Legal
Privacy Policy
Last updated: June 2026
1. Who we are
This portal is operated by The Glasses Basket LTD, a company registered in England and Wales (company number 16508334), whose registered office is at 5 Brook Avenue, Wembley, Greater London, HA9 8PH ("we", "us", "our"). We are the data controller for the personal data described in this notice. For any privacy query, contact: info@theglassesbasket.com
2. Who this notice applies to
This portal is a business-to-business service for optician partners. This notice covers personal data relating to individuals who request and use partner accounts, place orders, or contact us — for example named contacts at a partner business.
3. The personal data we collect
• Account & identity — Name, company name, email, phone, business address, GOC number (if applicable). Source: account request form. • Authentication — Email address, one-time login codes, login timestamps. Source: login flow (OTP). • Order data — Items ordered, glazing specifications, prescription data. Source: when you place orders. • Correspondence — Messages you send us. Source: contact form, email. • Technical & usage — IP address, device/browser data, cookies. Source: automatically on use.
4. Why we use your data, and our lawful basis
• Creating and managing your partner account — Performance of a contract / pre-contractual steps • Processing and fulfilling orders — Performance of a contract • Secure OTP login and account protection — Legitimate interests (security and fraud prevention) • Order and accounting records — Legal obligation (HMRC / tax records) • Responding to enquiries — Legitimate interests / contract • Analytics to improve the service — Consent (via cookie banner)
5. Who we share your data with
We use trusted third-party service providers who process your data only on our instructions and under a contract. We do not sell or rent your personal data, and we do not share it with third parties for their own marketing. The categories of provider we use are: • Our glazing partner — prescription and order details, used solely to manufacture lenses to your specification • Secure cloud hosting and data-storage providers — to run the portal and store your data securely • An email delivery provider — to send login codes and order or account notifications • An analytics provider — only where you have consented to analytics cookies Where your personal data is stored, it is held securely with reputable third-party providers under appropriate contractual and technical safeguards. We may also disclose data where required by law or to establish, exercise or defend our legal rights.
6. International transfers
Some providers are based outside the UK, which may involve transferring your data internationally. Where we do, we ensure an appropriate safeguard is in place, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
• Order and prescription records — 7 years from order date • Active account data — for as long as your account is active • Closed account data — deleted or anonymised within 90 days of closure request • Session / login tokens — expire within 30 days or on sign-out
8. How we protect your data
We use appropriate technical and organisational measures including encryption in transit (HTTPS), passwordless one-time-code login for partners, restricted administrative access, and rate-limited authentication endpoints. No system is perfectly secure, but we take reasonable steps to protect your information.
9. Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
10. Your rights
Under UK GDPR you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent where we rely on it. To exercise any right, contact info@theglassesbasket.com. We will respond within one month. You also have the right to complain to the ICO (ico.org.uk), though we would appreciate the chance to resolve your concern first.
11. Cookies
See our Cookie Policy page for full details.
12. Changes
We may update this notice; the "last updated" date shows the latest version.