Privacy Policy

Last updated 19 August 2026

This privacy policy sets out how we, Higeia Technologies Pty Ltd (NZBN 9429053881175), trading as HIGEIA (“we”, “us” and “our”), treat the privacy of customers, users of our services, platform and websites, our suppliers and service providers, and other individuals with whom we interact or about whom we obtain personal information.

We respect the privacy rights of individuals and are committed to protecting your privacy in accordance with New Zealand privacy laws, including the Privacy Act 2020 (Privacy Act) and, where applicable, the Health Information Privacy Code 2020 (Code).

This policy details how we collect, store, use and disclose personal information.

Personal Information

In this privacy policy, the term “personal information” has the meaning given to that term in the Privacy Act, being information about an identifiable individual. For example, this may include names, addresses, telephone numbers, email addresses, dates of birth, signatures, and information about professional qualifications, and National Health Index (NHI) numbers.

Personal information may also include information that constitutes “health information”. Health information has the meaning given to that term in the Code and may include information about an individual’s health or medical history, disabilities, health or disability services provided to that individual (including through practitioners engaged through the Higeia programme), and information collected in connection with providing or paying for those services.

Personal information can also include information about racial or ethnic origin, religious or philosophical beliefs, and sexual orientation or practices, although it is rare for us to collect such information.

1. Collection and Storage of Personal Information and Data

1.1 We collect some personal information about individuals. The personal information we collect from or about you could include your name, email address, telephone number, address and other contact details, date of birth, credit card details, and details of your employer or other business you work for or represent, as well as some sensitive information as defined above (such as medical and health information).

1.2 We collect personal information in a lawful and fair way and in a not unreasonably intrusive manner. In many cases, we collect personal information about you from you directly, but we may also need to collect information from others such as health service providers. We collect personal information in circumstances including the following:

when you telephone us, or visit our website and provide feedback, ask questions, or you make an enquiry to which a later response is requested and to do so requires your contact details
when you become a client/customer of our business;
when you provide medical information to a medical practitioner engaged through the Higeia platform, as this material is visible to us;
through written correspondence from you, including letters and emails;
when we obtain information about you in order to provide and tailor our goods/services to you;
to arrange payments for our services;
when you ask to be included on marketing distribution lists, sign up to our website or interact with us on social media;
when as an actual or prospective supplier or provider your contact and other details are provided;
when we negotiate or enter into an agreement with you for the provision to you or acquisition from you of goods or services;
when we receive applications for employment and when evaluating job applicants and personnel, which may include collection of details such as employment history and educational qualifications. In such cases we may also conduct reference checks of third parties and other screening checks.

2. Use and Disclosure of Personal Information

2.1 We use the personal information collected from you for the purpose it was provided or collected. We use and disclose personal information in the following ways:

For the purposes of collection described in (1) above;
To provide our goods and services (including the Higeia platform and goods and services obtained through using it);
To liaise with practitioners engaged to provide consultation and prescribing services through the Higeia platform;
To process, confirm, fulfil and update you about and to carry out our obligations arising from any contracts entered into between you and us;
To respond to enquiries received from you;
To perform authorised financial transactions with you;
To analyse purchasing decisions and provide goods and services to you and to tailor possible service solutions and programmes to you, as a customer or potential customer;
To communicate with you and provide you with information (whether by email, post or other means) about our goods and services, where you have requested or consented to receiving this from us or where this provision is otherwise permitted at law;
To notify you about changes to our provision of goods and services, or policies and agreements relating thereto;
To receive and address feedback from you;
To protect our legal interests and fulfil our regulatory obligations (if and to the extent necessary);
For another purpose where that purpose is directly related to the purpose for which the personal information was collected, where you have authorised the use or disclosure, or where the use or disclosure is otherwise permitted by the Privacy Act or, in relation to health information, the Code, including where the use or disclosure is necessary to prevent or lessen a serious threat to public health or public safety, or to the life or health of you or another individual; and
Where otherwise permitted or required by law, including to comply with any court order, subpoena or other lawful purpose.

