Who we are
This website and the clinics it describes are run by OrnaSkin Aesthetic Centre LLP (“OrnaSkin”, “we”, “us”), a dermatology, skin, hair and laser practice in Rajkot, Gujarat. Our clinics are OrnaSkin Madhur Nagar (Pandit Dindayal Upadhyay Road, Madhur Nagar, Rajkot 360001) and OrnaSkin Radhakrishnan Marg (First Floor, Nakshatra IV, Dr Radha Krishnan Marg, Rajkot 360001).
We are the “data fiduciary” for the personal data described here, as the term is used in India’s Digital Personal Data Protection Act, 2023 (the DPDP Act).
What this policy covers
It covers personal data we receive through this website (including our online shop and newsletter), by phone or WhatsApp, and when you visit one of our clinics for a consultation or treatment.
What we collect
- Contact details you give us: your name, mobile number, and anything you write in a message, for example the clinic and day you prefer.
- Health information, at the clinic: your medical history, the findings of your examination, diagnoses, prescriptions, treatment records, consent forms and test results.
- Clinical photographs: photos of the treated area, taken to plan and track your treatment. They are part of your medical record.
- Payment records: what was paid and how, for accounts and tax purposes.
- Shop orders: if you buy from our online shop, your name, mobile number, delivery address, the products ordered and, if you give it, your email address for the receipt.
- Your email address, if you subscribe to our newsletter, with the date and the place you signed up (for example the website footer or the checkout), so we can show that you agreed.
We collect only what we need to look after you and to meet our legal duties.
How this website handles your data
- The booking form does not store anything. When you press “Continue in WhatsApp”, your details are placed into a WhatsApp message on your own device. Nothing is saved on this website. Once you send the message, WhatsApp’s own terms and privacy policy apply to that conversation.
- Shop orders. While online payment is being set up, the checkout places your order into a WhatsApp message on your own device, addressed to our online orders team, as the booking form does. Once online payment is switched on, payments are handled by Razorpay, a licensed Indian payment company: you pay in Razorpay’s secure window, and OrnaSkin never sees or stores your card, UPI or bank details. Our online orders team (part of OrnaSkin’s staff) uses your order and delivery details to pack, ship and handle returns. When you pay online, the order details are sent to that team by email (through Brevo) and on WhatsApp (through Meta’s WhatsApp Business service). We keep the order record (what you bought, the amount, and the delivery details) for delivery, returns, accounts and tax.
- Newsletter. If you subscribe (in the footer, on the newsletter page or by ticking the optional box at checkout), we send you an email to confirm, and you are added only after you tap the link in it. We then email you new guides, seasonal skin advice and clinic news. Your email address is stored with our email service, Brevo (a company based in France that keeps data in the European Union), which sends the emails for us under a data-processing agreement. Like most email services, Brevo records whether an email was delivered and opened and which links were clicked; we use this only to see which topics are useful. Every email has a one-click unsubscribe link; after you unsubscribe we keep your address only on a “do not email” list, so you are not emailed again. The newsletter is separate from your care: subscribing or unsubscribing never affects your appointments or treatment, and we never use your health information to decide what to email you.
- Hosting. This website is hosted by Vercel, whose servers keep short technical logs (such as IP addresses and the pages requested) to deliver the site and protect it from abuse.
- Maps load only when you ask. The map on our clinic pages comes from Google Maps and loads only after you press “Show the map”. Google’s privacy policy then applies.
- Cookies and analytics. This website does not use advertising or tracking cookies. If we add privacy-friendly visitor statistics in future, this section will be updated before they go live.
- Links to other sites (Google, WhatsApp, social media, Amazon) are governed by those sites’ own policies.
Why we use your data
- To reply to you, book and remind you of appointments.
- To examine, diagnose, treat and follow up with you safely.
- To keep the medical records the law requires us to keep.
- To handle payments, accounts and tax.
- To deliver shop orders and handle returns.
- To send the newsletter, only if you subscribed and confirmed (you can withdraw at any time).
- To answer questions, feedback or complaints.
We do not sell your personal data, and we do not use your health information for advertising.
Photos and consent
Clinical photos are used for your care. A photo of you is shown on this website, on social media or in any publication only with your separate written consent, cropped to protect your identity unless you agree otherwise. You can withdraw that consent at any time and we will stop using the photo from then on.
Who we share it with
Only when it is needed, and only as much as is needed:
- doctors and staff at OrnaSkin involved in your care;
- a laboratory, pharmacy or another doctor, when your care requires it and with your knowledge;
- service providers who help us run the clinic and this website, under a duty of confidentiality and only for the work they do for us: for example record-keeping and messaging tools, our email service (Brevo, newsletter only), our payment company (Razorpay, shop payments) and our website host (Vercel);
- a courier, with the delivery details needed to bring your order;
- authorities, when the law requires it.
How long we keep it
We keep medical records for as long as medical regulations and other laws require, and other personal data only as long as it is needed for the purposes above. After that it is deleted or anonymised securely.
Your rights
Under the DPDP Act you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct or complete data that is wrong or out of date;
- erase data we no longer need, unless the law requires us to keep it (as it does for medical records);
- stop using data that was based on your consent, by withdrawing consent (for the newsletter, the unsubscribe link in any email does this at once);
- nominate someone to exercise these rights for you if you are unable to.
You can also raise a grievance with us (see below) and, if you are not satisfied, approach the Data Protection Board of India.
Children
We see patients under 18 only with a parent or guardian, who gives consent on their behalf.
Keeping your data safe
Records are kept with access limited to the people who need them, and we take reasonable technical and organisational steps to protect them. No system is perfectly secure, so please do not send detailed medical records through the website or social media.
Grievance officer and contact
For any question, request or complaint about your personal data, contact our grievance officer:
- Name: Ankit Thakkar, OrnaSkin Aesthetic Centre LLP
- Email: help@ornaskin.com
- Post: OrnaSkin Madhur Nagar, Pandit Dindayal Upadhyay Road, Madhur Nagar, Rajkot, Gujarat 360001
We aim to reply within a reasonable time and in any case within the period the law sets.
Changes to this policy
If we change this policy, we will update the date at the top of this page. Significant changes will be highlighted here.