Privacy policy

Our commitment

Boulcott Hospital, along with our doctors, nurses, and staff, complies with the Privacy Act 2020 and other relevant privacy laws. We also adhere to a strict code of conduct governing how health service providers collect, use, disclose, and store personal and sensitive health information.

For more details about these laws, please visit the Privacy Commissioner’s website.

Information we collect

To provide you with safe and effective care, we collect:

• Personal details (name, date of birth, ethnicity, address, contact numbers)
• Financial details (e.g., health insurance information, billing contact)
• Health and family history
• Medical records, test results, and information gathered during your treatment.

We only collect information necessary for your treatment and care. This may include sharing relevant details with your treating team (e.g., doctors, nurses, physiotherapists) and other health service providers such as pathology or imaging services when required.

We take reasonable steps to ensure your information is accurate, complete, and up to date. If you believe any information is incorrect, you may request an amendment. 

How we protect your information

Your information is stored securely, and we comply with legal requirements for retaining medical records for specific periods. We implement safeguards to prevent unauthorised access, use, or disclosure. 

Why we collect this information

We collect and hold your personal information to:

• Provide treatment, services, and medical advice
• Manage and administer those services, including billing and insurance checks
• Contact you regarding your care
• Improve service quality through research and development
• Conduct surveys to understand patient needs
• Maintain and enhance our systems and infrastructure.

How we collect your information

We usually collect your personal information directly from you. This may occur when you complete administrative forms, during the hospital admission process, through your doctor’s rooms, or over the phone.

In some cases, we may need to collect information from third parties, such as a relative, power of attorney, employer, or another health service provider if it is unreasonable or impractical to obtain it from you (for example, in an emergency).

If you are unable to provide consent for treatment, we may share information about your condition with your substitute decision-maker so they can make decisions on your behalf. We may also disclose information to those responsible for your care or on compassionate grounds. If you do not want your information shared with a particular person, please let us know.

To ensure continuity of care after discharge, we typically share relevant information with your nominated General Practitioner (GP). If you prefer that we do not share this information, please inform us.

Choosing to not provide information

If you choose not to provide certain information, please discuss this with us. It may affect our ability to deliver safe and effective care.

Providing information

We welcome you to share information that may help us deliver safe and effective care.  If you have questions or concerns about what you are providing, we are here to discuss and support you.

Use and disclosure of personal information

We use and disclose your information for purposes directly related to your treatment and ongoing care. This may include:

• Sharing information with your GP or other treating health services
• Referrals to specialists
• Pathology tests and imaging.

Our primary purpose for collecting information is to provide medical treatment and advice.

We may also be required by law to disclose information to government agencies for reporting notifiable diseases and health statistics. In some cases, your information may be required as evidence in court.

If there is a break in continuity of care, we may seek your consent before releasing information to a new doctor or health professional. In the case of emergencies, consent is not required, but we will do our best obtain this as time allows.

We do not use your information for direct marketing unless you have given explicit consent.

Our staff may share general information about your condition with your next of kin or an appointed family/whānau member, in line with accepted medical and privacy practice, unless you request otherwise.

Boulcott Hospital does not routinely disclose patient information overseas. If you request this (e.g., for an overseas health insurer), please note that privacy laws in other countries may differ from those in New Zealand.

Storing your information

We store personal information in both paper and electronic formats. We take all reasonable steps to protect your information from unauthorised access, misuse, loss, or damage.

Accessing and correcting your information

You have the right to request access to your personal information, including your medical record. Requests are usually required in writing, and identification will be needed. A fee may apply for copies.

Access may be declined in special circumstances, such as where disclosure could cause harm or impact another person’s privacy.

If you believe your information is incorrect, please let us know. If we disagree, you may request that your view be noted on the record.

Requests for access or correction should be directed to the hospital’s Quality Manager.

Contact us

If you have questions about your privacy or wish to make a complaint, please contact us and ask for the Quality Manager. You can also contact the Office of the Privacy Commissioner.

For more information about privacy, visit the Privacy Commissioner’s website.