Privacy Policy

Introduction

This website (www.cuedin.co.nz), any aliases and associated services are owned and operated by CuedIn, NZBN 9429051658762. We are committed to respectful collection and management of your data, in line with The Privacy Act 2020 and we take your privacy very seriously.

The following is important for you to be fully aware in respect of the data and information we gather, and how it will be used. This policy applies to anyone who interacts with our website and services, as well as all current and former clients.

Privacy Officer

The Privacy Officer for CuedIn is Emma Beaven. She can be contacted on the following: emma@cuedin.co.nz

Privacy principles

In relation to your personal data, we comply with data protection legislation, as held in The Privacy Act 2020. This has principles regarding the personal information we hold about you:

  • Only collected for lawful purposes and where the information is necessary for that purpose and not kept any longer than is necessary.
  • Generally only collected directly from you.  Information may be collected from other sources whereby you give permission, collecting it in another manner would not prejudice your interests, collecting it directly from you would undermine the purpose of collection or it is from a publicly available source.
  • Reasonable steps must be taken to ensure you know what’s being collected, who will receive it, if it’s compulsory or voluntary, what will happen if you don’t provide the information.
  • Collected in a manner that is lawful, fair and not unreasonably intrusive.
  • Held and stored in a reasonable manner to safeguards against loss, misuse or disclosure of your information.
  • You have the right to ask for access to your information and to request the information held is corrected or updated if you think it’s incorrect. 
  • Disclosure only takes place in limited circumstances and reasonable steps are taken to ensuring your information is accurate, up to date and not misleading before any disclosure.
  • Sent overseas only if the information will be adequately protected, with your permission or in other limited circumstances. 
  • Only assign you a unique identifier when it’s necessary for operational functions.
What personal data we collect

If you engage with CuedIn, including but not limited to via this website, email, telephone or choose to become a client, we may collect the following kinds of personal information from you. Please note, this is not an exhaustive list:
  • Your name and contact details (including email address and phone number) and any other contact details you provide to us when you submit a request or enquiry via this website, email, telephone or social media. Your gender, date of birth, postcode, employment status which you provide, to help us monitor the demographics of the people who use CuedIn.
  • For those accessing our services, we may collect the details of the members of your household and emergency contact details, GP contact details, Social Care contact details (if applicable), School or Education contact details, mental health history including details of medication taken and interventions provided, health information such as allergies, disabilities or learning difficulties.
  • Personal information which you voluntarily provide to us when working with us in any capacity.
  • Records of any correspondence when you contact via email, telephone or social media.
  • Ongoing information about each contact that we have with you or professional who we are in contact with to support you.
  • Your opinion about products or services that may interest you and any information that allows us to tailor our content and services to your needs.
  • We may collect your IP address, and information about your browsing history to help improve the usability and appeal of our website.
  • We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page.
You are responsible for any third-party Personal Data obtained, published or shared with CuedIn and confirm that you have the third party’s consent to provide the data with us. We do not obtain any third-party information about you without your knowledge or consent.

Minors information

Personal and sensitive information may be collected from children and young people under the age of 18 with their parent or guardian’s full consent. All information collected from minors is securely stored in accordance with this privacy policy.

 

How we collect your data

We may collect your personal information by various means including:

  • Contact form
  • Email
  • Phone calls
  • Intake/history forms
  • In-person and virtual appointments
  • Our social media platforms (Facebook, Instagram, TikTok and LinkedIn)
  • Automatically, through the use of cookies

The purpose of using this information

The privacy law allows us to process your data for certain reasons only, these are classified as legitimate interests. Most commonly, we will use your personal information in the following circumstances:

  • Enable us to provide the highest quality services, that are tailored to you and your needs.
  • Make referrals to other services and professionals that may be able to assist you further.
  • Respond to your inquiries.
  • Provide you with relevant news and updates about our services
  • Improve this website and the services we provide.
  • To comply with applicable laws and regulations.

In addition, privacy legislation states that there are certain categories of personal data which are more sensitive. This additional category is known as “special category data”. The information which is included in this category is race, religious beliefs, political opinions, physical or mental health conditions. When providing this type of special category data, we may also ask for your explicit consent to process it.

We will only collect your personal information:

  • With your full awareness and consent, such as when you contact us, tick a checkbox or fill in a form to provide us with information.
  • If we require it to provide you with information or services that you request.
  • If we are legally required to collect it.
  • For necessary administrative processes if you become our client.
  • If we can demonstrate a legitimate interest in using your data for marketing purposes, although we will always give you a choice to opt out.

How we store your information

CuedIn stores all information gathered electronically on a reputable cloud based clinic management system called Cliniko. All bookings made via our website are done through Cliniko. Cliniko prides itself on being compliant with privacy legislation and has many safeguards in place to protect personal data- see their privacy policy and further information here. All electronic devices are password protected, with a further two factor login required when signing into Cliniko. Our network is protected by firewalls.

