Privacy Notice (DPDP Act, 2023)

Last Updated: 10/22/2026

1. What data we collect (Specific & Informed)

To provide telemedicine services, DermaConnect collects the following Sensitive Health Data:

• Identity: Name, Email, Phone Number, Date of Birth.
• Clinical: Photographs of your skin, symptom descriptions, medical history, and prescriptions.

2. Why we process it (Purpose Limitation)

Your data is processed solely for:

• Enabling a registered dermatologist to review your condition and issue a prescription.
• Facilitating video consultations and secure chat.
• Legal compliance (retaining medical records for 3 years).

3. Who we share it with

Your data is shared only with the specific doctor you book, and our secure infrastructure providers (Supabase for storage). We never sell your data.

4. Your Rights (Data Principal Rights)

You have the right to access, correct, or erase your data. You can withdraw consent at any time via your Account Settings. Note: Erasure will anonymize your profile, but clinical records may be retained as required by medical law.

5. Grievance Officer

For any privacy concerns, contact: grievance@dermaconnect.me