GDPR Compliance

Your privacy matters to us. Learn about how we collect, use, and protect your personal data in compliance with GDPR regulations.

Introduction

Skinior is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This page explains how we collect, use, store, and protect your personal information when you use our services.

Data Controller

ROXATE LTD
Company Number: 16232608
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: privacy@roxate.co.uk
Data Protection Officer: dpo@roxate.co.uk

What Personal Data Do We Collect?

Account Information

Name, email address, password, and profile information when you create an account.

Usage Data

Information about how you use our app, including features accessed, time spent, and preferences.

Device Information

Device type, operating system, browser type, and IP address for technical purposes.

Skincare Data

Information about your skin type, concerns, routine, and product usage to provide personalized recommendations.

Legal Basis for Processing

Consent

You have given clear consent for us to process your data for specific purposes.

Contract

Processing is necessary for the performance of our service agreement with you.

Legitimate Interest

Processing is necessary for our legitimate business interests, such as improving our services.

Legal Obligation

Processing is necessary to comply with legal obligations.

Do We Share Your Data?

We do not sell your personal data to third parties. We may share your data in the following circumstances:

With your explicit consent
With service providers who help us operate our platform (under strict confidentiality agreements)
When required by law or to protect our rights
In connection with a business transfer (with notice to you)

How Long Do We Keep Your Data?

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Typically, we keep account data while your account is active and for a reasonable period after account closure. Usage data and analytics are generally retained for 2 years for service improvement purposes.

Your GDPR Rights

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data in certain circumstances.

Right to Restriction

Request limitation of how we process your data.

Right to Portability

Request your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or direct marketing.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience and analyze usage patterns.

Essential Cookies

Required for the website to function properly. Cannot be disabled.

Analytics Cookies

Help us understand how visitors use our website to improve our services.

Functional Cookies

Remember your preferences and settings for a better user experience.

Contact Us

If you have any questions about this GDPR notice or wish to exercise your rights, please contact us:

ROXATE LTD
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: privacy@roxate.co.uk
Data Protection Officer: dpo@roxate.co.uk
Response Time: We aim to respond within 30 days

Updates to This Notice

We may update this GDPR notice from time to time. We will notify you of any significant changes by email or through our platform. The latest version will always be available on this page.

Last updated: August 30, 2025