Privacy Policy

Oamaru Physiotherapy Clinic (“we”, “our”, “us”) respects and protects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, or receive physiotherapy services from our clinic.

1. What Information We Collect

We collect only the information necessary to provide you with safe, effective care and to manage our business. This may include:

  • Personal details: name, address, phone number, email address, and date of birth.

  • Health information: medical history, injury details, treatment notes, ACC claim details, and GP information.

  • Payment details: billing address and payment method (note – we do not store full credit-card information).

  • Website data: basic analytics such as pages visited, time spent on site, and browser type (collected anonymously through standard analytics tools).

2. How We Collect Information

We collect your information when you:

  • Book or attend an appointment.

  • Submit a form on our website or contact us by phone or email.

  • Make an ACC claim through our clinic.

  • Use our website (cookies or analytics).

All information is collected directly from you or, where applicable, from ACC or another healthcare provider with your consent.

3. How We Use Your Information

Your information is used for:

  • Providing physiotherapy assessment and treatment.

  • Managing appointments, accounts, and communication.

  • Processing ACC claims and liaising with your GP or specialists (with consent).

  • Meeting legal and professional obligations under New Zealand law.

  • Improving our clinic operations and website experience.

We do not sell or rent your information to anyone.

4. Disclosure of Information

We may share your information only when:

  • Required by ACC, your GP, or another treating professional (with your consent).

  • Required by law or to prevent a serious threat to health or safety.

  • Needed for administrative or IT support by trusted service providers who are bound by confidentiality agreements.

5. How We Store and Protect Information

Your personal and health information is stored securely in electronic practice-management systems and protected physical files. We apply reasonable technical, physical, and organisational safeguards to prevent unauthorised access, alteration, or disclosure.
Electronic data is password-protected and backed up securely; paper files are kept in locked storage accessible only to authorised staff.

6. Access and Correction

You have the right to access and request correction of your personal information under the Privacy Act 2020.
To make a request, please contact our privacy officer at the details below. We’ll respond within a reasonable timeframe and may ask for proof of identity before releasing information.

7. Website and Cookies

Our website may use cookies and analytics tools (such as Google Analytics) to monitor performance and improve usability. These do not collect personally identifiable information. You can disable cookies in your browser settings if you prefer.

8. Retention of Information

We retain health records for the period required by law (generally 10 years from the last consultation) or as needed to fulfil the purposes outlined in this policy. After that, information is securely destroyed.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or clinic practice. Updates will be published on our website and take effect immediately.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or the way your information is handled, please contact:

Contact Information
Oamaru Physiotherapy Clinic
19 Eden Street, Oamaru 9400
03 434 6750
office@oamaruphysio.co.nz