Privacy and cookies policy

The College of Optometrists, 42 Craven Street, London, WC2N 5NG 

ICO registration number: Z5249488 

Last updated: 13 April 2026 

The College of Optometrists is the professional body for optometry. It qualifies the profession and delivers the guidance and training to ensure optometrists provide the best possible care. We promote excellence through the College’s affixes, by building the evidence base for optometry, and raising awareness of the profession with the public, commissioners, and health care professionals. 

The College is a Royal Charter body. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

For general membership and data queries, please contact us at membership@college-optometrists.org. For data protection escalations or formal requests, please contact Bill Scott, Director of Finance, at bill.scott@college-optometrists.org or at data.protection@college-optometrists.org, or by calling 020 7839 6390. 

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. 

This policy explains how the College of Optometrists collects, uses, shares and retains personal information. It covers information we collect: 

  • through our websites 
  • by phone, email, post, SMS and in person 
  • when you join or renew your membership 
  • when you register for events, training or qualifications 
  • when you use our online learning platforms 

This policy also covers our use of cookies and similar technologies on our websites. 

Our websites contain links to third-party websites. Those websites have their own privacy policies, and we are not responsible for their data practices. Use of those websites is at your own risk. 

We process personal data in line with the following legislation: 

  • UK General Data Protection Regulation (UK GDPR) 
  • Data Protection Act 2018 (DPA 2018) 
  • Data (Use and Access) Act 2025 (DUAA 2025) 
  • Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the DUAA 2025 

These are referred to collectively in this policy as “data protection law”. 

UK GDPR requires us to have a lawful basis for every type of processing we carry out. We rely on the following bases: 

Contract: where processing is necessary to provide you with membership services, qualifications or other services you have signed up to. 

Legal obligation: where we are required to process data by law, for example sharing information with the General Optical Council (GOC). 

Legitimate interests: where we have a legitimate interest in processing your data and that interest is not overridden by your rights. This includes contacting lapsed members about rejoining, carrying out wealth screening to support our philanthropic fundraising, contacting users of our learning platforms including Docet to offer appropriate follow-on courses, and some marketing communications. 

Consent: where you have given us clear, specific consent, such as opting in to receive communications from event sponsors. 

Where we rely on legitimate interests, we carry out a Legitimate Interests Assessment (LIA) to balance our interests against your rights. You can request a copy of any relevant LIA by contacting data.protection@college-optometrists.org

Depending on your relationship with the College, we may collect the following categories of personal data: 

  • name, title, and contact details (address, email, phone number) 
  • professional details including GOC registration number, practice details, and membership category 
  • assessment and examination data, year of joining the profession, sex, gender, age and health information relating to the need for special circumstances in assessments or examinations 
  • payment and billing information 
  • training, qualification, and CPD records 
  • Scheme for Registration assessment data 
  • communications preferences 
  • records of calls to the Clinical Advice Line 
  • details of event attendance and webinar participation 
  • website usage data (see the Cookies section below) 
  • financial wealth indicators, where identified through our wealth screening programme (see section 8) 

Members

We use member data to: 

  • administer your membership, including processing renewals and payments 
  • send you membership communications by email, post, phone and SMS, including renewal reminders, College news, CPD opportunities and Acuity journal 
  • provide access to member benefits, online learning and resources 
  • contact trainees, supervisors and assessors regarding Scheme for Registration assessments 
  • contact facilitators about events and training in their area 
  • list your details in the member directory on our website, if you have opted in to this 
  • share your name and contact details with event sponsors, where you have specifically opted in as a delegate to receive information from them 
  • carry out research and analysis to improve our services 
  • keep records of calls to the Clinical Advice Line for training, monitoring and follow-up purposes 

Where members have opted in, the College’s Acuity email newsletter may include relevant content from trusted third parties. You can unsubscribe at any time using the link in the footer of those emails.

