Note for Oleksii: this is a starter draft written to cover the basics (GDPR-relevant, since the site targets EU visitors and collects questionnaire/consultation data). It is not a substitute for review by a lawyer, especially once the questionnaire and consultation booking are collecting real patient data. Replace bracketed placeholders before launch.

IOL Advisor ("we", "us") respects your privacy. This policy explains what information we collect, why, and how you can control it.

Who we are

IOL Advisor is an independent patient education platform. Data controller: [Oleksii Sologub / legal entity name], contact: [email address].

What we collect

  • Questionnaire responses — the lifestyle and visual-priority answers you provide in the IOL Questionnaire, used only to show you educational results.
  • Consultation requests — name, email, and anything you share when booking or preparing for a paid consultation.
  • Basic analytics — anonymized or aggregated usage data (pages visited, general location by country, device type) to understand how the site is used.
  • Cookies — used for essential site function and, if you consent, analytics. See the cookie banner for choices.

We do not collect government ID numbers, payment card details, or health/medical record data through this site. If you choose to share personal medical history during a consultation, that information is used only for that consultation and is not published or shared with third parties without your explicit consent.

Why we collect it (legal basis)

  • To provide the questionnaire and consultation services you request (contract / legitimate interest).
  • To improve the site's content and usability (legitimate interest, minimized and anonymized where possible).
  • Where required, only with your consent (e.g., non-essential cookies, marketing emails).

How long we keep it

Questionnaire responses are not linked to your identity unless you separately provide contact details for a consultation. Consultation-related personal data is kept only as long as needed to provide the service and meet legal/accounting obligations, then deleted.

Your rights

If you are in the EU/EEA or UK, under GDPR you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact [email address].

Third parties

We may use third-party services for hosting, analytics, and consultation scheduling. We do not sell your personal data. We do not share individually identifiable data with clinics or IOL manufacturers without your explicit, separate consent.

Children

This site is not directed at children and we do not knowingly collect data from minors.

Changes to this policy

We may update this policy as the site evolves. Material changes will be reflected in the "last updated" date above.

Contact

Questions about this policy: [email address].