1. Who We Are & What This Policy Covers
Maruti Software Solutions ("we," "us," or "our"), based in Ahmedabad, Gujarat, India, is the developer and operator of OptoSoft Optical Retail Software and acts as the data controller for personal information collected through this website. Contact: info@optosoft.in.
This policy covers:
- This website, www.optosoft.in — the marketing pages, the contact and demo-request forms, and the developer documentation.
- It does not cover data inside the OptoSoft application itself. Patient, customer and sales records entered into OptoSoft are processed on your behalf under your service agreement — your practice remains the controller and we act as your processor.
- Data handling, security, retention, encryption and export rights for the application are set out in Section 15 (Data Protection) of our Terms & Conditions.
- No payments are collected on this website, and we do not collect or store card or bank details here.
Note for US healthcare customers (HIPAA)
If OptoSoft stores or manages patient eye-health records in the United States, those records may be Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). Your practice is the HIPAA-covered entity and Maruti Software Solutions acts as a Business Associate on your behalf. PHI handling within OptoSoft is governed by the Data Protection provisions of the Terms & Conditions and any applicable Business Associate Agreement (BAA). This Privacy Policy addresses the marketing website only — not PHI within the application.
2. Information We Collect
2.1 Information you give us
When you submit an enquiry, request a demo or contact us through the site forms:
- Your name
- Your email address
- Your contact number, including the selected country dialling code
- The subject and message you write
Important: Please do not include patient details or other sensitive information in an enquiry.
2.2 Information collected automatically
- Like most websites, our servers record standard technical information (such as IP address, browser type, and date and time of the request) to deliver the site securely and prevent abuse.
- The country shown for the phone-number field is selected in your browser from your device time zone and language settings. We do not send your IP address to any third party to work this out.
2.3 Cookies
Google Analytics is used with your consent, and Google reCAPTCHA protects our forms. See Section 5 for details.
3. How We Use Your Information
- To respond to you — answering enquiries, arranging demos and sending the information you request. Enquiries are emailed to our sales team and kept in our enquiry records.
- To keep the site secure — preventing spam and abuse, including reCAPTCHA verification.
- To personalise the site — pre-selecting the dialling code on forms and showing region-appropriate pricing information.
- To understand and improve the site — aggregated analytics about which pages are visited and how visitors navigate.
We do not use your information for:
- Automated decision-making or profiling that produces legal effects
- Selling personal information
4. Legal Bases for Processing
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry | Steps taken at your request before entering into a contract |
| Security and abuse prevention | Our legitimate interest in protecting the site |
| Region and phone-code preferences | Our legitimate interest in providing a usable site |
| Analytics cookies | Your consent — you can withdraw it at any time via the cookie banner |
In India we process personal data on the basis of your consent and for lawful purposes under the Digital Personal Data Protection Act, 2023 (DPDP Act).
5. Cookies & Similar Technologies
A cookie is a small text file stored by your browser. This is what the website uses:
| Name | Purpose | Lifetime |
|---|---|---|
| optosoft_cookie_consent | Remembers your cookie-banner choice so we do not keep asking (stored in your browser’s local storage) | Until you clear your browser data |
| _ga, _ga_* | Google Analytics — measures visits and page views (only after you accept) | Set by Google (up to 2 years) |
| reCAPTCHA | Google reCAPTCHA on our forms — protects against automated abuse | Set by Google |
Your choices
- Your cookie-banner choice controls whether Google Analytics may store analytics cookies on your device.
- If you decline, analytics cookies are not stored. Google Analytics may still receive limited, cookieless signals about a page visit, without cookies or advertising identifiers being stored on your device.
- You can delete or block cookies at any time in your browser settings, or opt out of Google Analytics everywhere with Google’s browser opt-out add-on.
6. Third-Party Services We Use
We keep third-party services to a deliberate minimum. Fonts, icons, styles and scripts are served from our own servers rather than external networks.
| Service | Purpose |
|---|---|
| Google Analytics | Measures how the site is used. Google receives your IP address and page-view data. |
| Google reCAPTCHA | Protects forms from automated abuse. Google receives interaction data, governed by Google’s own privacy policy. |
| Email delivery | Enquiry notifications are sent to our team through our email provider. |
| Only if you click a WhatsApp button — this opens a chat outside this site under WhatsApp’s own terms. | |
| OptoSoft web application | Links to web.opto-soft.com (free account and login) open our application, which is covered by the Terms & Conditions. |
| IndexNow (search-engine indexing) | We notify search engines when pages change. Only page URLs are sent — no personal data. |
7. How We Share Information
We do not sell, rent or trade your personal information.
