Consumer Health Data Privacy Policy (United States)

1. The health data we collect

• Symptoms, health conditions, medical history and medicines you tell us about
• Reports, prescriptions and photos you choose to share
• Consultation notes and the plan your doctor writes for you
• Your answers to our assessment and dosha quiz, when linked to your contact details

We collect it directly from you, through our website forms, WhatsApp, email and your consultation. We do not buy health data, and we do not use location to infer anything about your health.

2. Why we collect and use it

Only to provide the consultation and follow-up you ask for: so a doctor can assess you and write your plan, to schedule and remind you of appointments, to answer your questions, and to keep the medical records the law requires. We collect and use your health data with your consent, which you give on our consultation form.

3. Who we share it with

• Your Vaidora doctor, to assess you and prepare your plan
• Our care team, to schedule your consultation and answer practical questions
• Service providers who host and process data for us: website and database hosting, file storage, video calls, messaging, email, and payments

The providers we use are listed in section 4 of our privacy policy. They may only use your data to provide their service to us. We may also disclose data when the law requires it, for example under a valid court order.

4. What we never do

• We do not sell consumer health data.
• We do not share it for advertising, or with insurers, employers or data brokers.
• We do not set up geofences around health-care locations.

5. Your rights

You can ask us to:

• confirm whether we hold your health data, and give you access to it;
• tell you every third party and affiliate we have shared it with, and how to contact them;
• delete it — we will also pass the request on to our service providers;
• stop collecting or sharing it, by withdrawing your consent.

Email vaidora@vaidora.in with “US health data request” in the subject. We may need to confirm your identity before acting. We respond within 45 days, and if we need longer (up to another 45 days) we will tell you why. Some records we must keep by law, such as medical and tax records; if so, we will tell you what and why.

6. Appeals

If we decline your request, you can appeal by replying to our decision with “Appeal” in the subject. We will tell you the outcome and our reasons within 45 days. If we deny your appeal, you can contact your state attorney general — in Washington, the Washington State Office of the Attorney General.

7. Changes

If we change this policy in a way that matters, we will update the date above and, where the law requires, ask for your consent again before using your data in a new way.