Privacy Policy

1. About M-Optic

M-Optic is an eyewear company registered and operating in the Kingdom of Cambodia with 8 branches across the country. We operate the website m-optic.com and the M-Optic mobile application. For a full list of our branch locations, please visit our store locator page at m-optic.com/locations. This Privacy Policy applies to both platforms and does not extend to third-party websites or services accessible via links on our platforms.

2. Scope of This Policy

This Privacy Policy covers two platforms:

Website (m-optic.com): Displays product listings and pricing for informational purposes. No purchases are made on the website. Visitors may submit inquiries via a contact form and use the AR glasses try-on feature.

Mobile Application: Displays product listings and allows registered members to log in using their phone number to view their loyalty points balance and eye refraction records. The app also includes an AR glasses try-on and face shape analysis feature to suggest suitable eyewear frames. No purchases are made in the app. Eye refraction and points data is entered into our system by M-Optic staff, it is not collected from the user through the app.

3. What Personal Data Do We Collect?

4. How We Use Your Personal Data

We use the personal data we collect strictly for the following purposes:

• To respond to inquiries submitted through our website contact form
• To authenticate your identity and allow you to access your membership account in the app
• To display your loyalty points and eye refraction records within the app
• To power the AR try-on feature and suggest suitable eyewear frames based on your face shape, processed locally on your device only
• To show you the nearest M-Optic branch (only if you grant location permission)
• To maintain and improve the performance and security of our website and app
• To comply with legal obligations under Cambodian law

We do not use your data for automated decision-making, profiling, or targeted advertising.

5. Camera and Facial Data, Important Notice

We want to be fully transparent about how your camera and facial data is handled:

• Camera is used only for AR try-on: We access your camera solely to power the glasses try-on and face shape suggestion feature. We do not use your camera for any other purpose.
• No data leaves your device: All face scanning and frame suggestions are computed entirely on your device. No photos, facial scans, facial geometry, or biometric data is ever sent to our servers or any third party.
• Nothing is stored: We do not save, record, or retain any images or facial data from the try-on session at any point.
• You are in control: You can deny camera permission at any time through your device settings. This will disable the AR try-on feature but will not affect any other part of the website or app.

6. Legal Basis for Processing

M-Optic handles personal data in compliance with the following Cambodian laws:

• Law on E-Commerce (Royal Kram NS/RKM/1119/016, 2019)
• Consumer Protection Law (2019)
• Telecommunications Law
• Sub-Decree on Digital Economy and Digital Finance Policy Framework

7. Sharing Your Personal Data

M-Optic does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

• With trusted IT service providers who help us operate and maintain our platforms, bound by confidentiality and not permitted to use your data for any other purpose
• When required by Cambodian courts, law enforcement, or government regulators
• To protect the rights, property, or safety of M-Optic, our users, or the public

Facial data and camera data from the AR try-on feature is never shared with any party under any circumstance, as it is processed locally and never collected by us.

8. Cookies and Local Storage

Website: We use essential cookies (required for the site to function) and analytics cookies (to understand how visitors use our site). You can control cookies through your browser settings.

Mobile App: The app stores a secure authentication token on your device to maintain your login session. This token contains only your session identifier and is cleared when you log out or uninstall the app.

9. Data Retention

• Contact form submissions (name, email, message): up to 3 years
• Membership phone number and session data: for the duration of the active session; tokens are invalidated upon logout
• Technical and analytics data: up to 2 years
• Location data: not retained beyond the active session
• Camera and facial data from AR try-on: never retained, processed in real time on your device only

10. Account Deletion

If you wish to delete your membership account and the personal data associated with it, you may submit a request by contacting us at contact@moptic.com or +855 12 444 481. We will process your request within 30 days.

Please note that eye refraction records and loyalty points are managed in our internal optic system and are retained separately for service continuity and legal purposes.

11. Your Rights

As a user of our website or mobile app, you have the right to:

• Request access to the personal data we hold about you
• Request correction of any inaccurate or incomplete data
• Request deletion of your personal data where it is no longer needed
• Withdraw consent to marketing communications at any time
• Deny or revoke camera or location access at any time through your device settings
• Lodge a complaint with the competent Cambodian authority if you believe your data has been mishandled

To exercise any of these rights, please contact us at contact@moptic.com.

12. Data Security

M-Optic implements appropriate security measures including HTTPS encryption, secure session tokens, restricted access to personal data, and regular review of our data handling procedures. In the event of a data security incident, we will notify affected users promptly in accordance with Cambodian law.

13. Children's Privacy

The M-Optic website and mobile application are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at contact@moptic.com and we will promptly delete it.

14. Third-Party Links

Our website and app may contain links to third-party platforms such as Facebook, Instagram, TikTok, and Telegram. This Privacy Policy does not apply to those platforms. We encourage you to review their respective privacy policies. Our app does not integrate any third-party advertising SDKs or cross-app tracking services.