Will Anderson Surgical Care Ltd
Privacy Policy and Health Information Statement
Effective Date: August 2026
1. Introduction
At Will Anderson Surgical Care (“the Clinic”, “we”, “our”, or “us”), health information is collected, used, and stored to provide care and treatment to patients and for associated administrative tasks. Information may also be disclosed to other health professionals involved in the patient’s care, such as GPs, the hospital and referrals to other specialists or for further investigations. Our accountants (Elevate CA Ltd) have access to invoice data. In all that we do we are committed to protecting the privacy and confidentiality of our patients’ personal and health information. We collect, use, store, and disclose health information in accordance with The Privacy Act 2020 and the Health Information Privacy Code 2020 (HIPC).
This Privacy Policy explains how we manage your personal and health information when providing specialist surgical services.
2. What Information We Collect
We may collect personal and health information including:
- Your name, date of birth, gender, NHI number, and contact details
- Emergency contact and next-of-kin information
- Medical history, diagnoses, medications, allergies, and treatment records
- Referral letters and clinical notes
- Test results, imaging reports, and pathology reports
- ACC claim information
- Health insurance details
- Appointment and billing information
- Communications between you and the Clinic
We will only collect information that is necessary for providing safe and effective healthcare services.
3. How We Collect Information
We may collect information directly from you or receive information from:
- Your referring doctor or healthcare provider
- Hospitals and other healthcare providers involved in your care
- Laboratory and radiology service providers
- ACC
- Health insurers
- Family members or caregivers where appropriate and authorised
- Other agencies where permitted by law
Where practical, we will collect information directly from you.
4. Why We Collect and Use Your Information
We collect and use your information to:
- Assess, diagnose, and treat health conditions
- Provide specialist surgical consultations and procedures
- Arrange follow-up care
- Communicate with you regarding appointments and treatment
- Coordinate care with other healthcare providers
- Manage ACC, insurance, and payment processes
- Maintain accurate health records
- Meet legal, professional, and regulatory obligations
- Improve the quality and safety of our services
We will only use your information for the purposes for which it was collected, or as otherwise permitted by law.
5. Sharing Your Information
We may disclose your information to:
- Your general practitioner (GP)
- Referring specialists and healthcare providers
- Public and private hospitals involved in your care
- Laboratory, radiology, and pathology providers
- ACC
- Health insurers (with your authorisation where required)
- Health New Zealand | Te Whatu Ora
- Government agencies where required by law
- Other persons or organisations where you have authorised the disclosure
We will only share information necessary for the purpose of providing healthcare and supporting administrative tasks or where disclosure is authorised or permitted under the Health Information Privacy Code or other applicable legislation.
6. Storage and Security
We take reasonable steps to protect your information from:
- Unauthorised access
- Loss or theft
- Misuse
- Unauthorised disclosure
- Alteration or destruction
Security measures include:
- Using secure third party electronic medical record systems (Elixir NZ Ltd) with 2-factor authentication.
- Using trusted computer programmes (Microsoft suite) with secure cloud-based computer back up.
- Password-protected devices and systems.
- Annual review of IT systems to ensure appropriate practices are in place.
- Staff training on privacy and data security.
- Computer terminals and paper records will be positioned out of public view.
- Secure disposal of information when no longer required.
Only authorised staff and clinicians may access your information where necessary to perform their duties.
7. Retention of Information
We retain health information only for as long as required:
- To provide ongoing care
- To meet legal and professional record-keeping obligations
- To manage potential medico-legal or regulatory requirements
When information is no longer required, it will be securely destroyed.
8. Overseas Disclosure
Where information is stored or processed using cloud-based systems or service providers located outside New Zealand, we will take reasonable steps to ensure your information receives comparable privacy protection as required under New Zealand privacy law.
9. Access to Your Information
You have the right to request access to your personal and health information held by the Clinic. We will respond to requests in accordance with the Privacy Act 2020 and Health Information Privacy Code 2020.
10. Correcting Your Information
If you believe any information we hold about you is inaccurate, incomplete, outdated, or misleading, you may request that it be corrected.
Where appropriate, we will update the information. If we do not agree to make a correction, you may request that a statement of correction be attached to your record.
11. Privacy Breaches
If a privacy breach occurs that is likely to cause serious harm, we will manage and notify affected individuals and the Privacy Commissioner as required by the Privacy Act 2020 and Health Information Privacy Code 2020.
12. Website and Electronic Communications
If you visit our website, we may collect limited technical information such as:
- IP address
- Browser type
- Pages visited
- Website usage statistics
This information is generally used to improve website performance and user experience.
Email communication may not always be secure. If you communicate with us by email, you acknowledge the inherent risks associated with electronic communications.
13. Complaints
If you have concerns about how we have handled your information, please contact our Privacy Officer first.
You also have the right to lodge a complaint with:
Office of the Privacy Commissioner
Website: www.privacy.org.nz
Phone: 0800 803 909 [privacy.org.nz]
14. Contact Us
Privacy Officer
Stephanie Anderson, Practice Manager at Will Anderson Surgical Care
Address: c/o Northland Surgical & Endoscopy Rooms, 10 Islington Street Kensington
Phone: 09 430 2388
Email: info@willandersonsc.co.nz
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, professional requirements, or our practices. The most current version will be available on our website and at our clinic reception.
Last Updated: August 2026
Review Due: August 2028