Privacy Policy

Introduction

This website (www.cuedin.co.nz), any aliases and associated services are owned and operated by CuedIn, NZBN 9429051658762. CuedIn is committed to respectful collection and management of your data, in line with The Privacy Act 2020 and take your privacy very seriously.

The following is important for you to be fully aware in respect of the data and information gathered, and how it will be used. This policy applies to anyone who interacts with this website and services, as well as all current and former clients.

Privacy Officer

The Privacy Officer for CuedIn is Emma Beaven. She can be contacted on the following: emma@cuedin.co.nz

Privacy principles

In relation to your personal data, CuedIn complies with data protection legislation, as held in The Privacy Act 2020. This has principles regarding the personal information held about you:

  • Only collected for lawful purposes and where the information is necessary for that purpose and not kept any longer than is necessary.
  • Generally only collected directly from you. Information may be collected from other sources whereby you give permission, collecting it in another manner would not prejudice your interests, collecting it directly from you would undermine the purpose of collection or it is from a publicly available source.
  • Reasonable steps must be taken to ensure you know what’s being collected, who will receive it, if it’s compulsory or voluntary, what will happen if you don’t provide the information.
  • Collected in a manner that is lawful, fair and not unreasonably intrusive.
  • Held and stored in a reasonable manner to safeguards against loss, misuse or disclosure of your information.
  • You have the right to ask for access to your information and to request the information held is corrected or updated if you think it’s incorrect. 
  • Disclosure only takes place in limited circumstances and reasonable steps are taken to ensuring your information is accurate, up to date and not misleading before any disclosure.
  • Sent overseas only if the information will be adequately protected, with your permission or in other limited circumstances. 
  • Only assign you a unique identifier when it’s necessary for operational functions.

What personal data is collected

If you engage with CuedIn, including but not limited to via this website, email,
telephone, social media or choose to become a client, CuedIn may collect the following kinds of
personal information from you. Please note, this is not an exhaustive list:

  • Your name and contact details (including email address and phone number) and any other contact details you provide to us when you submit a request or enquiry via this website, email, telephone or social media. Your gender, date of birth, postcode, employment status which you provide, to help us monitor the demographics of the people who use CuedIn.
  • For those accessing our services, we may collect the details of the members of your household and emergency contact details, GP contact details, Social Care contact details (if applicable), School or Education contact details, mental health history including details of medication taken and interventions provided, health information such as allergies, disabilities or learning difficulties.
  • Personal information which you voluntarily provide to us when working with us in any capacity.
  • Records of any correspondence when you contact via email, telephone or social media.
  • Ongoing information about each contact that we have with you or professional who we are in contact with to support you.
  • Your opinion about products or services that may interest you and any information that allows us to tailor our content and services to your needs.
  • CuedIn may collect your IP address, and information about your browsing history to help improve the usability and appeal of our website.
  • CuedIn may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page.

You are responsible for any third-party Personal Data obtained, published or shared with CuedIn and confirm that you have the third party’s consent to provide the data with us. CuedIn does not obtain any third-party information about you without your knowledge or consent.

Minors information

Personal and sensitive information may be collected about children and young people under the age of 18, with their parent or guardian’s full consent. All information collected about minors is securely stored in accordance with this privacy policy.

How we collect your data

We may collect your personal information by various means including:

  • Contact form
  • Email
  • Phone calls
  • Intake/history forms
  • In-person and virtual appointments
  • Our social media platforms (Facebook, Instagram, TikTok and LinkedIn)
  • Automatically, through the use of cookies

The purpose of using this information

The privacy law allows CuedIn to process your data for certain reasons only, these are classified as legitimate interests. Most commonly, CuedIn will use your personal information in the following circumstances:

  • Enable CuedIn to provide the highest quality services, that are tailored to you and your needs.
  • Make referrals to other services and professionals that may be able to assist you further.
  • Respond to your inquiries.
  • Provide you with relevant news and updates about our services
  • Improve this website and the services we provide.
  • To comply with applicable laws and regulations.

In addition, privacy legislation states that there are certain categories of personal data which are more sensitive. This additional category is known as “special category data”. The information which is included in this category is race, religious beliefs, political opinions, physical or mental health conditions. When providing this type of special category data, CuedIn may also ask for your explicit consent to process it.

CuedIn will only collect your personal information:

  • With your full awareness and consent, such as when you contact us, tick a checkbox or fill in a form to provide us with information.
  • If it is required to provide you with information or services that you request.
  • If CuedIn is legally required to collect it.
  • For necessary administrative processes if you become our client.
  • If CuedIn can demonstrate a legitimate interest in using your data for marketing purposes, although CuedIn will always give you a choice to opt out.

How CuedIn stores your information

CuedIn stores personal information electronically using Splose, a cloud-based clinic management system hosted in Australia. Online bookings made through the website are also processed via Splose.

Because information may be stored or processed outside New Zealand, CuedIn takes reasonable steps to ensure that any overseas service providers have appropriate privacy and security safeguards in place that are comparable to those required under New Zealand privacy law.

Access to personal information is restricted to authorised persons only. Electronic devices used to access client information are password protected and secured with two-factor authentication where available. Network and system security measures, including firewall protection, are also used to help protect personal information from unauthorised access, loss, misuse, or disclosure.

CuedIn retains personal information only for as long as necessary to provide services, meet legal obligations, and comply with the Privacy Act 2020 and other applicable laws. When personal information is no longer required, it will be securely deleted or destroyed using appropriate confidential disposal methods.

