The Digital Personal Data Protection Act, 2023 (DPDP Act) governs how organizations in India collect and process personal data. SkinDost is committed to lawful, transparent, and purpose-limited processing.
Lawful processing
We process personal data based on consent (account creation, OTP verification, marketing where opted in), contractual necessity (delivering consultations), and legitimate interests (security, fraud prevention) where appropriate.
Notice
We provide clear notice through this site, in-app flows, and our Privacy Policy before collecting sensitive health-related information.
Data principal rights
You may request access, correction, or erasure of your data, nominate another person to exercise rights on your behalf in defined circumstances, and withdraw consent for consent-based processing. Submit requests to [email protected]. We will respond within timelines required by law.
Security safeguards
We implement technical and organizational measures including access controls, encrypted transport, and audit logging for authentication. Processors handling data on our behalf are bound by contractual obligations.
Children
Our services are not directed at children under 18 without parental involvement. If you believe we have collected a child's data inappropriately, contact us for deletion.
Grievances
For complaints about data handling, email [email protected]. If unresolved, you may escalate to the Data Protection Board of India as provided under the DPDP Act.