Privacy Policy

This policy explains the information Optical Mart processes to create accounts, operate optical shop workflows, provide support, secure the service, meet legal obligations, and respect communication choices for shop owners, staff, customers, and visitors.

Information collected and why it is used

Optical Mart processes account details such as name, email, phone number, authentication identifiers, role, and shop assignment. Shop users may also enter business, branch, customer, prescription, appointment, order, billing, inventory, vendor, and support information while using the platform.

This information is used to create and secure accounts, keep users inside the correct shop and branch, operate requested workflows, provide support, prevent abuse, troubleshoot failures, improve reliability, and meet applicable accounting, legal, and security obligations.

Technical information such as device type, browser details, page visits, notification tokens, and security events may be processed to maintain sessions, deliver requested notifications, investigate incidents, and understand service health.

• Privacy Policy acceptance is required during registration.
• Account and shop records are used only for operating, securing, and supporting the service.
• Sensitive access is limited by authenticated role, shop, and branch scope.

WhatsApp and communication consent

Optional WhatsApp onboarding, support follow-up, and product messages require a separate unchecked opt-in during registration. Declining that checkbox does not prevent creation or use of a Basic Free account.

Users can withdraw optional WhatsApp consent by contacting support or changing an available communication preference. Essential authentication, account security, legal, and service notices may still be delivered through appropriate channels when necessary.

• WhatsApp product and onboarding messages are optional.
• The selected consent state and update time are recorded for accountability.
• Withdrawing marketing consent does not remove required operational records.

Service providers, security, and retention

Optical Mart may share the minimum information needed with infrastructure, authentication, database, storage, email, messaging, analytics, and support providers that help operate the service. Personal information is not sold.

Controls include authenticated access, role checks, tenant separation, branch scope, encrypted transport, audit records, upload restrictions, and server-side validation. No online system can promise absolute security, so incidents are investigated and controls are reviewed as the product changes.

Information is retained only while needed to provide the service, satisfy legal or accounting duties, resolve disputes, prevent fraud, restore backups, and protect platform security. Retention periods may differ by record type and applicable requirement.

• Providers receive only information required for their service.
• Access is reviewed against user role and shop ownership boundaries.
• Records may remain where law, security, backups, or dispute handling requires them.

Privacy requests and choices

A user may request access, correction, export, or deletion of eligible personal information, and may withdraw optional communication consent. Optical Mart may verify identity and authority before processing a request, especially where shop, staff, or customer records are involved.

Some information cannot be deleted immediately when retention is required for billing, tax, fraud prevention, security, legal claims, or the rights of another person. Where a request cannot be completed fully, the applicable limitation can be explained.

• Users may request access, correction, export, deletion, or consent withdrawal where applicable.
• Requests can be submitted through the published Contact page.
• Policy updates will carry an effective date so the accepted version can be identified.