Privacy Policy

Last updated: 9 November 2026

This notice explains how East Anglia Optics Ltd handles personal information when you visit our website, buy from us, create an account, leave a review or get in touch. It also explains how our planned Gmail connection will handle Google account data.

Who we are and how to contact us

East Anglia Optics Ltd is the data controller for the personal information covered by this notice. We are registered in England and Wales under company number 15897035. Our registered office is Riverside Fox’s Marina, The Strand, Wherstead, Ipswich, England, IP2 8NJ.

For privacy questions, requests or complaints, email eastangliaoptics@gmail.com or write to our registered office. Please include enough detail for us to understand your request.

What we collect and why

• Orders and delivery. We collect your name, email address, phone number, billing and delivery addresses, order details and payment status. We use these to process your purchase, send order and delivery updates, and handle returns. The lawful basis is performance of our contract with you or steps you ask us to take before entering it. We need enough information to take payment, fulfil your order and contact you about it.
• Customer accounts and enquiries. We use account details, contact information and the messages you send to provide account access and answer questions. We rely on our contract with you where the request relates to an order or a purchase you are considering. For general enquiries, our legitimate interest is responding to you and keeping a record of the conversation.
• Payments, finance and fraud checks. We receive transaction references and payment outcomes from payment and finance providers. These providers handle the card or finance application information you give them. We use payment status to fulfil your order and rely on our legitimate interests to prevent fraud and resolve disputes. A finance provider makes its own credit decisions under its own privacy notice.
• Reviews and website security. If you leave a review, your display name and review may appear publicly. We use technical information such as IP addresses, browser information and security signals to prevent spam, protect the website and investigate misuse. Our legitimate interests are maintaining useful reviews and keeping the service secure.
• Tax and accounting. We use relevant order, invoice and payment records to comply with legal obligations, including UK tax and accounting requirements.
• Marketing. If you subscribe to marketing emails, we use your contact details with your consent. You can unsubscribe at any time using the link in the email or by contacting us.

Cookies and website tags

WooCommerce and WordPress use cookies for functions such as remembering your basket, maintaining a checkout session and keeping you signed in. Security services such as Google reCAPTCHA and Akismet help detect spam and abuse.

The site uses Google Tag Manager to load website tags. Analytics and advertising tags can process information about visits and interactions, such as pages viewed, the referring page, browser information and cookie or device identifiers. Where consent is required for optional cookies or tags, consent is the lawful basis. You can also block or clear cookies in your browser. Blocking cookies used for the basket or login can affect those features.

Who receives your information

We share information as needed with providers that run and protect our website, handle payments or finance, deliver orders, or help us communicate with you. These include our hosting and email providers, WooCommerce services, WooPayments and PayPal, and finance providers such as humm or Ideal4Finance when you choose a relevant option. Delivery partners may include Royal Mail, DPD and Parcelforce. Payment and finance providers may also use the information they collect for their own legal, security and regulatory purposes.

We may also share relevant records with professional advisers or public authorities where needed to comply with the law or handle a legal claim.

Gmail and Google account data

East Anglia Optics Mail is intended to let our WordPress site send shop emails through the business’s Gmail account using WP Mail SMTP and the Gmail API. Only authorised shop administrators can connect the business account. Customers do not need to connect a Google account to shop with us.

If the connection is authorised, Google shows the Gmail permissions it grants. The plugin may request broad mailbox access. The website’s intended use of the connection is sending messages such as order confirmations, payment updates and account emails. Sending a message passes the sender and recipient addresses, subject, message body and any relevant attachments to Google for delivery. We do not use Gmail API data to read or analyse inbox conversations, advertise, build profiles or sell information.

WordPress stores the authorised sender and connection credentials so the site can continue sending email. Google may retain sent messages in the business mailbox under the account’s settings. Recipients and their email providers receive the messages addressed to them. Shop administrators can disconnect Gmail in WordPress and revoke the app’s access in the Google Account permissions page. Revoking access stops further use of the connection. Copies of messages already sent may be kept as part of the order, account or support record.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Where we keep information and for how long

Some service providers may process personal information outside the UK. Safeguards for transfers depend on the provider and destination and can include a UK adequacy regulation or appropriate contractual protections. Contact us for details about the safeguards that apply and how to obtain a copy.

We keep information for as long as needed for the purpose it was collected for. For example, we keep order records needed for VAT for at least six years. For other records, we consider whether an account is active, whether an enquiry or return is resolved, and whether the information is still needed for a warranty, dispute, security investigation or legal obligation. We remove or anonymise records when they are no longer needed, subject to those obligations.

Your rights and how to complain

Depending on how we use your information, you can ask to access, correct or erase it, restrict its use, or receive a portable copy. If we rely on consent, you can withdraw it at any time. This does not affect what we did before you withdrew it.

Right to object. You can object to use of your information based on our legitimate interests. You can object to direct marketing at any time.

To exercise a right or raise a complaint, email eastangliaoptics@gmail.com. We may ask for information to confirm your identity before responding to a request. We will acknowledge data protection complaints within 30 days, look into them and tell you the outcome. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.