Privacy Statement
Last updated: October 2026
Aotearoa Diabetes Collective Limited (ADC) respects your privacy and is committed to protecting your personal and health information.
We collect, use, store and share personal and health information in accordance with the Privacy Act 2020 and, where applicable, the Health Information Privacy Code 2020.
This Privacy Statement explains how we handle information about you when you use our services, contact us, visit our website, complete a form, participate in our courses, programmes or other activities, or otherwise interact with ADC.
Who we are
Aotearoa Diabetes Collective Limited is a registered charity providing specialist diabetes care, education and related services in Aotearoa New Zealand.
Aotearoa Diabetes Collective Limited
NZBN: 9429050075935
Registered Charity: CC59783
Suite 1, Radnor House
170 Collingwood Street
Hamilton Lake, Hamilton 3204
New Zealand
Phone: 0800 439 232
Email: kiaora@aotearoadiabetescollective.org.nz
What information we collect
The information we collect depends on how you interact with ADC.
If you use our clinical services, we may collect information such as your:
name and contact details;
date of birth;
NHI number;
relevant health and medical information;
information about your diabetes care and treatment;
medications and test results;
referrals and appointment information;
payment information; and
information about your GP, specialist diabetes service or other healthcare providers.
We may also collect information you provide when you:
complete a referral, appointment or contact form;
upload documents to us;
contact us by phone, email or through our website;
register for a course, programme or event;
subscribe to ADC emails or newsletters;
participate in research, evaluation or feedback activities, where applicable; or
otherwise use or interact with our services.
We only collect information that is necessary for a lawful purpose connected with ADC's activities and services.
Where we get your information
Where possible, we collect your personal and health information directly from you or your authorised representative.
We may also receive information about you from other people or organisations where this is permitted by law and appropriate for your care or our services. This may include your GP, hospital or specialist diabetes service, another healthcare professional, a parent, guardian, whānau member or other representative, or someone referring you to ADC.
If we collect health information about you from someone other than you or your representative, we will take reasonable steps to make sure you or your representative are aware that we have collected the information and of the relevant information about its collection, unless an exception under the Health Information Privacy Code applies.
Why we collect and use your information
We may collect and use your information to:
respond to enquiries and appointment or referral requests;
assess and arrange appropriate diabetes care;
provide clinical services and support;
communicate with you about appointments and your care;
maintain appropriate clinical and administrative records;
work with other healthcare professionals involved in your care;
process payments and administer our services;
provide courses, programmes, resources or events you have registered for;
improve, evaluate and manage ADC's services;
meet our legal, professional and regulatory obligations; and
send you news, resources or other marketing communications where you have chosen to receive them.
We will not use your health information for an unrelated purpose unless you have authorised us to do so or the use is otherwise permitted by law.
Who can access your health information
Access to your health information is limited to authorised ADC staff who need it to perform their duties or provide and support your care.
This may include members of our clinical and administrative teams. Depending on their responsibilities, administrative staff may need access to clinical records, including patient notes, to help coordinate and manage our services.
All staff with access to personal and health information are required to respect its confidentiality and use it only for authorised purposes.
When we share your information
ADC works alongside GPs, hospital and specialist diabetes services and other healthcare professionals.
Where appropriate for your care, we may share relevant information with healthcare providers involved in your care. For example, we may send clinical letters to your GP or specialist diabetes service or request relevant information from your healthcare team to help us provide appropriate care.
We may also disclose information where:
you have authorised us to do so;
the disclosure is for the purpose for which the information was collected, or is directly related to that purpose;
another permitted exception under the Health Information Privacy Code or Privacy Act applies; or
we are required or permitted to disclose it by law.
We do not sell or rent your personal or health information.
How we store and protect your information
ADC takes reasonable safeguards to protect personal and health information against loss, unauthorised access, use, modification or disclosure.
Clinical information for people receiving ADC services is stored in ADC's practice management system, Elixir, on a secure server.
ADC uses HealthLink to securely exchange relevant clinical information with healthcare providers where appropriate.
Information may also be held in other secure systems used by ADC to deliver and administer our services.
We use reasonable administrative, technical and organisational safeguards for the information we hold and limit access according to people's roles and responsibilities.
Service providers
ADC uses third-party service providers to help operate our organisation, website and services. These may include providers of website hosting, practice-management systems, secure healthcare communications, email and communications platforms, online learning, payment processing and other technology services.
These providers may process personal information on ADC's behalf. We take reasonable steps to ensure that information handled by our service providers is appropriately protected and used only for authorised purposes.
Where personal information is disclosed to an organisation outside New Zealand, ADC will comply with the applicable requirements of the Privacy Act 2020.
Our website
When you visit ADC's website, some technical information may be collected automatically, such as information about your device or browser, pages visited and how you interact with the website.
ADC may use website analytics and similar technologies to understand how people use our website and to improve its performance and content.
We do not intentionally send information entered into clinical or referral forms - such as your name, email address, diabetes type, uploaded documents or information about your health - to advertising or website analytics platforms.
Our website may contain links to third-party websites. ADC is not responsible for the privacy practices of those websites. We recommend reviewing the privacy information provided by those organisations when you visit their websites.
Email and marketing communications
If you choose to receive ADC news, diabetes information, resources or updates, we will use your contact details for that purpose.
Receiving marketing communications is optional and is separate from communications necessary to provide your healthcare or another service you have requested.
You can unsubscribe from marketing emails at any time using the unsubscribe option provided in the message or by contacting us.
Unsubscribing from marketing communications will not prevent ADC from contacting you where necessary about your appointments, care or other services you have requested.
How long we keep your information
ADC keeps personal and health information for as long as required for the purpose for which it was collected and to meet applicable legal, clinical and professional record-keeping requirements.
When information no longer needs to be retained, we will securely dispose of it or de-identify it where appropriate.
Your rights to access and correct your information
You have the right to ask for access to personal and health information ADC holds about you and to ask us to correct it if you believe it is inaccurate or incomplete.
If we do not make a correction you have requested, you may ask us to attach a statement of correction to the information.
To request access to or correction of your information, contact:
ADC Privacy Officer
Aotearoa Diabetes Collective Limited
Email: directors@aotearoadiabetescollective.org.nz
Phone: 0800 439 232
170 Collingwood Street
Hamilton 3204
New Zealand
We may need to verify your identity before providing access to personal or health information.
Information about children and young people
ADC provides services to children and young people.
Depending on the circumstances, we may collect information directly from a young person or from their parent, guardian or other representative.
We will take particular care when collecting information from children and young people and will handle their information in accordance with the Privacy Act 2020, the Health Information Privacy Code 2020 and applicable professional obligations.
If someone provides information about you
Sometimes another person may provide ADC with personal or health information about you. For example, a healthcare professional may refer you to ADC, or a parent, guardian, whānau member or other person may contact us or complete an appointment request on your behalf.
Where required by the Health Information Privacy Code, we will take reasonable steps to ensure you or your representative are made aware:
that we have collected information about you;
why we collected it;
who may receive it;
who collected and holds it; and
your rights to access and request correction of it.
There are circumstances under the Health Information Privacy Code where notification is not required.
Privacy breaches
ADC takes privacy breaches seriously.
If a privacy breach occurs, we will take steps to contain and assess it and reduce any potential harm.
Where a privacy breach meets the notification threshold under the Privacy Act 2020, we will notify the Office of the Privacy Commissioner and affected individuals as required.
Questions, concerns or complaints
If you have a question or concern about how ADC has collected, used, stored or shared your personal or health information, please contact our Privacy Officer so we can look into it.
ADC Privacy Officer
Aotearoa Diabetes Collective Limited
Email: directors@aotearoadiabetescollective.org.nz
Phone: 0800 439 232
170 Collingwood Street
Hamilton 3204
New Zealand
You can also contact the Office of the Privacy Commissioner | Te Mana Mātāpono Matatapu if you have concerns about your privacy rights.
Office of the Privacy Commissioner
Phone: 0800 803 909
Changes to this Privacy Statement
We may update this Privacy Statement from time to time to reflect changes to our services, systems, practices or legal obligations.
The current version will be published on our website with the date it was last updated.