Who we are
NorWest Chiropractic provides chiropractic care from our Riverhead and Westgate practices in Auckland, New Zealand. This privacy policy explains how we collect, use, store and disclose personal and health information.
We handle personal information in accordance with the Privacy Act 2020 and health information in accordance with the Health Information Privacy Code 2020.
Information we collect
Depending on how you interact with us, we may collect:
- Your name, date of birth, address, email address and phone number.
- Emergency contact, parent, guardian or caregiver details.
- Health history, symptoms, assessment findings, clinical notes and care records.
- Postural assessments, examination results and X-rays where clinically indicated.
- Appointment, attendance, referral and practitioner information.
- ACC claim and injury information.
- Payment and transaction information.
- Messages, emails, forms and other communications with our team.
- Information about how you use our website, including your IP address, browser, device and website activity.
Where practical, we collect information directly from you. We may also receive information from a parent or guardian, another health professional, ACC or another person you have authorised.
Why we collect and use your information
We collect and use information to:
- Assess your needs and provide safe, appropriate chiropractic care.
- Create and maintain your health record.
- Arrange, confirm and manage appointments.
- Communicate with you about your care and our practice.
- Process payments, receipts and ACC claims.
- Respond to enquiries and requests.
- Improve our services, website and patient experience.
- Meet our professional, clinical, legal and regulatory obligations.
- Protect the security of our systems, patients and team.
We only collect information that is reasonably necessary for these purposes.
Health information
Health information is sensitive, and we take its privacy seriously. Access is limited to authorised team members and service providers who require it to perform their roles.
We will not use or disclose your health information for an unrelated purpose unless you have authorised us or the use or disclosure is permitted or required by law.
Appointment, communication and payment services
We use trusted service providers to help operate the practice. These may include practice-management and online-booking systems, website and hosting providers, email and SMS communication platforms, payment processors, analytics services and professional technology support.
This currently includes services such as PracticeHub and Stripe, together with communication, website and analytics providers. These providers may process information on our behalf and are expected to protect it appropriately.
We do not sell personal or health information.
When we may share information
We may disclose relevant information:
- To members of the NorWest Chiropractic team involved in your care or administration.
- To service providers that securely process information on our behalf.
- To ACC when managing an eligible injury claim.
- To another health professional when you have authorised a referral or transfer of information.
- To a parent, guardian or representative where legally appropriate.
- When required or permitted by law.
- When necessary to prevent or lessen a serious threat to someone’s health or safety.
We limit disclosures to the information reasonably required for the purpose.
Storage and security
Information may be stored in secure electronic systems and, where applicable, physical records. We use reasonable administrative, technical and physical safeguards to protect information from loss, unauthorised access, misuse, alteration or disclosure.
Some technology providers may store or process information outside New Zealand. Where this occurs, we take reasonable steps to ensure appropriate privacy and security protections are in place.
If a privacy breach creates a risk of serious harm, we will respond and notify affected people and the Office of the Privacy Commissioner where required.
How long we retain information
We retain health records for the period required by New Zealand law and our professional obligations—generally for at least 10 years from the last date on which health services were provided.
Other information is retained only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and administrative requirements. When information is no longer required, we take reasonable steps to securely delete or destroy it.
Website, cookies and analytics
Our website may use cookies and similar technologies to operate correctly, remember preferences, understand website usage and measure the effectiveness of our communications or advertising.
Our website may also contain links to or embedded content from third-party services, such as online booking tools, maps or social-media platforms. Those services may collect information according to their own privacy policies.
You can restrict cookies through your browser settings, although some website features may not work as intended.
Accessing or correcting your information
You have the right to ask for access to the personal information we hold about you and to request correction if you believe it is inaccurate or incomplete.
We may need to verify your identity before responding. In limited circumstances, the law may allow or require us to withhold certain information. If this applies, we will explain the reason where permitted.
Privacy questions or complaints
If you have a question, would like to access or correct your information, or wish to make a privacy complaint, please contact:
Privacy Officer: Wayne Smith
NorWest Chiropractic
Phone: 022 403 1568
Email: hello@norwestchiro.co.nz
We will take your concerns seriously and work with you to resolve them.
You may also contact the Office of the Privacy Commissioner at www.privacy.org.nz or the Health and Disability Commissioner at www.hdc.org.nz.
Changes to this policy
We may update this privacy policy when our services, systems or legal obligations change. The latest version will be published on this website.
Last updated: 15 September 2026