Your health information belongs to you. This page explains how Wellspring Medical collects, uses, shares and protects it, under the Health Information Privacy Code 2020 and the Privacy Act 2020.

Questions about your information? Contact our Privacy Officer:

Seeing and correcting your information

You have the right to see the health information we hold about you and to ask us to correct it (rules 6 and 7 of the Health Information Privacy Code 2020). Ask at reception or contact our Privacy Officer.

If you enrol with us

The information you give us on your enrolment form is:

  • held by Wellspring Medical
  • used by the Ministry of Health to give you a National Health Index (NHI) number, or to update your details
  • sent to Pinnacle and the Ministry of Health to get subsidised funding on your behalf
  • used to check whether you're eligible for publicly funded services. It may be compared with information held by other government agencies, but only where the Privacy Act 2020 allows.

Your health record

Members of your health team may:

  • add to your health record whenever we provide a service, and use that information to give you appropriate care
  • share relevant health information with other health professionals directly involved in your care

Seeing a GP who isn't your regular doctor

If you see another GP, they will ask your permission before sharing information from that visit with us.

If you hold a High Use Health Card or Community Services Card and see another GP, that GP can claim a subsidy, and we'll be told the date of the visit. We won't be told where you went or why unless you agree.

Audits

During a financial audit, an auditor may review your health information to check a claim we've made, but only under section 22G of the Health Act (or any later law that replaces it). The auditor may contact you to confirm you received the service. If the audit involves health matters, a suitably qualified health practitioner will view the records.

Health programmes

If you're part of a health programme (for example breast screening, immunisation or diabetes care), relevant health data may be sent to Pinnacle or the agency that runs the programme.

Planning, quality and payment

Health agencies such as Health New Zealand | Te Whatu Ora, the Ministry of Health and Pinnacle may use health information that doesn't include your name, but may include your NHI number, for:

  • planning and reporting on health services
  • monitoring the quality of services
  • payment

It won't be used or published in a way that identifies you.

Research

Your health information may be used for health research, but only when an ethics committee has approved the research, and never in a way that identifies you.

Everything else stays confidential

Apart from the uses above, your health status and the care you've received stay confidential within Wellspring Medical unless you give specific consent to share them.

This website

Booking forms. When you request an appointment online, your name, phone number, email address and message go to our reception team so we can arrange it. Our website host, Netlify, processes the form. Please don't include sensitive medical details in the message box. We'll talk about those with you directly.

Analytics. We use Google Analytics to see how people use this site, for example which pages they visit. It sets cookies and sends page-visit information to Google. We've set it up to collect as little as possible:

  • Google signals and ad personalisation are off
  • it isn't linked to any advertising account
  • data is kept for two months
  • when you send a booking request, Google Analytics records only that a request was made, never what you wrote in the form

You can block these cookies in your browser settings or with Google's Analytics opt-out browser add-on. The site works the same either way.

Where this information is stored. Netlify and Google may store or process website information outside New Zealand.

Concerns or complaints

Contact our Privacy Officer first (details above). If you're not satisfied with the response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Last updated: 21 October 2026