Privacy Policy

1. Who We Are

DermaVue Skin Hair & Laser Institute Private Limited operates DermaVue Shop, a dermatologist-owned dermatology network with seven clinics across Kerala and Tamil Nadu. Our registered office is at TC 42, 3003-2, Poojappura Main Rd, Kesari Nagar, Poojapura, Thiruvananthapuram, Kerala 695012.

GSTIN: 32AAFCD7071G1ZU

This policy applies to dermavue.com/shop/ and any data collected while you browse, order, or contact us.

2. Data We Collect

Category	Examples	Why We Need It
Identity	Name, date of birth (if Rx)	Order fulfilment, prescription verification
Contact	Email, mobile number, shipping address	Delivery, order updates, grievance response
Order	Products, quantities, invoice data	Processing, GST records, audit
Payment	UPI ID, masked card number, transaction ID (via Razorpay)	Payment processing and reconciliation
Clinical (Rx only)	Uploaded prescription, prescribing doctor, clinical notes	Legal dispensing of Schedule H drugs
Technical	IP address, browser, device type, cookies	Security, analytics, fraud prevention

We do not collect Aadhaar, PAN, or biometric data for retail purchases.

3. How We Use Your Data

We use your data only to (a) process and deliver your order, (b) verify prescriptions where required, (c) communicate order status, (d) handle returns, refunds, and grievances, (e) comply with tax and drug-dispensing law, and (f) improve the shopping experience. We do not use your data for unsolicited marketing without your explicit opt-in.

4. Third-Party Sharing

We share the minimum data necessary with:

• Razorpay Software Pvt Ltd — payment processing and fraud checks.
• Courier partners (Delhivery, Shiprocket, DTDC, India Post) — name, address, and phone for delivery.
• The fulfilling DermaVue clinic — full order details and prescription for dispensing.
• Government authorities — only where required by law (tax authorities, drug controller, law enforcement with valid orders).

We do not sell, rent, or trade your personal data to any third party.

5. Data Retention

Order, invoice, and prescription records are retained for 8 years to comply with the Income Tax Act, GST Act, and Drugs and Cosmetics Rules. Marketing preferences and account data are retained until you request deletion. Technical logs are retained for up to 180 days.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data (subject to statutory retention)
• Withdraw consent to marketing at any time
• Port your data in a machine-readable format on request

Send requests to help@dermavue.com with your order ID. We respond within 7 business days.

7. Cookies

We use essential cookies for cart functionality and security, and analytics cookies (Google Analytics) to understand site usage in aggregate. No advertising or third-party tracking cookies are set without your consent. You can disable cookies in your browser; some features may stop working as a result.

8. Children's Data

DermaVue Shop is intended for users aged 18 and above. We do not knowingly collect data from minors. Products ordered for a minor must be placed by a parent or legal guardian, who is responsible for safe use.

9. Security

We protect your data through HTTPS (TLS 1.2+), encrypted database storage, role-based access at each clinic, periodic staff training, and PCI-DSS compliance handled by Razorpay for all payment data. Prescription uploads are stored in access-controlled storage and are reviewed only by registered medical professionals.

No system is perfectly secure. In the event of a breach likely to cause significant harm, we will notify affected users and the Indian Computer Emergency Response Team (CERT-In) within statutory timelines.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the designated Grievance Officer is:

We acknowledge grievances within 24 hours and resolve them within 15 days of receipt, as required by law.

11. Changes to This Policy

We may update this policy to reflect changes in law or our operations. The "Last updated" date at the top will change. Material changes are notified by email to active customers.