Privacy Policy

1 Who We Are & What This Policy Covers

Maruti Software Solutions, based in Ahmedabad, Gujarat, India, is the data controller for personal information collected through this website. You can reach us at sales@opto-soft.com.

• This policy covers www.opto-soft.com — the marketing website, its contact and demo enquiry forms, and the developer documentation.
• It does not cover data inside the OptoSoft application. Patient, customer and sales records that your practice enters into the OptoSoft software are processed on your behalf under your service agreement with us — your practice remains the controller of that data.
• We do not take payments on this website. No card or bank details are collected or stored here.

2 Information We Collect

a. Information you give us

When you submit an enquiry, request a demo, or contact us through a form on this site, we collect:

• Your name.
• Your email address.
• Your contact number, including the country dialling code you select.
• The subject and message you write. Please do not include patient details or other sensitive information in an enquiry.

b. Information collected automatically

To deliver the site securely and to prevent abuse, our servers record technical information. When you submit an enquiry we store, alongside it:

• The IP address the enquiry was sent from.
• Your browser type, platform and version.
• The date and time of submission.
• An approximate country, derived from your IP address so we can show the right language, currency and dialling code. We store the country code only — not a precise location.

c. Cookies

We set a small number of cookies and use Google Analytics. See section 5 for the full list.

3 How We Use Your Information

• To respond to you — answering enquiries, arranging demos, and sending the information you asked for. Enquiries are emailed to our sales team and stored in our enquiry records.
• To keep the site secure — spam and abuse prevention (including reCAPTCHA verification) and detecting duplicate submissions. Repeat enquiries from the same email address within 24 hours are treated as duplicates.
• To personalise the site — remembering your language choice and showing region-appropriate pricing, currency and dialling codes.
• To understand and improve the site — aggregated analytics about which pages are visited and how visitors navigate.

We do not use your information for automated decision-making or profiling that produces legal effects, and we do not sell your personal information.

4 Legal Bases for Processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

5 Cookies We Set

A cookie is a small text file stored by your browser. These are the cookies this website uses:

Staff who sign in to the administration area also receive a session cookie that keeps them logged in; it is not set for ordinary visitors.

You can delete or block cookies at any time in your browser settings, and you can opt out of Google Analytics using Google's browser opt-out add-on. Blocking the preference cookies above may mean the site forgets your language or region.

6 Third-Party Services We Use

We keep third-party services on this site to a deliberate minimum. Fonts, icons, styles and scripts are served from our own servers rather than external networks. The services we do rely on are:

• Google Analytics — measures how the site is used. Google receives your IP address and page-view data.
• Google reCAPTCHA — protects our forms from automated abuse. Google receives information about your interaction with the form. Google's use of this data is governed by its own privacy policy.
• IP geolocation lookup — our server sends your IP address to a geolocation provider, which returns only a country code. The request is time-limited and the result is cached; nothing else about you is sent.
• Email delivery — enquiry notifications are sent to our team through our email provider.
• WhatsApp — only if you choose to click the WhatsApp button, which opens a chat outside this site under WhatsApp's own terms.
• Search-engine indexing (IndexNow) — we notify search engines when pages change. Only page addresses are sent; no personal data is involved.

7 How We Share Information

We do not sell, rent or trade your personal information. We share it only in these situations:

• With our own team — the sales and support staff who need it to answer you.
• With service providers — the hosting, email and security providers listed in section 6, who act on our instructions.
• Where the law requires it — to comply with a legal obligation, court order, or to establish, exercise or defend legal claims.
• In a business transfer — if our business or its assets are reorganised, merged or acquired, information may transfer to the successor under this same policy.

8 Data Retention

We keep personal information only for as long as it serves the purpose it was collected for:

• Enquiry records — retained while we are in contact with you and afterwards for our business records, unless you ask us to delete them.
• Cookies — expire on the schedule shown in section 5, or sooner if you delete them.
• Analytics data — retained by Google under the retention period configured for our property.

You can ask us to erase your enquiry at any time — see section 10.

9 Data Security

• The whole site is served over HTTPS, so traffic between your browser and us is encrypted.
• Administrative areas are password-protected, passwords are stored hashed, and access is limited to staff who need it.
• Enquiry data is held in a protected database and queried in a way that guards against injection attacks.
• No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we act promptly if we become aware of a breach affecting your information.

10 Your Privacy Rights

Depending on where you live, you have some or all of the following rights over your personal information:

• Access — ask for a copy of the information we hold about you.
• Correction — have inaccurate or incomplete information put right.
• Erasure — ask us to delete your information where we have no overriding reason to keep it.
• Objection & restriction — object to, or ask us to pause, processing based on our legitimate interests.
• Portability — receive the information you gave us in a machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it at any time without affecting earlier processing.
• Opt out of "sale" or "sharing" — under the CCPA. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of, and we will not discriminate against you for exercising any right.

To exercise any of these rights, email sales@opto-soft.com with the details of your request. We may need to verify your identity before acting, and we aim to respond within the period required by the law that applies to you. Depending on your location, the relevant law may be the GDPR (EEA), UK GDPR, the CCPA/CPRA (California), or India's Digital Personal Data Protection Act, 2023 and Information Technology Act, 2000. If you are in the EEA or UK and are unhappy with our response, you may complain to your local data protection authority.

11 International Data Transfers

We operate from India and serve customers across Asia, Europe, the Middle East and beyond, and some of our service providers operate globally. Your information may therefore be processed in a country other than your own, including countries whose data protection laws differ from those where you live. Where such a transfer is subject to the GDPR or UK GDPR, we rely on appropriate safeguards — such as standard contractual clauses — to protect it.

12 Children's Privacy

OptoSoft is business software sold to optical retailers and eye-care practices. This website is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us at sales@opto-soft.com and we will delete it.

13 Changes to This Policy

We may update this Privacy Policy as our services, or the law, change. When we do, we will revise the "last updated" date at the top of this page. If the changes materially affect how we handle your personal information, we will give clear notice — for example by email to the address on your account or a notice on the site — before they take effect. We encourage you to review this page from time to time.

14 Contact Us

For any question about this policy, or to exercise your privacy rights, please contact us: