Privacy Policy
Last updated: January 18, 2026
NextSkin ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our telemedicine platform.
1. Information We Collect
Personal Information
We collect information you provide directly to us, including:
- Account Information: Name, email address, phone number, date of birth
- Health Information: Medical history, symptoms, photos of skin conditions, treatment history
- Payment Information: Credit card details, billing address (processed securely through our payment providers)
- Communications: Messages with healthcare providers, support inquiries
Automatically Collected Information
When you use our platform, we automatically collect:
- Device information (browser type, operating system)
- IP address and approximate location
- Usage data and interaction with our services
- Cookies and similar tracking technologies
2. How We Use Your Information
We use your information to:
- Provide medical consultations and treatment recommendations
- Process prescriptions and coordinate with pharmacies
- Communicate with you about your care
- Process payments and maintain billing records
- Improve our services and develop new features
- Comply with legal obligations and healthcare regulations
- Ensure the security of our platform
3. Protected Health Information (PHI)
Your health information is protected under applicable healthcare privacy laws, including:
- GDPR: General Data Protection Regulation (EU)
- German BDSG: Bundesdatenschutzgesetz
- Medical Professional Secrecy: German medical confidentiality laws
We implement appropriate technical and organizational measures to protect your health information, including encryption at rest and in transit, access controls, and audit logging.
4. Information Sharing
We may share your information with:
- Healthcare Providers: Dermatologists and medical staff involved in your care
- Pharmacies: To fulfill prescriptions you've received
- Service Providers: Companies that help us operate our platform (hosting, payment processing)
- Legal Requirements: When required by law or to protect our legal rights
We do not sell your personal information to third parties.
5. Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal requirements (medical records must be retained for the legally mandated period)
- Resolve disputes and enforce our agreements
6. Your Rights
Under GDPR and applicable laws, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your data (subject to legal retention requirements)
- Portability: Receive your data in a structured, machine-readable format
- Object: Object to certain processing of your data
- Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, please contact us at privacy@nextskin.com.
7. Security
We implement industry-standard security measures to protect your information:
- TLS/SSL encryption for data in transit
- AES-256 encryption for data at rest
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Employee training on data protection
8. International Data Transfers
Your data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. For minors, a parent or legal guardian must create an account and consent to treatment.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact:
NextSkin - Data Protection
Email: privacy@nextskin.com
Address: Danckelmannstraße 24, 14059 Berlin, Germany