This policy describes how your personal data is collected, used, and protected when you visit vaidyaneha.com or book a consultation.
Data controller
Vaidya Neha Pandey
17 Rue des Boulets, 75011 Paris
Email: contact@vaidyaneha.com
Phone: +33 7 68 35 58 24
Data collected
- Identification data — first name, last name, email address, phone number, provided voluntarily via the booking form, contact form, or intake questionnaire.
- Health and lifestyle data — medical history, diet, sleep, reason for consultation, notes taken during sessions. These are classified as sensitive data under Article 9 of the GDPR and are treated with strict confidentiality.
- Technical data — an anonymous session cookie (language preference, CSRF token), and IP address logged temporarily for security purposes.
Purposes
- Organise and prepare your consultations.
- Send you confirmations, reminders, and follow-up advice.
- Maintain a clinical follow-up record consistent with professional best practice.
- Maintain site security (fraud and intrusion prevention).
Legal bases
- Performance of a service contract for booking-related data (GDPR Art. 6.1.b).
- Explicit consent for health and lifestyle data (GDPR Art. 9.2.a).
- Legitimate interest for functional / security cookies.
Retention
- Identification data (outside the clinical record): 3 years from last contact.
- Clinical follow-up record: 10 years from last consultation, in line with professional recommendations.
- Session cookies: removed when the browser session ends.
- Server logs: maximum 6 months.
Recipients
Your data is shared only with those strictly necessary:
- Vaidya Neha Pandey, sole practitioner and data controller.
- Our hosting provider, Hostinger International Ltd, whose servers host this site.
- For patients who booked via Médoucine, any data exchanged is governed by Médoucine's own privacy policy.
No data is sold, rented, or transferred to third parties for commercial purposes. No transfer is made outside the European Union.
Your rights
Under the GDPR you have, at any time, the right to:
- Access your data.
- Correct inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict processing.
- Receive your data in a portable format.
- Object on legitimate grounds.
- Withdraw consent at any time.
To exercise these rights, write to contact@vaidyaneha.com with a copy of an identity document. We commit to responding within one month.
You also have the right to file a complaint with the CNIL (the French data protection authority) if you consider that your rights are not being respected.
Cookies
This site uses only one strictly necessary cookie: an anonymous session cookie used to remember your language preference and secure forms (CSRF token). No advertising, analytics, or tracking cookies are placed. No third-party audience-measurement or profiling service is used.
Security
Communications with the site are encrypted over HTTPS. Passwords are stored as cryptographic hashes (bcrypt). Access to data is restricted to the practitioner. Backups are managed by our hosting provider.
Changes
This policy may evolve to reflect changes in practice or regulation. The last-updated date appears at the bottom of this page.
Last updated: 14 July 2026