Last updated
3 June 2026. This page is written in plain language so visitors can understand how Vaidya Raja handles website use, consultations, and data rights.
1. Controller
For enquiries submitted through this website, Vaidya Raja acts as the data controller unless a different entity is named in your consultation documents. For formal requests, contact us through the Contact page and include “GDPR request” in your message.
2. Lawful bases for processing
- Consent: when you submit optional information, request contact, or agree to non-essential communications.
- Contract or steps before a contract: when we respond to an enquiry, arrange a consultation, or provide requested services.
- Legitimate interests: to operate and secure the website, manage enquiries, improve services, prevent fraud, and maintain appropriate records.
- Legal obligations: where we must keep records, respond to lawful requests, or meet regulatory obligations.
- Vital interests: in rare situations where processing is necessary to protect someone’s life or safety.
3. Special-category health data
Health information is special-category data under GDPR. We process it only where permitted, including with your explicit consent, for healthcare-related purposes, for safety, or where required by law. You can withdraw consent, but this may limit our ability to assess or support your enquiry.
4. Your rights
- Access: ask for a copy of personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete data where there is no overriding reason to keep it.
- Restriction: ask us to pause certain processing while a request or dispute is reviewed.
- Portability: ask for certain data in a portable format where applicable.
- Objection: object to processing based on legitimate interests or direct marketing.
- Withdraw consent: withdraw consent for processing based on consent at any time.
5. How to make a request
Send your request through the Contact page with enough information for us to identify you and the data involved. We may ask for verification before responding.
We aim to respond within one month where GDPR applies. Complex requests or multiple requests may take longer, in which case we will tell you why.
6. International transfers
Because Vaidya Raja works across India and Europe and may use global service providers, personal data may be processed outside your country. Where required, we use appropriate safeguards such as contractual protections, limited access, and provider security controls.
7. Processors and safeguards
We use service providers for hosting, communications, analytics, scheduling, records, and security. We limit access to people and providers who need it, and we expect processors to protect personal data and use it only for instructed purposes.
8. Complaints
If you are not satisfied with our response, you may contact your local data-protection authority. We ask that you contact us first so we can try to resolve the issue promptly.