Privacy Policy
Last updated: January 2025
DermScience ("we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. Please read this document carefully.
1. Information We Collect
We may collect the following categories of personal data when you use our website or contact us:
- Contact Information: Name, email address, and any message content you provide via our contact form.
- Usage Data: IP address, browser type and version, pages visited, time and date of visit, time spent on pages, referring URL, and other diagnostic data collected automatically via cookies and analytics tools.
- Communications: Records of correspondence you initiate with us, including emails and contact form submissions.
We do not collect payment information, government identification, or sensitive personal data (such as health records) unless you voluntarily provide it in a message.
2. How We Use Your Information
We use the data we collect for the following purposes:
- To respond to your enquiries and provide customer support.
- To analyse website traffic and improve the functionality and content of our site.
- To maintain the security and integrity of our website.
- To comply with legal obligations to which we are subject.
- To send you updates or newsletters, only where you have provided explicit consent.
We do not sell, trade, or rent your personal data to third parties for their marketing purposes.
3. Legal Basis for Processing (GDPR)
Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:
- Legitimate Interests: Processing necessary for our legitimate business interests (e.g., website analytics, fraud prevention), provided these are not overridden by your rights.
- Contract: Processing necessary to fulfil a request or obligation you have entered into with us.
- Consent: Where you have given us your explicit consent (e.g., newsletter sign-up, cookie acceptance). You may withdraw consent at any time.
- Legal Obligation: Processing required to comply with applicable law.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to monitor activity on our website and retain certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. For full details, please read our Cookie Policy.
5. Third-Party Services
We may use trusted third-party service providers to assist in operating our website or conducting our business. These parties have access to your personal data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose. Third-party services may include:
- Web analytics providers (e.g., Google Analytics)
- Email delivery services
- Website hosting providers
Links to external websites on our site are not governed by this Privacy Policy. We encourage you to review the privacy policies of any third-party sites you visit.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Contact form data is typically retained for up to 24 months. Analytics data is retained in line with the applicable service's default settings.
7. Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data under certain conditions.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Request transfer of your data in a machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, please contact us via our Contact Page. We will respond within 30 days.
8. International Data Transfers
If you are located outside the country where our servers are based, your information may be transferred to and maintained on computers located outside your state, province, country or other governmental jurisdiction where data protection laws may differ. We ensure that any such transfers are subject to appropriate safeguards.
9. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can take appropriate action.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated date. You are advised to review this page periodically. Continued use of our website after changes are posted constitutes your acknowledgement of those changes.
11. Contact
If you have questions about this Privacy Policy or our data practices, please contact us:
DermScienceEmail: [email protected]
Contact Form: Contact Page