PRIVACY STATEMENT
The Skin Hub is committed to protecting your privacy and maintaining the confidentiality of your personal and health information. We collect, use, store and disclose information in accordance with the Privacy Act 2020, the Health Information Privacy Code 2020, and applicable professional and legal standards.
Collection of Information
We collect personal and health information that is necessary to provide safe, appropriate, and effective healthcare services. This may include:
• Your name, date of birth, contact details, NHI number and other identifying information.
• Medical history, medications, allergies, family history and clinical information.
• Photographs and dermoscopic images taken for diagnostic, treatment and monitoring purposes.
• Information relating to appointments, billing and health insurance claims.
Where possible, we collect information directly from you. However, we may also receive information from other healthcare providers, family members, referrers, insurers, laboratories, specialists, hospitals, pharmacies, Health New Zealand, or other organisations involved in your care.
Where information is collected from a source other than you, we will comply with our obligations under Information Privacy Principle 3A and notify you of that collection where required by law.
By accepting health care services from us, you agree to health information mentioned above may be collected by The Skin Hub. If information is collected from another source, we will inform you providing no exceptions apply under the Health Information Privacy Code apply.
Use of Information
Your information may be used to:
• Assess, diagnose and treat health conditions.
• Communicate with you regarding appointments, results and follow-up care.
• Coordinate your care with other healthcare providers.
• Process ACC claims and insurance-related requests.
• Meet legal, professional and regulatory obligations.
• Improve the quality and safety of our services through clinical audit, quality assurance and staff training.
• Manage administrative and business functions of the practice.
Disclosure of Information
We will only disclose your information where:
• You have authorised the disclosure.
• The disclosure is necessary for your ongoing care or treatment.
• The disclosure is required or permitted by law.
• The disclosure is necessary to prevent or lessen a serious threat to health or safety.
• The disclosure is required for ACC, health insurance, regulatory, audit or funding purposes where authorised or permitted by law.
Where clinical information is requested by an insurer, we will generally seek your written consent before releasing information unless another lawful basis for disclosure applies. We often receive requests from insurers with authorisation from patients to release information. Please be aware that you may have agreed to this when agreeing to the terms and conditions of your insurance policy.
Digital Photography and Clinical Images
Clinical photographs and dermoscopic images may be taken to assist with diagnosis, treatment planning, monitoring and comparison over time. Images are securely stored within your medical record and are treated as health information. Images are only accessed by authorised personnel involved in your care.
Storage and Security
We take reasonable steps to protect your information from loss, unauthorised access, use, modification or disclosure. Information is stored within secure electronic medical record systems and may be held by trusted service providers who assist us in delivering healthcare services. Where information is stored or accessed outside New Zealand, we will ensure appropriate safeguards are in place as required by law.
Access and Correction
You have the right to request access to your personal and health information and to request correction of information you believe is inaccurate. Please feel free to request a copy of your records, either by emailing admin@skinhub.co.nz, by phoning us on 03 242 6088, or in person at the clinic.
Retention of Information
Health information is retained for the period required by applicable legal, professional and regulatory requirements and is securely disposed of when no longer required.
Staff Confidentiality
All staff are required to maintain strict confidentiality. Access to patient information is limited to authorised personnel who require the information to perform their duties. Unauthorised access, use or disclosure of patient information may result in disciplinary action and may constitute a breach of privacy legislation.
Questions or Complaints
If you have any questions about how your information is handled, or if you believe your privacy has been breached, please contact our clinic manager. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner.
This privacy statement may be updated from time to time to reflect changes in legislation, professional standards and practice operations.