Purpose
Eyes and Eyelids collects, uses, stores, and discloses personal and health information to provide safe and effective healthcare, coordinate management, communicate with other relevant providers, and meet legal and regulatory obligations. We are committed to protecting your privacy in accordance with the Privacy Act 2020 and the Health Information Privacy Code 2020.
Information We Collect
We may collect personal and health information including:
Your name, date of birth, NHI number, address, contact details, and other identifying information
Referral information
Medical and ocular history
Medications and allergies
Clinical notes, examination findings, photographs, scans, imaging, and test results
Health insurance and billing information
ACC or other funding-related information
Information is collected directly from you where practicable.
Information Received From Other Providers
We may already hold health information about you received from healthcare providers and organisations involved in your care.
This may include:
Referrals and correspondence from optometrists, GPs, specialists, hospitals, emergency departments, after-hours providers, allied health professionals, and community care providers
Laboratory, pathology, radiology, and imaging results
Access to authorised national or regional shared health records, including relevant medications and clinical history
Information received from health insurers, ACC, Pharmac, or other agencies involved in funding or supporting your care
In some circumstances, we may also receive or disclose information where authorised or required by law, including requests involving Police, legal representatives, Oranga Tamariki, the Ministry of Social Development, or regulatory bodies.
How We Use and Share Information
Your information is used to:
Assess, diagnose, and treat your condition
Coordinate your care with other healthcare providers
Arrange appointments and follow-up care
Communicate clinical information relevant to your treatment
Meet legal, professional, and regulatory obligations
Support quality improvement, clinical audit, and practice administration
We may share relevant information with:
Your referrer
Other healthcare providers involved in your care
Health insurers or ACC where applicable
Laboratories, imaging providers, or pharmacies
Regulatory, indemnity, or legal advisers where required
Clinical correspondence is generally sent electronically via secure systems, including secure EDI messaging. You may request that certain information only be sent directly to you where clinically appropriate and legally permitted.
Storage and Security of Information
Eyes and Eyelids takes reasonable steps to protect your information from loss, unauthorised access, misuse, disclosure, or alteration. We use secure electronic systems and cloud-based information technology providers to support the storage and management of records. Access to information is restricted to authorised staff and clinicians involved in your care or the operation of the practice.
Retention of Information
Health information is retained in accordance with legal and professional requirements, generally for a minimum of 10 years from the date of last contact or longer where required. Information that is no longer required is securely destroyed or deleted.
Virtual Consultations and Electronic Communication
Where appropriate, consultations may occur by telephone or secure virtual platform. Reasonable steps are taken to ensure privacy during virtual consultations and electronic communications. However, electronic communication carries some inherent privacy and security risks.
Your Rights
Under the Health Information Privacy Code 2020, you have the right to:
Request access to the health information we hold about you
Request correction of information you believe is inaccurate
Requests for access or correction should be made in writing where possible. We will respond within the timeframes required by law.
Complaints and Privacy Concerns
If you have any questions, concerns, or complaints regarding privacy or the handling of your information, please contact us:
Phone: +64 9 222 1828
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner.
Updates to This Statement
This Privacy Statement may be updated from time to time to reflect changes in legislation, technology, or practice operations.