Privacy Policy

1 Who We Are & What This Policy Covers

Maruti Software Solutions, based in Ahmedabad, Gujarat, India, is the data controller for personal information collected through this website. You can reach us at sales@opto-soft.com.

• This policy covers www.opto-soft.com — the marketing website, its contact and demo enquiry forms, and the developer documentation.
• It does not cover data inside the OptoSoft application. Patient, customer and sales records that your practice enters into the OptoSoft software are processed on your behalf under your service agreement with us — your practice remains the controller of that data. For how we handle that data — including security, retention, encryption and your export rights — see the Data & Privacy section (§10) of our Terms & Conditions.
• We do not take payments on this website. No card or bank details are collected or stored here.

2 Information We Collect

a. Information you give us

When you submit an enquiry, request a demo, or contact us through a form on this site, we collect:

• Your name.
• Your email address.
• Your contact number, including the country dialling code you select.
• The subject and message you write. Please do not include patient details or other sensitive information in an enquiry.

b. Information collected automatically

To deliver the site securely and to prevent abuse, our servers record technical information. When you submit an enquiry we store, alongside it:

• The IP address the enquiry was sent from.
• Your browser type, platform and version.
• The date and time of submission.
• An approximate country, derived from your IP address so we can show the right language, currency and dialling code. The lookup runs entirely on our own server against a locally stored geolocation database — your IP address is not sent to any third party for this. We store the country code only, not a precise location.

c. Cookies

We set a small number of cookies and use Google Analytics. See section 5 for the full list.

3 How We Use Your Information

• To respond to you — answering enquiries, arranging demos, and sending the information you asked for. Enquiries are emailed to our sales team and stored in our enquiry records.
• To keep the site secure — spam and abuse prevention (including reCAPTCHA verification) and detecting duplicate submissions. Repeat enquiries from the same email address within 24 hours are treated as duplicates.
• To personalise the site — remembering your language choice and showing region-appropriate pricing, currency and dialling codes.
• To understand and improve the site — aggregated analytics about which pages are visited and how visitors navigate.

We do not use your information for automated decision-making or profiling that produces legal effects, and we do not sell your personal information.

4 Legal Bases for Processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

5 Cookies We Set

A cookie is a small text file stored by your browser. These are the cookies this website uses:

Staff who sign in to the administration area also receive a session cookie that keeps them logged in; it is not set for ordinary visitors.

Your choice on the cookie banner controls whether analytics cookies are set: if you decline, we instruct Google Analytics not to store analytics cookies on your device, and your choice is remembered for 12 months. In the EU, UK, Switzerland and Brazil, analytics storage stays switched off until you actively accept. You can also delete or block cookies at any time in your browser settings, or opt out of Google Analytics everywhere using Google's browser opt-out add-on. Blocking the preference cookies above may mean the site forgets your language or region.

6 Third-Party Services We Use

We keep third-party services on this site to a deliberate minimum. Fonts, icons, styles and scripts are served from our own servers rather than external networks. The services we do rely on are:

7 How We Share Information

We do not sell, rent or trade your personal information. We share it only in these situations:

• With our own team — the sales and support staff who need it to answer you.
• With service providers — the hosting, email and security providers listed in section 6, who act on our instructions.
• Where the law requires it — to comply with a legal obligation, court order, or to establish, exercise or defend legal claims.
• In a business transfer — if our business or its assets are reorganised, merged or acquired, information may transfer to the successor under this same policy.

8 Data Retention

We keep personal information only for as long as it serves the purpose it was collected for:

• Enquiry records — retained while we are in contact with you and afterwards for our business records, unless you ask us to delete them.
• Cookies — expire on the schedule shown in section 5, or sooner if you delete them.
• Analytics data — retained by Google under the retention period configured for our property.

You can ask us to erase your enquiry at any time — see section 10.

9 Data Security

• The whole site is served over HTTPS, so traffic between your browser and us is encrypted.
• Administrative areas are password-protected, passwords are stored hashed, and access is limited to staff who need it.
• Enquiry data is held in a protected database and queried in a way that guards against injection attacks.
• No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we act promptly if we become aware of a breach affecting your information.

10 Your Privacy Rights

Depending on where you live, you have some or all of the following rights over your personal information:

To exercise any of these rights, email sales@opto-soft.com with the details of your request. We may need to verify your identity before acting, and we aim to respond within the period required by the law that applies to you.

If you are in the EEA or UK and are unhappy with our response, you have the right to complain to your local data protection supervisory authority. For all other jurisdictions, equivalent regulatory bodies may apply.

11 International Data Transfers

We operate from India and serve customers across Asia, Europe, the Middle East and beyond, and some of our service providers operate globally. Your information may therefore be processed in a country other than your own, including countries whose data protection laws differ from those where you live. Where such a transfer is subject to the GDPR or UK GDPR, we rely on appropriate safeguards — such as standard contractual clauses — to protect it.

12 Children's Privacy

OptoSoft is business software sold to optical retailers and eye-care practices. This website is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us at sales@opto-soft.com and we will delete it.

13 Changes to This Policy

We may update this Privacy Policy as our services, or the law, change. When we do, we will revise the "last updated" date at the top of this page. If the changes materially affect how we handle your personal information, we will give clear notice — for example by email to the address on your account or a notice on the site — before they take effect. We encourage you to review this page from time to time.

14 Contact Us

For any question about this policy, or to exercise your privacy rights, please contact us: