Privacy Policy

1. Who we are

Vaidora Health Tech (“Vaidora”, “we”) runs vaidora.in and arranges online Ayurvedic consultations. For the purposes of India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for your information, and for visitors from the UK and EU, the controller under the GDPR. Contact: vaidora@vaidora.in, India.

2. What we collect and why

We do not sell your information, use your health information for advertising, or share it with insurers, employers or pharmaceutical companies.

3. Your consent

We process your health information with your explicit consent, which you give when you tick the consent box on our consultation form or when you share details with us to book. You can withdraw consent at any time by emailing us or messaging us on WhatsApp. Withdrawing does not affect what was done before, and we may need to keep some records where the law requires it (for example, medical and tax records).

Legal bases (UK and EU visitors)

Under the UK and EU GDPR, we rely on:

• your explicit consent (article 9(2)(a)) for health information, and your consent (article 6(1)(a)) for analytics cookies and for following up a booking you started;
• performing our contract with you (article 6(1)(b)) to book, hold and follow up your consultation;
• our legitimate interests (article 6(1)(f)) in keeping the service secure and in meeting the record-keeping and tax law that applies to us in India.

Automated processing

We do not make decisions about you by automated means alone. Where an AI tool summarises an enquiry for our staff, a person reads it and decides what happens next, and nothing it drafts is sent to you without a person reviewing it.

4. Who else handles your information

We use the following service providers. Each receives only what it needs for its task.

We may also disclose information where the law requires it, for example in response to a valid court order.

5. Storage outside India

Some of our providers store data outside India, including in the United States. The DPDP Act permits this except to countries the Government restricts. For visitors from the UK and EU, these transfers rely on your explicit consent and on the providers' own data-protection terms. Ask us if you would like more detail.

6. How we protect it

• Data is encrypted in transit (HTTPS) and held with providers who encrypt it at rest.
• Staff and doctors sign in with individual accounts, and only people involved in your care see your health details.
• WhatsApp messages are end-to-end encrypted in transit by Meta, but copies remain on our team's and doctors' devices.
• If a personal data breach affects you, we will tell you and the Data Protection Board of India without delay, as the DPDP Act and the Digital Personal Data Protection Rules, 2025 require.

7. Your rights

Under the DPDP Act you can:

• ask for a summary of the information we hold about you and who we have shared it with;
• ask us to correct, complete, update or erase it;
• withdraw your consent;
• nominate someone to exercise your rights if you die or become unable to; and
• complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India.

If you are in the UK or EU you also have the GDPR rights of access, rectification, erasure, restriction, portability and objection, and may complain to your local data-protection authority (in the UK, the ICO).

If you live in the United States, our Consumer Health Data Privacy Policyexplains how we handle health data under Washington's My Health My Data Act and similar state laws.

To use any of these rights, email vaidora@vaidora.in. We reply within 30 days.

8. Children

Our service is for adults. For anyone under 18, a parent or guardian must book, give consent and attend the consultation. We do not knowingly process a child's information without that consent, and we do not track or target advertising at children.

9. Cookies and similar storage

We only use Google Analytics if you choose “Allow” in the cookie banner. You can change your choice at any time with “Cookie settings” at the bottom of every page.

10. Grievance Officer

Grievance Officer, Vaidora Health Tech. Email vaidora@vaidora.in with “Grievance” in the subject. We acknowledge within 48 hours and aim to resolve within one month.

11. Changes

If we change this policy in a way that matters, we will update the date above and tell patients with an active plan. See also our terms and medical disclaimer.