Te Wairoa Medical Centre
Privacy Policy
Last updated September 28, 2025
This Privacy Notice for Te Wairoa Medical Centre (‘Medical Centre’, 'we', 'us', or 'our'), describes how and why we might access, collect, store, use, and/or share your personal information when you use our services ('Services'), including those services outlined in our Terms of Use policy, and when you visit our website at https://www.twmc.nz. We do not use, share or transfer personal data except as set out in this Privacy Notice.
This Privacy Notice also describes how and why we might access, collect, store, use, and/or share your health information, which is information about your health, including your medical history, any disabilities you may have, any services being provided to you, or any other information about you collected before or in the course of the provision of any health or disability service.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights. We are responsible for making decisions about how your personal information is processed, and ensuring our decisions are compliant with New Zealand privacy law. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at admin@twmc.nz.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by reviewing the full policy below.
What personal information do we collect? Our website can be viewed without the need for you to disclose any personal information to us. However, when you visit, use, or navigate our Services, we may collect personal information depending on your use of the Services and which products and features you engage with. This information may include your name, phone number and email address.
Do we collect any sensitive personal information? Some information can be considered 'special' or 'sensitive', for example your racial or ethnic origins, sexual orientation, and religious beliefs. We may collect sensitive personal information as part of our provision of health services to you, or through your use of the Services on the website.
What health information do we collect? For the collection of health information, we will only collect information that is fair in the circumstances and does not intrude to an unreasonable extent on your personal affairs. Health information is information about your health, including your medical history, any disabilities you may have, any services being provided to you, or any other information about you collected before or in the course of the provision of any health or disability service.
Do we collect any information from third parties? We do not collect any information from third parties. Personal information is collected directly from you depending on your use of our Services and website. We will only collect health information directly from you, unless one of the grounds in Rule 2(2) of the Health Information Privacy Code 2020 apply.
How do we collect and use your information? We collect and use your information to provide, improve, and administer our Services, communicate with you, prevent security and fraud incidents, and comply with New Zealand law. We may also collect your personal information for other lawful purposes connected to our Services with your consent. We collect your health information only when it is necessary for lawful purposes connected with a function or activity of the Medical Centre. Limits on the use of health information are set out in Rule 10(1) of the Health Information Privacy Code 2020.
In what situations and with which parties do we share personal information? We will only share identifiable personal, or health information collected from you with third parties if we believe that it is for, or directly related to, one of the purposes of the Services, required by law, with your consent, or in one of the specific situations described in clause 3 of this Privacy Notice.
How do we keep your information safe? We have organisational and technical processes and procedures in place to protect your personal information. These include reasonable security safeguards to protect your personal information against misuse. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to bypass our security and improperly collect, access, steal, or modify your information. Where a document containing your health information is to be disposed of, we will do it in a manner that preserves your privacy.
What are your rights? You are entitled to request and receive confirmation of whether we hold any personal information about you. You are also entitled to request access and correction of that personal information under sections 40 and 59 of the Privacy Act 2020. In addition, you have the right to access (and have corrected) your health information under Rules 6 and 7 of the Health Information Privacy Code 2020.
How do you exercise your rights? The easiest way to exercise your rights is by contacting us on admin@twmc.nz.
Want to learn more about what we do with any information we collect? Review the Privacy Notice in full below.
1. WHAT INFORMATION DO WE COLLECT?
Personal or health information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
We also collect your health information, which is information about your health, including your medical history, any disabilities you may have, any services being provided to you, or any other information about you collected before or in the course of the provision of any health or disability service.
Personal Information Provided by You. The personal information that we collect depends on your use of the Services, and the products and features you engage with. The personal information we collect may include your:
name;
phone number; and
email addresses.
Sensitive Information. We may collect sensitive personal information as part of our provision of health services to you, or through your use of the Services on the website.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our website.
We automatically collect certain information when you visit our website or use our Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies.
The information we collect includes:
Form submissions. When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace so that they can provide website services to us.
Website visitors. This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including:
Information about your browser, network and device
Web pages you visited prior to coming to this website
Web pages you view while on this website
Your IP address
Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyses the data in a de-personalised form.
Fonts. This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including:
Information about your browser, network, or device
Information about this site and the page you’re viewing on it.
Your IP address
Squarespace Analytics. This website collects personal data to power our site analytics, including:
Information about your browser, network, and device
Web pages you visited prior to coming to this website
Your IP address
This information may also include details about your use of this website, including:
Clicks Internal links
Pages visited
Scrolling
Searches
Timestamps
We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.
