Privacy Statement

This is the privacy statement for NorthAble Matapuna Hauora (the Business)

It describes the collection, use, disclosure, sharing, and the protection of personal information of individuals to meet requirements of the: Privacy Act 2020 and Health Information Privacy Code 2020.

Personal information is information about an identifiable individual (a natural person). This policy does not limit or exclude your rights under the Act. If the individual wants further information on the Act, see

The individual can browse and access information within our website without providing personal information. 

Collection of information

The Business collects personal information about individuals from the following: 

  • When the individual provides personal information via the website and any related service, through any registration process or contacts with the Business (for example, telephone call or email). 
  • Third parties where individuals have authorised this or the information is publicly available. If possible, the Business will collect personal information from the individual directly.

Use of information 

The Business will use the individual personal information:

  • To verify the individual’s identity. 
  • To provide services and products to individuals.
  • To market the Business’s services and products to individuals, including contacting the individual electronically (for example, by text or email).
  • To improve the services that the Business provides to individuals.
  • To undertake pre-employment checks of employees.
  • To bill individuals and to collect money that individuals owe the Business, including authorising and processing financial transactions.
  • To responding to individual communications, including complaints, comments, and compliments.
  • To conduct research and statistical analysis (on an anonymised basis).
  • To protect and/or enforce the Business’s legal rights and interests, including defending any claim.
  • For any other purpose authorised by individuals or the Act.

Disclosing information

The Business may disclose the individual’s personal information to:

  • Another entity within the Business group. 
  • Any business, agencies and other parties that support the Business’s services and products, including any person that hosts or maintains any underlying ICT system or data centre that we use to provide the website or other services and products.
  • Potential credit reference agency for credit checking against individuals.
  • Police and other parties like pre-employment checks. 
  • Other third parties (for anonymised statistical information).
  • A person who can require the Business to supply your personal information (for example, a regulatory authority).
  • Any other person authorised by the Act or another law (for example, a law enforcement agency).
  • Any other person authorised by the individual. 
  • A business that supports our services and products may be located outside New Zealand. This may mean the individual’s personal information is held and processed outside New Zealand, for example, cloud storage.


Sharing information

The Business sometimes needs to share information with people or organisations outside the Business. 

Protecting information 

The Business will take reasonable steps to protect personal information from loss, unauthorised activity, or other misuse.

This means that the Business will only share information when: 

  • The reason for sharing matches the information collected. 
  • There is a specific legal reason.
  • The individual gives permission to share it. 

Accessing information 

The individual has the right to request access to or correct personal and health information held by the Business. 

Contact northable@ to request or correct personal and health information. 

Request information under the Privacy Act 2020. The Business will need evidence to confirm the individuals to whom the personal information relates.

The Business will follow the processes outlined in the Privacy Act 2020 to manage and respond to your requests.

Ensuring information is accurate.

The Business takes reasonable efforts to ensure that the personal information collected, used, or disclosed is accurate. We take reasonable efforts to ensure the records are updated whenever the individual provides information, directly or indirectly. 

The individual needs to let the Business know of any change in circumstances. 

Retention of information

The Business will keep personal information for as long as necessary to achieve the purpose for which the Business collects it. 

The Business will keep the information only where necessary to provide those services.

The Business may keep information after this period but only where required to meet the Business’s legal or regulatory obligations. The time the Business keeps information for these purposes will vary depending on the obligations of the Business.

Privacy when using the Business’s websites

The Business collects statistical information about the individual’s visits to the websites. The website uses cookies to monitor website usage. A cookie is a piece of code that creates a file on the individual’s computer or device to track the pages that they visit.  The cookies do not collect personal information. The individual may disable cookies by changing the settings on the browser, although this may mean that they cannot use all the website’s features.

Internet use 

While the Business takes reasonable steps to maintain secure internet connections, if the individual provides us with personal information over the internet, providing that information is at the individual’s own risk. 