Lapsed and non-renewing members

Where you resign or do not renew your membership, we will ask for your communication preferences for subsequent communications. Unless you opt out, we may continue to contact you where we have a legitimate interest in doing so, for example, to inform you of significant developments affecting the profession or to invite you to rejoin. Our lawful basis for this processing is legitimate interests. You have the right to object to this processing at any time (see section 10). 

Non-members

We may contact non-member optometrists to advise them of resources and services from the College where we consider there is a legitimate interest in doing so. If you have raised a query with us, we will use your details to respond. 

Members of the public

If you contact us with a query, we will use your details to respond. This also includes data captured on Look After Your Eyes, the College’s patient eye health information website.

Docet users

The College manages and administers Docet, and both use a shared database. If you update your details through either the College or Docet, this will be reflected across the shared database. If you are not a College member but use Docet, the College may contact you about relevant events, services and follow-on courses where we have a legitimate interest in doing so.

We will contact you about College member resources, services and opportunities in accordance with your stated preferences. We will not pass your contact details to third parties for their own marketing purposes, except where you have specifically opted in as an event delegate to receive information from event sponsors. 

You can update your communication preferences at any time by contacting data.protection@college-optometrists.org

The College carries out wealth screening of its member database to support our philanthropic fundraising programme. This helps us identify members who may have the capacity and interest to support the College’s purposes through a major gift or legacy. 

We do this by sharing a subset of member data, ie name, contact details and membership status, with a specialist prospect research agency. They cross-reference this data against wealth intelligence databases to identify members who may be high-net-worth individuals. 

Our lawful basis for this processing is legitimate interests. The College has a legitimate interest in securing philanthropic income to advance its purposes. We have completed a Data Protection Impact Assessment (DPIA) and a Legitimate Interests Assessment (LIA) for this processing. You can request copies of these documents at data.protection@college-optometrists.org

Where a member is identified as a potential major donor, the College may use that information to inform how we communicate with them about philanthropic opportunities. We will always do this in a considered way, consistent with their preferences. 

Your right to object: You have the right to object to your data being used for wealth screening at any time. To do so, contact data.protection@college-optometrists.org. We will stop processing your data for this purpose on receipt of your objection and delete your details from the screening list.

We keep your data within the College except where we need to share it with third-party providers to deliver services. All third-party processors are subject to a Data Processing Agreement and are required to handle your data securely and only for the purposes specified. Where required by law, we may also share data with legal or regulatory authorities. 

Company  Purpose 
Barclays  Membership fee collection. Trustee confirmation
Bottomline Technologies / Stripe / Sagepay / DMC Software  Processing membership fees and expenses
CAF Bank  Trustee confirmation
Cantarus  Access to the College member app
CAPITA  Payment of supervisor grants; notification of trainee/supervisor changes
Cloud-based email, SMS, election and survey platforms  Sending College emails, questionnaires and SMS messages; running Council elections
Courier services  Organising exam documentation and equipment delivery
Employers  Confirming Scheme for Registration fees and sharing progression data
Event sponsors  Sharing delegate contact details where delegates have proactively opted in 
Exhibition sponsors  Management of Optometry Tomorrow conference
Filter Agency  Hosting and maintaining the Look After Your Eyes patient information website (lookafteryoureyes.org), including  displaying member directory information
GOC  Processing GOC registration; sharing affix information; notifying of scheme or CLiP end dates
GoToWebinar / Teams / Zoom  Running member webinars
Heritage  Recording library transactions
Learning Pool (College CPD)  Populating the learning management system for College members
Learning Pool (Docet CPD)  Populating the learning management system for Docet users
Mailing houses  Producing and mailing certificates, patient leaflets, handbooks, journals and member mailings
Market research companies  Commissioned research into member views on College services and the profession
Marston  Managing bookings, gown hire and photography for the Diploma Ceremony
NHS England (and any successor body)  Payment of supervisor grants in England; notification of trainee/supervisor changes
NHS Northern Ireland Central Services  Payment of supervisor grants in Northern Ireland; notification of trainee/supervisor changes
NHS Scotland  Payment of supervisor grants in Scotland; notification of trainee/supervisor changes
NHS Wales  Payment of supervisor grants in Wales; notification of trainee/supervisor changes
NTT  Contacting existing members who have not paid their membership subscription
OpenAthens  Creating online accounts for resource access
OSCE venues (RCGP and RCP Liverpool)  Providing venue information ahead of exams
Prospecting for Gold Limited  Wealth screening — cross-referencing member data against wealth intelligence databases to identify potential major  donors. See section 8
QRS  Barcode scanning at College events
Ripley  Running the e-marking system for OSCE builds and electronic marksheets
Smart Impact  Website hosting and development
Synergy  Member certificates and printing
Telemarketing services  Contacting members by phone to support membership renewal and retention
Tern Consultancy  Stage Two Assessment
TestReach  Facilitating the TCFA Independent Prescribing exam
UKVI  Supporting qualification for Graduate Apprenticeship and Entry Visa