We hold your data for varying lengths of time depending on the type of information in question but in doing so we always comply with local legislation. All of the data that we retain is subject to the controls of our privacy policy, so when your information is no longer required, we will ensure it is disposed of in a secure and confidential process.


What data breach procedures we have in place

Cliniko has their own data breach procedures (see in link above). CuedIn will notify you of any data breaches as soon as we are aware and aims to limit the impact of this whenever possible.  We will also notify the Office of the Privacy Commissioner of notifiable breaches as soon as practically possible.


Who we share your data with

CuedIn ensures your information is always handled securely and will never be shared with other companies or third parties without your consent.
When necessary, we share some aspects of your data with others:

  • Our practitioners may share some details about your data with their clinical Supervisor, which they are required to have in accordance with their professional registration and ethical framework. CuedIn holds on record the names of each Supervisor which our practitioners interact with and all information is discussed in strict confidence
  • Outside agencies such as social care, schools, GP and others. You will be asked to consent to CuedIn sharing your data with these parties unless there are safeguarding concerns which take precedence over personal consent. Please see our separate policies on both child and adult safeguarding.

Reasons why we may disclose your information

  • To provide you with the services you have requested or is necessary to carry out your instruction.
  • When using support services, such as our accountant.
  • to refer you on to another service provider.

We will also disclose your information if required to by law or any specific court order or subpoena. If you have any concerns regarding the disclosure of your information in these contexts, please do not hesitate to get in touch with us to discuss this.

Your rights

You may exercise certain rights regarding your data processed by CuedIn.
In particular, you have the right to do the following:

  • Withdraw your consent at any time. You have the right to withdraw consent where you have previously given consent to the processing of your Personal Data. There will be no consequences for withdrawing your consent. However, in some cases, we may continue to use the data where so permitted by having a legitimate legal reason for doing so. To withdraw consent, contact our data privacy officer, Emma Beaven, emma@cuedin.co.nz who will be able to assist.
  • Object to processing of your Data. You have the right to object to the processing of your Data if the processing is carried out on a legal basis other than consent.
  • Access your Data. You have the right to learn if Data is being processed by CuedIn, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
  • Verify and seek rectification. You have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
  • Restrict the processing of your Data. You have the right, under certain
    circumstances, to restrict the processing of your Data. In this case, CuedIn will not process your Data for any purpose other than storing it.
  • Have your Personal Data deleted or otherwise removed. You have the right, under certain circumstances, to obtain the erasure of your Data from the CuedIn.
  • Receive their Data and have it transferred to another controller. You have the right to receive your Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on your consent, on a contract which your are part of or on pre-contractual obligations thereof.
  • Lodge a complaint. If you have any questions about this Privacy Notice or how we handle your information, please contact CuedIn’s Privacy Officer, Emma Beaven, emma@cuedin.co.nz. You also have the right to make a complaint at any time to the Privacy Commissioner via their complaints page here.


    Policy review statement

    This policy will be reviewed annually, or as specific legislation or need arises and we will note the date of the updated document in the footnote. We will always place the most updated version of this policy on the website (www.cuedin.co.nz) however we would advise you to check back regularly for updated versions. 

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.).

Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. CuedIn takes no responsibility for external sites’ use of your personal information.

Cookies

This website uses “cookies” (small pieces of information stored on your computer’s hard drive by your browser). They help CuedIn enhance your experience and provide a more personalised service. You cannot be identified by the information stored in cookies.

This privacy policy also covers our use of cookies in connection with the embedded online booking system, as well as associated marketing and tracking analytics on our website. The Booking System may use cookies to remember your preferences or to keep you logged in between visits.

Marketing and tracking analytics may use cookies to help us identify user behavior, patterns, and preferences. This information helps us identify which parts of our website are most popular and to optimise our website for better user experience.

By using our website, you consent to our use of cookies. You can opt to turn off the cookie function or change the settings on your device to stop this- although this may affect the functionality of our website.

Transferring information outside of New Zealand

We may share your data with bodies outside of New Zealand should the need arise. It is likely that this situation would be to share information regarding service provision with practitioners in other countries in accordance with your wishes.
However, we would not transfer your data unless we were assured that the country in question had data security and protection laws of equivalence to those in New Zealand. We would put the measures in place to ensure that your data is transferred securely and that the bodies who receive the data process it in a way required by New Zealand privacy laws.

Your duty to inform us of changes

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your time as a client with us.

If you do not provide your data to us

One of the reasons for processing your data is to allow us to carry out our duties in line with your contract of service with us. If you do not provide us with the data needed to do this, we will be unable to perform that service to ensure your best interests are being maintained. We may also be prevented from continuing to provide these services.

Change of purpose

We will only use your personal information for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis, which allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.