ADHD Simple customer privacy notice

This privacy notice tells you what to expect us to do with your personal information.

  • Contact details

  • What information we collect, use, and why

  • Lawful bases and data protection rights

  • Where we get personal information from

  • How long we keep information

  • Who we share information with

  • How to complain

Contact Details

Email: contact@adhdsimple.co.nz

What information we collect, use, and why

What information we collect, use, and why
We collect and use personal information only where it is necessary to provide healthcare services, operate our systems, meet legal obligations, protect safety, or improve our services.
Information we may collect includes:
• Identifying and contact information such as name, address, email address, phone number, date of birth, gender, pronouns, and emergency or next-of-kin details
• Health identifiers such as NHI or hospital numbers (where applicable)
• Health information including medical history, diagnoses, medications, allergies, test results, treatment records, care needs, disability information, and clinical notes
• Photographs, recorded images, or recordings where relevant to care, security, or service delivery
• Payment and financial information including billing details, insurance information, and transaction records
• Account and system information including login details, security information, and marketing preferences
• Communications and records such as emails, call recordings, meeting notes, correspondence, complaints, or decisions
• Recruitment information including CVs, employment history, qualifications, identity verification, right-to-work checks, and criminal background checks where required
• Research and service improvement data, including consent records and information used for audit, analysis, or medical research where permitted by law
• Technical information such as website or app usage data and IP addresses
• Information required for legal, regulatory, safeguarding, public protection, or fraud-prevention purposes
Some information we handle may be considered sensitive, including health information, biometric data, genetic data, sexual health information, or ethnicity, where this is relevant and lawful.
We only collect sensitive information where it is necessary, permitted by law, and subject to appropriate safeguards.
We do not collect information unless it is reasonably necessary for a lawful purpose connected with our services, legal obligations, or public safety responsibilities.
If you have questions about the information we collect or how it is used, you can contact us using the details provided in this privacy notice.

Lawful purposes and your privacy rights

We collect, use, store, and disclose personal information in accordance with the Privacy Act 2020.

Lawful purposes for using your information

We only collect and use personal information where it is necessary and lawful, including for the following purposes:

  • Providing healthcare services, patient care, pharmaceutical services, and related goods

  • Operating patient portals, apps, and digital services

  • Meeting legal, regulatory, and professional obligations

  • Protecting health, safety, and vital interests

  • Safeguarding and public protection purposes

  • Preventing, detecting, or investigating wrongdoing

  • Recruitment and employment processes

  • Responding to enquiries, complaints, or claims

  • Research, audit, service improvement, and archiving (where permitted)

  • Providing service updates, information, or marketing (where permitted)

Where required, we will obtain your consent, and you may withdraw that consent at any time.

Your privacy rights

Under New Zealand privacy law, you have the right to:

  • Access your personal information

  • Request correction of your personal information

  • Be informed about how your information is used and shared

  • Withdraw consent where consent is relied upon

  • Make a complaint if you believe your privacy rights have been breached

Some limited exceptions may apply under the Privacy Act.

Making a privacy request or complaint

If you wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us using the details provided at the top of this Privacy Notice.

We will respond as soon as reasonably practicable, and no later than 20 working days, unless an extension is permitted by law.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner

Last updated

August 2025