You may request access to, or correction of, your personal information at any time by contacting CuedIn.


What data breach procedures are in place

Splose maintains its own data breach and security procedures. Further information can be found in Splose’s privacy and security documentation.

If CuedIn becomes aware of a privacy or data breach involving personal information, reasonable steps will be taken to contain and assess the breach and reduce any potential harm.

Where required under the Privacy Act 2020, CuedIn will notify affected individuals and the Office of the Privacy Commissioner of any notifiable privacy breach as soon as practicable.

 

Who CuedIn shares your data with

CuedIn treats personal information as confidential and only shares information where necessary, authorised, or required by law.

Personal information may be shared in the following circumstances:

  • Clinical supervision:
    CuedIn practitioners may discuss relevant aspects of client information with their clinical supervisor as part of professional supervision requirements and ethical obligations associated with their professional registration. Any information shared during supervision is treated confidentially.
  • Third-party service providers:
    CuedIn uses trusted third-party service providers to support business operations, including appointment booking, clinic management software, IT support, payment processing, website hosting, and secure data storage. This includes Splose.

    These providers may have limited access to personal information where necessary to provide their services or technical support. CuedIn takes reasonable steps to ensure that third-party providers are subject to appropriate confidentiality, privacy, and security obligations.

    Some third-party providers may store or process information outside New Zealand. Where this occurs, CuedIn takes reasonable steps to ensure that personal information is protected in a manner comparable with New Zealand privacy law.

  • Other health and support providers:
    With your consent, CuedIn may share relevant information with other professionals or organisations involved in your care or support, such as GPs, schools, health providers, or social support agencies.
  • Safety or legal obligations:
    In some situations, CuedIn may disclose information without consent where permitted or required by law, including where there are serious concerns about the safety or wellbeing of an individual, concerns relating to the protection of a child or vulnerable person, or where disclosure is otherwise authorised under the Privacy Act 2020 or other applicable laws.

Reasons why CuedIn may disclose your information

  • To provide you with the services you have requested or is necessary to carry out your instruction.
  • When using support services, such as our accountant.
  • to refer you on to another service provider.

CuedIn will also disclose your information if required to by law or any specific court order or subpoena. If you have any concerns regarding the disclosure of your information in these contexts, please do not hesitate to get in touch with Emma to discuss this.

Your rights

You may exercise certain rights regarding your data processed by CuedIn.
In particular, you have the right to do the following:

  • Withdraw your consent at any time. You have the right to withdraw consent where you have previously given consent to the processing of your Personal Data. There will be no consequences for withdrawing your consent. However, in some cases, we may continue to use the data where so permitted by having a legitimate legal reason for doing so. To withdraw consent, contact our data privacy officer, Emma Beaven, emma@cuedin.co.nz who will be able to assist.
  • Object to processing of your Data. You have the right to object to the processing of your Data if the processing is carried out on a legal basis other than consent.
  • Access your Data. You have the right to learn if Data is being processed by CuedIn, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
  • Verify and seek rectification. You have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
  • Restrict the processing of your Data. You have the right, under certain
    circumstances, to restrict the processing of your Data. In this case, CuedIn will not process your Data for any purpose other than storing it.
  • Have your Personal Data deleted or otherwise removed. You have the right, under certain circumstances, to obtain the erasure of your Data from the CuedIn.
  • Receive their Data and have it transferred to another controller. You have the right to receive your Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on your consent, on a contract which your are part of or on pre-contractual obligations thereof.
  • Lodge a complaint. If you have any questions about this Privacy Notice or how we handle your information, please contact CuedIn’s Privacy Officer, Emma Beaven, emma@cuedin.co.nz. You also have the right to make a complaint at any time to the Privacy Commissioner via their complaints page here.


    Policy review statement

    This policy will be reviewed annually, or as specific legislation or need arises and we will note the date of the updated document in the footnote. We will always place the most updated version of this policy on the website (www.cuedin.co.nz) however we would advise you to check back regularly for updated versions. 

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.).

Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. CuedIn takes no responsibility for external sites’ use of your personal information.

Cookies

This website uses “cookies” (small pieces of information stored on your computer’s hard drive by your browser). They help CuedIn enhance your experience and provide a more personalised service. You cannot be identified by the information stored in cookies.

This privacy policy also covers our use of cookies in connection with the embedded online booking system, as well as associated marketing and tracking analytics on our website. The Booking System may use cookies to remember your preferences or to keep you logged in between visits.

Marketing and tracking analytics may use cookies to help us identify user behavior, patterns, and preferences. This information helps us identify which parts of our website are most popular and to optimise our website for better user experience.

By using our website, you consent to our use of cookies. You can opt to turn off the cookie function or change the settings on your device to stop this- although this may affect the functionality of our website.

Transferring information outside of New Zealand

We may share your data with bodies outside of New Zealand should the need arise. It is likely that this situation would be to share information regarding service provision with practitioners in other countries in accordance with your wishes.
However, we would not transfer your data unless we were assured that the country in question had data security and protection laws of equivalence to those in New Zealand. We would put the measures in place to ensure that your data is transferred securely and that the bodies who receive the data process it in a way required by New Zealand privacy laws.

Your duty to inform us of changes

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your time as a client with us.

If you do not provide your data to us

One of the reasons for processing your data is to allow us to carry out our duties in line with your contract of service with us. If you do not provide us with the data needed to do this, we will be unable to perform that service to ensure your best interests are being maintained. We may also be prevented from continuing to provide these services.

Change of purpose

We will only use your personal information for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis, which allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.