Privacy Policy

Last updated: August 30, 2025

Introduction

ROXATE LTD ("we," "our," or "us") operates the Skinior platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy.

Information We Collect

Personal Information

We may collect the following personal information:

• Account Information: Name, email address, password, date of birth
• Profile Information: Skin type, concerns, preferences, and routine data
• Communication Data: Messages, feedback, and support requests
• Payment Information: Processed securely through third-party providers

Usage Information

We automatically collect certain information when you use our Service:

• Device Information: Device type, operating system, browser type
• Log Data: IP address, access times, pages viewed, app usage patterns
• Analytics Data: Feature usage, session duration, error reports
• Location Data: General location information (with your consent)

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for details.

How We Use Your Information

We use collected information for the following purposes:

• Service Provision: To provide and maintain our skincare analysis service
• Personalization: To customize your experience and recommendations
• Communication: To send updates, newsletters, and respond to inquiries
• Improvement: To analyze usage patterns and improve our services
• Security: To detect and prevent fraud and unauthorized access
• Legal Compliance: To comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in these circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in operating our platform, such as:

• Cloud hosting and data storage providers
• Analytics and performance monitoring services
• Customer support and communication platforms
• Payment processing services

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you before this occurs.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data encrypted in transit and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff trained on data protection practices
• Incident Response: Procedures for responding to security incidents

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy, unless a longer retention period is required by law:

• Account Data: Retained while your account is active and for 3 years after closure
• Usage Data: Retained for 2 years for analytics and service improvement
• Communication Data: Retained for 5 years for legal and support purposes
• Payment Data: Retained according to payment processor requirements

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Your explicit consent where required

Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal information
• Restriction: Limit how we process your information
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for processing based on consent

Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Sending you an email notification
• Displaying a prominent notice in our application

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: