Privacy Policy

This Privacy Policy explains how SkinsIndia Solutions(“we”, “us”, or “our”) collects, uses, stores, and protects personal information when you use ShivMail, our email delivery and marketing platform (the “Service”).

We are committed to handling personal data responsibly and in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the EU General Data Protection Regulation (GDPR) where applicable, and other laws that apply to our operations. By using the Service you agree to the practices described here.

We collect the following categories of information:

• Account information — your name, email address, phone number, company name, and account credentials (passwords are stored only as salted hashes).
• Billing information — billing address, tax identifiers, and subscription details. Payment card data is processed by our payment partners and is never stored on our servers.
• Usage and technical data — IP address, browser and device information, log data, feature usage, and diagnostic information used to operate and secure the Service.
• Support communications — messages, attachments, and metadata you send when contacting our support team.

When you send email through the Service, we process recipient email addresses, contact attributes, message content, and engagement events (such as deliveries, opens, clicks, bounces, and unsubscribes). For this data you are the data controller (or fiduciary) and SkinsIndia Solutions acts as a data processor, handling it solely to provide the Service under your instructions.

Our processing of this data is governed by our Data Processing Agreement, which forms part of your contract with us. You are responsible for having a lawful basis to send email to your recipients and for honouring their privacy rights.

We use personal information to:

• provide, maintain, and improve the Service;
• authenticate users and manage accounts;
• process payments and send billing-related communications;
• provide customer support and respond to requests;
• monitor, detect, and prevent fraud, abuse, and security incidents;
• analyse usage to improve reliability, performance, and deliverability;
• comply with legal obligations and enforce our agreements; and
• send service updates and, where you have consented, product communications.

Where the GDPR applies, we rely on the following legal bases: performance of a contract with you; compliance with legal obligations; our legitimate interests in operating and securing the Service; and your consent for optional communications. Where the DPDP Act applies, we process personal data on the basis of consent or legitimate uses permitted by law. You may withdraw consent at any time as described below.

We do not sell your personal data. We share information only in the following limited circumstances:

• Service providers / sub-processors — vetted partners that help us deliver the Service (for example, payment processing and infrastructure), each bound by contractual confidentiality and data-protection obligations.
• Legal and safety — when required by law, regulation, legal process, or to protect the rights, property, or safety of SkinsIndia Solutions, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

We retain personal data only as long as necessary for the purposes described above:

We apply administrative, technical, and physical safeguards to protect personal data, including encryption in transit (TLS) and at rest, strict access controls, network segmentation, monitoring, and regular review of our practices. Learn more on our Security page. No method of transmission or storage is completely secure, but we work continuously to protect your information.

We operate primarily from India and store data on infrastructure within the regions we serve. Where personal data is transferred across borders, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised under applicable law.

Subject to applicable law, you have the right to access, correct, update, or delete your personal data, to request a portable copy, to withdraw consent, to object to or restrict certain processing, and to nominate another individual to exercise your rights. You also have the right to lodge a complaint with a supervisory or data protection authority.

To exercise any of these rights, email privacy@skinsindiasolutions.in. We will respond within the timeframe required by law (and within 30 days where the DPDP Act applies).

We use strictly necessary cookies to keep you signed in and to secure the Service, and a limited set of cookies to remember preferences and measure aggregate usage. You can control cookies through your browser settings; disabling necessary cookies may affect core functionality.

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date and, where appropriate, notify you through the Service or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For privacy questions or to exercise your rights, contact our grievance officer:

• Email: privacy@skinsindiasolutions.in
• Phone: +91 89006 75335
• Post: SkinsIndia Solutions, KATJURIDANGA, KENDUADIHI, BANKURA, West Bengal, PIN: 722102, India