Privacy Policy

1. Introduction

Fortune Optical – Cracia Lens Division (“Cracia”, “we”, “us”, or “our”) is committed to protecting the privacy and security of every individual who visits www.cracia.in or purchases products and services from us (the “Platform”). This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you interact with the Platform, including when you browse our catalogue, create an account, submit an optical prescription, place an order, or contact our support team.

By accessing or using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

2. Information We Collect

2.1 Information You Provide to Us

• Account information: name, email address, mobile number, delivery address, and password.
• Order information: billing details, shipping address, and order history.
• Optical prescription data: sphere (SPH), cylinder (CYL), axis, addition (ADD), pupillary distance (PD), and any prescription document or optometrist’s note you upload or enter.
• Payment information: processed through our third-party payment gateway partner; we do not store your full card, UPI, or net-banking credentials on our servers.
• Communications: information you provide when you contact customer support, respond to surveys, or write a product review.

2.2 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, referring URLs, pages viewed, and time spent on the Platform.
• Cookies and similar technologies: used to remember your preferences, maintain your cart, and analyse Platform performance. You may control cookies through your browser settings.
• Location data: approximate location derived from your IP address, used to estimate delivery timelines and applicable taxes.

3. Sensitive Personal Data: Your Optical Prescription

Because Cracia sells made-to-order prescription lenses, we necessarily collect optical prescription details. This information is accessed only by authorised personnel and laboratory partners directly involved in manufacturing, quality control, and dispatch of your order. We retain prescription data only for as long as necessary to fulfil your order, provide after-sales support, and comply with applicable law.

4. How We Use Your Information

• To process, manufacture, and deliver your order accurately, including verifying prescription details with you where necessary.
• To create and manage your account and provide customer support.
• To send order confirmations, shipping updates, and service communications.
• To send promotional offers and product updates, where you have opted in; you may unsubscribe at any time.
• To improve the Platform, detect fraud, and maintain the security of our systems.
• To comply with applicable legal, regulatory, and tax obligations, including GST invoicing requirements.

5. Disclosure of Information

We do not sell, rent, or trade your personal information. We may share information with:

• Logistics and courier partners, to enable delivery of your order.
• Payment gateway providers, to process payments securely.
• Manufacturing laboratory partners, solely for the purpose of producing your prescription lenses.
• Communication service providers (SMS/WhatsApp/email), to send order and service updates.
• Government authorities or regulators, where required by law, court order, or to protect our legal rights.
• A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to equivalent confidentiality protections.

6. Data Security

We implement industry-standard administrative, technical, and physical safeguards designed to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (SSL/TLS), restricted internal access, and secure payment processing through PCI-DSS compliant partners. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information for as long as your account remains active, or as needed to provide you services, comply with legal obligations, resolve disputes, and enforce our agreements. Prescription and order records may be retained for a minimum period as required under applicable Indian tax and consumer protection laws.

8. Your Rights and Choices

• Access and review the personal information associated with your account.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated data, subject to statutory retention requirements.
• Opt out of marketing communications at any time via the unsubscribe link or by contacting support.
• Withdraw consent for optional data processing, where applicable.

To exercise any of these rights, please contact us using the details in Section 12.

9. Cookies Policy

The Platform uses essential cookies (required for cart and checkout functionality), performance cookies (to analyse traffic and usage patterns), and, where enabled, marketing cookies (to personalise offers). You may disable non-essential cookies through your browser settings; disabling essential cookies may affect Platform functionality.

10. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policy of any third-party website you visit.

11. Children’s Privacy

The Platform is intended for use by individuals who are at least 18 years of age, or who are accessing the Platform under the supervision of a parent or legal guardian for the purpose of purchasing prescription eyewear for a minor. We do not knowingly collect personal information directly from children without appropriate parental consent.

12. Grievance Officer and Contact Information

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the contact details of the Grievance Officer are provided below:

We aim to acknowledge grievances within 48 hours and resolve them within 30 days of receipt, in accordance with applicable law.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be indicated by an updated “Effective Date” and will be effective as soon as it is accessible on the Platform. We encourage you to review this Privacy Policy periodically.