NEED TO SEE A DOCTOR? TO BOOK AN APPOINTMENT CALL 03 442 0144
At Arrowtown Medical & Health (AMH), we’re committed to protecting your health information and respecting your privacy. All staff are expected to meet their responsibilities when collecting, storing, using, or sharing health information, in line with:
Health Information Privacy Code 2020
Health (Retention of Information) Regulations 1996
We strive to ensure that:
Any privacy breaches are managed appropriately and reported to those affected. We are obligated to notify the Office of the Privacy Commissioner | Te Mana Mātāpono Matatapu of any breach of privacy that has caused, or is likely to cause, serious harm to anyone.
If you have any questions, concerns, or would like to talk about how your information may be shared, please feel free to speak with your Doctor, Nurse, or our Practice Manager.
Patients are entitled to access their personal information. Parents or guardians of patients under 16 are also entitled to request the patient’s information unless there are good reasons to withhold it.
Whenever you request your information, we’ll make sure to document your request and keep track of any details we provide. Occasionally, there may be a small charge to cover the cost of gathering and organising your records, but we’ll let you know in advance and are happy to answer any questions you may have.
Your privacy matters to us, and we are committed to treating your health information with the utmost respect and care. Whenever we share your information with third parties, we carefully follow the guidelines set out in: The Privacy Act 2020: The Health Information Privacy Code 2020: and Other relevant legislation.
We will never disclose your personal health details without your permission, unless we are required to do so by law.
We only collaborate with third-party service providers if we are confident that their privacy protections and policies meet our strict standards, and your information will only be used for the specific purpose it was collected for. Every request and disclosure is thoroughly documented to ensure transparency and accountability.
When your information is shared, we include only what is essential for the specific request, safeguarding your privacy at every step. Our goal is to respond to any access requests as quickly as we can and always within 20 working days.
Requests for your health information from external parties are handled with strict privacy. We comply fully with laws when sharing personal data – whether to government agencies, families of deceased patients, or organisations outside New Zealand – and ensure all disclosures meet legal requirements.
In certain situations, we are legally required to proactively share patient information with external agencies.
For more information, see:
We take all practicable steps to maintain a physical environment that protects your personal and health information. This includes being mindful of privacy when collecting information in spaces where others may overhear or see what’s being shared.
All photography, filming, or audio recording within our facility must comply with: The Privacy Act 2020, and The Harmful Digital Communications Act 2015
Clinicians taking photos or recordings for clinical reasons must also comply with the Health Information Privacy Code 2020.
Patients must obtain the clinician’s consent before recording or photographing a consultation.
Recording or photographing another person or their private information without consent is a breach of the Privacy Act 2020.
Recording or photography is not permitted in public areas of the building, such as the reception area.
When your clinician needs to take a photo, video, or audio recording for medical reasons, they will always:
You are entitled to request a copy of any photo, video, or audio recording taken during your care, as these form part of your health record.
Clinicians may request permission to use your recording device – such as a smartphone to capture photographs when you are attending a clinic at AMH, or they may ask you or a reliable individual to document health-related images at home for phone or telehealth consultations and forward them to our service. You retain the right to specify if this information should be deleted.
Everyone should feel safe, respected, and comfortable in a consultation. Either the clinician or patient may request that other people are present (in-person or remotely) to ensure their safety, privacy, and dignity. This may include:
In situations where there are concerns about safety or misunderstandings, Arrowtown Medical & Health may require another clinical staff member to be present in all consultations with a patient.
At Arrowtown Medical & Health, we may sometimes use generative AI tools to help with clinical note-taking and administrative tasks like writing reports. These tools are used to support (not replace) our clinical judgement. We do not use AI to make clinical decisions.
If AI is used during your consultation, your clinician will ask for verbal consent at the start. You’re welcome to say no, and you can change your mind at any time.
Before introducing any AI tools, we carefully assess risks to ensure your privacy and safety are protected. We follow New Zealand laws, including the Privacy Act 2020 and its Information Privacy Principles.
We know this technology is evolving quickly, and we regularly review our processes to stay safe, transparent, and patient-focused.
For more information, see the Privacy Commissioner’s guidance: Artificial Intelligence and the Information Privacy Principles.
Please note that this practice is contributing to, and accessing healthcare information from HealthOne –
What is HealthOne?
HealthOne is a secure electronic record that allows registered health care professionals directly involved in your healthcare, to quickly access information such as your test results, allergies, medications, GP summaries and hospital information. HealthOne adheres to the principles of the Privacy Act 2020 as well as the Rules set out in the Health Information Privacy Code 2020. Access is only possible via an approved highly secure healthcare information network which is regularly audited and tested. Privacy auditing is used to check that only those directly involved in your care are accessing your information.
To find out more about HealthOne please visit https://healthone.org.nz/
Please note that you are entitled to restrict the sharing of your healthcare records by contacting 0508 837 872 or emailing privacy@healthone.health.nz
If you have questions, feedback, or concerns about privacy related to your experience at Arrowtown Medical & Health, please reach out to us.
Phone: 03 442 0144
Email: admin@arrowmedhlth.nz
For matters where you feel a breach to privacy has caused, or is likely to cause, serious harm to anyone, you may wish to contact the Privacy Commissioner | Te Mana Mātāpono Matatapu, rights/making a complaint to the Commissioner. Phone: 0800 803 909.