Introduction

Last updated: 26 June 2026

This Privacy Policy explains how AS-SIMEKS DOOEL Skopje, trading as AS OPTIK ("AS OPTIK", "we", "us", "our"), collects, uses, stores, protects, and shares your personal data when you use:

• our website shop.optikaas.com
• the AS OPTIK mobile application for iOS
• our optical stores
• our eye-care services
• our customer support services
• any related online or offline services we provide.

We are the data controller of your personal data.

By using our services, you acknowledge that you have read this Privacy Policy.

Information We Collect

3. Scope of this Policy

This Privacy Policy applies to:

• our website
• our iOS application
• purchases made online
• purchases made in our stores
• eye examinations
• optical services
• repair services
• customer accounts
• loyalty program
• communications with us.

Depending on how you interact with us, we may collect different categories of information.

4.1 Account Information

When you create an account we may collect:

• First name
• Last name
• Email address
• Phone number
• Password (stored only as a secure hash)
• Date of birth
• Customer ID
• Loyalty number

4.2 Social Login

If you sign in using:

• Apple
• Google
• Facebook

we receive information supplied by that provider, including:

• Name
• Email address
• Unique provider ID

We never receive your Apple, Google or Facebook password.

4.3 Contact Information

When placing orders or booking appointments we may collect:

• Shipping address
• Billing address
• Country
• City
• Postal code

4.4 Orders

We collect:

• Products purchased
• Order history
• Invoice information
• Discounts
• Coupons
• Loyalty rewards
• Purchase dates
• Payment status

4.5 Eye Examination Data

Because we provide professional optical services, we process health-related information necessary to provide eye-care.

This may include:

• Sphere (diopter)
• Cylinder
• Axis
• Addition
• Prism
• Pupillary Distance (PD)
• Near vision prescription
• Distance vision prescription
• Contact lens prescription
• Visual acuity
• Prescription history
• Eye examination history
• Lens recommendations
• Frame recommendations

Health information receives additional protection because it is considered sensitive personal data.

4.6 Clinical Notes

Our ophthalmologists and opticians may record:

• Clinical observations
• Diagnoses
• Recommendations
• Treatment notes
• Examination findings
• Anamnesis
• Follow-up recommendations

4.7 Uploaded Documents

You may upload documents including:

• Prescriptions
• Eye examination reports
• Insurance cards
• Referral letters
• Identification documents
• Medical reports
• Other files you choose to attach.

4.8 Appointments

When booking appointments we process:

• Appointment date
• Appointment time
• Store location
• Requested service
• Assigned optician or doctor
• Appointment history

4.9 Repairs

If you submit eyewear for repair we may collect:

• Repair description
• Product details
• Serial number
• Photos of the damaged item
• Repair progress
• Repair history

4.10 Family Accounts

Our family feature allows users to manage family members, including children.

Family profiles may include:

• Name
• Date of birth
• Eye prescriptions
• Appointments
• Orders
• Medical history
• Repair records

You confirm that you are legally authorized to manage any dependent you add.

4.11 Loyalty Program

If you join our loyalty program we collect:

• Loyalty card number
• Membership level
• Reward points
• Purchase history
• Reward redemption history

If you add your loyalty card to Apple Wallet, we store only the information necessary to keep the pass updated.

4.12 Payment Information

We never store:

• Full card number (PAN)
• CVV/CVC security code

Payments are processed by certified payment providers.

If you save a payment card we store only:

• Payment token
• Card brand
• Last four digits
• Expiration month
• Expiration year
• Cardholder name

These tokens cannot be used to reconstruct your payment card.

4.13 Device Information

We automatically collect technical information including:

• Device model
• Device identifier
• Operating system
• Browser
• App version
• IP address
• Language
• Time zone
• Crash reports
• Diagnostic logs

4.14 Usage Information

We may collect:

• Pages viewed
• Products viewed
• Searches
• Wishlist activity
• Shopping cart activity
• Time spent
• Features used
• Referral source

4.15 Push Notifications

If enabled, we collect your device push notification token in order to send:

• Order updates
• Appointment reminders
• Repair notifications
• Loyalty updates
• Marketing notifications (only with your consent)

You can disable notifications at any time in your device settings.

4.16 Location Information

The iOS application requests location only when you choose Use Current Location.

Location is used once to:

• determine your address
• autofill checkout information

We do not continuously monitor your location and we do not perform background location tracking.

4.17 Camera Permissions

The application requests camera access only when you use features requiring the camera, including:

• Virtual Try-On
• Face Scan
• PD Measurement
• QR Code scanning

You may revoke camera permission at any time in your device settings.

4.18 Face Measurements and Virtual Try-On

Our application uses Apple's camera technologies, including ARKit and, on supported devices, the TrueDepth camera, to provide:

• Virtual eyeglass try-on
• Face shape analysis
• Face width estimation
• Pupillary Distance (PD) estimation
• Frame size recommendations

These measurements are processed locally on your device.

They are not uploaded, stored, or shared with our servers unless you explicitly choose to save the results to your account.

We do not use face data for identification, biometric authentication, advertising, or profiling.

