Effective date: 1/05/2026

At Fifth Avenue Family Practice, we are committed to protecting your privacy and keeping your personal and health information safe and secure.

As a healthcare provider, we collect, hold, use, and disclose personal information in accordance with the Privacy Act 2020, the Health Information Privacy Code 2020, and other relevant health sector requirements.

This Privacy Statement explains how we collect, use, store, and protect information about you when you interact with our practice, including through our website, online services, patient portals, and other digital platforms.

1. Information We Collect

We may collect personal information and health information about you, including:

  • Your name, date of birth, address, contact details, and identification information
  • Your National Health Index (NHI) number
  • Your medical history, diagnoses, medications, allergies, investigations, and treatment information
  • Information about your healthcare needs and interactions with our clinical team
  • Billing and payment information
  • Information you provide through online forms, emails, portals, or website enquiries
  • Information collected when you use our website, including technical information such as IP address, browser type, and website usage data

We collect only information that is necessary to provide safe and effective healthcare, manage our services, meet legal obligations, and improve the quality of care we provide.

2. How We Collect Your Information

Where possible, we collect information directly from you, including when you:

  • Register with our practice
  • Attend an appointment
  • Complete forms
  • Contact us by phone, email, website, or patient portal
  • Provide information during a consultation

There may be occasions where we collect information about you from other sources, including:

  • Other healthcare providers involved in your care
  • Hospitals and specialist services
  • Pharmacies
  • Laboratories and diagnostic providers
  • Government agencies or health organisations where authorised
  • Your authorised representatives, whānau, or caregivers (where appropriate)
  • Your previous healthcare providers

Where we collect personal information indirectly (from someone other than you), we will take reasonable steps to ensure you are aware of:

  • the information collected;
  • why we collected it;
  • who provided the information (where appropriate);
  • who we may share it with;
  • who holds your information; and
  • your rights to access and correct your information.

This is in accordance with the requirements of IPP3A / Rule 3A under New Zealand privacy law.

3. Information Collected Through Our Website

When you use our website, we may collect information to help us operate and improve our services.

This may include:

  • Website enquiry information
  • Online appointment requests
  • Feedback forms
  • Security and technical information
  • Website analytics data

Our website may use cookies or similar technologies to improve functionality and understand website usage.

Cookies do not normally identify you personally. However, information collected through website interactions may become personal information if it can reasonably identify you.

4. How We Use Your Information

We use your information to:

  • Provide healthcare services and coordinate your care
  • Maintain accurate medical records
  • Communicate with you about your healthcare
  • Process payments and manage accounts
  • Meet our legal and regulatory obligations
  • Improve our services, systems, and patient experience
  • Support quality improvement activities
  • Respond to enquiries and requests
  • Maintain website security

We will only use your information for purposes that are consistent with why it was collected, unless another lawful basis applies.

5. Sharing Your Information

Your health information is confidential.

We may share information with:

  • Healthcare professionals involved in your care
  • Hospitals, specialists, laboratories, and other healthcare providers
  • Health agencies where required or authorised
  • ACC, insurers, or government agencies where applicable and permitted
  • Third-party service providers who support our healthcare operations (for example, IT, electronic medical record, patient portal, or appointment systems)

We take reasonable steps to ensure third-party providers protect your information and only use it for authorised purposes.

We will not sell your personal information.

6. Keeping Your Information Secure

We take reasonable safeguards to protect your information from:

  • Loss
  • Unauthorised access
  • Misuse
  • Disclosure
  • Alteration or destruction

Your information may be stored electronically within secure healthcare systems. Access is limited to authorised staff and healthcare providers who require access for legitimate purposes.

7. Your Rights

You have rights under the Privacy Act 2020 and Health Information Privacy Code, including the right to:

  • Request access to the information we hold about you
  • Request correction of information that is inaccurate or incomplete
  • Ask how your information is collected, used, or shared
  • Raise concerns about how your information has been handled

To request access or correction of your information, please contact:

Privacy Officer
Jackie Doherty
40 Fifth Avenue, Tauranga
jackie@fifthavenue.co.nz
07 578 7087

We will respond to requests within the timeframe required by law.

8. If You Choose Not to Provide Information

Providing accurate health information helps us provide safe and effective care.

If you choose not to provide certain information, this may affect our ability to provide some services or make appropriate clinical decisions.

Where possible, we will explain the impact of not providing requested information.

9. Privacy Concerns or Complaints

If you have concerns about how we have handled your information, please contact us first so we can work with you to resolve the issue.

Privacy Officer:
Jackie Doherty
jackie@fifthavenue.co.nz

You also have the right to contact the:

Office of the Privacy Commissioner
Office of the Privacy Commissioner New Zealand

10. Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our services, technology, or privacy obligations.

The most recent version will always be available on our website.

Last updated: 26th June 2026

1. Health365 Patient Portal Privacy Statement

Health365 Patient Portal Privacy Statement

Fifth Avenue Family Practice
Effective Date: 1st May 2026

Introduction

Fifth Avenue Family Practice provides patients with access to healthcare services through the Health365 patient portal.

Health365 allows you to securely access selected health information, request appointments, communicate with our practice, and manage aspects of your healthcare online.

Your privacy is important to us. This Privacy Statement explains how information is collected, used, stored, and protected when you use Health365.

Information Collected Through Health365

When you register for and use Health365, information collected may include:

  • Your name and contact details
  • Date of birth and demographic information
  • NHI number
  • Appointment information
  • Clinical information made available through the portal
  • Messages and communications sent through the portal
  • Information you provide through portal forms or requests
  • Login and security information

How We Use Your Information

We use information collected through Health365 to:

  • Provide healthcare services
  • Communicate with you about your healthcare
  • Allow you secure access to selected health information
  • Process appointment requests
  • Improve patient access and healthcare services
  • Maintain accurate medical records
  • Meet our legal and regulatory obligations

Health365 as a Service Provider

Health365 is provided through a third-party technology platform that supports secure online access to healthcare services.

