Privacy Policy | Myo Wellness

MYO Rehab & Wellness, trading as Myo Wellness (we, us, our), is committed to protecting the privacy and personal information of our clients. This policy describes how we collect, hold, use, disclose and secure personal and health information in accordance with the Privacy Act 2020 and the Health Information Privacy Code 2020. Our booking, deposit and cancellation terms are set out in the Cancellation Policy.

What we collect

We collect only the information reasonably necessary to provide safe and effective treatment and to administer our services:

Identifying information: full name, date of birth and contact details (phone, email, address).
Health information: medical history, current medications, treatment notes, clinical assessments, images where required for treatment, allergies and other relevant clinical information.
Administrative and payment information: appointment records, invoices, payment card details only as necessary to process payments, and ACC or insurer details where applicable.
Communications and consent records: emails, consent forms, notes of discussions and appointment preferences.

How we collect it

From you directly, during intake and consultations, and via forms, telephone, email, SMS or online booking.
From other health providers, ACC, insurers or third parties, where you have consented or where the law permits.
From publicly available sources, only where relevant and permitted.

How we use it

We use personal and health information to:

Assess, plan, provide and review your treatment and care.
Communicate with you about appointments, treatment, billing and follow-up.
Meet legal and funding obligations, such as ACC or insurer claims and court orders.
Monitor quality of care, carry out clinical auditing and administer the practice.
Comply with legal obligations, including mandatory reporting and public health requirements.

When we disclose it

We will not disclose personal or health information to third parties except:

With your written consent, for example to other health providers, ACC, insurers, or employers for return-to-work reports.
Where required by law, such as a court order or statutory requirement, or in circumstances permitted by the Privacy Act and the Health Information Privacy Code.
Where necessary to prevent a serious risk to public health or safety, including a risk of harm to you or others. In that case we record our reasons and disclose only what is necessary.
To trusted service providers who assist us, such as billing processors, IT and cloud hosting, and practice management software. These providers are bound to keep information secure and to use it only for the purposes we specify. We take reasonable steps to ensure any cross-border disclosure complies with the Privacy Act.

Storage, security and retention

Client information is stored securely in locked physical files and in secure electronic systems with password protection, encryption and access controls.
Only authorised staff and contractors who need access for treatment, administration or billing can access personal or health information.
We retain records in accordance with professional and legal requirements for clinical records, and securely destroy or de-identify them when they are no longer required.
Where information is stored or backed up offshore with cloud providers, we ensure appropriate protections are in place and inform clients where the Privacy Act requires it.

Payment information

We accept payment by card, EFTPOS and other agreed methods. Card details are processed by our secure payment provider. We do not store full card details unless you have expressly authorised a secure, tokenised arrangement. Where a deposit or prepayment is taken to secure a booking, this is explained at the time of booking and recorded. For ACC or insurer claims, we provide the information needed to process the claim with your consent.

Consent, risks and professional limitations

All treatments carry inherent risks. We explain the expected benefits, risks and alternatives, and obtain your informed consent before treatment. Consent and treatment notes are documented.
Our physiotherapist is registered with the Physiotherapy Board of New Zealand.
If you have a complex medical history, or are recovering from surgery, we recommend you obtain clearance from your medical practitioner or surgeon before treatment, and bring any post-operative instructions or restrictions with you.

Limitation of liability

Our clinicians provide care in accordance with accepted clinical standards. To the extent permitted by law, MYO Rehab & Wellness and its clinicians are not liable for indirect or consequential loss arising from the provision of services. Nothing in this policy excludes or limits rights that cannot be excluded under New Zealand law, including the Consumer Guarantees Act 1993 and the Fair Trading Act 1986.

Your rights

Access and correction: you may request access to your personal and health information, and request correction if you believe it is inaccurate. We respond within the statutory timeframes and may charge a reasonable fee for access where permitted.
Consent: we seek your informed consent for treatment and for any disclosure of health information, except where the law permits or requires otherwise.
Complaints: if you have a concern about how we handle your information, contact us first using the details below. If it is not resolved, you may contact the Office of the Privacy Commissioner.

Changes to this policy

We may update this policy from time to time. Significant changes are published on this website and, where appropriate, notified to clients. The current policy is available on request.

Contact

MYO Rehab & Wellness
7/76 Rotu Drive, Westgate, Auckland 0814
enquiries@myowellness.co.nz
022 089 8001