​

​

​​HEALTH INFORMATION PRIVACY STATEMENT

This statement explains how we collect, use, store, and share your health information, and the rights you have in relation to that information. We are required to keep your information accurate, up to date, relevant for your treatment and care, and secure.
Your health record belongs you. You can see it, ask us to correct it, and find out how it is being used.
You directly consent to your health information being collected when you sign an enrolment form to register with this practice.
 

When we collect your information
We collect health information about you when:
• You enroll with this clinic
• You attend an appointment or receive care
• We receive information about you from other health services involved in your care
 

What information we collect
We may collect the following information:
• Demographic information – such as your name, date of birth, gender, address, ethnicity, citizenship status, and National Health Index (NHI) number
• Health information – such as medical conditions, medications, allergies, immunisations, test results, and clinical notes
• Information about health care and treatment you have received, are receiving, or have been referred for
• Information about financial transactions with the clinic.
 

How we collect information
Information collected directly from you
We usually collect information directly from you. We will explain why the information is needed, how it will be used, and any choices you have about its use.

Information collected from other sources
We may also collect health and personal information about you from other sources where this is lawful, appropriate, and necessary for your care.
These sources may include:

• Other health care providers involved in your care (such as hospitals, specialists, urgent care centres, telehealth services, midwives, allied health providers, Well Child/Tamariki Ora providers, laboratories, and radiology services)

• National health information systems, such as the National Enrolment Service (NES),
• Pharmacists and pharmacy services, including information about medicines prescribed or dispensed
• Public health authorities, where reporting is required by law (for example, notifiable conditions)
• Whānau, carers, or support people, where you have given consent or where this is necessary for your care and safety
• Government agencies or authorised organisations, where collection is permitted or required by law.
 

If you provide a service with our details as your skin clinic, we may receive information about your health care from that service.
 

If we receive information about you indirectly that is not included in the scenarios above, and it isn’t clear you know it has been shared with us, then we will take reasonable steps to inform you about what we have received.
 

How we use your information
Your health information may be used to:
• Provide you with safe and effective health care
• Assign and manage your National Health Index (NHI) number
• Check eligibility for publicly funded health services
• Support and delivery of PHO and publicly funded health programmes
• Support health service planning, funding, reporting, and quality improvement
• Process funding claims and payments
 

Who we share your information with
We may share relevant health information with:

• Other health providers involved in your care, such as pharmacies, hospitals, specialists, laboratories, and radiology services
• Tū Ora Compass Health PHO, Health New Zealand, Ministry of Health for planning, funding, and delivery of health services
• ACC, with your consent or where it is permitted by law
• Government agencies that assess eligibility for publicly funded services
• Auditors
• Other organisations at your request, such as insurers or agencies requiring medical reports
• Other parties where sharing is required or permitted by law under the Health Information Privacy Code.
 

Information shared for planning, funding, or statistical purposes is not allowed to be published in a way that could reasonably identify you.
 

Research
Health information that does not identify you may be used for research that has been approved by an Ethics Committee.

Your choices

You can talk to us if you want to limit how your information is used. Some uses are required by law or necessary for safe care, and we will explain any impacts on your care or access to services.
 

For people under 16, we follow health and privacy laws to decide when information can be shared with parents or caregivers. Information may be withheld if sharing would place a young person at risk.
 

Accessing and correcting your information
You have the right to:

• Access the health information we hold about you
• Request corrections if information is incorrect or incomplete
 

We may need to confirm your identity before releasing information. If we cannot make a requested correction, we will explain why and add a note to your record.

Storage, security, and retention

Your health information is stored in our clinic management and IT systems. When information is shared with organisation such as the PHO, shared health records, or Health New Zealand, we use secure systems that meet the HISO 10029:2022 Health Information Security Framework.
 

We keep your information for as long as required by law. Paper records may be securely destroyed once they have been safely digitised.
 

We may at times seek advice from legal or indemnity advisors and may release relevant and health information to them in order for us to be able to access appropriate advice.
 

If something goes wrong

If a privacy breach occurs that could affect you, we will notify you and, where required, the Office of the Privacy Commissioner.
Questions or concerns If you have questions or concerns about how your information is handled, please talk to us. If you are not satisfied, you can contact the Office of the Privacy Commissioner on 0800 803 909 or visit www.privacy.org.nz .

This statement may be updated from time to time.