Cookies. This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.
These necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
2. HOW DO WE COLLECT YOUR INFORMATION?
In Short: We collect your information to provide, improve, and administer our Services, communicate with you, prevent security and fraud incidents, and comply with New Zealand law. We may also collect and process your information for other lawful purposes with your consent.
We collect your personal information for a variety of reasons, depending on how you interact with our Services, including:
To send administrative information to you. We may collect your information to send you details about our products and services, changes to our terms and policies, and other similar information.
We may collect sensitive personal information as part of our provision of health services to you, or through your use of the Services on the website. We collect your health information only when it is necessary for lawful purposes connected with a function or activity of the Medical Centre. Collection of health information may be from:
enrolment forms;
inquiry forms;
communication with Medical Centre staff;
consultation notes; or
any other form of communication directly from you to the Medical Centre relating to your health.
3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In Short: We may share information in specific situations described in this section and/or with the following third parties.
We will only share identifiable personal information collected from you with third parties if we believe that it is for, or directly related to, one of the purposes of the Services, required by law, with your consent, or in one of the following situations:
Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g. Google Maps API, Places API). Google Maps uses GPS, Wi-Fi, and cell towers to estimate your location. GPS is accurate to about 20 meters, while Wi-Fi and cell towers help improve accuracy when GPS signals are weak, like indoors. This data helps Google Maps provide directions, but it is not always perfectly precise.
We may also share information about you with a third party if we believe that sharing is reasonably necessary to:
comply with any applicable law, regulation, legal process or governmental request, including to meet national security requirements, and our service providers may also do this;
enforce our agreements, policies and terms;
protect the intellectual property rights of any person;
protect the security or integrity of the website and our Services; or
protect us, you or the public from harm or illegal activities.
A health agency that holds health information must not use or disclose that information without taking any steps that are, in the circumstances, reasonable to ensure that the information is accurate, up to date, complete, relevant and not misleading. Limits on the disclosure of health information are set out in Rule 11(1) of the Health Information Privacy Code 2020.
4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.
We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our Services or on other websites.
Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.
5. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your personal and health information for no longer than is required for the purposes of the Services outlined in this Privacy Notice, unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Where a document containing your health information is to be disposed of, we will do it in a manner that preserves your privacy.
6. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organisational and technical security measures.
We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. These include reasonable security safeguards to protect your personal information against misuse. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to bypass our security and improperly collect, access, steal, or modify your information. We will do everything reasonably in our power to prevent unauthorised use or disclosure of your personal information, however provision of personal information to our Services is at your own risk. You should only access the Services within a secure environment.
7. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at admin@twmc.nz.
8. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.
You are entitled to request and receive confirmation of whether we hold any personal information about you. You are also entitled to request access and correction of that personal information under sections 40 and 59 of the Privacy Act 2020. In addition, you have the right to access (and have corrected) your health information under Rules 6 and 7 of the Health Information Privacy Code 2020.
Withdrawing your consent: If we are relying on your consent to process your personal information, you may withdraw your consent at any time. You can withdraw your consent by contacting us using the contact details provided in the section 'HOW CAN YOU CONTACT US ABOUT THIS NOTICE?' below.
However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.
If you have questions or comments about your privacy rights, you may email us at admin@twmc.nz.
9. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ('DNT') feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
10. WHAT LAW GOVERNS YOUR SPECIFIC PRIVACY RIGHTS?
In Short: You may have additional rights based on the country you reside in.
New Zealand
We collect and process your personal information under the obligations and conditions set by New Zealand's Privacy Act 2020 and the Health Information Privacy Code 2020.
This Privacy Notice satisfies the notice requirements defined in the Privacy Act, in particular: what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information.
If you do not wish to provide the personal information necessary to fulfil their applicable purpose, it may affect our ability to provide our Services, in particular to:
offer you the products or services that you want
respond to, or help with, your requests
At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us by using the contact details provided in the section 'HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?'
If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of New Zealand's Privacy Principles to the Office of New Zealand Privacy Commissioner.
11. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated 'Revised' date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may email us at admin@twmc.nz or contact us by post at:
Te Wairoa Medical Centre
24 Kitchener Street
Wairoa
Hawke's Bay Region 4108
New Zealand
13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please email us at admin@twmc.nz.