  • If individuals post their personal information on the website’s [forms], they acknowledge and agree that their information is publicly available.
  • If the individual follows a link on their website to another site, the owner of that site will have its privacy policy relating to their personal information. The Business suggests that the individual review that site’s privacy policy before they provide personal information.

Google Analytics 

The Business uses Google Universal Analytics to collect and analyse details about using other Business websites. No effort is made to identify individuals.

The information Google Analytics collects includes: 

  • IP address
  • Time zone
  • The search terms used.
  • Mouse clicks and scrolling behaviour.
  • The files downloaded.
  • The pages accessed on the Business sites and the links clicked on.
  • The date and time the site is visited.
  • The referring site (if any) through which the individual clicked the sites.
  • Operating system of the device (name and version).
  • The type of web browser used.
  • Other incidental matters include screen resolution and the language set on the browser.

Google Analytics can opt out of collecting information by disabling cookies in the browser. Or by installing Google Analytics Opt-out Browser Add-on Download Page. Read Google Analytics Safeguarding your data - Analytics Help ( for more details. 


The Business websites use third-party cookies from Google Analytics, which gives the Business insight into behaviour information relating to visitor age, gender, and interests on an anonymous and aggregate level. This helps the Business understand browsing behaviour to give the individual a better experience whilst visiting the websites.

The website places a cookie on the hard drive of the device. A “cookie” is a file that tracks and targets the interests of the website users; when an individual visits the website, cookies are used to analyse the website’s use and potentially suggest adverts.

The information they collect and share with third parties through cookies is aggregated and, therefore, anonymous (it does not include personal information which can identify the individual). The information may be used to serve adverts about our services or products when visiting the websites and third-party websites.

Access information about Google’s Privacy Policy here:

The recommendation is that users enable cookies on their browsers to enjoy all the website features. The decision is the individual. Most browsers allow individuals to control the management of cookies, which will differ depending on each user’s device.

Most browsers have a feature that allows you to turn off the saving of cookies. Turning off cookies will not affect the ability to use this site.

Behavioural advertising 

As described, the Business can use personal information to provide targeted advertisements or marketing communications the Business believes may be of interest to individuals. For more information about how targeted advertising works, visit the Network Advertising Initiative’s (“NAI”) educational page here.

You can opt out of targeted advertising by using the links below:

Links to other sites

The Business websites have links to external websites. Once navigated to another website, you are subject to the privacy and security policies of the new site. The fact that this website provides links to other websites does not imply that Business approves or endorses any information on those other websites or any views expressed.


As New Zealand residents, individuals have the right to access the personal information the Business holds about individuals and to ask that their personal information be corrected, updated, or deleted. Business information is below for the individual to contact the Business. 

Changes to this Statement

This privacy statement is updated when required to reflect, for example, changes to the Business practices or for other operational, legal or regulatory reasons. We will notify site users of any changes to the Privacy Statement via this website.

Newsletter subscriptions

Subscribing to the newsletter, the Business will only use the personal information for managing the subscription and assessing newsletter effectiveness. Newsletters can be unsubscribed from any newsletter. 


Privacy questions, feedback, and concerns

If there are any questions or feedback about information held by the Business or concerns about how information has been handled, email the Privacy Officer at northable@, contact 0508 637 200, or post a letter to NorthAble Matapuna Hauora, PO Box 880 0140, Whangārei, or face to face in the office at 40/42 John Street, Whangārei, 0110.


Anyone can make a complaint, including support persons, family and whānau. Complaints can be made on the website or by email at northable@, or contact 0508 637 200, or by post to NorthAble Matapuna Hauora, PO Box 880, Whangārei. Complaints can be made face to face in the office at 40/42 John Street, Whangārei, 0110.

The Privacy Commissioner

If the individual is not satisfied with the Business response to the privacy complaint, the individual can contact the Privacy Commissioner: by phone at 0800 803 909, through the Office of the Privacy Commissioner | Home, by post Officer of the Privacy Commissioner, PO Box 10094 The Terrace Wellington 6143.