🚚 Free Shipping on orders over ₹1299⚡ Same day despatch for orders before 2 PM IST✅ Authentic K-Beauty — sourced directly, no grey market🚚 Free Shipping on orders over ₹1299⚡ Same day despatch for orders before 2 PM IST✅ Authentic K-Beauty — sourced directly, no grey market

Privacy

Privacy Policy

Last updated: 13 August 2026

Last updated: 13 August 2026

Skinroute Cosmetics LLP (“Skinroute”, “we”, “us”, “our”) operates the website skinroute.com (“Service”). This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian laws.

1. Data Fiduciary

Skinroute Cosmetics LLP
11/13, North Avenue, Srinagar Colony, Saidapet, Chennai – 600015, Tamil Nadu, India
Email: connect@skinroute.com

2. Personal Data We Collect

We collect the following categories of personal data directly from you when you interact with our Service:

  • Account data: name, email address, password (encrypted), and social login profile data (if you sign in with Google or Facebook).
  • Order and delivery data: billing and shipping name, address, city, state, postcode, country, phone number, order notes, and (where applicable) GST details for invoicing.
  • Payment data: your payment is processed directly by our payment gateway partners (Razorpay, HDFC SmartGateway). We do not store your card, UPI, or net-banking credentials on our servers.
  • Communications data: name, email, phone number, and message content when you contact us or submit a product review.
  • Marketing preferences: email address, if you opt in to back-in-stock or waitlist notifications.
  • Technical data: IP address, browser type, device information, and pages visited, collected automatically through cookies and analytics tools (see Section 6).

3. Purpose of Processing

We process your personal data to: create and manage your account; process and deliver orders; process payments; provide customer support; send order and delivery updates; respond to your enquiries and reviews; send back-in-stock notifications you have opted into; detect and prevent fraud and abuse; and improve our Service through aggregated analytics.

4. Legal Basis and Consent

We process your personal data on the basis of your consent, given at the point of account creation, checkout, contact form submission, or opt-in notification signup, and for certain limited purposes (“legitimate uses” under the DPDP Act) such as fraud prevention and legal compliance. You may withdraw consent at any time as described in Section 8, without affecting the lawfulness of processing carried out before withdrawal.

5. Disclosure to Third Parties

We share your personal data only as necessary to provide the Service, with the following categories of processors:

  • Payment processors: Razorpay, HDFC SmartGateway (Juspay) — to process your payment.
  • Logistics partners: Delhivery, Shiprocket, Professional Courier — to deliver your order and provide tracking.
  • Security and infrastructure: Cloudflare — for website hosting, security (bot/spam protection), and content delivery.
  • Analytics: Google Analytics (GA4), Umami — to understand website usage in aggregate. See Section 6 for cookie consent controls.
  • Customer engagement: tawk.to — for live chat support, if you choose to use it; Google Customer Reviews — if you choose to opt in after placing an order.
  • Communication: our email/SMS and website form provider, to send order and support communications.

Some of these service providers may process data on servers located outside India. We only work with providers who are contractually obligated to protect your data to a standard consistent with this Policy and applicable law. We do not sell your personal data to any third party.

6. Cookies and Tracking

We use strictly necessary cookies (for login sessions, cart, and security) which are always active, and optional analytics/engagement cookies (Google Analytics, Umami, tawk.to) which are only activated after you provide consent through our cookie banner. You can change your preference at any time using the “Cookie Preferences” link in our website footer.

7. Data Retention

  • Order and financial records: retained for 8 years from the date of transaction, in line with the Companies Act, 2013 and applicable tax and accounting record-keeping requirements.
  • Account/profile data: retained for as long as your account remains active. If you request deletion, or your account is inactive for an extended period, we will delete or anonymize this data within 90 days, subject to any records we are legally required to retain (e.g., completed order records under Section 7.1 above).
  • Marketing/waitlist data: retained until you unsubscribe or withdraw consent.

8. Your Rights

Under the DPDP Act, you have the right to:

  • Obtain a summary of the personal data we hold about you and the processing activities we carry out.
  • Request correction, completion, or updating of your personal data.
  • Request erasure of your personal data, subject to our legal retention obligations.
  • Withdraw consent at any time, as easily as it was given.
  • Nominate another individual to exercise these rights on your behalf, in the event of your death or incapacity.
  • Register a grievance with us, and if unresolved, with the Data Protection Board of India.

To exercise any of these rights, contact us at grievances@skinroute.com. We will respond within 30 days.

9. Grievance Officer

Vaishnavi Gopalan, Head of Operations
Email: grievances@skinroute.com
Phone: +91 93429 58338
Address: 11/13, North Avenue, Srinagar Colony, Saidapet, Chennai – 600015, Tamil Nadu, India

10. Children’s Data

Our Service is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If you believe a minor has provided us with personal data, please contact our Grievance Officer so we can remove it.

11. Security

We use commercially reasonable technical and organizational safeguards — including encrypted connections (HTTPS), encrypted session cookies, and restricted access controls — to protect your personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified on this page with an updated “Last updated” date.

14. Contact Us

For general queries: connect@skinroute.com
For privacy/data protection queries or to exercise your rights: grievances@skinroute.com

Want to access, export, or delete your personal data? If you have an account, use the options in My Account. If you checked out as a guest,request your data here.