2.2 We may also use AI technologies to enhance our services and provide a better user experience. Our AI systems may process personal information to personalise content, improve customer support, and analyse user behaviour. We ensure that all personal information processed by AI is handled securely and in compliance with applicable privacy and data protection laws.

3. Other Disclosures

3.1 We may also disclose your personal information to third parties outside our company:

Where we have your express permission to do so;
If all or substantially all of our assets or a part of our business is acquired by a third party, in which case personal information which we hold about our customers may be one of the transferred assets (subject to the same constraints on use and disclosure as under this policy);
If we are under a duty to or are otherwise permitted to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions or to protect the rights, property, or safety of our personnel or customers. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

4. Security of Personal Information

4.1 We take all reasonable steps to protect your personal information in accordance with the Privacy Act (as modified by the Code), including by implementing internal and external security, restricting access to personal information to those who have a need to know, maintaining technological products to prevent unauthorised computer access, and regularly reviewing our technology to maintain security. We use secure methods of storage for physical materials containing personal information. We retain your personal information for only so long as is necessary in accordance with the Privacy Act, following which we will delete, dispose of or de-identify the information. If a privacy breach has caused, or is likely to cause, serious harm to an affected individual, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, unless an exception under the Privacy Act applies.

5. Disclosure and Transfer of Information Overseas

5.1 We do not currently disclose or transfer personal information outside of New Zealand and Australia. If we do disclose personal information overseas to, or it is accessed by, third parties overseas, including our related entities, contractors or service providers, we will do so with your consent or in circumstances where permitted under the Privacy Act, as modified by the Code. This includes where we believe on reasonable grounds that:

the third party is subject to the Privacy Act or privacy laws that provide comparable safeguards to those in the Privacy Act; or
the third party is required to protect the information in a way that, overall, provides comparable safeguards to those in the Privacy Act 2020.

6. Cookies

6.1 We may use ‘cookies’ to collect data (not personal information) relating to your general usage of our website. This data may include IP-addresses, browser versions, number of visits and similar such data relating to your navigation of the internet and our site. A cookie is a small text file that is placed on your computer or device’s hard drive. Cookies help us to improve our site and to deliver a better and more tailored service, for instance by storing information about your preferences and allowing us to recognise you when you return to our site.

6.2 You may refuse to accept cookies by activating settings on your internet browser.

7. Marketing communications

7.1 From time to time, Higeia may use or disclose your personal information to trusted third-party service providers so that we can provide you with marketing communications that may be relevant to you, provided that we will not disclose health information to them for marketing purposes unless you have expressly authorised us to do so.

7.2 This may include information about offers, promotions, programs, products, or services provided by Higeia, our related entities, or affiliated business partners.

7.3 Our marketing communications may include telephone calls to any phone number you provide to Higeia, made between 9am and 8pm NZST on business days.

8. Questions and Concerns and Access to/ Correction or Updating of Your Personal Information

8.1 You have a right to request confirmation of whether we hold any of your personal information, a right to request access and correct the personal information we hold about you. To obtain a copy of the personal information we hold about you, please write to us at:

8.2 The Regulatory Officer info@higeia.com.au

8.3 Please provide sufficient detail about the information in question to help us locate it. We will respond to requests for access or correction in accordance with the timeframes and requirements of the Privacy Act and, where applicable, the Code.

8.4 If you think that your privacy rights have been breached, you can also contact the Office of the Privacy Commissioner on 0800 803 909 or find them online at www.privacy.org.nz. The Office of the Privacy Commissioner also provides further information regarding your rights under the Privacy Act.

9. Changes to Our Privacy Policy

9.1 We may modify, alter or otherwise update this privacy policy at any time. We will post revisions on our website. We encourage you to review this policy from time to time.

Date of last update: 19 August 2026