1. Data Controller

This Privacy Policy applies to Dr. Tarannum Khan's Skin Clinic ("we", "us", or "our"), operated by Dr. Tarannum Khan, located at Near Worli Dairy, Worli, Mumbai, Maharashtra – 400018, India.

Website: tarannumkhan.in | Email: tarannumclinic@gmail.com | Phone: +91 97699 00946

This policy describes how we collect, use, store, and protect your personal information when you use our website, book consultations, or purchase products.

2. Information We Collect

Personal Identification: Full name, email address, phone number, date of birth.

Account Information: Login credentials and profile details created when you register on our website.

Consultation Data: Medical history, symptoms, health concerns, and any information you provide when booking or during a consultation.

Order & Transaction Data: Delivery address, product selections, order history, payment status, and transaction references.

Payment Information: We do not store card numbers or banking details. All payment data is processed securely by Razorpay. We only retain transaction IDs and payment status.

Device & Usage Data: IP address, browser type, pages visited, and time spent on our website, collected via cookies and analytics tools.

3. How We Use Your Information

Service Delivery: To process consultation bookings, deliver products, and provide post-consultation support.

Communications: To send booking confirmations, order updates, payment receipts, and support responses via email or WhatsApp.

Payment Processing: To initiate and verify payments through Razorpay.

Account Management: To maintain your profile, order history, and consultation records.

Legal Compliance: To comply with applicable Indian laws, regulations, and any court orders.

Service Improvement: To analyse usage patterns and improve the website experience.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

4. Payment Processing (Razorpay)

We use Razorpay as our payment gateway for processing all transactions. When you make a payment, you are subject to Razorpay's Terms of Service and Privacy Policy (razorpay.com).

Razorpay collects and processes your payment details directly on their secure platform. We receive only a payment confirmation and transaction reference ID.

All transactions are encrypted using industry-standard SSL/TLS technology.

5. Third-Party Services

Razorpay (razorpay.com) — Payment processing.

Supabase (supabase.com) — Secure cloud database and authentication services.

Resend (resend.com) — Transactional email delivery (confirmations, receipts).

These providers operate under their own privacy policies and are bound by data processing agreements. We only share data necessary for the provision of services.

6. Data Retention

We retain your personal data for as long as your account is active or as required to fulfil the purposes described in this policy.

Transaction and order records are retained for a minimum of 7 years as required by Indian financial and tax regulations.

You may request deletion of your account and associated data (subject to legal retention obligations) by emailing tarannumclinic@gmail.com.

7. Your Rights

Access: You may request a copy of the personal data we hold about you.

Correction: You may request correction of inaccurate or incomplete information.

Deletion: You may request deletion of your data, subject to legal and contractual obligations.

Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at tarannumclinic@gmail.com with your full name and registered email address.

8. Cookies

Our website uses essential cookies to maintain session state and authentication. We may also use analytics cookies to understand usage patterns.

You can disable cookies through your browser settings. Disabling essential cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Access to personal data is restricted to authorised personnel only. All data is stored on secure, encrypted servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Continued use of our website following any changes constitutes acceptance of the updated policy.

Effective Date: 15 June 2025

11. Contact Us

For any privacy-related queries or to exercise your rights, please contact:

Dr. Tarannum Khan's Skin Clinic

Near Worli Dairy, Worli, Mumbai, Maharashtra – 400018, India

Email: tarannumclinic@gmail.com

Phone: +91 97699 00946

Website: tarannumkhan.in