Privacy Policy

Lazuli ("Lazuli", "we", "us", or "our") builds mission-critical software for healthcare, education, and commerce — including Copula (hospital management), Lazuli UMS (university management), and Telos ERP — and operates the public website at https://lazuli.af (the "Site").

This Privacy Policy explains what personal information we collect when you visit the Site or contact us, how we use and protect it, and the choices available to you. It applies to the Site only. If you are a customer or end user of Lazuli software deployed at your organisation, your institution's own policies and your software licence or services agreement govern how operational and patient/student/business data is handled on your servers.

Lazuli is an Afghan software company based in Kabul. For privacy-related questions or requests, contact us at:

Email: support@lazuli.af
Sales enquiries: sales@lazuli.af
Phone: +93 796 522 586
Address: Kabul, Afghanistan, Shar-e-Naw Near Hanzala Mosque

We collect only the information you choose to provide and a small amount of technical data needed to operate the Site securely.

Information you submit: When you use our contact form, request a demo, or book a consultation, we collect your name, email address, enquiry type (demo, consultation, or general contact), and any optional fields you complete — typically phone number, organisation name, product of interest, and message. We may also record the page you came from (source path) and your browser language preference (locale) to understand context and respond appropriately.

Information collected automatically: Our servers may log standard technical data such as IP address, browser type, request time, and pages requested. This is used for security, troubleshooting, and service reliability — not for advertising profiles.

We do not use third-party advertising trackers, social-media pixels, or analytics services (such as Google Analytics) on the public Site.

We use the information described above to:

• Respond to your enquiry and follow up by email or phone where you have provided contact details;
• Route demo and consultation requests to the appropriate member of our team;
• Send an internal notification to our sales mailbox when a new enquiry is received;
• Maintain a record of enquiries in our customer relationship system (admin area) so we can track status (new, contacted, qualified, closed);
• Protect the Site against spam and abuse (including automated submissions detected via a hidden honeypot field);
• Improve the Site and our services based on aggregated, non-identifying patterns.

We do not sell your personal information. We do not use your enquiry data for unrelated marketing without your consent.

We process enquiry and contact data because it is necessary to respond to your request and to take steps at your request before entering into a contract for software or services. Where applicable law requires a legal basis, we rely on legitimate interests in operating our business, communicating with prospective customers, and securing our systems — balanced against your rights, which you may exercise as described below.

Enquiry records submitted through the Site are retained in our database for as long as needed to manage the sales and support relationship, comply with legal obligations, and resolve disputes. You may ask us to delete an enquiry that is no longer required, subject to any retention we must maintain for legal or accounting purposes.

Server logs are retained for a limited period appropriate for security and diagnostics, then rotated or deleted.

We apply reasonable technical and organisational measures to protect information submitted through the Site, including encrypted connections (HTTPS), access controls on administrative systems, and secure handling of credentials. No method of transmission or storage is completely secure; if you believe your interaction with us has been compromised, please contact support@lazuli.af promptly.

We do not sell or rent personal information. We may share information only in these limited circumstances:

• Service providers who host or operate infrastructure for lazuli.af and api.lazuli.af (for example, hosting and email delivery), bound by confidentiality and only to the extent needed to provide the service;
• Professional advisers (lawyers, accountants) where required and subject to duty of confidentiality;
• Authorities when required by applicable law or to protect our rights, users, or the public.

Our outbound email notifications for new enquiries are sent via our configured mail server to addresses we control (for example sales@lazuli.af).

The public marketing pages of lazuli.af do not set advertising or analytics cookies.

If you sign in to the Lazuli admin area at /admin, we use an httpOnly session cookie to keep you authenticated. That cookie is strictly necessary for CMS access and is not used to track visitors on public pages. You can clear cookies through your browser settings; signing out of admin ends the session.

Copula, Lazuli UMS, Telos ERP, and related modules are typically deployed on hardware controlled by your organisation. In those deployments, operational data — including patient, student, employee, and business records — resides on your systems, not on Lazuli's public website servers.

Data handling for deployed software is defined in your implementation agreement, support contract, and your organisation's policies. Lazuli personnel may access your environment only with your authorisation, for implementation, support, or agreed maintenance. If you need a data processing addendum or specific security documentation for procurement, contact sales@lazuli.af.

Depending on applicable law, you may have the right to request access to, correction of, or deletion of personal information we hold about you from Site enquiries; to object to or restrict certain processing; and to withdraw consent where processing is consent-based.

To exercise these rights, email support@lazuli.af with enough detail for us to identify your enquiry. We will respond within a reasonable time. You may also opt out of further follow-up communication by telling us in your reply.

The Site is operated from Afghanistan and intended primarily for organisations in Afghanistan and the region. If you access the Site from another country, your information may be processed in Afghanistan and on infrastructure we use to host the Site. By submitting information, you acknowledge that protections may differ from those in your home jurisdiction.

We may update this Privacy Policy from time to time. The "Last updated" date shown on this page reflects the most recent revision. Material changes will be posted on this page; we encourage you to review it periodically.

For privacy enquiries, data requests, or questions about this policy:

Email: support@lazuli.af
Postal: Lazuli, Shar-e-Naw Near Hanzala Mosque, Kabul, Afghanistan