Privacy Policy

Last Updated: June 2026

1. About This Policy

Skin Series is a doctor-led medical aesthetics clinic. This Privacy Policy explains what personal data we collect, why we collect it, the specific lawful basis on which we process it, who we share it with, how long we keep it, and what rights you have under Indian law.

This Policy applies to:

• Visitors to our website at www.lightsalmon-giraffe-828565.hostingersite.com
• Individuals who submit enquiry, contact, or skin assessment forms through our website
• Patients and prospective patients who book appointments or attend consultations at our clinic

This Policy does not cover data processed by third-party websites that may be linked from our website. We have no control over those sites and encourage you to read their privacy notices separately.

2. Identity of the Data Fiduciary

Under the Digital Personal Data Protection Act 2023 ("DPDP Act"),SKIN SERIES WELLNESS LLP acts as the Data Fiduciary in respect of all personal data described in this Policy. The Data Fiduciary determines the purpose and means of processing.

3. Governing Legal Framework

This Policy is drafted to comply with the following Indian legal instruments:

• Digital Personal Data Protection Act 2023 ("DPDP Act")
• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules")

4. Personal Data We Collect

4.1 Personal Data

Information that identifies or is reasonably capable of identifying you as an individual, including:

• Full name
• Email address
• Mobile or telephone number
• Appointment booking details (date, time, treatment type)
• Communication history (emails, messages, enquiry form submissions)

4.2 Sensitive Personal Data

Under the SPDI Rules 2011, the following constitutes sensitive personal data and is handled with heightened care and security:

• Skin concerns, skin type, and aesthetic treatment goals disclosed via our quiz or consultation forms
• Health-related disclosures made voluntarily in the course of completing a skin assessment or during clinical consultation
• Clinical records, treatment notes, and before/after photographs taken for clinical purposes (in-clinic only)

4.3 Technical Data

Data collected automatically through your use of our website, including IP address (anonymised within 90 days), browser type, device type, and referral source.

5. Processing Activities, Purposes, and Lawful Basis

6. Third-Party Service Providers

7. Cross-Border Data Transfers

Our primary operations and data storage are located within India. Transfers outside India are made only to countries notified by the Central Government or with equivalent contractual protections.

8. Data Security

We implement technical and organisational security measures including HTTPS encryption, access controls, and use of HIPAA-compliant platforms. In case of a breach, we will notify the Data Protection Board of India.

9. Processing of Children's Personal Data

Our services are intended for individuals aged 18 and above. We do not knowingly collect data from minors without verifiable parental consent.

10. Your Rights as a Data Principal

11. Grievance Officer

12. Data Retention

We do not retain personal data beyond the period necessary for the purpose. Clinical records are retained for a minimum of 7 years.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of our website constitutes acknowledgement of the revised terms.