4.19 Contact Lens Tracker

Our application includes a contact lens tracker allowing you to record:

• Lens replacement schedule
• Daily wear duration
• Reminder preferences

Unless synchronized by you in the future, this information remains stored locally on your device.

How We Use Your Information

We use your personal data only for legitimate business purposes and in accordance with applicable data protection laws.

We may use your information to:

• Create and manage your account.
• Authenticate your identity.
• Process and fulfill orders.
• Deliver products.
• Provide eye-care and optical services.
• Manage eye examinations.
• Store and manage prescriptions.
• Book and manage appointments.
• Process eyewear repairs.
• Operate our loyalty program.
• Process returns, refunds and exchanges.
• Respond to customer support requests.
• Improve our website and mobile application.
• Detect fraud and unauthorized activity.
• Protect our systems against abuse.
• Send service-related communications.
• Send marketing communications where you have provided consent.
• Comply with legal obligations.
• Enforce our Terms and Conditions.

6. Legal Bases for Processing

Depending on the purpose, we rely on one or more of the following legal bases.

Contract

We process your information because it is necessary to:

• create your account;
• process your purchases;
• deliver products;
• manage appointments;
• perform repairs;
• provide customer support.

Consent

We rely on your consent for:

• marketing emails;
• promotional push notifications;
• analytics cookies;
• advertising cookies;
• optional health information where required by law;
• saving face measurements to your account;
• newsletter subscriptions.

You may withdraw your consent at any time.

Withdrawal of consent does not affect processing already carried out before consent was withdrawn.

Legal Obligations

We process certain information because we are legally required to do so, including:

• accounting obligations;
• tax requirements;
• warranty obligations;
• responding to lawful requests from authorities;
• maintaining records required by applicable law.

Legitimate Interests

We also process information where necessary for our legitimate interests, including:

• improving our products;
• preventing fraud;
• preventing abuse;
• network security;
• protecting our customers;
• protecting our legal rights;
• improving customer experience;
• measuring website performance.

7. Health Information

Because AS OPTIK provides optical and eye-care services, we process health-related personal information.

Health information is treated with enhanced security and confidentiality.

We process health information only:

• with your explicit consent;
• where necessary to provide healthcare services;
• where otherwise permitted by applicable law.

Only authorized personnel who require access to provide services may access this information.

8. Face Data

Our application includes augmented reality features and measurement tools.

Face-related information may include:

• face width;
• face shape;
• pupillary distance (PD);
• estimated frame size.

These measurements are generated locally using your device.

Unless you choose to save them:

• they are not uploaded;
• they are not stored by AS OPTIK;
• they are not shared with third parties.

We do not use facial information to identify users.

We do not perform facial recognition.

We do not build biometric profiles.

We do not sell face data.

We do not use face data for advertising.

9. Children's Privacy

Our services are intended for general audiences.

Children should not create accounts without the involvement of a parent or legal guardian.

Parents and legal guardians may create and manage profiles for dependent children using our Family feature.

By creating a dependent profile, you confirm that:

• you are the parent or legal guardian; or
• you otherwise have legal authority to manage that person's information.

If we discover that personal information has been collected without appropriate authorization, we will delete the information as soon as reasonably possible.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve functionality, remember preferences, analyze usage, and provide personalized content.

Cookies may be:

Strictly Necessary

These cookies are required for:

• login;
• shopping cart;
• checkout;
• fraud prevention;
• security;
• website functionality.

These cookies cannot be disabled because the website cannot function properly without them.

Functional Cookies

Functional cookies remember:

• preferred language;
• currency;
• recently viewed products;
• saved preferences;
• wishlist items;
• login session.

Analytics Cookies

With your consent we may use analytics services including:

• Google Analytics;
• Google Tag Manager;
• Microsoft Clarity.

Analytics cookies help us understand:

• visitor behavior;
• popular products;
• performance;
• errors;
• navigation patterns.

Marketing Cookies

With your consent we may use marketing technologies including:

• Meta Pixel;
• Meta Conversions API;
• Meta App Events SDK;
• LinkedIn Insight Tag.

These technologies help us:

• measure advertising;
• personalize advertisements;
• understand campaign performance;
• show relevant promotions.

You may withdraw your cookie consent at any time through our cookie settings.

11. Third Parties We Share Information With

We never sell or rent your personal information.

We share information only when necessary to provide our services or comply with legal obligations.

Categories of recipients include:

Payment Providers

• Bankart
• IXOPAY
• Apple Pay

for secure payment processing.

Financing

If you apply for installment financing, necessary information is shared with:

• IuteCredit

to evaluate your financing application.

IuteCredit acts as an independent data controller for information required to assess your application.

Delivery Companies

Courier services receive only the information necessary to deliver your order, including:

• recipient name;
• delivery address;
• phone number;
• order reference.

Authentication Providers

If you use social login, information is exchanged with:

• Apple
• Google
• Facebook

only to authenticate your account.

Notification Services

Push notifications are delivered using Apple's Push Notification service (APNs).

Only your device notification token is used for this purpose.

