Privacy Policy

Last updated: September 2026

Ola Fou Health Group (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal and health information.

We handle personal information in accordance with the Privacy Act 2020 and, where applicable, the Health Information Privacy Code 2020 and other applicable New Zealand law.

Information we collect

We only collect personal information that is reasonably necessary for our services and activities.

Depending on how you engage with us, this may include your:

• name, date of birth and contact details;
• demographic information;
• health and wellbeing information;
• information about your whānau or support needs;
• referral, service and navigation information;
• information you provide through our website, forms, email, telephone or in person; and
• technical information generated when you use our website.

Where practicable, we collect information directly from you. We may also receive information from a parent, guardian, authorised representative, health or social service provider, referrer, government agency or another person or organisation where you have authorised this, it is necessary for our services, or collection is otherwise permitted by law.

Where required, we will take reasonable steps to tell you when we have collected personal or health information about you from another source.

Why we collect and use information

We may collect and use your information to:

• respond to enquiries and referrals;
• provide, coordinate or help you access health, wellbeing, education, whānau or social support;
• communicate with you;
• maintain appropriate service and health records;
• support service safety, quality and administration;
• meet funding, audit or reporting requirements, using de-identified or aggregated information where appropriate;
• improve our services and website; and
• comply with our legal and regulatory obligations.

You do not have to provide information unless required by law. However, if we do not receive information reasonably required to respond to your enquiry or referral, we may be unable to provide or coordinate the relevant service.

Sharing your information

We do not sell your personal or health information.

We may disclose information where reasonably necessary for the purpose for which it was collected, where you have authorised us to do so, or where disclosure is otherwise permitted or required by law.

This may include sharing relevant information with health professionals, service providers, referral partners, contractors or agencies involved in providing or coordinating services for you.

We may also disclose information where permitted by law to prevent or lessen a serious threat to a person's life or health, or to public health or safety.

We will only disclose information that is reasonably necessary in the circumstances.

Storage and security

We take reasonable safeguards to protect personal and health information against loss, misuse and unauthorised access, use, modification or disclosure.

We may use reputable third-party technology, cloud, communications and service providers to store or process information on our behalf. Where required, we take reasonable steps to ensure those providers appropriately protect the information they handle.

We retain personal and health information for as long as required for the purposes for which it is held and to meet applicable legal, clinical and record-retention requirements. Information will be securely disposed of when it is no longer required.

Access and correction

You may ask us for access to personal or health information we hold about you and request correction if you believe it is inaccurate.

Some legal exceptions may apply.

To make a privacy request, contact:

Privacy Officer
Ola Fou Health Group
Email: privacy@olafouhealth.co.nz

Privacy breaches

If a privacy breach occurs, we will assess and respond to it in accordance with the Privacy Act 2020. Where a breach is notifiable, we will notify the Office of the Privacy Commissioner and affected individuals as required by law.

Website and third-party services

Our website may use cookies, analytics or third-party services to support its operation and understand how it is used. These services may collect technical information such as your IP address, browser, device and website usage.

Our website may also contain links to external websites. Ola Fou Health Group is not responsible for the privacy practices or content of third-party websites.

Children and young people

We take particular care when collecting and handling information about children and young people. Where appropriate, we may obtain information or authority from a parent, guardian or other authorised representative, subject to the rights of the child or young person and applicable law.

Complaints

If you have a question or concern about how we have handled your information, please contact our Privacy Officer first at privacy@olafouhealth.co.nz.

You may also make a complaint to the Office of the Privacy Commissioner if you are not satisfied with our response.

Changes to this policy

We may update this Privacy Policy when our services, systems or legal obligations change. The current version will be published on our website with its latest update date.