PRIVACY POLICY

www.ganeshoptical.com

Effective Date: April 22, 2026  |  Last Updated: April 22, 2026

1. Introduction

Welcome to Ganesh Optical ("we", "us", "our"). We are an optical retail store committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.ganeshoptical.com.

This policy is in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

Please read this policy carefully. If you disagree with any part of it, please discontinue use of our website.

2. Information We Collect

We collect different types of information depending on how you interact with our website.

2.1 Personal Identification Information

•       Full name

•       Email address

•       Phone number

•       Postal / delivery address

•       Date of birth (where required)

2.2 Health & Prescription Data

As an optical store, we may collect sensitive personal data related to your vision and eye health, including:

•       Optical prescriptions (power, cylindrical value, axis, pupillary distance, etc.)

•       Eye examination reports and records

•       Medical history relevant to your vision care

 

Important: This constitutes Sensitive Personal Data or Information (SPDI) under Indian law. We handle it with the highest level of security and confidentiality, and it is used solely to fulfill your optical requirements.

 

2.3 Payment & Billing Information

•       Billing name and address

•       Payment method details (credit/debit card, UPI, net banking)

•       Transaction ID and order history

 

Note: We do not store full card numbers or CVV details. Payment transactions are processed through PCI-DSS compliant third-party payment gateways.

 

2.4 Technical & Usage Data (Cookies & Analytics)

When you browse our website, we automatically collect:

•       IP address and browser type

•       Operating system and device information

•       Pages visited, time spent, and referring URLs

•       Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect for the following purposes:

 

Purpose	Type of Data Used
Processing orders and delivering products	Personal info, payment info
Preparing and storing optical prescriptions	Health/prescription data
Sending order confirmations and updates	Personal info
Customer support and query resolution	Personal info
Improving website experience	Technical/analytics data
Sending promotional offers (with consent)	Personal info
Complying with legal obligations	All data as required
Preventing fraud and ensuring security	Payment info, technical data

 

We will not use your data for any purpose beyond what is listed above without obtaining your explicit consent.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience.

4.1 Types of Cookies We Use

Essential Cookies: Necessary for the website to function (e.g., shopping cart, login sessions).

Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).

Preference Cookies: Remember your settings and preferences.

Marketing Cookies: Used to show relevant advertisements (only with your consent).

4.2 Managing Cookies

You can control or delete cookies at any time through your browser settings. Note that disabling certain cookies may affect website functionality.

5. Sharing of Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

Service Providers: Trusted third parties who assist us in operating our website (e.g., payment processors, courier services). These parties are contractually obligated to keep your information confidential.

Legal Compliance: When required by law, court order, or government authority under Indian law.

Business Transfers: In the event of a merger, acquisition, or sale of business assets, your data may be transferred. You will be notified in advance.

With Your Consent: For any other purpose, only with your explicit consent.

6. Data Security

We implement industry-standard security measures to protect your personal data, including:

•       SSL/TLS Encryption on all data transmissions

•       Secure servers with restricted access

•       Regular security audits and vulnerability assessments

•       Access controls limiting employee access to sensitive data

•       Third-party payment gateways compliant with PCI-DSS standards

Despite these measures, no method of data transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Retention of Your Data

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law:

Customer records: Retained for 3 years after your last transaction.

Prescription/health records: Retained for a minimum of 5 years as required for medical record-keeping.

Payment records: Retained for 7 years as per financial regulations.

Analytics data: Typically retained in anonymized form for up to 2 years.

8. Your Rights Under Indian Law

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable IT Rules, you have the following rights:

Right to Access: Request a summary of your personal data we hold.

Right to Correction: Request correction of inaccurate or incomplete data.

Right to Erasure: Request deletion of your personal data (subject to legal obligations).

Right to Withdraw Consent: Withdraw consent for processing your data at any time.

Right to Grievance Redressal: File a complaint with our Data Protection Officer.

Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

To exercise any of these rights, please contact us using the details provided in Section 11.

9. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it promptly.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., payment portals, social media pages). We are not responsible for the privacy practices of those external sites. We encourage you to review their privacy policies independently.

11. Grievance Officer / Data Protection Contact

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns:

 

Grievance Officer: [Mrs. Mina Bhowmik Sarkar] Business Name: Ganesh Optical Website: www.ganeshoptical.com Email: [support@ganeshoptical.com] Phone: [9436121714] Address: [102, Akhaura Road, RMS Chowmuhani near Auto Stand, Agartala Tripura, 799001], India

 

Response Time: We will respond to your grievance within 30 days of receiving it, in compliance with Indian law.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes your acceptance of the revised policy.

13. Governing Law & Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts located in [Agartala], India.