We share information only in these situations:
- With our own team — the sales and support staff who need it to answer you.
- With service providers — the hosting, email and security providers listed in Section 6, who act on our instructions.
- Where the law requires it — to comply with a legal obligation or court order, or to establish, exercise or defend legal claims.
- In a business transfer — if our business or its assets are reorganised, merged or acquired, information may transfer to the successor under this same policy.
8. Data Retention
We keep personal information only for as long as it serves the purpose it was collected for:
- Enquiry records — kept while we are in contact with you and afterwards for business records, unless you ask us to delete them.
- Cookies — expire on the schedule in Section 5, or sooner if you delete them.
- Analytics data — retained by Google under the retention period configured for our property.
You can ask us to erase your enquiry at any time — see Section 10.
9. Data Security
- The whole site is served over HTTPS, so traffic between your browser and us is encrypted.
- Administrative areas are password-protected and access is limited to staff who need it.
- Enquiry data is held in a protected database.
- No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we act promptly if we become aware of a breach affecting your information.
10. Your Privacy Rights
Depending on where you live, you have some or all of the following rights over your personal information:
| Right | What it means |
|---|---|
| Access | Ask for a copy of the information we hold about you |
| Correction | Have inaccurate or incomplete information put right |
| Erasure | Ask us to delete your information where we have no overriding reason to keep it |
| Objection & restriction | Object to, or ask us to pause, processing based on our legitimate interests |
| Portability | Receive the information you gave us in a machine-readable format |
| Withdraw consent | Where we rely on consent, withdraw it at any time without affecting earlier processing |
| Opt out of sale / sharing (CCPA) | We do not sell or share personal information as defined by the CCPA, so there is nothing to opt out of |
| Nominate / grievance (DPDP Act) | In India, nominate another person to exercise your rights and seek grievance redressal; you may complain to the Data Protection Board of India |
We will never discriminate against you for exercising any of these rights.
Exercising your rights
Email info@optosoft.in with the details of your request. We may need to verify your identity before acting.
| Jurisdiction | Response time |
|---|---|
| European Economic Area & United Kingdom (GDPR) | 1 month |
| United States — California residents (CCPA / CPRA) | 45 days |
| United States — healthcare / PHI, application data only (HIPAA, see Section 1) | 30 days |
| India (DPDP Act 2023 / IT Act 2000) | Reasonable time |
| Brazil (LGPD) | 15 days |
| Canada (PIPEDA) | 30 days |
| United Arab Emirates, Saudi Arabia, Bahrain (UAE PDPL, KSA PDPL, Bahrain PDPL) | Reasonable time |
| Mexico, Colombia, Argentina (LFPDPPP, Law 1581, PDPA 25.326) | 20 days |
EEA / UK residents: if you are unhappy with our response, you may complain to your local data-protection supervisory authority. In other jurisdictions, an equivalent regulator may apply.
11. International Data Transfers
We operate from India and serve customers across Asia, Europe, the Middle East and beyond, and some of our service providers operate globally. Your information may therefore be processed in a country other than your own, including countries whose data-protection laws differ from yours. Where a transfer is subject to the GDPR or UK GDPR, we rely on appropriate safeguards, such as standard contractual clauses.
12. Children’s Privacy
OptoSoft is business software sold to optical retailers and eye-care practices. This website is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us at info@optosoft.in and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy as our services or the law change. When we do, we will revise the “Last updated” date on this page. If a change materially affects how we handle your personal information, we will give clear notice — for example by email to the address on your account, or a notice on the site — before it takes effect. We encourage you to review this page from time to time.
14. Contact Us
Questions or privacy requests
Company: Maruti Software Solutions
Product: OptoSoft Optical Retail Software
Email: info@optosoft.in
Phone (India): +91-820-072-7974
Website: www.optosoft.in
Address: Ahmedabad, Gujarat, India
Right to amend: Maruti Software Solutions may modify, update or replace this Privacy Policy at any time, at its discretion and without prior notice, except where applicable law requires otherwise. The “Last updated” date reflects the most recent revision, and continued use of www.optosoft.in after a change means you accept the updated policy.
Effective: 26 July 2026 · Last updated: 1 October 2026
This Privacy Policy applies to visitors of www.optosoft.in