Privacy Statement
Last updated 28.10.2026 · Version [1.0]
Important information and who we are
Healthvision provides nursing, homecare, rehabilitation and private care services in people’s homes and communities across New Zealand. To do that we need to collect and hold personal information, and for most that includes health information to help us understand the needs of the people we support and to provide appropriate services. This may include developing and implementing individualised support/treatment plan, coordinating care, supporting health and safety, monitoring wellbeing, and meeting our legal obligations. We collect information for purposes connected with our services. Where identifying information is not necessary to achieve a particular purpose, we will not require it. This policy explains what we collect, why we need it, who we share it with, how long we keep it, and the rights you have over it.
We handle your information in accordance with the Privacy Act 2020 and the Health Information Privacy Code 2020. Where the two differ, the Code applies to health information we hold about you.
Who this statement covers
Our privacy statement applies to information we collect about:
- clients and prospective clients of our services, and their whānau, next of kin and nominated contacts;
- people who enquire through our website, phone line or email, whether or not they go on to become clients;
- health professionals, funders and other organisations who refer people to us;
- applicants for roles with us, and visitors to our website.
Information about our own employees and contractors is covered by a separate internal privacy policy available from Human Resources.
What we collect
The information we collect depends on your relationship with us. In broad terms:
Identity and contact details
Your name, date of birth, NHI number, address, phone number, email address, preferred language, and the contact details of your nominated support people.
Health information
Your medical history, diagnoses, medications, allergies, mobility and cognitive needs, care plans, clinical notes made by our staff during visits, incident reports, and correspondence with your GP, specialists or hospital teams. This is the most sensitive information we hold, and it receives the strongest protection.
Service and funding information
Your funding source and entitlement details, the services approved for you, visit schedules and timesheets, and any invoicing or payment records where you pay privately.
Information about your home
Access instructions, household details relevant to safe care, and any health and safety hazards our staff need to know about before a visit.
Website information
What you type into our enquiry forms, referral forms and newsletter sign-up, plus technical information collected automatically by cookies and analytics, described under Our website below.
Where we get it from
Wherever we reasonably can, we collect information directly from you. In practice, though, referrals frequently reach us from someone else, so we also receive information about you from:
- your GP, hospital, specialist or other treating health professional;
- Health New Zealand – Te Whatu Ora, ACC, the Ministry of Social Development, and other funders and needs assessment services;
- your family, whānau, carers or legal representatives;
- your insurer, where your care is funded privately through a policy.
When we collect information about you from someone other than you, we will tell you that we have it, where it came from, and what we are using it for, unless one of the limited exceptions in the Health Information Privacy Code applies, for example where telling you would prejudice your own safety or someone else’s, or where you already know.
Why we collect it
We use your information to:
- assess whether we can meet your needs, and design a care plan with you;
- deliver, coordinate and adjust your care;
- keep you and our staff safe during visits;
- communicate with you, your whānau and your other health providers about your care;
- claim funding, invoice for private care, and meet our reporting obligations to funders;
- respond to complaints, incidents and adverse events;
- monitor and improve the quality and safety of our services, including audits, accreditation, service user surveys, and staff training;
- meet our legal and regulatory obligations, including under the Health and Disability Services (Safety) Act and the Code of Health and Disability Services Consumers’ Rights.
If you choose not to give us information
Giving us your information is voluntary. But we cannot safely provide care without a reasonable clinical picture of your needs, and funders will not approve services without the information they require. If you withhold something, we will tell you what the practical consequence is rather than leave you guessing.
Who we share it with
We share your health information only when necessary and where permitted under the Health Information Privacy Code 2020. This may include sharing with:
- Our staff. Access is limited to the people involved in your care and those who support them clinically or administratively.
- Your other health providers. Your GP, hospital teams, pharmacists and allied health professionals, where sharing is necessary for your care.
- Your funder. Health NZ – Te Whatu Ora, ACC, MSD or your insurer, to confirm entitlement, claim payment and report on services delivered.
- The people you have nominated. Family, whānau or a legal representative, to the extent you have told us they may be involved.
- Our service providers. The organisations that run our care management system, rostering, IT, cloud hosting and secure document destruction. They act on our instructions, are bound by confidentiality obligations, and may not use your information for their own purposes.
- Regulators and authorities. Where we are required or permitted by law, for example the Health and Disability Commissioner, a coroner, a court order, or a statutory notification. This could also include professional advisors, such as lawyers, accountants.
- Third-party service providers. We may share your name and email address with external service providers who conduct surveys on our behalf to gather feedback and evaluate the quality of our services. We use this feedback to help us improve our services.
- Other parties where you have given consent or another applicable exception under Rule 11 applies.
We may also disclose information without your authorisation where the Code allows it, most commonly to prevent or lessen a serious threat to someone’s life, health or safety.
We do not sell your information, and we do not share it with anyone for their own marketing.
Disclosure of Health Information Outside New Zealand
We may share your health information outside New Zealand. When doing so, we take steps to protect your information, such as confirming that the recipient is subject to comparable privacy laws or has agreed by contract to protect your information.
Accuracy of your information
It is important that the personal and health information we hold about you is accurate and up to date. Please let us know if your information changes during your relationship with us. We take reasonable steps to ensure that the information we hold is accurate, up to date, complete, relevant and not misleading before we use or disclose it.
Information held outside New Zealand
No information is stored outside of New Zealand data sovereignty approved areas.
How we keep it safe
We take reasonable steps to protect your information from loss, misuse and unauthorised access. These include:
- access controls, so staff see only what their role requires;
- encryption of data in transit and at rest in our core clinical systems;
- privacy and security training for all staff.
- confidentiality obligations written into every employment and contractor agreement;
- secure storage of any remaining paper records, and secure destruction at end of life.
If a privacy breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner as the Privacy Act requires.
How long we keep it
We keep health information for at least ten years from the date of the last service provided to you, in line with the Health Regulations 1996 (Retention of Health Information). Some records are kept longer where a funder, a legal requirement or an open complaint or claim requires it.
Your rights
Access
You can ask for a copy of the information we hold about you. We will respond as soon as we reasonably can, and no later than 20 working days after we receive your request.
Correction
If something we hold is wrong, tell us and we will correct it. Where we disagree, we will attach a statement of the correction you sought to the record so that anyone reading it later sees your view alongside ours.
Withdrawing consent
You can change what you have agreed to at any time. Some information we must keep regardless, because clinical and funding records cannot simply be deleted on request.
Our website
You can browse healthvision.co.nz without telling us who you are. When you fill in a form on the site as enquiry, we collect what you type in order to respond to you, and each form tells you what it is collecting and why at the point you fill it in.
Our site uses cookies to make it work and to understand how it is being used. You can manage your preferences through the Cookie Settings link in the footer, or clear cookies in your browser at any time.
Zoho cookies
Our website uses Zoho Forms to provide online forms and process form submissions. Zoho may use cookies and similar technologies that are necessary for the functionality and security of its forms, as well as tracking technologies that help us understand how visitors reached our website. This may include campaign information such as UTM parameters associated with a form submission. We use this information to measure the effectiveness of our marketing and understand how people find our services.
Some parts of our site are for employees and prospective employees; the company privacy policy applies to these.
Children and young people
We support Tamariki and Rangatahi as well as adults. Where a child is too young to make their own decisions, we deal with their parent or guardian. Young people who are able to understand and decide for themselves have the same privacy rights as adults, including the right to ask that information not be shared with their family. We assess this individually and record what has been agreed.
Acting on someone else’s behalf
If you hold enduring power of attorney, welfare guardianship or another legal authority for someone we support, we will work with you once we have sighted the relevant documentation. Where a client can make their own decisions, their wishes about what is shared with family take precedence.
Contact us, or make a complaint
Our Privacy Officers are responsible for how we handle your information and is the first point of contact for any question, access request or concern.
Heather Jones, Privacy Officer
Liezle Maceda-Langoey, Privacy Officer
Healthvision, 1D 95 Ascot Avenue, Greenlane,
Auckland 1051
info@healthvision.co.nz
0508 733 377
We would rather hear from you than not. If you are unhappy with how we have handled your information, tell us and we will look into it and respond within 20 working days.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or 0800 803 909. Complaints about the care itself, rather than about privacy, can go to the Health and Disability Commissioner at hdc.org.nz or 0800 11 22 33.
Complaining costs you nothing and will not affect the care you receive from us.
Changes to this privacy statement
The current version is always on our website; with the date it took effect at the top. If we make a change that materially affects how we handle your information, we will let current clients know directly.
Privacy Act 2020 Principles
Health Information Privacy Code 2020
Office of the Privacy Commissioner