 

Our website hosting providers record interactions with our websites in server logs. These logs capture your IP address, the pages accessed, the date and time of access, and browser information. This data is retained for up to 12 months for security auditing purposes and for analysis to improve website performance and target communications. 

All personal data shared with third-party processors is transferred securely and subject to contractual data security obligations that comply with UK law when data is held or processed outside of the UK. Data shared with Prospecting for Gold for wealth screening purposes remains within the UK at all times. 

Our website hosting provider names have been withheld to protect system integrity. To request this information, contact data.protection@college-optometrists.org with your reasons for requesting it. 

We retain personal data for as long as is necessary for the purpose for which it was collected, or as required by law. Key retention periods are: 

  • active membership records: retained for the duration of membership and for a period thereafter in line with our Data Retention Policy 
  • lapsed member records: retained for a reasonable period to support re-engagement communications, unless you ask us to delete your data 
  • Scheme for Registration assessment records: retained in line with professional qualification standards 
  • Clinical Advice Line records: retained for monitoring, training and follow-up purposes 
  • Website server logs: up to 12 months 
  • Financial transaction records: in line with legal and regulatory requirements 

For a full copy of our Data Retention Policy, email data.protection@college-optometrists.org

Under UK GDPR and the DPA 2018, you have the following rights in relation to your personal data: 

Right of access: you can ask for a copy of the personal data we hold about you. We will usually respond within one month. We may ask you to verify your identity with two pieces of approved identification before releasing information. 

Right to rectification: you can ask us to correct inaccurate data or complete incomplete data. 

Right to erasure: you can ask us to delete your data. We will do so promptly unless we are required to retain it by law or for another legitimate purpose. 

Right to restrict processing: you can ask us to pause processing of your data in certain circumstances. 

Right to data portability: where processing is based on consent or contract and carried out by automated means, you can ask for your data in a portable format. 

Right to object: you can object to processing based on legitimate interests, including direct marketing and wealth screening. We will stop processing your data for that purpose unless we can demonstrate compelling legitimate grounds that override your rights. 

Right to withdraw consent: where processing is based on consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal. 

To exercise any of these rights, contact data.protection@college-optometrists.org or call 020 7766 4350. 

If you are unhappy with how we have handled a request or complaint, you can complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113. You also have the right to seek a judicial remedy. 

Data deletion 
To ask us to delete your data, email data.protection@college-optometrists.org. We will act on your request as quickly as possible within normal working hours. Any data retained thereafter will be anonymised and used only for aggregate analysis. 

To have your Docet data deleted, email enquiries@docet.info

Data complaints 
If you wish to raise a complaint about how we have used your data, please email data.protection@college-optometrists.org. We will acknowledge your complaint within 30 days and respond without undue delay. 

What is a cookie? 
A cookie is a small file sent to your browser when you visit a website. It is stored on your device and may be read by the website on future visits. Cookies serve a range of purposes, from keeping you logged in to helping us understand how people use our site. 

What the law says 
Under PECR, as amended by the Data (Use and Access) Act 2025, some cookies require your consent before they are set. Others do not require consent but we must tell you about them and give you the ability to opt out. The categories are: 

Strictly necessary: required for the site to function. No consent required. 

