Last Updated: December 12, 2025

The Ultrasound Clinic Limited ("we," "us," "our," or "the Clinic"), located at 440 Anglesea Street, Hamilton 3204, New Zealand, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website (the "Website"), submit forms, book appointments, purchase gift vouchers, or use our services.

We comply with the New Zealand Privacy Act 2020 and the Health Information Privacy Code 2020 (HIPC), which provide special protections for health information due to its sensitive nature. Personal information includes any information about an identifiable individual, and health information includes details about your health, disabilities, or requested services.

By using the Website or providing information to us, you consent to the practices described in this Policy.

1. Information We Collect

We collect information in the following ways:

• Through Website Forms:
  • Contact form: Name, email, phone, and message.
  • Booking request form: Name, contact details, preferred appointment times, scan requirements, and any uploaded referral documents or health details.
  • E-referral form (for medical practitioners only): Patient details (name, date of birth, contact info, NHI number if applicable), clinical information, referrer details, and examination requirements.
  • Gift voucher purchases: Name, email, payment details (processed via Stripe), and recipient information if applicable.
• Automatically via Cookies and Analytics:
  • We use cookies for user experience, security, authentication, and analytics (e.g., to understand site usage and improve functionality).
  • Information collected may include IP address, browser type, device information, and pages visited.
  • No personal identification is typically collected via cookies unless linked to form submissions.
• From Other Sources:
  • Referrals from medical practitioners, GPs, specialists, or insurers (e.g., ACC, Southern Cross).
  • During in-clinic appointments (e.g., scan results, images via My Scans app).

We only collect information necessary for providing our services, such as scheduling appointments, performing ultrasounds, processing payments, or complying with legal obligations.

2. How We Use Your Information

• Contact and Booking Forms: Solely for internal purposes, such as contacting you to confirm or discuss appointments, or processing your inquiry. This information is not shared with third parties except as required by law.
• E-Referrals and Health Information: To schedule appointments, understand required services, provide care, and generate reports. We may disclose health information to parties directly involved in your care (e.g., your GP, specialists, or insurers like ACC/Southern Cross for eligibility or claims).
• Purchases: To process payments securely via Stripe and issue gift vouchers.
• General: To improve our Website and services, comply with legal requirements, or protect our rights.

Health information is used and disclosed only for the primary purpose it was collected (e.g., providing ultrasound services) or related purposes you would reasonably expect, in line with the HIPC.

3. Disclosure of Your Information

We do not sell or rent your personal information. We may disclose it:

• To healthcare providers involved in your care (e.g., referring practitioners or specialists).
• To insurers or funders (e.g., ACC, Southern Cross) for claims or eligibility.
• To service providers who assist us (e.g., IT providers, payment processors like Stripe), under strict confidentiality.
• As required by law (e.g., to the Ministry of Health or in response to court orders).
• In anonymised form for research or statistics (no identifiable information).

For health information, disclosures follow HIPC rules, which allow sharing for continuity of care without additional consent in many cases.

4. Security of Your Information

• Your connection to the Website is encrypted using TLS 1.3.
• Form submissions are encrypted during transmission.
• We store information securely on protected servers and use reasonable measures to prevent unauthorised access, loss, or misuse.
• Access is limited to authorised staff who need it for their roles.
• Payment details are handled by Stripe and not stored by us.

Despite these measures, no online transmission is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain personal information only as long as necessary:

• Contact/booking inquiries: Typically 12 months, unless needed longer for follow-up.
• Health records (e.g., scan reports): At least 10 years from the last appointment, as required for health agencies under New Zealand law.
• Financial records: As required for tax and auditing purposes (usually 7 years).

After this, information is securely deleted or anonymised.

6. Cookies and Tracking

We use cookies for essential functions (e.g., security), user experience, and anonymised analytics. You can manage cookies via your browser settings. For more information on disabling cookies, visit www.aboutcookies.org.

We do not use cookies for targeted advertising.

7. Your Privacy Rights

Under the Privacy Act 2020, you have the right to:

• Request access to your personal information we hold.
• Request correction of inaccurate information.
• Complain about how we handle your information.

For health information, these rights apply with some limitations (e.g., to protect others' privacy).

To exercise your rights, contact our Privacy Officer (details below). We will respond promptly, usually within 20 working days, and may require proof of identity.

You can also complain to the Office of the Privacy Commissioner at www.privacy.org.nz.

8. Data Breaches

If a privacy breach occurs that may cause serious harm, we will notify you and the Privacy Commissioner as required by law.

9. Children's Privacy

Our services involve pregnancy ultrasounds, but we do not knowingly collect information from children under 16 without appropriate consent (e.g., from a parent/guardian).

10. Changes to This Policy

We may update this Policy from time to time. Changes will be posted on the Website with the updated date. Material changes will be notified via email (if we have your contact details) or a prominent notice on the Website. Continued use of the Website or services after changes constitutes acceptance.

11. Contact Us

For questions, access/correction requests, or complaints:

Privacy Officer The Ultrasound Clinic 440 Anglesea Street Hamilton 3204, New Zealand Phone: (07) 929 4151 Email: [email protected]

We take your privacy seriously and welcome your feedback.