Privacy Policy

1. Introduction

Cosmosheer Clinical ("we," "our," or "us") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of information when you use our website, clinical protocol builder, and e-commerce services (collectively, the "Services").

By accessing or using our Services, you consent to the data practices described in this policy. If you do not agree with any part of this policy, please do not use our Services.

2. Information We Collect

We collect several types of information to provide and improve our clinical services:

2.1 Personal Identification Information

• Contact Data: Name, email address, phone number, and shipping/billing address.
• Account Data: Login credentials, purchase history, and preference settings.

2.2 Clinical & Health Information (Protected Data)

Through our Protocol Builder and consultation services, we may collect sensitive health information which is treated with strict confidentiality:

• Skin Profile: Skin type (Fitzpatrick scale), age group, and specific skin conditions (e.g., acne, melasma).
• Medical History: Information regarding allergies, contraindications (e.g., pregnancy, retinoid use), and previous treatments.
• Photos: Images uploaded for skin analysis or consultation purposes.

2.3 Technical Data

We automatically collect information about your device and browsing actions, including IP address, browser type, operating system, and interaction logs using cookies and similar technologies.

3. How We Use Your Information

Your data is used strictly for legitimate business and clinical purposes:

• Protocol Generation: To analyze your bio-identifiers and generate personalized skincare regimens.
• Order Fulfillment: To process payments, ship products, and provide customer support.
• Clinical Efficacy: To improve our treatment algorithms and product recommendations (using anonymized, aggregated data).
• Communication: To send appointment reminders, protocol updates, and relevant educational content.

4. Data Protection & Security

We implement enterprise-grade security measures to safeguard your personal and health information:

• Encryption: All sensitive data is encrypted in transit (SSL/TLS) and at rest.
• Access Control: Strict role-based access ensures only authorized clinical and support staff can view sensitive records.
• Compliance: We adhere to relevant data protection regulations and industry standards for handling health-related data.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share information only in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our website, conducting our business, or serving our users (e.g., payment processors, shipping partners), provided they agree to keep this information confidential.
• Legal Compliance: When required by law or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, sale, or asset transfer, subject to confidentiality agreements.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("Right to be Forgotten"), subject to legal retention requirements.
• Opt-out of marketing communications at any time.

To exercise these rights, please contact our Data Privacy Officer at privacy@cosmosheer.com.

7. Cookies & Tracking

We use cookies to enhance your experience. You can choose to disable cookies through your browser settings, though this may limit certain functionalities of our Services (e.g., cart persistence).

8. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page frequently.