Privacy Policy

This Privacy Policy (this “Policy”) applies to the website located at https://missnooraskinclinic.com/ (the “Website”), operated by Miss Noora Skin Clinic, having its principal place of business at Tilak Nagar, West Delhi (“Miss Noora Skin Clinic”, “we”, “us” or “our”).

Please read this Policy carefully before using the Website, submitting information to us, booking an appointment, or relying on any information made available through the Website.

1. Scope

This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal data when you:

1. visit, browse or interact with the Website;

2. contact us by telephone, email, messaging service, social-media platform, website form or in person;

3. request information about our treatments, products, prices, offers or services;

4. book, attend, reschedule or cancel an appointment;

5. receive aesthetic, dermatological, cosmetic, wellness or related clinic services from us;

6. purchase products, gift cards or other items from us; or

7. apply for employment, internships, vendor engagements or other opportunities with us.

This Privacy Policy does not apply to third-party websites, services, payment gateways, social-media platforms or other resources that may be linked from the Website. Their privacy practices are governed by their own policies.

2. Personal Data We May Collect

Depending on how you interact with us and the services you request, we may collect the following categories of personal data.

2.1 Identity and contact information

This may include your name, date of birth, age, gender, postal address, email address, telephone number, emergency contact details and preferred method of communication.

2.2 Appointment and service information

This may include appointment dates and times, requested and received services, consultation records, treatment preferences, service history, practitioner notes, consent forms, follow-up information, photographs, feedback, complaints and communications with us.

2.3 Health and treatment information

Because we are an aesthetic clinic, we may collect information relevant to assessing whether a treatment is appropriate and can be provided safely. This may include information relating to your skin, hair, allergies, medical history, current medications, prior procedures, contraindications, pregnancy or breastfeeding status, adverse reactions, treatment goals and other health-related information you choose or need to provide.

Health and treatment information may be sensitive personal data and will be collected and used only to the extent reasonably necessary to provide, administer, document and follow up on the requested services, meet our professional and legal obligations, protect your safety, or where otherwise permitted by law.

2.4 Photographs and audiovisual information

With your separate, express consent where required, we may collect before-and-after photographs, treatment-area photographs, video recordings or other images for clinical documentation, treatment planning, monitoring outcomes, training, quality assurance, publication, testimonials or marketing. We will identify the purpose of image collection at or before collection. We will not use identifiable images for advertising, promotional material, social-media content or testimonials without the separate consent required for that use.

2.5 Payment and transaction information

This may include billing information, payment status, transaction reference numbers, purchase details, refund information and limited payment-related information. Card, wallet and bank payment processing may be handled by third-party payment service providers. We do not intend to store complete payment-card details unless we specifically notify you and have appropriate safeguards in place.

2.6 Technical and usage information

When you access the Website, we and our service providers may automatically collect information such as your IP address, browser type, device type, operating system, referring URL, pages viewed, links clicked, dates and times of access, general location inferred from IP address, session information, cookie identifiers and diagnostic information.

2.7 Marketing and communications preferences

This may include your preferences for receiving calls, emails, SMS, WhatsApp messages or other communications from us, your response to campaigns, and your subscription or opt-out status.

2.8 Information from other sources

We may receive personal data from booking platforms, payment processors, referral sources, social-media platforms, advertising providers, publicly available sources, healthcare professionals where you authorise disclosure, and persons acting on your behalf.

3. How We Collect Personal Data

We collect personal data:

1. directly from you when you use the Website, complete a form, make an enquiry, book an appointment, visit the clinic, communicate with us, make a payment, participate in a survey or provide consent documentation;

2. automatically through cookies and similar technologies when you use the Website;

3. from persons you authorise to act for you, including a family member, guardian, referring professional or employer where relevant; and

4. from third parties that support our booking, payment, communications, advertising, analytics, security and operational activities.

4. Purposes for Which We Use Personal Data

We may use personal data for the following purposes:

1. to respond to enquiries and provide information you request;

2. to create and administer client records, schedule appointments, send appointment reminders and manage cancellations, no-shows and follow-ups;

3. to assess suitability for treatments, provide services safely, maintain treatment records and manage post-treatment care;

4. to verify identity, age, authority or eligibility where appropriate;

5. to process payments, issue invoices, manage refunds and prevent fraudulent transactions;

6. to communicate with you about your appointments, treatment plan, aftercare, service updates, product orders, account or transaction matters, and changes to this Policy;

7. to obtain and manage treatment consents, photography consents and other permissions;

8. to operate, secure, troubleshoot, maintain, analyse and improve the Website, our services and client experience;

9. to carry out internal administration, staff training, quality assurance, audit, recordkeeping and business planning;

10. to send promotional communications, special offers, newsletters and service updates where you have consented or where otherwise permitted by law, subject to your right to opt out;

11. to investigate, prevent or address suspected fraud, misuse, security incidents, complaints, disputes or unlawful activity;

12. to comply with legal, regulatory, tax, accounting, insurance, professional, court-order and law-enforcement requirements; and

13. to establish, exercise or defend legal claims and protect the rights, safety, property and operations of Miss Noora Skin Clinic, our clients, personnel and others.

We will process personal data only for legitimate and stated purposes and will take reasonable steps to ensure that the data processed is relevant to those purposes.

5. Consent and Your Choices

Where consent is the basis for processing your personal data, we will seek consent through the relevant form, website mechanism, consultation documentation or other appropriate means. You may withdraw consent at any time by contacting us using the details in Section 14, subject to legal or contractual restrictions and the fact that withdrawal will not affect processing already undertaken before the withdrawal.

