Privacy Policy

Last updated: June 2026

1. Introduction

Giofine Lenses Ltd ("we," "our," or "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services.

We comply with the CN General Data Protection Regulation. For questions, contact us at info@giofine.com.

2. Information We Collect

Account & Registration Data: When you create an account, we collect your name, practice name, email address, phone number, and account preferences.

Order & Prescription Data: When you place an order, we collect lens specifications, prescription details, patient measurements, order history, and delivery information.

Technical Data: We automatically collect IP address, browser type, operating system, referring URLs, and pages viewed.

Communication Data: If you contact us, we collect your name, email, and the content of your message.

3. How We Use Your Information

• Order Fulfilment: To process, manufacture, and deliver your lens orders.
• Account Management: To maintain your account and provide customer support.
• Communication: To send order confirmations, delivery updates, invoices, and respond to enquiries.
• Service Improvement: To analyse website usage and improve our products and services.
• Legal Compliance: To comply with applicable laws and regulations.
• Marketing: With your consent, to send product updates. You can opt out anytime.

4. Legal Basis for Processing

• Contractual Necessity: Processing is necessary to fulfil your orders.
• Legitimate Interests: We process data to improve services and prevent fraud.
• Legal Obligation: To comply with legal and regulatory requirements.
• Consent: Where required, we obtain your explicit consent.

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal data. We may share data with:

• Delivery Partners: Courier and logistics companies.
• Payment Processors: Banks and payment service providers.
• IT Service Providers: Hosting, email, and software providers.
• Professional Advisers: Lawyers, accountants, and auditors.
• Regulatory Authorities: Where required by law.

All third parties are contractually obligated to protect your data.

6. Data Security

We implement appropriate technical and organisational measures including:

• SSL/TLS encryption for all data transmitted through our website.
• Secure servers with firewalls and intrusion detection.
• Access controls limiting data access to authorised personnel.
• Regular security assessments and staff training.
• Secure backup procedures to prevent data loss.

7. Data Retention

• Account Data: Retained while active + 6 years after closure (regulatory requirement).
• Order Data: Retained for 6 years from date of order.
• Enquiry Data: Retained for 2 years from last communication.
• Website Usage Data: Retained for 26 months.

8. Cookies

We use:

• Essential Cookies: Required for website function, including session management and login.
• Analytics Cookies: Help us understand visitor behaviour (optional).
• Functional Cookies: Remember your preferences.

Google Analytics 4: With your consent, we use Google Analytics 4 (Google LLC, USA) to analyse how visitors use our website, including traffic sources, pages viewed, and conversion events such as form submissions and file downloads. IP addresses are anonymised by Google by default in GA4. Google may process this data on servers outside your country, including the United States. Google Analytics uses cookies with a maximum lifetime of 24 months. Analytics scripts are loaded only after you click "Accept All" on our cookie banner; if you do not consent, no analytics cookies are set and no data is sent to Google. You can withdraw consent at any time by clearing site data in your browser, and you can opt out of Google Analytics entirely using Google's browser add-on at tools.google.com/dlpage/gaoptout.

You can manage cookies through your browser settings.

9. Your Rights

Under applicable data protection law, you have rights to:

• Access your personal data
• Rectify inaccurate data
• Erasure of your data
• Restrict processing
• Data Portability
• Object to processing

Contact info@giofine.com. Response within one month.

10. Changes to This Policy

We may update this policy periodically. Significant changes will be posted on this page and, where appropriate, notified by email.

11. Contact Us