At Lily’s Eyes, your privacy matters. This policy explains how we collect, use, and protect your personal data in line with the General Data Protection Regulation (GDPR) and Greek data protection law.

​

Data Controller

The data controller is Lily’s Eyes Optometry Practice, operated by Elisavet Vourazeri. You can contact us via the details on our Contact page.

​

What We Do

Lily’s Eyes provides optometry check-ups for children and adults, as well as contact lenses and sunglasses. To deliver these services, we collect and process certain personal information, as described below.

​

What Data We Collect

We may collect and process the following information:

• Contact details: name, phone, email, address.

• Health and appointment information: prescriptions, test results, clinical notes (as required for your care).

• Payment information: billing details and transaction history (handled securely).

• Technical information: IP address, browser type, and device data when you use our website.

• Communication preferences: information you provide when subscribing or contacting us.

 

Why We Use Your Data

We process personal data only when lawful and necessary, including to:

• Provide and manage eye care services, contact lens fittings, and prescription updates.

• Process and deliver product orders (e.g. sunglasses or contact lenses).

• Keep accurate clinical records (required by healthcare regulations).

• Process payments and issue invoices.

• Communicate about your care, appointments, or orders.

• Improve our services and website.

• Send marketing communications, only with your explicit consent.

 

How Long We Keep Data

We keep personal data only as long as necessary for the purposes outlined above, or as required by Greek healthcare and tax regulations. After this period, data is securely deleted or anonymised.

 

Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.

• Request correction of inaccurate information.

• Request deletion of your data, where applicable.

• Withdraw consent (e.g. for marketing) at any time.

• Restrict or object to certain processing.

• Receive your data in a portable format.

To exercise these rights, please contact us. You may also lodge a complaint with the Hellenic Data Protection Authority (HDPA) if you are concerned about how your data is handled.

 

Sharing Your Data

We do not sell personal data. We may share information only with trusted third parties where necessary (e.g. laboratories, IT providers, or payment processors), always in compliance with GDPR.

 

Cookies

Our website uses cookies to:

• Ensure the site works correctly (essential cookies).

• Analyse how visitors use the site (analytics cookies).

• Remember preferences and settings (preference cookies).

You can manage or disable cookies through your browser settings. Please note that some features may not work properly if cookies are disabled.

 

Updates

We may update this policy to reflect changes in law or services. The latest version will always be available on our website.