Privacy Statement

Purpose

This Privacy Policy explains how Rapha Health Care collects, uses, stores, and protects personal information. We are committed to safeguarding your privacy and ensuring all personal information including health information is handled in accordance with the Privacy Act 2020 (NZ) and relevant health information standards.

We may update this policy from time to time to reflect changes to our services, legal requirements, or best practice. When updates are made, the “Last updated” date will be revised. Where changes are material, we will take reasonable steps to notify you, such as posting a notice on our website.

Our Values

Rapha Health Care understands that privacy and confidentiality are especially important in healthcare. We are committed to:

Respecting your dignity, mana, and privacy

Collecting only information that is necessary

Using information responsibly and transparently

Keeping personal and health information secure

Application

This policy applies to all individuals who provide personal information to Rapha Health Care, including clients, patients, family/whānau, referrers, website users, and service partners.

Personal information means any information about an identifiable individual. This includes health information, which is considered sensitive information under New Zealand law.

Collecting Personal Information

We may collect personal information when you:

Make an enquiry through our website

Are referred to our services

Receive services from Rapha Health Care

Communicate with us by phone, email, or online forms

Visit our website

Types of information we may collect include:

Contact details (name, address, phone number, email)

Date of birth and NHI number (where relevant)

Health and medical information relevant to the services provided

Referral information from health professionals or agencies

Emergency contact and family/whānau details

Billing or invoicing information

How we collect information:

Directly from you or your authorised representative (e.g. enquiry forms, referrals, consent forms)

Automatically through our website (e.g. IP address, browser type, cookies, analytics data)

From third parties such as GPs, hospitals, ACC, Health New Zealand, or other referrers — only where lawful and appropriate

If you choose not to provide required personal or health information, we may be unable to provide some or all of our services.

Use of Personal Information

Rapha Health Care uses personal information only where necessary and for purposes including:

Assessing eligibility and suitability for services

Delivering safe, effective, and appropriate health care

Communicating with you and/or your family/whānau

Managing referrals and care coordination

Invoicing and administration

Quality improvement and service evaluation

Website functionality and service improvement

Meeting legal, professional, and regulatory obligations

Protecting the health and safety of clients, staff, and the public

We do not use personal information for unrelated purposes.

Sharing Personal Information

We do not sell or rent personal information.

We may share information only where necessary, including with:

Health professionals and providers involved in your care

Referring agencies (with consent or where legally permitted)

Government agencies, regulators, or courts where required by law

Professional advisers (e.g. accountants, legal advisers) under confidentiality obligations

An actual or potential purchaser of our business (subject to confidentiality safeguards)

Other parties where you have given explicit consent

Protecting and Storing Personal Information

Rapha Health Care takes reasonable steps to protect all personal and health information from misuse, loss, unauthorised access, modification, or disclosure.

Our safeguards include:

Secure electronic systems and password protection

Restricted access to information on a need-to-know basis

Secure storage of physical records

Regular review of privacy and security practices

Personal information is primarily stored in New Zealand. Where information is stored or processed overseas (e.g. secure cloud services), we ensure this is done in compliance with New Zealand privacy laws.

Website, Cookies, and Third-Party Links

Our website may use cookies and analytics tools (such as Google Analytics) to understand website usage and improve our services. This information does not personally identify you.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.

Accessing and Correcting Your Information

You have the right to:

Request access to personal information we hold about you

Request correction of any inaccurate or incomplete information

Requests can be made by contacting us using the details below. We will respond within the timeframes required by the Privacy Act 2020.

Information about children or dependents will only be released where there is a clear legal right or appropriate authority.

Privacy Breaches

A privacy breach occurs when personal information is accessed, disclosed, altered, lost, or destroyed without authorisation.

If a breach occurs, Rapha Health Care will:

Take immediate steps to reduce harm

Assess the breach

Notify affected individuals and the Office of the Privacy Commissioner where required

Last updated: 30 January 2026