1. Who we are
myskin.ai is operated by Hexislab Venture Limited (“we”, “us”, “our”), a company registered in England and Wales, with registered address at 38 Collingwood Street, Newcastle upon Tyne, UK. We are the data controller responsible for the personal data described in this policy.
2. What this policy covers
This policy explains how we collect, use, share and protect personal data when you use the myskin.ai website and skin assessment tool (the “Service”).
3. Information we collect
- Assessment responses: age range, skin concerns, skin type indicators, ethnic or racial background category (only if you choose to provide it), lifestyle, diet, sleep, stress, environment, current skincare products and routine preferences.
- Contact details: if you choose to provide an email address, for example to receive your results.
- Technical data: IP address, browser and device type, pages visited, and cookies (see “Cookies” below).
- Communications: any messages you send to us directly.
4. Special category data
Some assessment questions relate to your racial or ethnic origin, which UK data protection law treats as “special category data” requiring a higher standard of protection. We only collect this where you choose to answer it, and we rely on your explicit consent (Article 9(2)(a) UK GDPR) as our legal basis for processing it. Answering these questions is optional.
5. How we use your information
- To generate your personalised skin profile and ingredient and product recommendations.
- To operate, maintain, and improve myskin.ai and the underlying assessment.
- To communicate with you about your results, if you ask us to.
- With your consent, to send you marketing communications, which you can opt out of at any time.
- To comply with our legal obligations and to protect our legal rights.
6. Legal bases for processing
- Consent — for special category data (see section 4) and for marketing communications.
- Contract — to provide the assessment service you have requested.
- Legitimate interests — to improve our service, keep it secure, and carry out basic analytics, where these interests are not overridden by your rights.
7. Not medical advice
myskin.ai provides general skincare guidance based on the information you provide. It is not a medical device, does not diagnose any skin condition, and is not a substitute for advice from a dermatologist, GP, or other qualified healthcare professional. If you have a persistent or concerning skin condition, please seek professional medical advice.
8. Affiliate links and product recommendations
Some product recommendations shown to you may include affiliate links. If you purchase a product through one of these links, we may earn a commission at no extra cost to you. Commission arrangements do not influence which ingredients or products are recommended to you.
9. Sharing your information
We do not sell your personal data. We may share it with:
- Service providers who help us run myskin.ai, such as hosting, analytics and email delivery providers, under contracts that require them to protect your data.
- Professional advisers, such as lawyers or accountants, where necessary.
- Regulators or law enforcement, where we are required to by law.
We do not share your special category data (such as ethnicity responses) with third parties for their own marketing purposes.
10. International transfers
Where we use service providers based outside the UK, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Addendum or an applicable adequacy decision.
11. How long we keep your data
We keep your assessment responses and account data for as long as needed to provide the Service to you, and for a reasonable period afterwards to comply with our legal obligations, resolve disputes, and enforce our agreements. You can ask us to delete your data at any time — see “Your rights” below.
12. Cookies
myskin.ai uses cookies and similar technologies to operate the site, remember your assessment progress, and, where you consent, for analytics. You can control cookies through your browser settings.
13. Children
myskin.ai is not directed at children under 16, and we do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, please contact us so we can remove it.
14. Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure of your data.
- Restrict or object to certain processing.
- Data portability.
- Withdraw consent at any time, where we rely on consent.
- Complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you think we have not handled your data properly.
To exercise any of these rights, contact us using the details below.
15. Security
We use appropriate technical and organisational measures to protect your personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
16. Changes to this policy
We may update this policy from time to time. We will post the updated version on this page.
17. Contact us
Hexislab Venture Limited
38 Collingwood Street
Newcastle upon Tyne, UK
Email: info@hexislab.com