Privacy policy

Who we are

Healthbox is a family-run New Zealand workplace health provider. We bring clinical health checks to the places people work: onsite health checks, skin checks, hearing and lung-function testing and related services, for organisations across the country.

This policy explains how we collect, use, disclose and protect personal information, including health information. We handle personal information in line with the New Zealand Privacy Act 2020 and the Information Privacy Principles it sets out. By using our website or our services, you agree to the practices described here. Please also read our Terms of Use.

What we collect

We collect only the information we need for the purpose it is collected for. In practice this falls into three groups.

Enquiry and website information

When you contact us or complete a form on our website, we collect the details you give us, such as your name, email address, phone number, company or organisation, the number of locations you have, the services you are interested in, and the content of your message.

Health information

When you take part in a clinical service, our clinicians collect health information needed to deliver that service safely and to meet clinical record-keeping obligations. Health information is treated as sensitive. It is handled confidentially by our clinicians and is kept separate from any marketing or enquiry data.

Website, analytics and advertising data

When you visit our website we collect basic technical and usage data, such as your device type, browser, pages viewed and general location, to keep the site running and to understand how it is used. With your consent, we and our analytics and advertising partners also use cookies and similar technologies to measure how the site and our marketing perform, and to show you relevant Healthbox ads on other platforms. You choose which of these are enabled — see Cookies, analytics and advertising below.

How we use your information

We use the information we collect to:

• respond to your enquiries and provide the information you ask for;
• plan, schedule and deliver our clinical services;
• meet our health and safety, clinical and record-keeping obligations;
• measure how our website and marketing perform, and show relevant Healthbox ads to people who have visited our site, using the tools described under Cookies, analytics and advertising;
• improve our website, our services and how we support you.

We do not sell your personal information, and we do not use health information for marketing.

Health information

Health information collected during a clinical service stays confidential between the individual and the clinician. Your results go to you.

Where an employer has arranged a programme, the employer receives only de-identified, aggregated reporting, for example how many people took part. Employers never receive individual results without the individual's informed consent.

Sharing and third parties

We share personal information only where it is necessary to run our website and deliver our services, and only with providers who are bound to protect it. Our main service providers are:

• Vercel: website hosting;
• Supabase: database and file storage;
• Resend: sending transactional email, such as replies to your enquiry;
• Google (Analytics 4, Google Ads and Tag Manager), Meta Platforms, LinkedIn and PostHog: website analytics and advertising, used only where you have given consent (see Cookies, analytics and advertising).

Each provider only handles the information needed for its role. We may also disclose information where the law requires it.

Storage and security

We store personal information securely and take reasonable steps to protect it from loss, misuse and unauthorised access. Some of the providers above process data on servers located outside New Zealand; where that happens, we take reasonable steps to ensure your information continues to be protected to a comparable standard.

How long we keep it

We keep personal information only for as long as it is needed for the purpose it was collected for, or for as long as the law requires us to. When information is no longer needed, we securely delete or de-identify it.

Your rights

Under the Privacy Act 2020 you have the right to ask for access to the personal information we hold about you, and to ask us to correct it if it is wrong. To make a request, email us at admin@healthbox.co.nz. We may need to confirm your identity before we act on a request.

Contact and complaints

If you have a question about this policy, or you would like to make a privacy complaint, please contact us:

• Email: admin@healthbox.co.nz
• Phone: 027 628 6220
• Office: 70 College Hill, Freemans Bay, Auckland

You can also reach us through our contact page. If you are not satisfied with how we handle your complaint, you have the right to complain to the Office of the Privacy Commissioner at privacy.org.nz.