Last updated: 30/04/2020

    This Privacy Policy explains how TrueDermo (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit or make a purchase on truedermo.com (the “Site”).

    1. Information We Collect

    We collect the following categories of information:

    • Contact & account information: name, email address, phone number, billing and shipping address.
    • Order information: products purchased, order history, payment method (we do not store full card details- payments are processed by our payment provider).
    • Health-related information you provide at checkout: date of birth, whether you have allergies (and details if so), whether you drink alcohol or smoke, and optionally your physician’s name, contact number, and clinic. This information is collected solely to help ensure the products you order are appropriate for you, and is treated as sensitive information under Section 6 below.
    • Technical information: IP address, browser type, device information, and browsing behavior on the Site, collected automatically via cookies and similar technologies.

    2. How We Use Your Information

    We use your information to:

    • Process, fulfil, and deliver your orders
    • Communicate with you about your order, including shipping and tracking updates
    • Provide customer support
    • Detect and prevent fraud
    • Comply with legal and regulatory obligations
    • Improve the Site and, where you have opted in, send you marketing communications

    3. Legal Basis for Processing

    Where applicable law requires a legal basis for processing (such as under the GDPR), we rely on: performance of a contract (to fulfil your order), legitimate interests (to prevent fraud and improve our Site), legal obligation (such as tax and regulatory recordkeeping), and, for health-related data and marketing communications, your explicit consent.

    4. How We Share Your Information

    We do not sell your personal information. We share information only with:

    • Shipping and courier partners, to deliver your order
    • Payment processors, to complete your transaction
    • Service providers who help us operate the Site (e.g. hosting, email delivery), under confidentiality obligations
    • Regulators or authorities, where required by law

    5. Cookies & Tracking

    We use cookies and similar technologies to keep your cart working, remember your preferences, and understand how visitors use the Site. You can control cookies through your browser settings; disabling them may affect Site functionality.

    6. Health-Related Information

    The medical information collected at checkout (allergies, date of birth, alcohol/smoking status, physician details) is sensitive personal information. We collect it only with your explicit consent at the point of checkout, use it only to help ensure the suitability of products you order, and do not use it for marketing or share it with any third party except where necessary to fulfil your order or where required by law. You may decline to provide optional fields in this section; some information may be required to complete certain orders.

    7. Data Retention

    We retain your personal information for as long as necessary to fulfil the purposes described in this Policy, including to meet legal, accounting, or reporting requirements. Order and health-related checkout information is retained for 7 years in line with our regulatory recordkeeping obligations, unless a shorter period is required by law.

    8. Data Security

    We use industry-standard measures, including SSL encryption at checkout, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

    9. Your Rights

    Depending on your location, you may have the right to access, correct, delete, or restrict the use of your personal information, and to withdraw consent where processing is based on consent (such as the health information described in Section 6). To exercise these rights, contact us using the details in Section 13.

    10. International Data Transfers

    We are based in India. If you are located outside India, your information will be transferred to, stored, and processed in India or other locations where our service providers operate. We take steps to ensure your information is protected wherever it is processed.

    11. Children’s Privacy

    This Site is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us so we can delete it.

    12. Changes to This Policy

    We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “13/08/2026” date.

    13. Contact Us / Grievance Officer

    For questions about this Privacy Policy or to exercise your rights over your personal information, contact:
    Email: [email protected]