons (e.g. financial records for 7 years under HMRC rules), in which case we will inform you of what data must be retained and why.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.
Our website uses cookies and analytics tools to understand how visitors use the site and to improve our services. Analytics data is aggregated and does not identify individuals. You may disable cookies through your browser settings; however, this may affect the functionality of the website.
Ophthalmic Supplies and Solutions Ltd is registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER — PLACEHOLDER].
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the ICO:
| Website | www.ico.org.uk |
| Telephone | 0303 123 1113 |
| Address | Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first at [email protected].
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will be revised accordingly. We encourage you to review this page periodically.
We use essential cookies to keep the site working and analytics cookies to understand how visitors use it. By clicking Accept you consent to analytics cookies. You can read our Cookie Policy for full details.