Privacy policy

MyHydrate Privacy Policy

Effective Date: [Insert Date]

1. Introduction

Welcome to MyHydrate. We are committed to protecting your privacy and handling your information in line with the New Zealand Privacy Act 2020 and the Health Information Privacy Code 2020 (HIPC).

This policy explains how we collect, use, store, and disclose both customer data and patient health information when providing IV nutrient, wellness, and medical infusion services.

2. Information We Collect

We collect personal information necessary to provide safe and effective services:

a. General Customer Information

  • Name, contact details (email, phone, address).

  • Billing and payment information.

  • Website usage data (cookies, IP address, browsing behaviour).

b. Patient Health Information

  • Medical history, current medications, allergies, and relevant health status.

  • Clinical notes, treatment records, and infusion details.

  • Information provided during consultations, assessments, or follow-up care.

3. Purpose of Collection

We collect personal and health information to:

  • Assess suitability for infusion services and ensure patient safety.

  • Deliver prescribed or requested treatments.

  • Maintain accurate clinical records.

  • Meet our legal, professional, and ethical obligations.

  • Process payments and manage bookings.

  • Improve our services and communicate with you (e.g., appointment reminders, updates).

We will not collect more information than necessary for these purposes.

4. Storage & Security

Your information is stored securely using a combination of:

  • Encrypted electronic health record systems.

  • Password-protected devices and secure cloud-based platforms.

  • Locked physical storage for any paper-based records.

  • Restricted access, available only to authorised health professionals or staff who require it to perform their duties.

We retain health information for as long as legally required (typically 10 years under health regulations) and securely dispose of it once no longer needed.

5. Use & Disclosure

We use and disclose your information only for the purposes it was collected, unless:

  • You have given explicit consent.

  • Required by law (e.g., reporting notifiable diseases).

  • Needed to protect your or another person’s health or safety.

  • Shared with trusted third parties (e.g., compounding pharmacy, courier, IT providers), under strict confidentiality and data protection agreements.

If information is transferred or stored overseas, we ensure safeguards are in place to protect your privacy to New Zealand standards.

6. Access & Correction

You have the right to:

  • Request access to the personal and health information we hold about you.

  • Request corrections if you believe the information is inaccurate or incomplete.

Please contact our Privacy Officer (details below) to make a request. We will respond within a reasonable timeframe as required under the Privacy Act and HIPC.

7. Cookies & Website Tracking

Our site uses cookies to:

  • Enable secure transactions and site functionality.

  • Analyse traffic and improve performance.

  • Personalise your experience.

You can manage cookies through your browser settings, though this may affect site use.

8. Data Breach Notification

If a privacy breach occurs that poses a risk of serious harm, we will:

  • Take immediate steps to contain and assess the breach.

  • Notify affected individuals and the Office of the Privacy Commissioner as required.

9. Privacy Officer & Complaints

For privacy questions, data access, or complaints, please contact:

Privacy Officer, MyHydrate
[Insert Email]
[Insert Address]

If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner at www.privacy.org.nz.

10. Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our services. The updated version will always be available on our website with a new effective date.