Privacy Policy
We are committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, store, and share your information in accordance with the Privacy Act 2020 and the Health Information Privacy Code 2020 (HIPC).
What Information We Collect
We may collect personal and health information about you, including:
- Your name, date of birth, and contact details
- Information relevant to your psychological care, including mental and physical health history
- Information provided in referral letters or reports (with your consent)
- Appointment, billing, and ACC-related information
- Information you provide through forms, email, or phone
How We Collect Your Information
We collect information:
- When you make an enquiry or book an appointment
- During assessment and therapy sessions
- When you complete forms or provide information via our website
- From referrers or other health professionals, with your consent
- When you contact us by phone or email
Why We Collect Your Information
We collect and use your information in order to:
- Provide psychological assessment and therapy services
- Manage appointments, billing, and ACC claims
- Communicate with you about your care
- Meet legal, professional, and regulatory obligations
We only collect information that is necessary for these purposes.
Who We May Share Your Information With
Your information is treated as confidential. We may share your information only when:
- You have given consent (for example, with your GP, referrer, insurer, school, or other providers)
- It is required for ACC claims and reporting
- It is required or permitted by law, including where there is a serious risk to your safety or the safety of others
We do not sell or trade your personal information.
How We Store and Protect Your Information
We take reasonable steps to protect your personal and health information from loss, misuse, and unauthorised access. This includes:
- Secure electronic practice management systems
- Restricted access to authorised staff and clinicians only
- Secure handling and storage of any paper records
Health information is retained for at least 10 years from the date of last contact, as required by law, and then securely destroyed or anonymised.
Your Rights: Access and Correction
You have the right to:
- Request access to the personal or health information we hold about you
- Request correction of information if you believe it is inaccurate or incomplete
To request access or correction, please contact us at:
Email: [admin@drsashabh.com]
We will respond to requests in accordance with the timeframes set out in the Privacy Act 2020 and HIPC.
Privacy Concerns and Complaints
If you have any concerns about how we have handled your information, please contact our Privacy Officer:
Privacy Officer: Dr Sasha Bhattacharya
Email: [sasha@drsashabh.com]
Phone: [Insert phone number]
If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner (New Zealand) at www.privacy.org.nz.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our practices. The most current version will always be available on our website.