# Privacy Policy
Vaidya Marketplace processes personal data to operate bookings, payments, clinical reports, and optional marketing.
**What we collect:** name, email, phone, address, booking details, payment identifiers (not card numbers), clinical reports you or your vaidya create, and optional outcome check-ins.
**Why:** to provide the service, comply with tax/invoicing law (including EU VAT OSS and GST/e-invoicing where applicable), send appointment reminders, and — only with consent — marketing.
**Your rights (GDPR / similar laws):** access, rectification, erasure, portability, restriction, and objection. Use **My data export** in your patient portal or email privacy@vaidyamarket.com.
**Processors:** payment (Stripe), email, optional WhatsApp (Twilio), calendars/meetings you connect, and ActiveCampaign if your vaidya uses it.
**Retention:** booking and invoice records are kept as required by tax law in the country of supply; clinical data is retained while your account is active unless you request deletion (subject to legal holds).
Country-specific addenda may apply and override this global pack.