Disclosure of personal information to third parties

We may disclose personal information to:

• other persons as expressly authorised by you, or your representative where you are unable to give such authority;
• specialists, other medical practitioners and emergency services (if necessary);
• pharmacies and pharmacists for the purposes of enabling you to fill prescriptions we may write for you;
• your next of kin and/or general practitioner;
• disclosure is in accordance with an authorisation granted under section 30 of the Privacy Act 2020;
• third party service providers for the purpose of enabling them to provide their services, to us, including (without limitation) practice management software providers, IT service providers, data storage, web-hosting and server providers, debt collectors, couriers, maintenance or problem-solving providers, marketing or advertising providers, professional advisors and payment systems operators;
• our employees, contractors and/or related entities;
• our existing or potential agents or business partners;
• anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred;
• courts, tribunals and regulatory authorities, in the event you fail to pay for goods or services we have provided to you;
• courts, tribunals, regulatory authorities and law enforcement officers, as required or authorised by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;
• third parties to collect and process data, such as Google Analytics (To find out how Google uses data when you use third party websites or applications, please see www.google.com/policies/privacy/partners/ or any other URL Google may use from time to time), Facebook Pixel or other relevant analytics businesses; and
• any other third parties as required or permitted by law, such as where we receive a subpoena.

We may disclose health information to:

• other persons as expressly authorised by you, or your representative where you are unable to give such authority;
• specialists, other medical practitioners and emergency services (if necessary);
• pharmacies and pharmacists for the purposes of enabling you to fill prescriptions we may write for you;
• your next of kin and/or general practitioner;
• the Police, law enforcement, Courts and other government departments where disclosure of health information is necessary to prevent or lessen a serious threat to public health or public safety, or the life or health of you or another individual;
• anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred;
• disclosure is in accordance with an authorisation granted under section 30 of the Privacy Act 2020; and
• any other third parties as required or permitted by law.

HealthOne: Please note that this practice is contributing to, and accessing healthcare information from HealthOne.

What is HealthOne?

HealthOne is a south island based secure electronic record that allows registered healthcare providers directly involved in your healthcare, to quickly access information such as your test results, allergies, medications, GP summaries and hospital information.

HealthOne strictly adheres to the principles of the Privacy Act, 2020 as well as the Rules set out in the Health Information Privacy Code 2020. Access is only possible via an approved highly secure healthcare information network which is regularly audited and tested. Privacy auditing is used to check that only those directly involved in your care are accessing your information.

To find out more about HealthOne please visit https://healthone.org.nz/. Please note that you are entitled to restrict the sharing of your healthcare records by contacting 0508 837 872 or emailing HealthOne.privacy@pegasus.health.nz

Google Analytics: We may have enabled Google Analytics Advertising Features including Remarketing Features, Advertising Reporting Features, Demographics and Interest Reports, Store Visits, Google Display Network Impression reporting etc. We and third-party vendors may use first-party cookies (such as the Google Analytics cookie) or other first-party identifiers, and third-party cookies (such as Google advertising cookies) or other third-party identifiers together.
You can opt-out of Google Analytics Advertising Features including using a Google Analytics Opt-out Browser add-on found here. To opt-out of personalised ad delivery on the Google content network, please visit Google’s Ads Preferences Manager here or if you wish to opt-out permanently even when all cookies are deleted from your browser you can install their plugin here. To opt out of interest-based ads on mobile devices, please follow these instructions for your mobile device: On android open the Google Settings app on your device and select “ads” to control the settings. On iOS devices with iOS 6 and above use Apple’s advertising identifier. To learn more about limiting ad tracking using this identifier, visit the settings menu on your device.

Overseas disclosure: Where we disclose your personal information and/or health information to third parties listed above, these third parties may store, transfer or access personal information outside of New Zealand which may not have an equivalent level of data protection laws as those in New Zealand. Before disclosing any personal information to an overseas recipient, we will comply with Information Privacy Principle 12 and Rule 12 of the Health information Privacy Code 2020 only disclose the information if:

• you have authorised the disclosure after we expressly informed you that the overseas recipient may not be required to protect the personal information and/or health information in a way that, overall, provides comparable safeguards to those in the Privacy Laws;
• we believe the overseas recipient is subject to the Privacy Laws;
• we believe that the overseas recipient is subject to privacy laws that, overall, provide comparable safeguards to those in the Privacy Laws;
• we believe that the overseas recipient is a participant in a prescribed binding scheme;
• we believe that the overseas recipient is subject to privacy laws in a prescribed country;
• we otherwise believe that the overseas recipient is required to protect your personal information in a way that, overall, provides comparable safeguards to those in the Privacy Laws (for example pursuant to a data transfer agreement entered into between us and the overseas recipient); or
• disclosure is in accordance with an authorisation granted under section 30 of the Privacy Act 2020.