Privacy and your information
About this statement
Validus Limited collects and holds personal and health information for the Validus service. This statement covers enquiries, self-referrals, assessment and ongoing care. The Privacy Act 2020 and Health Information Privacy Code 2020 govern how we handle this information.
For privacy questions, concerns, a copy of this statement, or requests to access or correct your information, email info@validus.nz.
Providing information is voluntary. If information needed to respond or provide care is missing, we will explain what this means for your next steps. Sending an enquiry does not book an appointment or give consent to care.
What we collect and why
When you contact us, we collect the details you provide so we can respond. Our assessment enquiry asks for contact details, date of birth and brief health information to help identify the appropriate doctor and explain your next steps.
If you proceed, we collect consent forms, questionnaires, relevant health information, correspondence and clinical records. We use this information to arrange appointments, assess your needs, provide care and administer the service. During ongoing care, we collect relevant updates and keep records of your appointments and care.
You can provide existing records yourself, such as patient-portal screenshots or a summary from your GP practice. These help inform your assessment and care. Tell us if anything is missing or out of date.
If we need information directly from your GP or another provider using your authorisation, we explain the source, information requested, purpose, recipients and your privacy rights before you authorise the request. Your consent form authorises us to contact your GP practice, if needed, for relevant medical history and current health information to inform assessment and care.
When information comes from someone else, we take reasonable steps to explain the collection as soon as reasonably practicable, unless you have already been adequately informed or a legal exception applies. Information is used for its explained purpose or as the law otherwise permits.
Sharing, protection and your rights
Relevant administrative staff and doctors use your information to respond, arrange services and provide care. Relevant information may be shared with healthcare providers involved in your care where you authorise this or another lawful basis applies. After an appointment, we send your clinical letter to you and your GP.
You can authorise a nominated person to discuss your care with us or receive communications through the choices on your consent form. Tell us if you want to change those choices or have concerns about sharing.
Information may also be disclosed where law requires or permits it. This includes necessary disclosure to someone able to help address a serious threat to life, health or public safety, where obtaining authorisation is not desirable or practicable. Only information necessary for that purpose is shared.
Service providers may handle information on our behalf to support communication, bookings and record management. We remain responsible for taking reasonable steps to protect that information.
AI note-taking is optional. You can decline it or change your preference by telling your doctor. Your consent form explains how to record that choice.
Information must not be kept longer than needed for lawful purposes. Patient health records are subject to legal retention requirements, so withdrawing consent does not necessarily require their deletion.
You can request access or correction. We may need to verify your identity. If a correction is not made, you can ask for your statement of correction to be attached. We ordinarily decide access requests promptly and within 20 working days, subject to the Privacy Act.
Contact info@validus.nz to make a request or raise a concern. You can also contact the Office of the Privacy Commissioner at privacy.org.nz.