Privacy Policy

1. Our Commitment

The Infusion Room by Nandish Health is committed to protecting your privacy. We collect, hold, use and disclose personal information in accordance with the Privacy Act 2020 and, in relation to health information, the Health Information Privacy Code 2020.

2. Information We Collect

• Identity and contact details, your name, email address, phone number and date of birth;
• Health information, intake and health questionnaires, medical history, medications, allergies, blood test results, consultation records, prescriptions, treatment records and clinical notes;
• Booking information, appointment history, preferences and communications with our team;
• Payment information, processed securely through our payment providers; we do not store full card details;
• Website information, analytics data and cookies, as described below.

3. How We Use Your Information

• To assess your clinical suitability and plan your personalised treatment;
• To enable consultation by our Registered Nurses and review and prescription by our doctors;
• To manage bookings, payments, reminders and follow-up care;
• To meet our legal, clinical record-keeping and professional obligations;
• With your consent, to send you news and updates, you may unsubscribe at any time using the link in any message or by contacting us.

4. Sharing Your Information

Your health information is shared within our clinical team, the Registered Nurses and doctors involved in your care, on a need-to-know basis. Where your treatment requires it, relevant information may be shared with a dispensing pharmacy or a laboratory.

We also use trusted service providers (such as booking, payment and IT providers) who may process limited information on our behalf under appropriate confidentiality obligations. We do not sell your personal information. We may disclose information where required or permitted by law, including where necessary to prevent a serious threat to health or safety.

5. Cookies, Analytics and Advertising

Our website uses cookies and similar technologies, including the Meta Pixel and the Google tag (Google Analytics and Google Ads), to understand how visitors use the site and to measure the performance of our advertising.

These tools record page visits and a small number of actions: taps on our phone number, clicks on consultation buttons, and visits to our thank-you page after an online enquiry. They may collect technical information such as your IP address, device, browser and the pages you visit, and Meta and Google may combine this with information they already hold about you under their own privacy policies.

We do not send your health information, the contents of any form, or details of any treatment you receive to Meta or Google.

You can block or delete cookies in your browser settings, manage your advertising preferences in your Meta and Google account settings, and opt out of Google Analytics using Google’s browser add-on. Some website features may not work fully if cookies are disabled.

If you request a consultation online, the information you submit is collected through a secure form service acting on our behalf and handled in line with this policy.

6. Storage and Security

Your information is held in secure systems with access restricted to authorised team members. We take reasonable technical and organisational steps to protect information against loss, misuse and unauthorised access, and we retain health information for the periods required by New Zealand health record-keeping obligations. Some of our service providers, including Meta and Google, may store or process information outside New Zealand; where that happens, we take reasonable steps to ensure it is protected in a way comparable to the Privacy Act 2020.

7. Access and Correction

Providing your health information is voluntary, but without it our clinical team cannot assess whether treatment is suitable for you, and we will not be able to provide it. You may request access to, or correction of, the personal information we hold about you at any time by contacting us using the details below. We will respond in accordance with the Privacy Act 2020.

If you have a concern about how we have handled your information, please contact us first so we can put it right. You may also complain to the Office of the Privacy Commissioner (privacy.org.nz). Our privacy officer can be contacted at iv@nandish.health.

8. Changes to This Policy

We may update this policy from time to time. The current version will always be available on this website.