Privacy Policy

We are committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, store, and share your information in accordance with the Privacy Act 2020 and the Health Information Privacy Code 2020 (HIPC).

What Information We Collect

We may collect personal and health information about you, including:

  • Your name, date of birth, and contact details
  • Information relevant to your psychological care, including mental and physical health history
  • Information provided in referral letters or reports (with your consent)
  • Appointment, billing, and ACC-related information
  • Information you provide through forms, email, or phone

How We Collect Your Information

We collect information:

  • When you make an enquiry or book an appointment
  • During assessment and therapy sessions
  • When you complete forms or provide information via our website
  • From referrers or other health professionals, with your consent
  • When you contact us by phone or email

Why We Collect Your Information

We collect and use your information in order to:

  • Provide psychological assessment and therapy services
  • Manage appointments, billing, and ACC claims
  • Communicate with you about your care
  • Meet legal, professional, and regulatory obligations

We only collect information that is necessary for these purposes.

Who We May Share Your Information With

Your information is treated as confidential. We may share your information only when:

  • You have given consent (for example, with your GP, referrer, insurer, school, or other providers)
  • It is required for ACC claims and reporting
  • It is required or permitted by law, including where there is a serious risk to your safety or the safety of others

We do not sell or trade your personal information.

How We Store and Protect Your Information

We take reasonable steps to protect your personal and health information from loss, misuse, and unauthorised access. This includes:

  • Secure electronic practice management systems
  • Restricted access to authorised staff and clinicians only
  • Secure handling and storage of any paper records

Health information is retained for at least 10 years from the date of last contact, as required by law, and then securely destroyed or anonymised.

Your Rights: Access and Correction

You have the right to:

  • Request access to the personal or health information we hold about you
  • Request correction of information if you believe it is inaccurate or incomplete

To request access or correction, please contact us at:
Email: [admin@drsashabh.com]


We will respond to requests in accordance with the timeframes set out in the Privacy Act 2020 and HIPC.

Privacy Concerns and Complaints

If you have any concerns about how we have handled your information, please contact our Privacy Officer:

Privacy Officer: Dr Sasha Bhattacharya
Email: [sasha@drsashabh.com]
Phone: [Insert phone number]

If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner (New Zealand) at www.privacy.org.nz.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our practices. The most current version will always be available on our website.