Privacy Policy

Last Updated: April 2026

At Allied Medical, your privacy matters to us. We understand that the information you share with us is personal, and we are committed to handling it with care, respect, and transparency. This Privacy Policy explains how Allied Medical Limited ("we", "us", "our") collects, uses, stores, and shares your personal information when you use our services or interact with us. It applies to all personal information we collect, whether directly from you or indirectly from third parties, and is designed to meet our obligations under the Privacy Act 2020 including the Information Privacy Principle 3A (IPP3A).

If you do not feel comfortable submitting your details online or by email, we are happy to help in other ways. You can call our Customer Care team on 0800 31 61 81 between 8:00am and 5:00pm Monday to Friday, or email helpis@alliedmedical.co.nz.

1. Who Collects and Holds Your Information

Allied Medical Limited collects and holds your personal information. Our contact details are:

Allied Medical Limited
29 Triton Drive, Rosedale, Auckland 0632, New Zealand
Phone: 0800 31 61 81
Email: helpis@alliedmedical.co.nz

2. How We Collect Your Personal Information

We collect personal information in the following ways:

2.1 Information You Provide Directly

You may provide personal information when you make a purchase, create an account, contact our Customer Care team, or request support or services. This may include your name, address, phone number, email address, order details, and any other information you choose to share with us.

2.2 Information Collected Automatically

When you use our website, we may automatically collect information such as your IP address, browser type, and details about how you interact with our site. This helps us improve your experience. This information is collected by us (or by our technology service providers acting on our behalf) and is treated as if collected directly from you.

2.3 Indirect Collection — Information We Receive from Third Parties (IPP3A)

What is indirect collection?
Sometimes we receive your personal information from someone other than you. This is called "indirect collection". Under Information Privacy Principle 3A (IPP3A) of the Privacy Act 2020 (which applies to all indirect collections made on or after 1 May 2026), we are required to take reasonable steps to make sure you are aware of specified matters when we collect your information in this way.

Who we may receive your information from:

• ACC (Accident Compensation Corporation), where you are an ACC-funded client
• General practitioners, specialists, physiotherapists, occupational therapists, or other health professionals who refer you to us
• Health New Zealand | Te Whatu Ora or other public health services
• Family members, caregivers, or legal guardians acting on your behalf
• Authorised representatives appointed under the Protection of Personal and Property Rights Act 1988
• Other healthcare providers or agencies involved in coordinating your care

Note on Technology Service Providers:
Our technology service providers (such as Shopify, payment processors, and analytics tools) process information on our behalf as data processors. Under the Privacy Act 2020 (section 11), we are treated as collecting this information directly from you — not indirectly — so IPP3A notification obligations do not apply to these arrangements.

3. What We Tell You When We Collect Your Information Indirectly

When we collect your personal information indirectly, IPP3A requires us to take reasonable steps to make sure you are informed of the following:

• The fact that your information has been collected
• The purpose for which it was collected
• The name and address of Allied Medical Limited (see section 1 above)
• Whether the collection is authorised or required by law, and which particular law (see section 6 below)
• Your right to access and correct your personal information (see section 10 below)

3.1 When We Will Notify You

We will take reasonable steps to notify you of the above matters as soon as reasonably practicable after your information is collected. In most cases this will occur when we first make contact with you — for example, when arranging an assessment, delivery, trial, or service appointment. The timing will depend on the nature of the referral and the circumstances of the collection, and we assess and document this on a case-by-case basis.

3.2 When We May Not Separately Notify You

In some situations, we may not send a separate notification. This may occur where:

• The organisation that referred you (such as ACC or your health professional) has already informed you that your information would be shared with us — we verify this based on evidence of the referring organisation's privacy practices (such as their privacy policy or contractual arrangements with us), rather than simply assuming notification has occurred
• Non-notification would not prejudice your interests in the circumstances
• Notification is not reasonably practicable (for example, where the cost of notification is significantly disproportionate given the nature of the information and no detriment to you would result)
• An exception under IPP3A or another applicable law applies

Where we rely on the exception that a referring organisation has already notified you, we take reasonable steps to confirm this — for example, by reviewing that organisation's privacy policy, or by including appropriate confirmation requirements in our contractual arrangements with them.

