At Arrowtown Medical & Health (AMH), we’re committed to protecting your health information and respecting your privacy.
All staff are expected to meet their responsibilities when collecting, storing, using, or sharing health information, in accordance with:
We strive to ensure that:
Any privacy breaches are managed appropriately and reported to those affected where required. We are obligated to notify the Office of the Privacy Commissioner | Te Mana Mātāpono Matatapu of any breach of privacy that has caused, or is likely to cause, serious harm to anyone.
If you have any questions, concerns, or would like to talk about how your information is collected, used, stored or shared, please speak with your Doctor, Nurse, or our Practice Manager.
Arrowtown Medical & Health collects personal and health information directly from you to provide healthcare services, maintain accurate health records, and meet legal, funding and professional obligations.
In some circumstances, we may also receive personal or health information about you from other healthcare providers, family members, whānau, support people, government agencies, or other organisations involved in your care. Where required, we will take reasonable steps to inform you when information about you has been collected from another source, explain why it has been collected and how it may be used or shared.
Patients are entitled to access their personal information. Patients may also request correction of personal information they believe is inaccurate, incomplete, misleading or out of date.
Parents or guardians of patients under 16 years of age may also be entitled to request access unless there are lawful reasons to withhold the information.
Whenever you request your information, we will document the request and any information released. We aim to respond to requests for access to, or correction of, personal information within applicable statutory timeframes.
Your privacy matters to us, and we are committed to treating your health information with the utmost respect and care.
Whenever we share your information with third parties, we carefully follow the requirements of:
We will not disclose your personal health information without your authority unless:
We only work with third-party providers where we are satisfied that appropriate privacy and security safeguards are in place. Some approved service providers may assist us with secure information technology, clinical software, document management or other administrative services. These providers are required to protect personal information in accordance with applicable privacy and confidentiality obligations.
Information disclosed will be limited to what is necessary for the purpose concerned.
Every request and disclosure is appropriately documented to ensure transparency and accountability.
We aim to respond to information access requests as promptly as possible and within statutory timeframes.
Requests for health information from external parties are carefully assessed and managed in accordance with applicable legislation.
This may include requests from:
Where required, consent will be obtained before information is released.
In some circumstances we may be required or authorised by law to disclose health information without obtaining specific consent.
Examples include:
Only the minimum information necessary for the purpose will be disclosed.
For more information, see:
We take all practicable steps to maintain a physical environment that protects your personal and health information.
This includes ensuring privacy when collecting information in areas where conversations may be overheard or information may otherwise be observed by others.
All photography, filming or audio recording within our facilities must comply with:
Patients must obtain the clinician’s consent before recording or photographing a consultation.
Recording or photographing another person or their personal information without consent may breach privacy laws. Recording and photography are not permitted in public areas of the practice, including reception areas.
Where a clinician needs to take a photo, video or audio recording for clinical purposes, they will:
Photos, videos and audio recordings form part of your health record and may be accessed in accordance with applicable privacy laws.
Clinicians may also request permission to use your device or ask that photographs relevant to your care be securely provided to the practice for clinical assessment.
You may request deletion of photographs or recordings where this is lawful and clinically appropriate.
Everyone should feel safe, respected and comfortable during a consultation.
Patients may have support people present, including family members, whānau or friends.
A clinician or patient may request a chaperone where appropriate.
Observers or students may be present only with the patient’s consent.
Where concerns regarding safety, privacy or professional boundaries exist, the practice may require another staff member to be present during consultations.
Arrowtown Medical & Health may use approved Generative AI tools to assist clinicians with note-taking, clinical documentation and administrative tasks.
These tools support clinicians and do not replace professional clinical judgement or decision-making. If AI is used during your consultation:
We regularly review emerging technologies to ensure patient privacy, confidentiality and safety remain protected.
Please note that Arrowtown Medical & Health contributes to, and accesses, HealthOne. HealthOne supports the safe and efficient sharing of relevant clinical information between authorised healthcare professionals involved in your care.
HealthOne is a secure electronic health record that enables authorised healthcare professionals directly involved in your healthcare to view relevant information such as:
HealthOne operates in accordance with the Privacy Act 2020 and the Health Information Privacy Code 2020.
Access is restricted to authorised healthcare professionals and is monitored through security controls and privacy auditing.
To learn more about HealthOne visit:
You may request restrictions on information sharing through HealthOne by contacting:
Phone: 0508 837 872
Email: privacy@healthone.health.nz
If you have questions, feedback or concerns about privacy, confidentiality or how your information is handled, please contact:
Arrowtown Medical & Health
Phone: 03 442 0144
Email: admin@arrowmedhlth.nz
You may also contact:
Office of the Privacy Commissioner | Te Mana Mātāpono Matatapu
Phone: 0800 803 909
Website: www.privacy.org.nz
