Introduction

Alison Surgical Centre Limited is dedicated to protecting the privacy of all personal and health information entrusted to us. We are required to comply with the Privacy Act 2020 and the Health Information Privacy Code 2020. Further details about these laws can be found on the Privacy Commissioner’s website:  www.privacy.org.nz.

This statement explains:

• The types of personal information we collect and store
• How we gather and retain that information
• The reasons we collect personal information
• How you can request access to or correction of your information
• How we manage and report privacy breaches

Information We Collect

To provide medical care and related services, we collect personal and health information about patients. We also collect information about medical practitioners who work within our facility. This may include:

• Name
• Date and country of birth
• Residency status
• Occupation
• Religion
• Ethnicity
• Address and contact details
• Email address
• Medical and family medical history
• Health information such as test results, diagnoses, and planned treatments

Why We Collect This Information

If you receive services from Alison Surgical Centre, or if you are a medical practitioner working with us, we collect and hold your information in order to:

• Deliver appropriate treatment, services, and clinical advice
• Manage and administer those services, including billing and debt management
• Contact you with information relevant to your care
• Confirm health insurance eligibility
• Improve our services through quality improvement, research, and development
• Conduct surveys to better understand patient needs
• Maintain and enhance our systems and infrastructure

How We Collect Personal Information

Where possible, we collect information directly from you—for example, through admission forms, administrative processes, your doctor’s rooms, or by phone.

In some cases, it may be necessary to obtain information from third parties such as relatives, a power of attorney, or other healthcare providers.

To support continuity of care after discharge, we routinely share relevant information with your nominated General Practitioner and other treating providers. If you do not want your information shared in this way, please inform us.

How We Use Personal Information

We use or disclose personal information only:

• For the purpose it was collected, or for a closely related purpose
• For any other purpose you have authorised
• Where required or permitted by law

Information may be shared with your GP, other hospitals, specialists, or diagnostic services involved in your care.

We are legally required to provide certain information to government agencies, such as for reporting notifiable diseases or statistical purposes. Your information may also be required by a court if subpoenaed.

If there has been a break in your care, we may need your consent before releasing information to a new provider, unless the situation is an emergency.

We do not use your information for direct marketing unless you have given explicit permission.

Our staff may share general updates about your condition with your nominated next of kin or close family members, unless you request otherwise.

We do not routinely send patient information overseas. If you ask us to—for example, for an overseas health insurer—privacy protections in other countries may differ from those in New Zealand.

If You Choose Not to Provide Information

You are not required to give us personal information. However, if you choose not to, it may affect our ability to provide services. We will discuss any implications with you.

How We Store Information

Personal information is stored in both paper and electronic formats. Protecting this information is a priority, and our staff are responsible for ensuring it is safeguarded from unauthorised access, misuse, loss, or damage.

Accessing and Correcting Your Information

You may request access to, or correction of, the personal information we hold about you, including medical records. Requests should be made in writing or by email, and we may ask for proof of identity.

You may receive copies of the information or be allowed to view it.

Access may be declined in limited circumstances—for example, if releasing the information could cause harm or reveal someone else’s personal information. If access is declined, we will explain why in writing.

If you believe information is incorrect, you may ask us to amend it. If we choose not to make the change, you may request that your statement of disagreement be added to the record.

Hardcopy patient records are destroyed no sooner than 10 years after your last admission.

Responding to Privacy Breaches

A privacy breach occurs when personal information is accessed, disclosed, altered, lost, or destroyed without authorisation or by accident. If a breach is likely to cause serious harm, we will notify the Office of the Privacy Commissioner promptly, as well as any affected individuals.

Contact Us

If you have questions about how your information is handled, or if you wish to make a complaint, please contact:

The Privacy Officer
Alison Surgical Centre
66 Alison Street
Hamilton 3240

Phone: 07 560 0535 (ask for the Privacy Officer / General Manager)

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner.