Privacy Policy

Introduction

SkinsIndia Solutions ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our edge-hosted technology services, including website hosting (WordPress, Shopify, custom solutions), cloud infrastructure, AI automation, and related services (collectively, the "Services").

This policy complies with the Information Technology Act, 2000 ("IT Act"), the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and the General Data Protection Regulation ("GDPR") where applicable.

Our Data Sovereignty Commitment: All data processing occurs on edge infrastructure located in your region. Your data never leaves your geographical location, ensuring complete data sovereignty and compliance with local data residency requirements.

1. Company Information

2. Information We Collect

2.1 Personal Data

We may collect the following categories of personal data:

• Contact Information: Name, email address, phone number, company name
• Account Information: Username, password (encrypted), billing address
• Payment Information: Payment card details, billing information (processed securely through payment gateways)
• Service Usage Data: Server usage metrics, bandwidth consumption, storage utilization
• Technical Information: IP address, browser type, operating system, device information
• Communications: Support tickets, email correspondence, chat logs

2.2 Sensitive Personal Data

As defined under the IT Act (SPDI Rules), we may collect:

• Financial information (payment details, invoices)
• Passwords and authentication credentials (encrypted)

We do NOT collect: biometric information, sexual orientation, medical records, or health information.

2.3 Automatically Collected Information

• Server logs and access logs
• Performance monitoring data
• Security and threat detection data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal data for the following purposes:

• Service Provision: To provide, maintain, and improve our edge-hosted services
• Account Management: To create and manage your user account
• Billing and Payments: To process payments and send invoices
• Customer Support: To respond to inquiries and provide technical support
• Security: To detect, prevent, and address security threats and fraud
• Service Optimization: To monitor and analyze usage patterns for service improvement
• Legal Compliance: To comply with applicable laws and regulations
• Communications: To send service notifications, updates, and marketing communications (with consent)

Edge Processing: All data processing occurs on edge servers located in your region, ensuring data sovereignty.

5. Data Sharing and Disclosure

We do NOT sell your personal data. We may share your information in the following limited circumstances:

5.1 Service Providers

• Payment processors (for billing, operating under strict data protection agreements)
• Infrastructure providers (only for edge servers in your region)
• Email service providers (for transactional emails)

Important: Third-party service providers are bound by Data Processing Agreements (DPAs) and process data only on edge infrastructure in your region.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process (court orders, subpoenas)
• Requests from government authorities
• Protection of rights, property, or safety of SkinsIndia Solutions, users, or the public

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via email and/or prominent notice on our website before your data is transferred.

6. Data Security

We implement industry-standard security measures to protect your personal data:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access control (RBAC) and multi-factor authentication (MFA)
• Network Security: Firewalls, DDoS protection, intrusion detection systems
• Regular Audits: Security audits, vulnerability assessments, and penetration testing
• Data Backups: Regular encrypted backups stored on edge infrastructure in your region
• Monitoring: 24/7 security monitoring and threat detection

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We continuously update our security practices to address emerging threats.

7. Your Rights

Under the DPDP Act 2023, GDPR, and IT Act 2000, you have the following rights:

7.1 Rights Under DPDP Act 2023

• Right to Access: Request information about personal data we process
• Right to Correction: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity
• Right to Grievance Redressal: Lodge complaints regarding data processing

7.2 GDPR Rights (for EU Data Subjects)

• Right to Object to processing
• Right to Restrict processing
• Right to lodge a complaint with supervisory authority

7.3 Exercising Your Rights

To exercise any of these rights, please contact us at:

• Email: contact@skinsindiasolutions.in
• Phone: +918900675335
• Address: KATJURIDANGA, KENDUADIHI, BANKURA, West Bengal, PIN: 722102, India

We will respond to your request within 30 days (or as required by applicable law).

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Data retained for the duration of your account
• Closed Accounts: Data retained for 90 days, then deleted (unless legal obligations require retention)
• Billing Records: Retained for 7 years (tax and accounting requirements)
• Server Logs: Retained for 90 days (security and diagnostics)
• Support Tickets: Retained for 2 years

Upon data deletion, all copies (including backups) are securely erased from edge infrastructure in your region.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies for:

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: To understand usage patterns (processed on edge servers in your region)
• Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

10. International Data Transfers

No International Transfers: Due to our edge-hosted architecture, your data does NOT leave your region. All data processing occurs on local infrastructure, eliminating the need for international data transfers.

For EU customers: Data remains within EU edge infrastructure. For Indian customers: Data remains within India.

11. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

If you believe we have collected data from a child, please contact us immediately at contact@skinsindiasolutions.in, and we will delete such data promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or services.

We will notify you of material changes by:

• Email notification to your registered email address
• Prominent notice on our website
• In-app notification for active users

Your continued use of our Services after the effective date constitutes acceptance of the updated policy.

14. Compliance Statement

This Privacy Policy complies with:

• Information Technology Act, 2000 (IT Act)
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)
• Digital Personal Data Protection Act, 2023 (DPDP Act)
• General Data Protection Regulation (GDPR) - EU Regulation 2016/679
• Reserve Bank of India (RBI) Data Localization Guidelines (2018)

Last Updated: January 10, 2025