Analytics Providers

We may share limited information with:

• Google Analytics
• Microsoft Clarity

to understand website and application performance.

Advertising Providers

With your consent we may share limited information with:

• Meta
• LinkedIn

Customer information such as email address, phone number and name may be securely hashed before transmission for advertising measurement and audience matching.

Security Providers

We use Cloudflare services for:

• website security;
• content delivery;
• bot protection;
• DDoS protection.

Cloud Service Providers

Our hosting and cloud providers process information necessary to operate our services securely.

Healthcare Professionals

Authorized ophthalmologists, optometrists and opticians employed or engaged by AS OPTIK may access your health information only when necessary to provide your eye-care services.

Legal Authorities

We may disclose information where required:

• by law;
• by court order;
• to investigate fraud;
• to protect our legal rights;
• to protect the safety of our customers or others.

Data Security

12. International Transfers

Some of our service providers operate internationally and may process personal data outside North Macedonia, including within the European Economic Area (EEA), the United States, or other countries where they maintain infrastructure.

These providers may include, for example:

• Apple
• Google
• Meta
• Microsoft
• Cloudflare
• IXOPAY
• Bankart
• Other cloud and technology providers

Where personal data is transferred internationally, we implement appropriate safeguards in accordance with applicable data protection laws. These safeguards may include:

• Standard Contractual Clauses (SCCs);
• adequacy decisions where available;
• contractual obligations requiring appropriate security measures; or
• other legally recognized transfer mechanisms.

13. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal obligations.

Retention periods may include:

Customer Accounts

Your account information is retained until you delete your account or request its removal, unless we are legally required to retain certain information.

Orders

Order records are retained for the period required under applicable accounting and tax laws.

Eye Examination Records

Prescription information, examination history and related healthcare records are retained for the period required by applicable healthcare and legal obligations.

Repair Records

Repair information is retained for warranty, customer service and legal purposes.

Marketing

Marketing preferences are retained until you unsubscribe or withdraw your consent.

Analytics

Analytics information is retained according to the retention periods configured within the respective analytics platforms.

When information is no longer required, it is securely deleted, anonymized or otherwise disposed of using appropriate methods.

14. Security of Your Information

We take the protection of your personal information seriously and implement appropriate technical and organizational security measures.

These measures include, where appropriate:

• encrypted HTTPS connections;
• encryption of sensitive information;
• secure password hashing;
• access controls;
• role-based permissions;
• secure payment tokenization;
• firewall protection;
• intrusion prevention;
• Cloudflare security services;
• bot protection;
• regular software updates;
• monitoring for suspicious activity;
• backup and disaster recovery procedures.

Although we work hard to protect your information, no system connected to the Internet can guarantee absolute security.

15. Your Rights

Subject to applicable law, you may have the following rights regarding your personal information.

Right of Access

You may request confirmation of whether we process your personal information and obtain a copy of that information.

Right to Rectification

You may request correction of inaccurate or incomplete information.

Right to Erasure

You may request deletion of your personal information where applicable.

Certain information may need to be retained to comply with legal obligations.

Right to Restrict Processing

You may request that we temporarily restrict the processing of your information in certain circumstances.

Right to Object

You may object to processing based on our legitimate interests.

Right to Data Portability

Where legally applicable, you may request a copy of your information in a structured, commonly used and machine-readable format.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to Lodge a Complaint

If you believe your privacy rights have been violated, you may lodge a complaint with the competent data protection supervisory authority in North Macedonia.

16. Marketing Communications

We send marketing communications only where permitted by law or where you have provided your consent.

Marketing communications may include:

• promotional emails;
• newsletters;
• promotional push notifications;
• special offers;
• loyalty rewards;
• product announcements.

You can stop receiving marketing communications at any time by:

• clicking the unsubscribe link in any marketing email;
• updating your account preferences;
• disabling notifications in your device settings; or
• contacting us directly.

Service-related communications, such as order confirmations, appointment reminders, repair updates, and security notifications, are not considered marketing and may continue to be sent where necessary.

17. Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects based solely on automated processing.

Our recommendation features, including virtual frame recommendations and product suggestions, are intended only to assist you and do not replace professional advice from our opticians or ophthalmologists.

18. Third-Party Websites

Our website and mobile application may contain links to third-party websites or services.

We are not responsible for the privacy practices, content or security of third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes in applicable laws;
• new products or services;
• improvements to our systems;
• changes to our data processing activities; or
• other operational or legal requirements.

When we make material changes, we will update the "Last updated" date at the top of this Privacy Policy.

Where required by law, we will notify you of significant changes using appropriate methods.

20. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

AS-SIMEKS DOOEL Skopje
Trading as AS OPTIK

Email: optika.as@live.com

Tax Number: MK4030992156202

Registration Number: 4541367

Phone: +389 78 335 229

Website: https://shop.optikaas.com

21. Summary

By using the AS OPTIK website, mobile application, optical stores or related services, you acknowledge that you have read and understood this Privacy Policy.

We are committed to protecting your privacy, safeguarding your personal information, and processing your data responsibly, transparently and in accordance with applicable data protection laws.