Health365 acts as a service provider processing information on behalf of Fifth Avenue Family Practice . Your health information remains under the control of Fifth Avenue Family Practice as your healthcare provider.

We have contractual arrangements and security requirements in place to ensure information is protected and only accessed or used for authorised purposes.

Security of Your Information

Health365 uses security measures designed to protect your information from unauthorised access, misuse, loss, or disclosure.

You are responsible for maintaining the confidentiality of your own login details and should not share your password with others.

If you believe your account has been accessed without your permission, please contact our practice immediately.

Sharing Information

Information accessed through Health365 may be shared with healthcare professionals involved in your care where permitted under the Health Information Privacy Code.

We do not sell your information or use your health information for marketing purposes.

Your Privacy Rights

You have the right to:

  • Request access to information we hold about you
  • Request correction of inaccurate information
  • Ask how your information is collected, used, or shared

Requests can be made by contacting:

Privacy Officer
Jackie Doherty
jackie@fifthavenue.co.nz
07 578 7087

Concerns or Complaints

If you have concerns about the way your information is handled, please contact us.

You may also contact the Office of the Privacy Commissioner if you remain concerned.

Office of the Privacy Commissioner New Zealand
www.privacy.org.nz

Changes to This Statement

We may update this statement from time to time to reflect changes to our systems, services, or privacy obligations.

Last updated: 26th June 2026

2. Website Cookie Notice

Website Cookie Notice

Fifth Avenue Family Practice Website

Effective Date: 1st May 2026

What Are Cookies?

Cookies are small text files placed on your device when you visit a website.

Cookies help websites operate effectively, remember your preferences, improve security, and provide information about how visitors use the website.

How We Use Cookies

Our website may use cookies for:

Essential Cookies

These cookies are required for the website to function correctly. They may support:

  • Website security
  • Page functionality
  • Form submissions
  • Basic website operations

These cookies cannot usually be disabled.

Analytics Cookies

We may use analytics tools to understand how visitors use our website, including:

  • Which pages are visited
  • How visitors navigate the website
  • Technical information such as browser type and device information

This information helps us improve our website and patient experience.

Analytics information is generally collected in an aggregated form and is not intended to identify individual users.

Managing Cookies

You can control or delete cookies through your browser settings.

Please note that disabling cookies may affect some website functionality.

Personal Information

Most website cookie information does not identify you personally.

However, if information collected through cookies can reasonably identify you, we will handle that information in accordance with the Privacy Act 2020 and Health Information Privacy Code 2020.

Third Party Services

Our website may use trusted third-party providers for website hosting, security, analytics, or online services.

These providers may process limited technical information required to provide their services.

Questions

If you have questions about our use of cookies, please contact:

Privacy Officer
Jackie Doherty
jackie@fifthavenue.co.nz
07 578 7087

3. Third Party Service Provider Privacy Statement / Register

Third Party Service Provider Privacy Register

Fifth Avenue Family Practice

Purpose

Fifth Avenue Family Practice uses selected third-party providers to support the delivery of healthcare services.

Under the Privacy Act 2020 and Health Information Privacy Code 2020, we are responsible for ensuring that personal and health information is handled appropriately when processed by service providers acting on our behalf.

The following providers support our operations.

myPractice Patient Management System (PMS)

Purpose

myPractice is our electronic practice management system used to securely manage patient information and healthcare records.

Information Processed

Information may include:

  • Patient demographics
  • Contact details
  • Clinical notes
  • Medical history
  • Appointment information
  • Billing information

Why We Use This Provider

myPractice enables us to:

  • Maintain electronic health records
  • Provide continuity of care
  • Manage appointments
  • Support clinical decision-making
  • Meet healthcare record obligations

Privacy and Security

Access to patient information is restricted to authorised healthcare staff.

myPractice processes information on behalf of Fifth Avenue Family Practice and is required to maintain appropriate security safeguards.

Website Hosting Provider

Purpose

Our website hosting provider supports the operation, security, and availability of our website.

Information Processed

Depending on website activity, information may include:

  • Website visitor technical information
  • IP address
  • Browser and device information
  • Website security logs

Why We Use This Provider

Website hosting services allow us to:

  • Maintain a secure website
  • Provide online information and services
  • Monitor website security

Privacy and Security

Our hosting provider is required to maintain reasonable security safeguards and only process information necessary to provide website hosting services.

Vensa SMS Communication Service

Purpose

Vensa provides communication services that allow us to send patients appointment reminders and healthcare-related messages.

Information Processed

Information may include:

  • Patient name
  • Mobile phone number
  • Appointment details
  • Reminder messages
  • Communication preferences

Why We Use This Provider

Vensa assists us to:

  • Send appointment reminders
  • Improve communication with patients
  • Reduce missed appointments
  • Support timely access to healthcare services

Privacy and Security

Messages are sent using secure systems.

We take reasonable steps to ensure patient information is only used for authorised healthcare communication purposes.

Patients may request alternative communication methods by contacting our practice.

Overseas Processing of Information

Some technology providers may use infrastructure or support services located outside New Zealand.

Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place and that information is protected in accordance with New Zealand privacy requirements.

Your Privacy Rights

You have the right to:

  • Access information we hold about you
  • Request correction of information
  • Ask questions about how your information is collected, used, or disclosed

Contact:

Privacy Officer
Jackie Doherty
jackie@fifthavenue.co.nz
07 578 7089

Last updated: 26th June 2026