Privacy Policy

TERMS

This Privacy Policy sets out how personal information is collected, used, and protected when accessing or using the Adviskin service via the website www.adviskin.com and web/ mobile application.

By using the platform, you confirm that you have read, understood, and agree to the collection and use of your information in accordance with this Privacy Policy and the Terms and Conditions.

1. Who We Are

Adviskin Ltd (“Adviskin”, “we”, “our”, “us”) is a UK-registered digital health company providing remote, asynchronous dermatology consultations. We are committed to protecting your privacy and handling your personal data responsibly, in accordance with the UK GDPR, Data Protection Act 2018, and NHS data protection standards.

Data Controller: Adviskin Ltd

Data Protection Officer (DPO): dpo@adviskin.com

2. What Data We Collect

We may collect and process the following categories of personal data when you use our services:

– Identity & Contact Data: Name, email address, phone number (only if required for communication or prescriptions)
– Health & Medical Data: Questionnaire responses, photos of skin conditions, previous treatments, symptoms
– Technical Data: IP address, browser type, device ID, usage activity, session logs
– Access Method: Whether you used a 6-digit code (anonymous access) or registered account login

3. How We Use Your Data

We process your personal data to:

– Provide dermatological assessments and secure diagnostic reports
– Communicate your results and follow-up instructions
– Enable prescription referrals (if applicable and with your consent)
– Improve our platform and user experience
– Comply with legal and clinical recordkeeping obligations

Send optional skincare tips or service updates (with your opt-in only)

4. Legal Basis for Processing

We rely on the following legal bases to process your data:

– Consent: For collecting sensitive health information and for any optional marketing
– Contract: To deliver our diagnostic services
– Legal Obligation: For regulatory compliance (e.g. CQC, NHS data retention)
– Legitimate Interest: For service monitoring, fraud prevention, and platform analytics

5. Data Sharing

We may share your data with:

– GMC-registered clinicians who assess your case
– Pharmacy partners, if a prescription is needed and with your explicit consent
– IT & cloud service providers (UK/EU-based only) who securely store and manage data

We never sell your data or share it for third-party advertising.

6. Data Security & Storage

– Your data is encrypted in transit and at rest
– Stored securely on UK or EEA-based servers
– Access is restricted and monitored under NHS DSP Toolkit-compliant controls
– Data retention:
- – Clinical records: 8 years
- – Communications and logs: 2 years
- – Anonymous case data (e.g. for audits/analytics): retained indefinitely

7. Your Rights

You have rights under the UK GDPR, including to:

– Access your data
– Correct inaccurate information
– Request deletion (where lawful)
– Withdraw consent (e.g. for optional uses)
– Object to certain processing activities

To exercise your rights, email: dpo@adviskin.com

8. Cookies & Tracking

We use cookies to:

– Power essential features of the platform
– Measure website performance via Google Analytics
– Enhance user experience

To learn more or adjust preferences, view our Cookie Policy.

9. Contact Us

For privacy questions, data access requests, or complaints:

Email: dpo@adviskin.com

Postal Address: Adviskin Ltd, 123 Alington House, 1 Mary Neuner Road, London, N8 0ES, UK

10. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted here and, where appropriate, notified to you via email or platform notice.

11. Copyright and Intellectual Property

Last updated: July 2025