Privacy policy

This website is operated by Dermatoys, doing business as Dermatoys. We are committed to maintaining the trust and confidence of our visitors and customers.

This Privacy Policy outlines how we collect, use, and protect your personal data when you interact with Dermatoys.com.

1. Information We Collect

Identity Data: First name, last name, username
Contact Data: Billing address, delivery address, email address, phone number
Financial Data: We do not store card details. Payments are processed by PCI-DSS compliant partners. We only receive transaction IDs and payment status.
Technical Data: IP address, browser type, time zone, and location data
Usage Data: Pages visited, time spent on site, referring URLs

2. How We Use Your Data

To register you and manage your account
To process and fulfil your orders, including payments and shipping
To send order confirmations, shipping updates, and delivery notifications via SMS, WhatsApp, or email
To notify you of changes to our terms or this policy
To send promotional communications (only with your consent — unsubscribe at any time by emailing support@dermatoys.com or clicking "unsubscribe" in any email)
To improve our website, products, and customer experience

3. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, remember preferences, and analyse site traffic. This includes:

Essential cookies: Required for the website to function correctly
Analytics cookies: We use Google Analytics to understand how visitors interact with our site. You can opt out at google.com/settings/ads
Marketing cookies: Used for remarketing on Google and other platforms

You can manage or disable cookies through your browser settings.

4. Data Sharing & Third Parties

We do not sell, trade, or rent your personal data. We share data only with:

Logistics partners: For order fulfilment and delivery
Payment processors: For secure, encrypted transaction processing
Analytics providers: Google Analytics and similar tools
Marketing platforms: For serving relevant ads (remarketing)
Legal authorities: When required to comply with applicable law

5. Data Retention

We retain your personal data for as long as necessary and as required by applicable Indian law. Order data is typically retained for 7 years for tax and compliance purposes.

6. Data Security

We implement SSL encryption and other appropriate security measures to protect your personal data from unauthorised access, use, or disclosure.

7. Children's Privacy

Our services are not intended for children under 18. If we learn we have collected data from a minor without parental consent, we will delete it immediately.