PRIVACY POLICY

1. Company Details

Legal Entity: Truviska Pharmaceutical Private Limited
CIN: U46497GJ2025PTC165147
GSTIN: 24AAMCT0771G1ZB
Registered Office: B-808, Titanium Square, Thaltej Cross Road, Sarkhej-Gandhinagar Highway, Thaltej, Ahmedabad, Gujarat – 380054, India
Website: www.dermaviska.com
Customer Support Email: dermaviskaconnect@gmail.com
Customer Support Number: +91 97250 22666
Business Hours: Monday to Saturday, 10:00 AM – 7:00 PM (IST)

2. Purpose & Scope of Policy

This Policy explains what information we collect, why we collect it, how we use it, with whom we share it, how we protect it, and your rights under the DPDP Act 2023. This Policy applies to all website visitors, registered customers, newsletter subscribers, and individuals contacting customer support.

3. Information We Collect

Depending on your interaction with Dermaviska, we collect:

• Personal Identification: Full Name, Gender (optional), Date of Birth (optional), Customer ID.
• Contact Information: Mobile number, Email address, Shipping and Billing address, PIN code, City, State.
• Account Information: Login credentials, encrypted password, saved addresses, wishlist items, order history.
• Order & Transaction Information: Purchased products, invoice details, order value, shipping status, return/refund requests.
• Payment Confirmation Data: Processed securely via authorized gateway providers (Razorpay). Dermaviska does not store card numbers, CVV, or UPI PINs.
• Technical & Usage Data: IP address, browser type, device OS, navigation path, clickstream, and session metrics.

4. Information We Never Intentionally Collect

Dermaviska does not intentionally collect Aadhaar numbers, PAN details, Passport details, Biometric data, or financial passwords.

5. Lawful Basis for Processing

We process personal data based on your consent, performance of a contract (order fulfillment), compliance with statutory tax/accounting legal obligations, and legitimate operational interests recognized under Indian law.

6. Sharing of Personal Data

Dermaviska does not sell your personal data to third parties. We share data only with authorized logistics partners (for order delivery), payment gateway service providers (Razorpay), cloud infrastructure vendors, and government/legal authorities when required by lawful court order.

7. Security Measures

We implement SSL/TLS encryption, secure payment processing, firewall protections, restricted employee access controls, role-based database permissions, anti-malware monitoring, and secure cloud backups.

8. Data Retention

We retain personal data only for as long as necessary to fulfill order processing, resolve customer support inquiries, and comply with tax and statutory accounting record requirements under Indian law.

9. Data Principal Rights under DPDP Act, 2023

Subject to applicable law, you have the right to access your personal data, request correction of inaccurate records, request deletion of data no longer required, withdraw consent for marketing communications, and register grievances with our designated Grievance Officer.

10. Grievance Redressal & Officer Contact

If you have any questions, concerns, or grievances regarding your privacy or personal data processing, please contact: