Patient privacy and use of Artificial Intelligence (AI)

CCTV Use in Our Clinic

Your safety, comfort, and privacy are at the heart of everything we do. To support a secure and well‑managed clinical environment, we use closed‑circuit television (CCTV) in selected areas of our facility. This information sheet explains how and why CCTV is used, and how we protect your privacy under New Zealand law.

Why we use CCTV

CCTV helps us maintain a safe, efficient, and responsive environment. It allows our team to:

  • Monitor patient flow and ensure timely assistance
  • Respond quickly to unexpected events or emergencies
  • Maintain a secure environment for patients, visitors, and staff
  • Protect our facilities, equipment, and clinical spaces

Where CCTV is located

To balance safety with privacy, cameras are placed only in appropriate areas, such as:

  • Reception and waiting rooms
  • Clinical zones and recovery cubicles.
  • Entry and exit points

There are no cameras in consultation rooms, changing areas, or any other private spaces. There is clear signage on the wall indicating that CCTV is operating.

How we protect your privacy

We are committed to handling all personal information responsibly and lawfully. Our CCTV use complies with:

  • The Privacy Act 2020
  • The Health Information Privacy Code 2020
  • The New Zealand Information Privacy Principles (IPPs)

To safeguard your privacy, we ensure:

  • Footage is used only for legitimate safety, security, and operational purposes
  • Access is strictly limited to authorised personnel
  • Footage is securely stored and encrypted
  • Retention periods are kept to the minimum necessary
  • Any disclosure follows legal and ethical requirements

We do not use CCTV footage for marketing, training, or any purpose unrelated to safety and operations.

How long footage is kept

CCTV footage is retained only for approximately 3 months unless it is needed to:

  • Investigate a safety or security incident
  • Meet legal or regulatory obligations

After this period, footage is automatically deleted.

Who can access CCTV footage

Access is restricted to:

  • Senior authorised staff responsible for safety and security
  • IT personnel who maintain the system
  • External authorities (e.g., Police) only when legally required or permitted

We do not share footage with third parties for any other reason.

Your rights

Under the Privacy Act 2020, you have the right to:

  • Ask whether CCTV footage of you exists
  • Request access to footage that includes you
  • Request correction of any inaccurate information

We will respond to requests in accordance with our legal obligations and within a reasonable timeframe.

Questions or concerns

If you would like to know more about how we use CCTV or how your privacy is protected, please contact:

Janis Williams
Practice Manager
Email: [email protected]
Phone: 04 5550433

Heidi Artificial intelligence

How does it work?

Heidi helps your clinician stay fully focused on you during your visit while still accurately capturing medical information. This ensures a comprehensive and precise record of your care.

Do I have to give consent?

Yes. Your consent is essential. Clinicians are encouraged to obtain consent before using Heidi, and you can withdraw your consent at any time.

Who has access to my medical information?

Only your clinician. Heidi uses strict access controls and complies with the Privacy Act 2020 and the New Zealand Information Privacy Principles. Systems are certified to global standards such as SOC 2 and ISO 27001 to ensure strong data security and confidentiality.

Where is my data stored?

All data is encrypted and securely stored on cloud servers following leading industry standards. Because of cloud infrastructure limitations in New Zealand, data for NZ users is hosted in Australia.

How is my data used?

Heidi follows three core principles:

  • Be Transparent: Clear explanations of how your data is used are provided in the Privacy Policy.
  • Limit Collection: Only essential data needed to provide services or improve Heidi is collected.
  • Ensure Security: Disclosure, retention, and use of data are restricted to keep it safeguarded.

Every piece of information collected has a clear purpose—either to deliver the service or to improve Heidi’s performance and accuracy.

Do you store recordings of my appointment?

No. Conversations are transcribed in real time, and no audio recordings are stored. Any notes your clinician saves are added to your Electronic Health Record in their Practice Management System.

Learn more

Try Heidi for free and find more information at heidihealth.com.
If you have further questions, contact [email protected].