4. Why We Collect Your Personal Information

We collect and use your personal information to:

• Provide our products and services, including assistive equipment, mobility aids, orthotics, and related healthcare services
• Assess your needs and provide appropriate equipment and support
• Process and administer ACC-funded claims and funding applications
• Communicate with your referring health professional or funding agency
• Arrange delivery, installation, trials, servicing, or repairs
• Process payments and fulfil orders
• Provide customer support and respond to your enquiries
• Maintain accurate records and support continuity of care
• Improve our products and services
• Meet our legal obligations, including under the Accident Compensation Act 2001 and the Code of Health and Disability Services Consumers' Rights
• Protect against fraud or misuse

5. Who We Share Your Information With

Depending on the services we provide to you, we may share your personal information with:

• ACC, for funded equipment and approvals
• Your referring health professional or clinical team
• Health New Zealand | Te Whatu Ora or other public health agencies
• Suppliers or manufacturers involved in providing your equipment
• Our service providers (such as IT providers, payment processors, cloud storage, and delivery partners), who process information on our behalf
• Any person or organisation you authorise us to share information with
  

We only share your information where necessary and take steps to ensure it is handled appropriately by those receiving it.

6. Legal Authority for Collection

Where your information is provided to us by ACC, collection is authorised under the Accident Compensation Act 2001. Where collection is required or authorised by another law, we will identify that law when we notify you, or as soon as reasonably practicable.

7. Security and Storage

We take reasonable steps to protect your personal information from loss, misuse, and unauthorised access, disclosure, modification, or destruction. While no system is completely secure, we are committed to keeping your information safe through appropriate technical and organisational measures.

8. Retention of Your Information

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected and to meet our legal obligations. Where specific retention periods are prescribed by law, for example, under the Health (Retention of Health Information) Regulations 1996, the Accident Compensation Act 2001, or other applicable legislation; we comply with those requirements. Once your information is no longer required, we take reasonable steps to destroy or de-identify it securely.

9. Cookies

We use cookies and similar technologies to operate and improve our website. You can adjust your browser settings to manage cookies, although this may affect how the site functions.

10. Your Rights

Under the Privacy Act 2020, you have the right to:

• Request access to the personal information we hold about you
• Request correction of any personal information that is inaccurate, incomplete, or out of date

To exercise these rights, please contact us using the details in section 12. We will respond as soon as reasonably practicable and in accordance with the Privacy Act 2020.

11. Marketing Communications

If you receive marketing communications from us, you can opt out at any time by using the unsubscribe link in those communications or by contacting us directly. We will action your request promptly.

12. Third-Party Websites

Our website may include links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The latest version will always be available on our website. We will notify you of any material changes where required to do so by law.

14. Contact Us About Your Privacy

If you have any questions about how we collect, use, or hold your personal information, or if you would like to exercise your privacy rights, please contact us:
Phone: 0800 31 61 81
Email: helpis@alliedmedical.co.nz
Post: 29 Triton Drive, Rosedale, Auckland 0632

15. Complaints

If you are not satisfied with how we have handled your personal information or responded to your request, you may make a complaint to the Office of the Privacy Commissioner:
Website: www.privacy.org.nz
Phone: 0800 803 909

Consent

By using our website, you consent to the terms outlined in this Privacy Policy.

A Final Note

We know that sharing personal information requires trust. Thank you for trusting Allied Medical — we are committed to looking after your information with care and respect.

Copyright Statement

This website and all its content are owned by Allied Medical and is subject to copyright. Any website visitor may reproduce, store and use the content of this website for personal, informational and non-commercial purposes only.
Except as stated in the above paragraph, no portion of the content of the website, including text, graphics, photos and the logo, may be copied or used without the written permission of Allied Medical.