If you decline to provide information that is necessary for a requested service, safety assessment, payment, appointment or legal recordkeeping obligation, we may be unable to provide the requested service or may need to limit, postpone or cancel it.

You may opt out of marketing emails by using the unsubscribe link in the relevant email. To opt out of marketing calls, SMS, WhatsApp messages or other direct-marketing communications, contact us using the details in Section 14 or follow any opt-out instructions in the relevant message. We may still send non-promotional communications, including appointment confirmations, safety notices, aftercare instructions, payment communications and changes to our terms or policies.

6. Cookies and Similar Technologies

The Website may use cookies, pixels, web beacons, software development kits and similar technologies to operate the Website, remember preferences, understand Website traffic and performance, enhance security, and support analytics and advertising activities.

Cookies may be session cookies, which expire when you close your browser, or persistent cookies, which remain on your device for a defined period or until deleted. You can control cookies through your browser settings and, where available, through the Website’s cookie preference tool. Blocking or deleting cookies may affect certain Website features.

Where required, we will obtain consent before placing non-essential cookies or using similar technologies. For details of the specific cookies used on the Website, please refer to [COOKIE POLICY URL, IF APPLICABLE].

7. Disclosure of Personal Data

We may disclose personal data on a need-to-know basis to:

1. our authorised doctors, practitioners, therapists, nurses, reception staff, administrative staff and other personnel involved in providing or supporting the requested services;

2. service providers that help us operate our business, such as Website hosts, booking-system providers, customer relationship management providers, cloud-storage providers, IT and cybersecurity providers, communications providers, marketing providers, analytics providers, payment processors, accountants, auditors, insurers and professional advisers;

3. laboratories, pharmacies, medical professionals, emergency service providers or referral providers where necessary for your care, safety, a requested referral, or where you have authorised the disclosure;

4. government authorities, regulators, courts, law-enforcement agencies or other third parties where disclosure is required or permitted by law, a valid legal process, or necessary to protect safety or legal rights;

5. a purchaser, investor, lender, successor or prospective purchaser in connection with a merger, restructuring, financing, sale, transfer or other transaction involving all or part of our business, subject to appropriate confidentiality safeguards; and

6. any other person or entity with your consent or at your direction.

We do not sell personal data for monetary consideration. We will not disclose health or treatment information for marketing purposes without the consent required by law.

8. International Transfers

Our service providers may process or store personal data on servers located outside India. Where personal data is transferred outside India, we will take reasonable steps to ensure that the transfer is made in accordance with applicable law and that the recipient is subject to appropriate contractual, technical and organisational safeguards.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain clinical and business records, meet legal or professional record-retention obligations, resolve disputes, enforce agreements and protect our rights.

Retention periods vary based on the type of information, the nature of the service, applicable recordkeeping requirements, the need for continuity of care, limitation periods and whether the information is needed for a legal claim or investigation. When personal data is no longer required, we will delete, anonymise or securely dispose of it in accordance with our records-management practices, unless retention is required or permitted by law.

10. Data Security

We use reasonable technical, organisational and physical safeguards designed to protect personal data against unauthorised access, acquisition, use, disclosure, alteration, loss or destruction. These measures may include access controls, role-based permissions, secure systems, confidentiality obligations, staff training, vendor diligence, backups and security monitoring.

No method of electronic transmission, storage or security is completely secure. You should take reasonable precautions when communicating with us online and should not send highly sensitive information through unsecured channels unless we have specifically requested and secured that method of communication.

11. Your Privacy Rights

Subject to applicable law and verification of your identity, you may have the right to:

1. request a summary of the personal data we process about you;

2. request correction, completion or updating of inaccurate or incomplete personal data;

3. request withdrawal of consent for processing where consent is the relevant basis;

4. request deletion or erasure of personal data, subject to our rights and obligations to retain information under law or for legitimate purposes;

5. raise a grievance about our processing of personal data; and

6. nominate another individual to exercise your rights in the event of your death or incapacity, where applicable law provides that right.

To exercise a privacy right, contact our Grievance Officer using the details in Section 14. We may request information necessary to verify your identity and authority before acting on a request. We will respond within the period required by applicable law or, if no period is prescribed, within a reasonable time.

12. Children and Minors

The Website and our services are not intended to collect personal data from children except where a service is lawfully provided to a minor with the consent and involvement of a parent or lawful guardian, and subject to any age, capacity, medical, professional and legal requirements that apply.

If you are a parent or guardian and believe that a child has provided personal data to us without appropriate authorisation, please contact us promptly. We will take appropriate steps to review and address the matter.

13. Third-Party Links, Platforms and Services

The Website may include links to third-party websites, booking tools, payment gateways, maps, social-media pages, review platforms and other services. We do not control, endorse or accept responsibility for the privacy practices, content, availability or security of those third parties. You should review their terms and privacy policies before providing personal data to them.

14. Grievance Officer and Contact Details

For questions, requests, complaints or concerns regarding this Privacy Policy or our handling of personal data, please contact:

We will acknowledge and address grievances in accordance with applicable law.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, legal obligations or other operational requirements. The updated version will be posted on the Website with a revised “Last Updated” date. Where a change is material or where required by law, we will provide additional notice or obtain consent as appropriate.

Your continued use of the Website after an updated Privacy Policy is posted will be subject to the updated Privacy Policy to the extent permitted by law.