Privacy Policy
この記事はまだ翻訳されていないため、英語で表示しています。
PRIVACY POLICY
Last Updated: 05/11/2026
This Privacy Policy explains how VisReed collects, uses and protects information when you use our website and the VisReed Practice area. VisReed is established in Belgium, and the GDPR applies to everything described here.
It covers two different situations, and our role is not the same in each:
- For your own account, and for anything you send us through the site, VisReed is the data controller.
- For patient records and results you enter into VisReed Practice, you are the data controller and VisReed is your processor. We hold that data on your behalf and act only on your instructions.
INFORMATION WE COLLECT
When you create an account: your name, email address and password (stored only as a secure hash), and, optionally, your profession.
When you contact us: your name, email address and the content of your message.
When you subscribe to the Journal: your email address, your language and the date you gave consent.
Patient records and results you enter: see PATIENT RECORDS AND RESULTS below.
Collected automatically:
- Request logs. Our host keeps short-lived technical logs, including IP addresses, for security and reliability.
- Audience measurement, only if you allow it. Google Analytics and Microsoft Clarity. See AUDIENCE MEASUREMENT below and our Cookie Policy.
PATIENT RECORDS AND RESULTS
VisReed Practice lets you create a record for a patient (first name, last name and date of birth) and save to it the results of tests and orthoptic assessments, including the findings and any notes you write in an assessment. This is personal data concerning health under Article 9 of the GDPR.
Our role. You, the clinician, decide what to enter and why. You are the controller. VisReed stores it for you and is your processor under Article 28 of the GDPR. We do not use patient records or results for any purpose of our own, we do not analyse them, and we never sell or share them.
Legal basis. You are responsible for the basis on which you process your patients' data, normally Article 9(2)(h), health care provided by a professional bound by professional secrecy.
What stays on your device. Some tools never send data to us. Photographs taken with the nine-position gaze tool stay in your browser. Printing or downloading a result creates a file on your device, which is then under your control.
Who can see it. A patient record and its results are readable only by the account that created them. Every request is restricted to that account. VisReed staff do not access patient records in the course of normal operation. Screens that show patients or results are masked from session recordings.
Where it is stored. In Cloudflare's Western Europe region, inside the European Union.
How long we keep it. For as long as you keep it. When you delete a patient, their results are deleted with them. When your account is deleted, all of your patients and results are deleted. We apply no separate retention period of our own, because the record is yours.
Your own obligations. You remain responsible for telling your patients that you use VisReed, for your own statutory record keeping, and for entering no more than you need. Use the notes fields for clinical observations only; do not enter identifiers such as national or insurance numbers.
HOW WE USE YOUR INFORMATION
| Purpose | Legal basis |
|---|---|
| Give you access to VisReed Practice and keep you signed in | Performance of a contract |
| Store patient records and results for you | Your instructions as controller (Article 28) |
| Reply to your messages | Our legitimate interest in answering you |
| Send the Journal | Your consent |
| Keep the service secure and prevent abuse | Our legitimate interest |
| Measure how the website is used | Your consent |
AUDIENCE MEASUREMENT
With your consent, we use Google Analytics (Google Ireland Limited) to count visits and see which pages are read, and Microsoft Clarity (Microsoft Ireland Operations Limited) to see how pages are used, through heatmaps and session recordings.
- In the European Union, the EEA, the United Kingdom and Switzerland, neither tool runs until you click Allow on the cookie banner. Refusing is one click.
- Elsewhere, they run by default and you can turn them off.
- You can change your choice at any time with Cookie settings at the bottom of every page.
- Session recordings mask patient names, results and the whole VisReed Practice area.
- Both providers may transfer data to the United States. Google and Microsoft are certified under the EU-US Data Privacy Framework and also rely on the European Commission's Standard Contractual Clauses.
PROVIDERS WHO PROCESS DATA FOR US
| Provider | What it does | Where |
|---|---|---|
| Cloudflare | Hosting, database, security, bot protection (Turnstile) on our forms, and sending our emails | Database in the EU; global network |
| Google Analytics, only with your consent | EU and United States | |
| Microsoft | Microsoft Clarity, only with your consent | EU and United States |
Each provider acts under a data processing agreement. We may also disclose information to legal authorities when the law requires it, or to a successor in case of a business transfer, under the same protections. We do not sell personal information.
HOW LONG WE KEEP YOUR INFORMATION
| Information | Kept for |
|---|---|
| Your account and profile | Until you ask us to delete your account |
| Signed-in sessions | Up to 30 days |
| Patient records and results | Until you delete them, or your account |
| Contact messages | As long as needed to answer, and at most 2 years |
| Journal subscription | Until you unsubscribe |
| Cookie choice | 180 days, then you are asked again |
| Audience measurement data | Up to 14 months (Google Analytics) and 13 months (Microsoft Clarity) |
DATA SECURITY
Access to VisReed Practice requires a verified email address and a password of at least twelve characters. Sign-up and password reset are protected against bots. Patient records and results are scoped to the account that created them. Traffic is encrypted in transit. No system is completely secure, and we will tell you and the supervisory authority if a breach occurs that is likely to present a risk.
YOUR PRIVACY RIGHTS
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to receive it in a portable form. Where processing rests on consent, you may withdraw that consent at any time, without affecting what was done before.
To exercise a right over your own account, write to contact@visreed.com. We answer within one month. For a right over a patient record, the request belongs to the clinician who holds it, and we will refer the patient to them.
You may also lodge a complaint with the Belgian Data Protection Authority, the Autorité de protection des données / Gegevensbeschermingsautoriteit, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be.
YOUR CHOICES
You can:
- Update your profile information from your account
- Delete any patient record you have created, together with its results
- Change your cookie choice with Cookie settings at the bottom of every page
- Unsubscribe from the Journal, or ask us to delete your account, by writing to contact@visreed.com
- Ask for a copy of the information we hold about you
CHILDREN'S PRIVACY
The website is intended for eye care professionals and is not directed to children. We do not knowingly collect information from a child about themselves. A patient record entered by a clinician may of course concern a child, and that record is the clinician's responsibility as controller.
CHANGES TO THIS POLICY
We may update this policy. The date at the top shows when it was last changed. If a change affects how we use your account data, we will tell you by email or on the site before it applies.
CONTACT US
If you have questions about this Privacy Policy, contact us at contact@visreed.com.