Privacy Policy

Effective Date: November 26, 2025

Opticore Solutions Ltd. ("we," "us," or "our") operates the Opticore Payment Portal web application — a payment portal facilitating transactions for hotel share purchases by individual clients and IT service purchases by business clients. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your data.

1. Information We Collect

We collect information to provide and improve our services, process payments securely, and comply with legal obligations. We only collect what is necessary and obtain your consent where required.

Personal Information You Provide

• Account Creation and Signup: When you create an account via email, we collect your full name, email address, phone number, and billing/shipping address (for hotel share clients) or company details (for IT service clients).
• Payment Processing: For transactions, we collect payment details such as credit card numbers, expiration dates, and CVV (but we do not store full card details; these are tokenized and processed via our PCI-compliant payment gateway).
• Company Information (for IT clients): Company name, business email, phone number, address, tax ID, and authorized representative details.

Information from Third-Party Logins

If you sign up or log in via Google or Facebook, we receive profile information necessary for authentication. We only request essential scopes and use the data for account creation and login.

Automatically Collected Information

Device and usage data: IP address, browser type, operating system, pages visited, time and date of access, and referral sources. Transaction metadata such as purchase history and transaction IDs may also be collected.

2. How We Use Your Information

We use your information for legitimate business purposes, including:

• Providing Services: Create accounts, process payments, verify identities, and fulfill purchases.
• Communication: Send confirmations, support responses, and promotional emails (with opt-out options).
• Improvement & Analytics: Analyze usage to enhance the Site and prevent fraud.
• Legal Compliance: Tax, anti-money-laundering, and regulatory requirements.
• OAuth-Specific Uses: Use provided Google/Facebook data for authentication only.

3. How We Share Your Information

We do not sell your personal or company data. We share it only as necessary and with your knowledge:

• Service Providers: Payment gateways, email services, analytics tools, and hosting providers bound by contracts to protect your data.
• Business Transfers: In the event of a merger or sale, data may be transferred with appropriate notice.
• Legal Requirements: To comply with laws or respond to legal requests.
• Third-Party Logins: We use data from Google/Facebook for authentication; we do not share transaction details back to them.

4. Data Security

We implement administrative, technical, and physical safeguards including HTTPS, access controls, and regular audits. Payment data is handled via PCI-DSS compliant gateways. In the event of a breach, affected users and authorities will be notified as required by law.

5. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict processing, object, or portability. To exercise these rights, contact osl@opticoresolutionsltd.com. We respond within 30-45 days (or as required by law).

6. Cookies and Tracking Technologies

We use cookies, pixels, and similar tools for functionality, analytics, and advertising. Essential cookies cannot be disabled; others can be managed via the cookie banner or browser settings.

7. Children's Privacy

The Site is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children; discovered data will be promptly deleted.

8. International Data Transfers

We are based in [Your Country] and may transfer data to affiliates or providers in other countries. We use Standard Contractual Clauses or equivalent safeguards. For EU users see our EU Data Transfers Addendum if applicable.

9. Data Retention

We retain data only as long as necessary: account & transaction data for 7 years; marketing data until opt-out; OAuth session data as needed for authentication. Deleted data is anonymized or securely erased.

10. Changes to This Privacy Policy

We may update this Policy. Significant updates will be posted with a revised effective date and notified via email or Site notice. Continued use constitutes acceptance.

11. Contact Us

For privacy concerns or data rights requests contact:

This Policy is governed by Data Protection Act 2023 and the Personal Data Protection Ordinance 2025. Last reviewed: November 26, 2025.