Analytics: used to collect aggregate statistics about how the site is used. Under the DUAA 2025, prior consent is no longer required, but you can opt out at any time. 

Functional: used to remember your preferences or adapt how the site works for your device. No prior consent required under the DUAA 2025, but you can opt out. 

Advertising and tracking: used for targeted advertising or cross-site profiling. Consent required. We do not currently use cookies of this type. 

You can manage or delete cookies at any time through your browser settings. For guidance, visit www.aboutcookies.org or www.allaboutcookies.org

Cookies used on this website 
The tables below list the cookies currently used on our websites. If you have questions about our use of cookies, contact data.protection@college-optometrists.org

Strictly necessary cookies 

Name Purpose Description Expiry Consent required? 
owin.authentication Session Stores the currently logged-in user account Session No — strictly necessary 
__RequestVerificationToken Security Provides CSRF security protection on site formsSession No — strictly necessary 
ApplicationGatewayAffinity Hosting Routes your session to the correct web serverSession No — strictly necessary 
ApplicationGatewayAffinityCORS Hosting Routes your session to the correct web server (CORS)Session No — strictly necessary 

 

Analytics cookies (no prior consent required; opt-out available) 
These cookies collect aggregate statistics to help us understand how our website is used and improve our services. Under the DUAA 2025, prior consent is no longer required for analytics cookies, but you can opt out at any time through your browser settings or by contacting data.protection@college-optometrists.org

Name Purpose Description Expiry Consent required? 
_ga Analytics Google Analytics 4. Distinguishes unique users by assigning a randomly generated identifier2 years No — analytics (opt-out available) 
_ga_[ID] Analytics Google Analytics 4. Stores session and campaign data for the site2 years No — analytics (opt-out available) 
_gid Analytics Google Analytics 4. Stores a unique value for each page visited1 day No — analytics (opt-out available) 
_hjSessionUser_{site_id} Analytics Hotjar. Persists a unique user ID across visits to attribute data to the same user365 days No — analytics (opt-out available) 
_hjid Analytics Hotjar. Assigns a unique user ID for tracking across sessions365 days No — analytics (opt-out available) 
_hjFirstSeen Analytics Hotjar. Identifies a new user’s first sessionSession No — analytics (opt-out available) 
_hjSession_{site_id} Analytics Hotjar. Holds current session data30 minutes No — analytics (opt-out available) 
_hjIncludedInPageviewSample Analytics Hotjar. Determines if a user is included in pageview data sampling30 minutes No — analytics (opt-out available) 
_hjIncludedInSessionSample Analytics Hotjar. Determines if a user is included in session data sampling30 minutes No — analytics (opt-out available) 
_hjAbsoluteSessionInProgress Analytics Hotjar. Detects the first pageview session of a user30 minutes No — analytics (opt-out available) 
_hjClosedSurveyInvites Functionality Hotjar. Ensures a survey invitation does not reappear once shown365 days No — functional 
_hjDonePolls Functionality Hotjar. Ensures a completed survey does not reappear365 days No — functional 
_hjMinimizedPolls Functionality Hotjar. Keeps a minimised survey minimised across pages365 days No — functional 
_hjShownFeedbackMessage Functionality Hotjar. Keeps a minimised or completed feedback widget minimised365 days No — functional 

 

Learning Management System cookies 

Name Purpose Description Expiry Consent required? 
TotaraSessionXXX Session Learning Pool LMS. Tracks the user session on the learning platform. Session No — strictly necessary 
TOTARAID_XXX Functionality Learning Pool LMS. Remembers the username if the option is selected at login. 60 days No — functional 

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Where changes are material, we will take reasonable steps to bring them to your attention. 

If you have any questions about this policy, please contact us in the first instance at membership@college-optometrists.org. For data protection escalations or formal requests, contact Bill Scott, Director of Finance, at bill.scott@college-optometrists.org or data.protection@college-optometrists.org, or call 020 7839 6390. 

The College of Optometrists, 42 Craven Street, London, WC2N 5NG.